@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/db-backup/testing/backup-target-conformance.js

@@ -0,0 +1,307 @@
+"use strict";
+// =============================================================================
+// Backup target conformance kit (PP-14.12)
+// =============================================================================
+//
+// ONE suite every backup target runs, so "implements the backup target
+// contract" means the same thing for the platform's storage adapter and for an
+// app's own (a filesystem, a vault, a mirror):
+//
+//   import { describeBackupTargetConformance } from '@marinoscar/platform-api/db-backup/testing';
+//
+//   describeBackupTargetConformance(() => new LocalDirBackupTarget(dir), {
+//     describe, it, expect,
+//   });
+//
+// It is runner-agnostic like `describeStorageDriverConformance`: it receives
+// `describe`, `it` and `expect`, so Jest and Vitest both work and the package
+// imports no test framework. Nothing here needs a network: point the target at
+// a temp directory, an in-memory fake or a local emulator.
+//
+// WHAT IT CHECKS
+//
+//   - the definition: a valid id, the four required members, a string
+//     `location` when present;
+//   - bytes: write through the sink, read back, byte for byte; a missing key
+//     fails to read; deleting is idempotent (twice is not an error);
+//   - STREAMING, which is the invariant an archive depends on ("a backup
+//     archive is never buffered"). It streams `streamedBytes` (default 20 MiB)
+//     from a lazily generated source that honours backpressure, and asserts
+//       * the sink never queued more than `maxQueuedBytes` (default 4 MiB) of the
+//         object at once (a sink that acknowledges nothing until the end would
+//         hold the whole thing),
+//       * Buffer memory grew by less than three quarters of the object while it
+//         was written (a sink that concatenates the bytes grows it by all of
+//         it; the kit reuses sixteen chunks, so its own footprint is flat),
+//       * the read side delivers the object in chunks, none larger than
+//         `maxReadChunkBytes` (default 4 MiB), and more than one (a read that
+//         loads the object and hands it over whole fails here);
+//     and that the bytes read back match, by SHA-256 and size;
+//   - a failed write: destroying the sink's stream with an error rejects `done`
+//     and leaves no object readable after `delete`;
+//   - listing: exactly the keys under a prefix, none outside it (skippable for a
+//     target that cannot list);
+//   - a signed download URL, when the target defines `signedDownloadUrl`;
+//   - key safety, opt-in (`rejectsEscapingKeys: true`): a key that would climb
+//     out of the target's root is refused.
+//
+// Every key a case writes lives under its own `database-backups/conformance-<uuid>/`
+// prefix and is deleted again.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeBackupTargetConformance = describeBackupTargetConformance;
+const node_crypto_1 = require("node:crypto");
+const node_events_1 = require("node:events");
+const MIB = 1024 * 1024;
+const CHUNK_BYTES = 64 * 1024;
+/** Distinct chunks the generator cycles through: 1 MiB, so the kit's own footprint is constant. */
+const CHUNK_POOL = 16;
+async function collect(stream) {
+    const chunks = [];
+    for await (const chunk of stream)
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    return Buffer.concat(chunks);
+}
+/** A promise that fails clearly instead of hanging when a target never settles. */
+function within(work, ms, what) {
+    let timer;
+    const timeout = new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(new Error(`${what} did not settle within ${ms} ms`)), ms);
+        timer.unref?.();
+    });
+    return Promise.race([work, timeout]).finally(() => {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    });
+}
+/** Whether opening `key` for reading fails. A synchronous throw counts: both mean "no such object". */
+async function readFails(target, key) {
+    try {
+        await target.openRead(key);
+        return false;
+    }
+    catch {
+        return true;
+    }
+}
+/** Writes `body` through a sink and waits for it to be stored. */
+async function put(target, key, body) {
+    const sink = target.openWrite(key, { contentType: 'application/octet-stream', metadata: { origin: 'conformance' } });
+    sink.stream.end(body);
+    await within(sink.done, 15_000, 'the sink');
+}
+/**
+ * Bytes held in Buffers and ArrayBuffers. Not the JS heap: a streaming target
+ * keeps this flat, a target that concatenates the object grows it by the whole
+ * object, and the heap's garbage-collection noise stays out of the measure.
+ */
+function bufferMemory() {
+    return process.memoryUsage().arrayBuffers;
+}
+/**
+ * Registers the backup target conformance suite.
+ *
+ * @param target - the target, or a factory that builds a fresh one (called once per case).
+ * @param options - the runner and what to skip.
+ *
+ * @example
+ * ```ts
+ * import { describeBackupTargetConformance } from '@marinoscar/platform-api/db-backup/testing';
+ *
+ * describeBackupTargetConformance(() => new LocalDirBackupTarget(tmpDir), { describe, it, expect, rejectsEscapingKeys: true });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function describeBackupTargetConformance(target, options) {
+    const { describe, it, expect } = options;
+    const skip = new Set(options.skip ?? []);
+    const streamedBytes = options.streamedBytes ?? 20 * MIB;
+    const maxQueuedBytes = options.maxQueuedBytes ?? 4 * MIB;
+    const maxReadChunkBytes = options.maxReadChunkBytes ?? 4 * MIB;
+    const build = async () => (typeof target === 'function' ? await target() : target);
+    describe('backup target conformance', () => {
+        const scenario = (id, title, fn) => {
+            if (skip.has(id))
+                return;
+            it(`[${id}] ${title}`, async () => {
+                const built = await build();
+                await fn(built);
+            });
+        };
+        const keyPrefix = () => `database-backups/conformance-${(0, node_crypto_1.randomUUID)()}/`;
+        scenario('definition', 'declares a valid id and the four members', async (t) => {
+            expect(t.id).toMatch(/^[a-z][a-z0-9_-]{0,47}$/);
+            for (const member of ['openWrite', 'openRead', 'delete', 'list']) {
+                expect(typeof t[member]).toBe('function');
+            }
+            if (t.location !== undefined)
+                expect(typeof t.location).toBe('string');
+            if (t.refresh !== undefined) {
+                await t.refresh();
+                expect(t.id).toMatch(/^[a-z][a-z0-9_-]{0,47}$/);
+            }
+            if (t.signedDownloadUrl !== undefined)
+                expect(typeof t.signedDownloadUrl).toBe('function');
+        });
+        scenario('roundTrip', 'writes, reads back, fails to read a missing key and deletes idempotently', async (t) => {
+            const key = `${keyPrefix()}hello.dump`;
+            const body = Buffer.from('hello from the backup target conformance kit');
+            expect(await readFails(t, key)).toBe(true);
+            try {
+                await put(t, key, body);
+                expect((await collect(await t.openRead(key))).equals(body)).toBe(true);
+                // Writing the same key again replaces the object (a retried write).
+                const replacement = Buffer.from('replacement');
+                await put(t, key, replacement);
+                expect((await collect(await t.openRead(key))).equals(replacement)).toBe(true);
+            }
+            finally {
+                await t.delete(key);
+            }
+            expect(await readFails(t, key)).toBe(true);
+            // Deleting a key that is gone is not an error: retention and the failure path both do it.
+            await t.delete(key);
+            await t.delete(key);
+        });
+        scenario('streamed', `streams a ${Math.round(streamedBytes / MIB)} MiB object without buffering it, and reads it back in chunks`, async (t) => {
+            const key = `${keyPrefix()}streamed.dump`;
+            // 16 distinct 64 KiB chunks, cycled: the kit's own footprint is constant,
+            // so a growth in memory during the write is the TARGET's.
+            const pool = Array.from({ length: CHUNK_POOL }, (_unused, index) => Buffer.alloc(CHUNK_BYTES, index + 1));
+            const expected = (0, node_crypto_1.createHash)('sha256');
+            const baseline = bufferMemory();
+            let peakGrowth = 0;
+            let peakQueued = 0;
+            const sample = (queued) => {
+                peakQueued = Math.max(peakQueued, queued);
+                peakGrowth = Math.max(peakGrowth, bufferMemory() - baseline);
+            };
+            try {
+                const sink = t.openWrite(key, { contentType: 'application/octet-stream', metadata: { origin: 'conformance' } });
+                // `done` may reject before it is awaited below, and the stream may emit
+                // an error: hold handlers so neither is ever unhandled. The failure
+                // itself surfaces at `await stored`.
+                const stored = sink.done;
+                stored.catch(() => undefined);
+                sink.stream.on('error', () => undefined);
+                let written = 0;
+                let index = 0;
+                while (written < streamedBytes) {
+                    const size = Math.min(CHUNK_BYTES, streamedBytes - written);
+                    const chunk = size === CHUNK_BYTES ? pool[index % CHUNK_POOL] : pool[index % CHUNK_POOL].subarray(0, size);
+                    expected.update(chunk);
+                    written += size;
+                    index += 1;
+                    const accepted = sink.stream.write(chunk);
+                    sample(sink.stream.writableLength);
+                    // Honour backpressure exactly as the engine does: a target that
+                    // streams drains; one that buffers never signals.
+                    if (!accepted)
+                        await Promise.race([(0, node_events_1.once)(sink.stream, 'drain'), stored.then(() => undefined)]);
+                }
+                sink.stream.end();
+                await within(stored, 60_000, 'the sink');
+                sample(sink.stream.writableLength);
+                expect(peakQueued).toBeLessThanOrEqual(maxQueuedBytes);
+                expect(peakGrowth).toBeLessThan(streamedBytes * 0.75);
+                // Read it back: chunked, bounded, byte for byte.
+                const actual = (0, node_crypto_1.createHash)('sha256');
+                let bytes = 0;
+                let chunks = 0;
+                let largest = 0;
+                for await (const piece of await t.openRead(key)) {
+                    const buffer = Buffer.isBuffer(piece) ? piece : Buffer.from(piece);
+                    actual.update(buffer);
+                    bytes += buffer.length;
+                    chunks += 1;
+                    largest = Math.max(largest, buffer.length);
+                }
+                expect(bytes).toBe(streamedBytes);
+                expect(actual.digest('hex')).toBe(expected.digest('hex'));
+                expect(chunks).toBeGreaterThan(1);
+                expect(largest).toBeLessThanOrEqual(maxReadChunkBytes);
+            }
+            finally {
+                await t.delete(key);
+            }
+        });
+        scenario('failedWrite', 'rejects done when the stream is destroyed with an error, and leaves nothing readable', async (t) => {
+            const key = `${keyPrefix()}failed.dump`;
+            try {
+                const sink = t.openWrite(key, { contentType: 'application/octet-stream', metadata: {} });
+                const outcome = sink.done.then(() => 'resolved', () => 'rejected');
+                sink.stream.on('error', () => undefined);
+                sink.stream.write(Buffer.alloc(CHUNK_BYTES, 7));
+                sink.stream.destroy(new Error('the dump died'));
+                expect(await within(outcome, 5_000, 'done after the stream was destroyed')).toBe('rejected');
+            }
+            finally {
+                // The engine deletes the partial object after a failed write.
+                await t.delete(key);
+            }
+            expect(await readFails(t, key)).toBe(true);
+        });
+        scenario('list', 'lists exactly the keys under a prefix', async (t) => {
+            const prefix = keyPrefix();
+            const other = keyPrefix();
+            const inside = [`${prefix}2026/10/a.dump`, `${prefix}2026/10/b.dump`];
+            const outside = `${other}c.dump`;
+            try {
+                for (const key of [...inside, outside])
+                    await put(t, key, Buffer.from(key));
+                const listed = [];
+                for await (const object of t.list(prefix))
+                    listed.push(object);
+                expect(listed.map((object) => object.key).sort()).toEqual([...inside].sort());
+                for (const object of listed) {
+                    if (object.sizeBytes !== undefined)
+                        expect(object.sizeBytes).toBeGreaterThan(0);
+                }
+            }
+            finally {
+                for (const key of [...inside, outside])
+                    await t.delete(key);
+            }
+        });
+        scenario('signedUrl', 'signs a download URL when it can', async (t) => {
+            if (t.signedDownloadUrl === undefined)
+                return;
+            const key = `${keyPrefix()}signed.dump`;
+            const body = Buffer.from('signed download');
+            try {
+                await put(t, key, body);
+                const url = await t.signedDownloadUrl(key, { expiresInSeconds: 300, filename: 'signed.dump' });
+                expect(typeof url).toBe('string');
+                expect(url.length).toBeGreaterThan(0);
+                if (options.readSignedUrl !== undefined) {
+                    expect(Buffer.from(await options.readSignedUrl(url)).equals(body)).toBe(true);
+                }
+            }
+            finally {
+                await t.delete(key);
+            }
+        });
+        if (options.rejectsEscapingKeys === true) {
+            scenario('escapingKeys', 'refuses a key that would climb out of the target root', async (t) => {
+                const attempts = ['../escape.dump', 'database-backups/../../escape.dump', '/etc/escape.dump'];
+                for (const key of attempts) {
+                    let refused = false;
+                    try {
+                        const sink = t.openWrite(key, { contentType: 'application/octet-stream', metadata: {} });
+                        sink.stream.on('error', () => undefined);
+                        sink.stream.end(Buffer.from('x'));
+                        await within(sink.done, 5_000, 'the sink');
+                    }
+                    catch {
+                        refused = true;
+                    }
+                    expect(refused).toBe(true);
+                    expect(await readFails(t, key)).toBe(true);
+                }
+            });
+        }
+    });
+}
+//# sourceMappingURL=backup-target-conformance.js.map

package/dist/db-backup/testing/backup-target-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-target-conformance.js","sourceRoot":"","sources":["../../../src/db-backup/testing/backup-target-conformance.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2CAA2C;AAC3C,gFAAgF;AAChF,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,+CAA+C;AAC/C,EAAE;AACF,kGAAkG;AAClG,EAAE;AACF,2EAA2E;AAC3E,4BAA4B;AAC5B,QAAQ;AACR,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,2DAA2D;AAC3D,EAAE;AACF,iBAAiB;AACjB,EAAE;AACF,sEAAsE;AACtE,+BAA+B;AAC/B,6EAA6E;AAC7E,qEAAqE;AACrE,yEAAyE;AACzE,+EAA+E;AAC/E,4EAA4E;AAC5E,kFAAkF;AAClF,+EAA+E;AAC/E,iCAAiC;AACjC,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,8EAA8E;AAC9E,gEAAgE;AAChE,+DAA+D;AAC/D,gFAAgF;AAChF,oDAAoD;AACpD,iFAAiF;AACjF,gCAAgC;AAChC,0EAA0E;AAC1E,+EAA+E;AAC/E,2CAA2C;AAC3C,EAAE;AACF,qFAAqF;AACrF,+BAA+B;AAC/B,gFAAgF;;AAyHhF,0EA8MC;AArUD,6CAAqD;AACrD,6CAAmC;AAqDnC,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACxB,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9B,mGAAmG;AACnG,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,KAAK,UAAU,OAAO,CAAC,MAAgB;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,CAAC;IAC7G,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,mFAAmF;AACnF,SAAS,MAAM,CAAI,IAAgB,EAAE,EAAU,EAAE,IAAY;IAC3D,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,SAAS,CAAC,MAAoB,EAAE,GAAW;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,GAAG,CAAC,MAAoB,EAAE,GAAW,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,+BAA+B,CAC7C,MAAmE,EACnE,OAAuC;IAEvC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,GAAG,GAAG,CAAC;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,GAAG,CAAC;IACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,GAAG,GAAG,CAAC;IAE/D,MAAM,KAAK,GAAG,KAAK,IAA2B,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE1G,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,MAAM,QAAQ,GAAG,CAAC,EAAmC,EAAE,KAAa,EAAE,EAA2C,EAAE,EAAE;YACnH,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO;YACzB,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBAChC,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;gBAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,gCAAgC,IAAA,wBAAU,GAAE,GAAG,CAAC;QAExE,QAAQ,CAAC,YAAY,EAAE,0CAA0C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7E,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAChD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAU,EAAE,CAAC;gBAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,WAAW,EAAE,0EAA0E,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5G,MAAM,GAAG,GAAG,GAAG,SAAS,EAAE,YAAY,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAEzE,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACxB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,oEAAoE;gBACpE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC/C,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAC/B,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChF,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YAED,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,0FAA0F;YAC1F,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,+DAA+D,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5I,MAAM,GAAG,GAAG,GAAG,SAAS,EAAE,eAAe,CAAC;YAE1C,0EAA0E;YAC1E,0DAA0D;YAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE;gBAChC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC1C,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC;YAC/D,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;gBAChH,wEAAwE;gBACxE,oEAAoE;gBACpE,qCAAqC;gBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;gBACzB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAEzC,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,OAAO,OAAO,GAAG,aAAa,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC;oBAC5D,MAAM,KAAK,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAC3G,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvB,OAAO,IAAI,IAAI,CAAC;oBAChB,KAAK,IAAI,CAAC,CAAC;oBACX,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;oBACnC,gEAAgE;oBAChE,kDAAkD;oBAClD,IAAI,CAAC,QAAQ;wBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAA,kBAAI,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAClB,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAEnC,MAAM,CAAC,UAAU,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBACvD,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;gBAEtD,iDAAiD;gBACjD,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;oBAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtB,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;oBACvB,MAAM,IAAI,CAAC,CAAC;oBACZ,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;YACzD,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,aAAa,EAAE,sFAAsF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1H,MAAM,GAAG,GAAG,GAAG,SAAS,EAAE,aAAa,CAAC;YAExC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,UAAU,EAChB,GAAG,EAAE,CAAC,UAAU,CACjB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;gBAEhD,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,qCAAqC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/F,CAAC;oBAAS,CAAC;gBACT,8DAA8D;gBAC9D,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YAED,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,MAAM,EAAE,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACpE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,gBAAgB,EAAE,GAAG,MAAM,gBAAgB,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,GAAG,KAAK,QAAQ,CAAC;YAEjC,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC;oBAAE,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE5E,MAAM,MAAM,GAAyB,EAAE,CAAC;gBACxC,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAE/D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9E,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;oBAC5B,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;wBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC;oBAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,WAAW,EAAE,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACpE,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;gBAAE,OAAO;YAC9C,MAAM,GAAG,GAAG,GAAG,SAAS,EAAE,aAAa,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC/F,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACzC,QAAQ,CAAC,cAAc,EAAE,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC5F,MAAM,QAAQ,GAAG,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,kBAAkB,CAAC,CAAC;gBAC9F,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;wBACzF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAClC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;oBAC7C,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,GAAG,IAAI,CAAC;oBACjB,CAAC;oBACD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/db-backup/testing/conformance.d.ts

@@ -0,0 +1,61 @@
+import type { ConformanceFinding, ConformanceSuite } from '../../testing/index';
+declare module '../../testing/index' {
+    interface PlatformConformanceSuiteOptions {
+        /** The db-backup slice's suite: its options, or `false` to opt out. Registered by importing `@marinoscar/platform-api/db-backup/testing`. */
+        dbBackup?: DbBackupConformanceOptions | false;
+    }
+}
+/**
+ * Options of the `db-backup` suite.
+ *
+ * @stability experimental
+ */
+export interface DbBackupConformanceOptions {
+    /** Restore carry-over ids the app must have registered (its own tables). */
+    readonly requiredCarryOverIds?: readonly string[];
+}
+/**
+ * Check 1: the dump and restore argument vectors carry `--enable-row-security`,
+ * the child environment carries the bypass option, and argv never does.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+export declare function checkRlsPair(): ConformanceFinding[];
+/**
+ * Check 2: `db.restore.run` is server-only and `db.backup.run` is
+ * node-eligible with its declared profile and broker.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+export declare function checkJobTypes(): ConformanceFinding[];
+/**
+ * Check 3: every `db_backup:*` permission is system scope.
+ *
+ * @returns one finding per org-scoped permission.
+ * @stability experimental
+ */
+export declare function checkSystemScopePermissions(): ConformanceFinding[];
+/**
+ * Check 4: the `database-backups/` prefix is registered with deployment scope.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+export declare function checkBackupKeyPrefix(): ConformanceFinding[];
+/**
+ * Check 5: every carry-over binds its row and the required ones exist.
+ *
+ * @param requiredIds - ids the app must have registered.
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+export declare function checkCarryOvers(requiredIds: readonly string[]): ConformanceFinding[];
+/**
+ * The `db-backup` conformance suite.
+ *
+ * @stability experimental
+ */
+export declare const dbBackupConformanceSuite: ConformanceSuite<DbBackupConformanceOptions>;
+//# sourceMappingURL=conformance.d.ts.map

package/dist/db-backup/testing/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../../src/db-backup/testing/conformance.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAmB,kBAAkB,EAAqB,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAUpH,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,+BAA+B;QACvC,6IAA6I;QAC7I,QAAQ,CAAC,EAAE,0BAA0B,GAAG,KAAK,CAAC;KAC/C;CACF;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAUD;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,kBAAkB,EAAE,CAenD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAmBpD;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAAI,kBAAkB,EAAE,CAIlE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,kBAAkB,EAAE,CAO3D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,EAAE,CASpF;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,0BAA0B,CA6BjF,CAAC"}

package/dist/db-backup/testing/conformance.js

@@ -0,0 +1,178 @@
+"use strict";
+// =============================================================================
+// The db-backup slice's conformance suite (issue #740)
+// =============================================================================
+//
+// Importing `@marinoscar/platform-api/db-backup/testing` registers it with
+// `runPlatformConformance` (suite id `db-backup`). Static checks over the
+// slice's own declarations, so they run in any app's unit tier without a
+// database:
+//
+//   1. every dump and every restore carries BOTH `--enable-row-security` and
+//      `PGOPTIONS=-c app.rls_bypass=on`, the option in the environment and
+//      never in argv (CLAUDE.md invariant; the real-database proof is the
+//      app's `db-backup-rls.db.spec.ts`);
+//   2. `db.restore.run` is server-only (no `nodeResultSchema`, no
+//      `persistNodeResult`); `db.backup.run` is node-eligible with profile
+//      `{ maxRuntimeMs: 6 h, maxAttempts: 1 }` and a credential broker;
+//   3. the three `db_backup:*` permissions are system scope;
+//   4. the `database-backups/` key prefix is registered, deployment scope;
+//   5. every registered restore carry-over binds its row as `$1`.
+//
+// The app's integration and real-database suites (`apps/api/test/db-backup/`)
+// stay where the composed app is; see the slice README, "Conformance suite".
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dbBackupConformanceSuite = void 0;
+exports.checkRlsPair = checkRlsPair;
+exports.checkJobTypes = checkJobTypes;
+exports.checkSystemScopePermissions = checkSystemScopePermissions;
+exports.checkBackupKeyPrefix = checkBackupKeyPrefix;
+exports.checkCarryOvers = checkCarryOvers;
+const index_1 = require("../../testing/index");
+const index_2 = require("../../storage/index");
+const carry_over_registry_1 = require("../carry-over.registry");
+const db_backup_key_prefix_1 = require("../db-backup-key-prefix");
+const db_backup_permissions_1 = require("../db-backup.permissions");
+const db_backup_run_handler_1 = require("../handlers/db-backup-run.handler");
+const db_restore_run_handler_1 = require("../handlers/db-restore-run.handler");
+const pg_dump_util_1 = require("../pg-dump.util");
+const pg_restore_util_1 = require("../pg-restore.util");
+const FILE_RLS = 'db-backup-rls-pair';
+const FILE_JOBS = 'db-backup-job-types';
+const FILE_PERMS = 'db-backup-permissions';
+const FILE_PREFIX = 'db-backup-key-prefix';
+const FILE_CARRY = 'db-backup-carry-over';
+const PROBE = { host: 'db', port: '5432', user: 'app', password: 'probe', database: 'appdb', sslMode: null };
+/**
+ * Check 1: the dump and restore argument vectors carry `--enable-row-security`,
+ * the child environment carries the bypass option, and argv never does.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+function checkRlsPair() {
+    const findings = [];
+    const vectors = { pg_dump: (0, pg_dump_util_1.buildPgDumpArgs)({ connection: PROBE }), pg_restore: (0, pg_restore_util_1.buildPgRestoreArgs)({ connection: PROBE }) };
+    for (const [tool, args] of Object.entries(vectors)) {
+        if (!args.includes('--enable-row-security')) {
+            findings.push({ file: FILE_RLS, message: `${tool} is spawned without --enable-row-security: a dump would refuse every org table` });
+        }
+        if (args.join(' ').includes('app.rls_bypass')) {
+            findings.push({ file: FILE_RLS, message: `${tool}'s argv carries app.rls_bypass: the option belongs in PGOPTIONS, never in argv` });
+        }
+    }
+    if (!((0, pg_dump_util_1.rlsBypassEnv)({}).PGOPTIONS ?? '').includes('app.rls_bypass=on')) {
+        findings.push({ file: FILE_RLS, message: 'rlsBypassEnv() does not set PGOPTIONS=-c app.rls_bypass=on: --enable-row-security alone writes an archive with no rows' });
+    }
+    return findings;
+}
+/**
+ * Check 2: `db.restore.run` is server-only and `db.backup.run` is
+ * node-eligible with its declared profile and broker.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+function checkJobTypes() {
+    const findings = [];
+    const none = undefined;
+    const restore = new db_restore_run_handler_1.DatabaseRestoreRunHandler(none, none, none);
+    if (restore.nodeResultSchema !== undefined || typeof restore.persistNodeResult === 'function') {
+        findings.push({ file: FILE_JOBS, message: 'db.restore.run declares a node result: the restore is server-only, permanently' });
+    }
+    const backup = new db_backup_run_handler_1.DatabaseBackupRunHandler(none, none, none, {});
+    if (backup.nodeResultSchema === undefined || typeof backup.persistNodeResult !== 'function') {
+        findings.push({ file: FILE_JOBS, message: 'db.backup.run lost node eligibility (nodeResultSchema + persistNodeResult)' });
+    }
+    if (backup.nodeSecretBroker === undefined) {
+        findings.push({ file: FILE_JOBS, message: 'db.backup.run lost its nodeSecretBroker: a node could not be issued its job-scoped role' });
+    }
+    const profile = backup.profile;
+    if (profile?.maxRuntimeMs !== db_backup_run_handler_1.BACKUP_JOB_MAX_RUNTIME_MS || profile.maxAttempts !== 1 || db_backup_run_handler_1.BACKUP_JOB_MAX_RUNTIME_MS !== 6 * 60 * 60 * 1000) {
+        findings.push({ file: FILE_JOBS, message: 'db.backup.run must keep profile { maxRuntimeMs: 6 h, maxAttempts: 1 }' });
+    }
+    return findings;
+}
+/**
+ * Check 3: every `db_backup:*` permission is system scope.
+ *
+ * @returns one finding per org-scoped permission.
+ * @stability experimental
+ */
+function checkSystemScopePermissions() {
+    return Object.values(db_backup_permissions_1.DB_BACKUP_PERMISSIONS)
+        .filter((def) => def.scope !== 'system')
+        .map((def) => ({ file: FILE_PERMS, message: `${def.id} is ${def.scope} scope: a restore rolls back every organization` }));
+}
+/**
+ * Check 4: the `database-backups/` prefix is registered with deployment scope.
+ *
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+function checkBackupKeyPrefix() {
+    const def = index_2.storageKeyPrefixRegistry.get(db_backup_key_prefix_1.DB_BACKUP_KEY_PREFIX.id);
+    if (def === undefined)
+        return [{ file: FILE_PREFIX, message: 'the database-backups/ prefix is not registered: a storage purge would leave every archive' }];
+    if (def.prefix !== db_backup_key_prefix_1.DB_BACKUP_KEY_PREFIX.prefix || def.scope !== 'deployment') {
+        return [{ file: FILE_PREFIX, message: `the database-backups prefix is registered as "${def.prefix}" (${def.scope}), not "${db_backup_key_prefix_1.DB_BACKUP_KEY_PREFIX.prefix}" (deployment)` }];
+    }
+    return [];
+}
+/**
+ * Check 5: every carry-over binds its row and the required ones exist.
+ *
+ * @param requiredIds - ids the app must have registered.
+ * @returns one finding per problem.
+ * @stability experimental
+ */
+function checkCarryOvers(requiredIds) {
+    const findings = [];
+    for (const carry of carry_over_registry_1.restoreCarryOverRegistry.list()) {
+        if (!carry.reinsertSql.includes('$1'))
+            findings.push({ file: FILE_CARRY, message: `carry-over "${carry.id}" does not bind its row as $1` });
+    }
+    for (const id of requiredIds) {
+        if (!carry_over_registry_1.restoreCarryOverRegistry.has(id))
+            findings.push({ file: FILE_CARRY, message: `carry-over "${id}" is not registered: its rows would not survive a restore` });
+    }
+    return findings;
+}
+/**
+ * The `db-backup` conformance suite.
+ *
+ * @stability experimental
+ */
+exports.dbBackupConformanceSuite = {
+    id: 'db-backup',
+    title: 'the db-backup slice keeps its invariants',
+    description: 'Every dump and restore lifts row-level security with both halves of the pair, the restore stays server-only, the backup stays node-eligible, the permissions are system scope and the archives are a registered key prefix.',
+    check(_context, options) {
+        const findings = [
+            ...checkRlsPair(),
+            ...checkJobTypes(),
+            ...checkSystemScopePermissions(),
+            ...checkBackupKeyPrefix(),
+            ...checkCarryOvers(options.requiredCarryOverIds ?? []),
+        ];
+        return {
+            scanned: { tools: 2, jobTypes: 2, permissions: Object.keys(db_backup_permissions_1.DB_BACKUP_PERMISSIONS).length, carryOvers: carry_over_registry_1.restoreCarryOverRegistry.size },
+            scannedFiles: {},
+            findings,
+        };
+    },
+    cases() {
+        const only = (file) => (report) => report.findings.filter((finding) => finding.file === file);
+        return [
+            { name: 'rls: pg_dump and pg_restore carry --enable-row-security and PGOPTIONS app.rls_bypass=on (never in argv)', run: (report, expect) => expect(only(FILE_RLS)(report)).toEqual([]) },
+            { name: 'jobs: db.restore.run is server-only; db.backup.run is node-eligible with its profile and broker', run: (report, expect) => expect(only(FILE_JOBS)(report)).toEqual([]) },
+            { name: 'permissions: db_backup:read, :write and :restore are system scope', run: (report, expect) => expect(only(FILE_PERMS)(report)).toEqual([]) },
+            { name: 'storage: database-backups/ is a registered deployment-scope key prefix', run: (report, expect) => expect(only(FILE_PREFIX)(report)).toEqual([]) },
+            { name: 'carry-over: every registered carry binds its row, and the required ones exist', run: (report, expect) => expect(only(FILE_CARRY)(report)).toEqual([]) },
+        ];
+    },
+};
+if (!index_1.conformanceSuites.has(exports.dbBackupConformanceSuite.id))
+    index_1.conformanceSuites.register(exports.dbBackupConformanceSuite);
+//# sourceMappingURL=conformance.js.map

package/dist/db-backup/testing/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/db-backup/testing/conformance.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,YAAY;AACZ,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,0CAA0C;AAC1C,kEAAkE;AAClE,2EAA2E;AAC3E,wEAAwE;AACxE,6DAA6D;AAC7D,2EAA2E;AAC3E,kEAAkE;AAClE,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;;;AA6ChF,oCAeC;AASD,sCAmBC;AAQD,kEAIC;AAQD,oDAOC;AASD,0CASC;AAnID,+CAAwD;AAExD,+CAA+D;AAC/D,gEAAkE;AAClE,kEAA+D;AAC/D,oEAAiE;AACjE,6EAAwG;AACxG,+EAA+E;AAC/E,kDAAmF;AACnF,wDAAwD;AAmBxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAE1C,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE3H;;;;;;GAMG;AACH,SAAgB,YAAY;IAC1B,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAA,8BAAe,EAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAA,oCAAkB,EAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3H,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,gFAAgF,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,gFAAgF,EAAE,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wHAAwH,EAAE,CAAC,CAAC;IACvK,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa;IAC3B,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAkB,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,kDAAyB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAuC,CAAC;IACtG,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QAC9F,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gFAAgF,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,gDAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAW,CAAuC,CAAC;IACjH,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;QAC5F,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,4EAA4E,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yFAAyF,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAsE,CAAC;IAC9F,IAAI,OAAO,EAAE,YAAY,KAAK,iDAAyB,IAAI,OAAO,CAAC,WAAW,KAAK,CAAC,IAAI,iDAAyB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACzI,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC;SACxC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC;SACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,KAAK,iDAAiD,EAAE,CAAC,CAAC,CAAC;AAC/H,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB;IAClC,MAAM,GAAG,GAAG,gCAAwB,CAAC,GAAG,CAAC,2CAAoB,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2FAA2F,EAAE,CAAC,CAAC;IAC5J,IAAI,GAAG,CAAC,MAAM,KAAK,2CAAoB,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QAC7E,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iDAAiD,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,KAAK,WAAW,2CAAoB,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAC5K,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,WAA8B;IAC5D,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,8CAAwB,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,KAAK,CAAC,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAC9I,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC,8CAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,2DAA2D,EAAE,CAAC,CAAC;IACpK,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACU,QAAA,wBAAwB,GAAiD;IACpF,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,0CAA0C;IACjD,WAAW,EACT,6NAA6N;IAC/N,KAAK,CAAC,QAAQ,EAAE,OAAO;QACrB,MAAM,QAAQ,GAAG;YACf,GAAG,YAAY,EAAE;YACjB,GAAG,aAAa,EAAE;YAClB,GAAG,2BAA2B,EAAE;YAChC,GAAG,oBAAoB,EAAE;YACzB,GAAG,eAAe,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC;SACvD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,6CAAqB,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,8CAAwB,CAAC,IAAI,EAAE;YACrI,YAAY,EAAE,EAAE;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,KAAK;QACH,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,MAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzH,OAAO;YACL,EAAE,IAAI,EAAE,yGAAyG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACxL,EAAE,IAAI,EAAE,iGAAiG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACjL,EAAE,IAAI,EAAE,mEAAmE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YACpJ,EAAE,IAAI,EAAE,wEAAwE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YAC1J,EAAE,IAAI,EAAE,+EAA+E,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;SACjK,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,IAAI,CAAC,yBAAiB,CAAC,GAAG,CAAC,gCAAwB,CAAC,EAAE,CAAC;IAAE,yBAAiB,CAAC,QAAQ,CAAC,gCAAwB,CAAC,CAAC"}

package/dist/db-backup/testing/index.d.ts

@@ -0,0 +1,49 @@
+export { checkBackupKeyPrefix, checkCarryOvers, checkJobTypes, checkRlsPair, checkSystemScopePermissions, dbBackupConformanceSuite, } from './conformance';
+/** @stability experimental */
+export type { DbBackupConformanceOptions } from './conformance';
+export { describeBackupTargetConformance } from './backup-target-conformance';
+/** @stability experimental */
+export type { BackupTargetConformanceHarness, BackupTargetConformanceOptions, BackupTargetConformanceScenario, } from './backup-target-conformance';
+export { buildRestoreGateContext, describeRestoreGateConformance } from './restore-gate-conformance';
+/** @stability experimental */
+export type { RestoreGateConformanceHarness, RestoreGateConformanceOptions, RestoreGateScenario, RestoreGateWatch, } from './restore-gate-conformance';
+export { BackupMirrorsDoctorCheck, decideBackupMirrors } from '../doctor/backup-mirrors.doctor-check';
+/** @stability experimental */
+export type { MirrorFact } from '../doctor/backup-mirrors.doctor-check';
+export { DatabaseBackupAdminService, BACKUP_DOWNLOAD_URL_EXPIRY_SECONDS } from '../db-backup-admin.service';
+/** @stability experimental */
+export type { BackupRunListResult } from '../db-backup-admin.service';
+export { DatabaseBackupController } from '../db-backup.controller';
+export { ACTIVE_RUN_INDEX_NAME, DB_BACKUP_ENGINE, DB_BACKUP_TIMERS, systemBackupTimers, systemDatabaseBackupEngine, } from '../db-backup-runner.service';
+/** @stability experimental */
+export type { BackupTimers, DatabaseBackupEngine } from '../db-backup-runner.service';
+export { DATABASE_RESTORE_SEAM, DatabaseRestoreService, defaultDatabaseRestoreSeam, } from '../database-restore.service';
+/** @stability experimental */
+export type { DatabaseRestoreSeam, RestoreRollbackResult, StartRestoreOptions, StartRestoreResult } from '../database-restore.service';
+export { DatabaseRestorePreflightService, RESTORE_PREFLIGHT_SEAM, RESTORE_SCHEMA_OVERRIDE_FIELD, defaultRestorePreflightSeam, } from '../restore-preflight.service';
+/** @stability experimental */
+export type { EffectiveRollbackMode, GuidedRestoreInstructions, RestoreBlock, RestoreGateKind, RestoreGateResult, RestoreGateVerdict, RestorePreflightBase, RestorePreflightOptions, RestorePreflightResult, RestorePreflightSeam, RestoreRollbackPlan, } from '../restore-preflight.service';
+export { DatabaseBackupRunHandler } from '../handlers/db-backup-run.handler';
+export { DatabaseRestoreRunHandler } from '../handlers/db-restore-run.handler';
+export { NODE_JOB_SECRETS_RUNBOOK_PATH, PG_JOB_ROLE_KIND, PG_JOB_ROLE_SEAM, PgJobRoleBroker, generateRolePassword, jobRolePattern, } from '../pg-job-role.broker';
+/** @stability experimental */
+export type { GuidedJobRoleInstructions, JobRolePreflightResult, PgJobRoleSeam } from '../pg-job-role.broker';
+export { BACKUP_ARCHIVE_FORMAT, BACKUP_KEY_PREFIX } from '../db-backup-storage';
+export { startRestoreRequestSchema, RollbackRestoreRequestDto, StartRestoreRequestDto } from '../dto/db-backup-restore.dto';
+export { BackupRunListQueryDto } from '../dto/db-backup-list-query.dto';
+export { UpdateDatabaseBackupConfigDto } from '../dto/db-backup-config.dto';
+export { buildScratchDatabaseName, createDatabase, databaseExists, dropDatabase, quoteIdentifier, quoteLiteral, renameDatabase, resolveAdminConnection, withAdminConnection, } from '../admin-connection.util';
+export { InvalidSqlLiteralError } from '../admin-connection.util';
+/** @stability experimental */
+export type { AdminClientFactory, AdminConnection, AdminQueryClient, WithAdminConnectionOptions } from '../admin-connection.util';
+export { PG_DUMP_COMMAND, buildPgDumpArgs, pgClientEnv, resolvePgConnection, spawnPgDump, spawnPgProcess, } from '../pg-dump.util';
+export { PgProcessError } from '../pg-dump.util';
+/** @stability experimental */
+export type { PgConnection, PgDumpArgsOptions, PgProcess, PgSpawnFn, SpawnPgDumpOptions, SpawnPgProcessOptions } from '../pg-dump.util';
+export { readTocEntryCount, spawnPgRestore } from '../pg-restore.util';
+/** @stability experimental */
+export type { ReadTocEntryCountOptions, SpawnPgRestoreOptions } from '../pg-restore.util';
+export { MIN_PG_CLIENT_MAJOR, checkPgClientVersion, readServerVersionNumWithPgClient } from '../pg-version.util';
+/** @stability experimental */
+export type { CheckPgClientVersionOptions, ClientVersionReader, PgClientFactory, PgQueryClient, PgVersionCheck, PgVersionStatus, ServerVersionNumReader, } from '../pg-version.util';
+//# sourceMappingURL=index.d.ts.map

package/dist/db-backup/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/db-backup/testing/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,8BAA8B;AAC9B,YAAY,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAGhE,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,8BAA8B;AAC9B,YAAY,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACrG,8BAA8B;AAC9B,YAAY,EACV,6BAA6B,EAC7B,6BAA6B,EAC7B,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACtG,8BAA8B;AAC9B,YAAY,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AAGxE,OAAO,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAC5G,8BAA8B;AAC9B,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,8BAA8B;AAC9B,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,8BAA8B;AAC9B,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACvI,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AACtC,8BAA8B;AAC9B,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,8BAA8B;AAC9B,YAAY,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC5H,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAG5E,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,8BAA8B;AAC9B,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAClI,OAAO,EACL,eAAe,EACf,eAAe,EACf,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,8BAA8B;AAC9B,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxI,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,8BAA8B;AAC9B,YAAY,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AACjH,8BAA8B;AAC9B,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,oBAAoB,CAAC"}