@marinoscar/platform-api 0.1.0-next.26 → 0.1.0-next.27

package/dist/storage/migration/storage-migrate-plan.handler.js

@@ -0,0 +1,168 @@
+"use strict";
+// =============================================================================
+// `storage.migrate_plan` — list a migration run's objects and queue them
+// (issue #1093)
+// =============================================================================
+//
+// One job per run, a system job (`orgId: null`): the run is deployment-wide and
+// its objects belong to every organization, so it works through the bypass
+// client with the `storage-migration` reason.
+//
+// RESUMABLE. Items are created page by page (keyset on the object id) with
+// `skipDuplicates` against `@@unique([runId, objectId])`, and only items with no
+// `jobId` are queued, so a planner that died half way and was retried continues
+// where it stopped without a duplicate item or a duplicate job.
+//
+// WHAT IS COPIED: every `ready` object whose recorded `storage_provider` is the
+// run's source. An object already repointed to the target is not on the source
+// any more, so a re-run after a completed or cancelled run skips it for free.
+//
+// CANCELLATION is checked before every page; a cancelled run stops planning.
+//
+// SERVER-ONLY BY DERIVATION: no `nodeResultSchema` / `persistNodeResult`.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var StorageMigratePlanHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageMigratePlanHandler = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const storage_db_1 = require("../data/storage-db");
+const storage_migration_constants_1 = require("./storage-migration.constants");
+const storage_migration_service_1 = require("./storage-migration.service");
+/** Objects listed, and items queued, per page. */
+const PAGE_SIZE = 500;
+function readRunId(job) {
+    const payload = job.payload;
+    if (!payload || typeof payload.runId !== 'string') {
+        throw new Error(`${storage_migration_constants_1.STORAGE_MIGRATE_PLAN_TYPE} job ${job.id} has no runId in its payload`);
+    }
+    return payload.runId;
+}
+/**
+ * The server-only `storage.migrate_plan` job: creates one item per `ready` object on the run's source driver and queues one `storage.migrate_object` job per item, resumably; a planner that gives up fails its run.
+ *
+ * @stability experimental
+ */
+let StorageMigratePlanHandler = StorageMigratePlanHandler_1 = class StorageMigratePlanHandler {
+    registry;
+    migrations;
+    jobs;
+    logger = new common_1.Logger(StorageMigratePlanHandler_1.name);
+    type = storage_migration_constants_1.STORAGE_MIGRATE_PLAN_TYPE;
+    label = 'Storage migration (plan)';
+    /** Listing and queueing a large deployment's objects is long but bounded work. */
+    profile = { maxRuntimeMs: 60 * 60_000, maxAttempts: 3 };
+    constructor(registry, migrations, jobs) {
+        this.registry = registry;
+        this.migrations = migrations;
+        this.jobs = jobs;
+    }
+    /** Self-registration. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /** Plans the run named in the payload. */
+    async process(job) {
+        const runId = readRunId(job);
+        const db = this.migrations.db();
+        const run = await db.storageMigrationRun.findUnique({ where: { id: runId } });
+        if (!run) {
+            this.logger.warn(`${this.type} job ${job.id}: run ${runId} no longer exists; nothing to plan`);
+            return;
+        }
+        if (run.status !== storage_db_1.StorageMigrationRunStatus.pending && run.status !== storage_db_1.StorageMigrationRunStatus.running) {
+            this.logger.log(`${this.type} job ${job.id}: run ${runId} is ${run.status}; nothing to plan`);
+            return;
+        }
+        await db.storageMigrationRun.updateMany({
+            where: { id: runId, status: storage_db_1.StorageMigrationRunStatus.pending },
+            data: { status: storage_db_1.StorageMigrationRunStatus.running, startedAt: new Date() },
+        });
+        // 1. One item per object on the source, keyset-paged.
+        let cursor;
+        for (;;) {
+            if (await this.cancelled(runId))
+                return;
+            const objects = await db.storageObject.findMany({
+                where: {
+                    storageProvider: run.sourceProvider,
+                    status: storage_db_1.StorageObjectStatus.ready,
+                    ...(cursor ? { id: { gt: cursor } } : {}),
+                },
+                select: { id: true, orgId: true, size: true },
+                orderBy: { id: 'asc' },
+                take: PAGE_SIZE,
+            });
+            if (objects.length === 0)
+                break;
+            await db.storageMigrationItem.createMany({
+                data: objects.map((object) => ({
+                    runId,
+                    objectId: object.id,
+                    orgId: object.orgId,
+                    sizeBytes: object.size,
+                    status: storage_db_1.StorageMigrationItemStatus.pending,
+                })),
+                skipDuplicates: true,
+            });
+            cursor = objects[objects.length - 1].id;
+            if (objects.length < PAGE_SIZE)
+                break;
+        }
+        // 2. One job per item that has none yet.
+        for (;;) {
+            if (await this.cancelled(runId))
+                return;
+            const items = await db.storageMigrationItem.findMany({
+                where: { runId, jobId: null, status: storage_db_1.StorageMigrationItemStatus.pending },
+                select: { id: true, objectId: true, orgId: true },
+                orderBy: { id: 'asc' },
+                take: PAGE_SIZE,
+            });
+            if (items.length === 0)
+                break;
+            for (const item of items) {
+                const queued = await this.jobs.enqueue({
+                    type: storage_migration_constants_1.STORAGE_MIGRATE_OBJECT_TYPE,
+                    reason: index_1.JobReason.backfill,
+                    subjectType: storage_migration_constants_1.STORAGE_MIGRATION_ITEM_SUBJECT_TYPE,
+                    subjectId: item.id,
+                    payload: { runId, itemId: item.id },
+                    priority: storage_migration_constants_1.STORAGE_MIGRATION_PRIORITY,
+                    orgId: item.orgId,
+                    skipDedup: true,
+                });
+                await db.storageMigrationItem.updateMany({ where: { id: item.id, jobId: null }, data: { jobId: queued.id } });
+            }
+        }
+        const total = await db.storageMigrationItem.count({ where: { runId } });
+        await db.storageMigrationRun.updateMany({
+            where: { id: runId, status: storage_db_1.StorageMigrationRunStatus.running },
+            data: { plannedAt: new Date(), totalCount: total },
+        });
+        this.logger.log(`Storage migration ${runId}: ${total} object(s) queued (${run.sourceProvider} -> ${run.targetProvider})`);
+        // Every item may already be done (or there were none): finalize now.
+        await this.migrations.finalizeIfDone(runId);
+    }
+    async cancelled(runId) {
+        const current = await this.migrations.db().storageMigrationRun.findUnique({ where: { id: runId }, select: { status: true } });
+        return !current || current.status !== storage_db_1.StorageMigrationRunStatus.running;
+    }
+};
+exports.StorageMigratePlanHandler = StorageMigratePlanHandler;
+exports.StorageMigratePlanHandler = StorageMigratePlanHandler = StorageMigratePlanHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        storage_migration_service_1.StorageMigrationService,
+        index_1.JobsService])
+], StorageMigratePlanHandler);
+//# sourceMappingURL=storage-migrate-plan.handler.js.map

package/dist/storage/migration/storage-migrate-plan.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migrate-plan.handler.js","sourceRoot":"","sources":["../../../src/storage/migration/storage-migrate-plan.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gBAAgB;AAChB,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,gFAAgF;AAChF,gEAAgE;AAChE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAkE;AAElE,4CAO0B;AAC1B,mDAAgH;AAChH,+EAKuC;AACvC,2EAAsE;AAEtE,kDAAkD;AAClD,MAAM,SAAS,GAAG,GAAG,CAAC;AAYtB,SAAS,SAAS,CAAC,GAAQ;IACzB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAoD,CAAC;IACzE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,GAAG,uDAAyB,QAAQ,GAAG,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED;;;;GAIG;AAEI,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAWjB;IACA;IACA;IAZF,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAE5D,IAAI,GAAG,uDAAyB,CAAC;IAEjC,KAAK,GAAG,0BAA0B,CAAC;IAE5C,kFAAkF;IACzE,OAAO,GAAwB,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAEtF,YACmB,QAA4B,EAC5B,UAAmC,EACnC,IAAiB;QAFjB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,eAAU,GAAV,UAAU,CAAyB;QACnC,SAAI,GAAJ,IAAI,CAAa;IACjC,CAAC;IAEJ,yBAAyB;IACzB,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QAEhC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,SAAS,KAAK,oCAAoC,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,sCAAyB,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,sCAAyB,CAAC,OAAO,EAAE,CAAC;YACzG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,SAAS,KAAK,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC;YACtC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAyB,CAAC,OAAO,EAAE;YAC/D,IAAI,EAAE,EAAE,MAAM,EAAE,sCAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAC3E,CAAC,CAAC;QAEH,sDAAsD;QACtD,IAAI,MAA0B,CAAC;QAC/B,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO;YACxC,MAAM,OAAO,GAAuD,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC;gBAClG,KAAK,EAAE;oBACL,eAAe,EAAE,GAAG,CAAC,cAAc;oBACnC,MAAM,EAAE,gCAAmB,CAAC,KAAK;oBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC7C,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;gBACtB,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAChC,MAAM,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC;gBACvC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC7B,KAAK;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,IAAI;oBACtB,MAAM,EAAE,uCAA0B,CAAC,OAAO;iBAC3C,CAAC,CAAC;gBACH,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM;QACxC,CAAC;QAED,yCAAyC;QACzC,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO;YACxC,MAAM,KAAK,GAA2D,MAAM,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;gBAC3G,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,uCAA0B,CAAC,OAAO,EAAE;gBACzE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;gBACjD,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;gBACtB,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;oBACrC,IAAI,EAAE,yDAA2B;oBACjC,MAAM,EAAE,iBAAS,CAAC,QAAQ;oBAC1B,WAAW,EAAE,iEAAmC;oBAChD,SAAS,EAAE,IAAI,CAAC,EAAE;oBAClB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;oBACnC,QAAQ,EAAE,wDAA0B;oBACpC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC;YACtC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAyB,CAAC,OAAO,EAAE;YAC/D,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,KAAK,KAAK,KAAK,sBAAsB,GAAG,CAAC,cAAc,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC;QAE1H,qEAAqE;QACrE,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAa;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9H,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,sCAAyB,CAAC,OAAO,CAAC;IAC1E,CAAC;CACF,CAAA;AA9GY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;qCAYkB,0BAAkB;QAChB,mDAAuB;QAC7B,mBAAW;GAbzB,yBAAyB,CA8GrC"}

package/dist/storage/migration/storage-migration-settled.listener.d.ts

@@ -0,0 +1,15 @@
+import { type JobSettledEvent } from '../../jobs/index';
+import { StorageMigrationService } from './storage-migration.service';
+/**
+ * Fails the run of a planner that gave up, and the item of an object job that gave up.
+ *
+ * @stability experimental
+ */
+export declare class StorageMigrationSettledListener {
+    private readonly migrations;
+    private readonly logger;
+    constructor(migrations: StorageMigrationService);
+    /** Dispatches a failed migration job; ignores everything else. Never throws. */
+    onJobSettled(event: JobSettledEvent): Promise<void>;
+}
+//# sourceMappingURL=storage-migration-settled.listener.d.ts.map

package/dist/storage/migration/storage-migration-settled.listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration-settled.listener.d.ts","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration-settled.listener.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQ3E,OAAO,EAAE,uBAAuB,EAA6B,MAAM,6BAA6B,CAAC;AAEjG;;;;GAIG;AACH,qBACa,+BAA+B;IAG9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoD;gBAE9C,UAAU,EAAE,uBAAuB;IAEhE,gFAAgF;IAE1E,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;CA6B1D"}

package/dist/storage/migration/storage-migration-settled.listener.js

@@ -0,0 +1,87 @@
+"use strict";
+// =============================================================================
+// StorageMigrationSettledListener: what happens when a migration job GIVES UP
+// (issue #1093)
+// =============================================================================
+//
+// A listener on `job.settled`, not an "is this my last attempt?" check inside
+// `process`: a timeout or a dead executor never returns into `process`. ONE
+// listener for both job types (the event has a bounded listener budget), and a
+// few bounded writes each, never I/O (`on-event-no-io`):
+//
+//   * `storage.migrate_plan` failed: the run is failed (its active slot freed,
+//     its queued items skipped).
+//   * `storage.migrate_object` failed: its still-open item is failed, the error
+//     recorded on the run, and the run finalized when that was the last item.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var StorageMigrationSettledListener_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageMigrationSettledListener = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const index_1 = require("../../jobs/index");
+const storage_db_1 = require("../data/storage-db");
+const storage_migration_constants_1 = require("./storage-migration.constants");
+const storage_migration_service_1 = require("./storage-migration.service");
+/**
+ * Fails the run of a planner that gave up, and the item of an object job that gave up.
+ *
+ * @stability experimental
+ */
+let StorageMigrationSettledListener = StorageMigrationSettledListener_1 = class StorageMigrationSettledListener {
+    migrations;
+    logger = new common_1.Logger(StorageMigrationSettledListener_1.name);
+    constructor(migrations) {
+        this.migrations = migrations;
+    }
+    /** Dispatches a failed migration job; ignores everything else. Never throws. */
+    async onJobSettled(event) {
+        if (event.succeeded || !event.subjectId)
+            return;
+        const message = (0, storage_migration_service_1.storageMigrationErrorText)(event.lastError ?? 'no error recorded');
+        try {
+            if (event.type === storage_migration_constants_1.STORAGE_MIGRATE_PLAN_TYPE && event.subjectType === storage_migration_constants_1.STORAGE_MIGRATION_RUN_SUBJECT_TYPE) {
+                await this.migrations.failRun(event.subjectId, `The planner failed: ${message}`);
+                return;
+            }
+            if (event.type !== storage_migration_constants_1.STORAGE_MIGRATE_OBJECT_TYPE || event.subjectType !== storage_migration_constants_1.STORAGE_MIGRATION_ITEM_SUBJECT_TYPE)
+                return;
+            await this.migrations.db().storageMigrationItem.updateMany({
+                where: {
+                    id: event.subjectId,
+                    status: { in: [storage_db_1.StorageMigrationItemStatus.pending, storage_db_1.StorageMigrationItemStatus.copying] },
+                },
+                data: { status: storage_db_1.StorageMigrationItemStatus.failed, lastError: message },
+            });
+            const runId = event.job.payload?.runId;
+            if (typeof runId === 'string') {
+                await this.migrations.recordRunError(runId, message);
+                await this.migrations.finalizeIfDone(runId);
+            }
+        }
+        catch (error) {
+            this.logger.error(`Could not record the failure of ${event.type} job ${event.jobId}: ${(0, storage_migration_service_1.storageMigrationErrorText)(error)}`);
+        }
+    }
+};
+exports.StorageMigrationSettledListener = StorageMigrationSettledListener;
+__decorate([
+    (0, event_emitter_1.OnEvent)(index_1.JOB_SETTLED_EVENT),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", Promise)
+], StorageMigrationSettledListener.prototype, "onJobSettled", null);
+exports.StorageMigrationSettledListener = StorageMigrationSettledListener = StorageMigrationSettledListener_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [storage_migration_service_1.StorageMigrationService])
+], StorageMigrationSettledListener);
+//# sourceMappingURL=storage-migration-settled.listener.js.map

package/dist/storage/migration/storage-migration-settled.listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration-settled.listener.js","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration-settled.listener.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,gBAAgB;AAChB,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,iCAAiC;AACjC,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAoD;AACpD,yDAAgD;AAEhD,4CAA2E;AAC3E,mDAAgE;AAChE,+EAKuC;AACvC,2EAAiG;AAEjG;;;;GAIG;AAEI,IAAM,+BAA+B,uCAArC,MAAM,+BAA+B;IAGb;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,iCAA+B,CAAC,IAAI,CAAC,CAAC;IAE3E,YAA6B,UAAmC;QAAnC,eAAU,GAAV,UAAU,CAAyB;IAAG,CAAC;IAEpE,gFAAgF;IAE1E,AAAN,KAAK,CAAC,YAAY,CAAC,KAAsB;QACvC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QAChD,MAAM,OAAO,GAAG,IAAA,qDAAyB,EAAC,KAAK,CAAC,SAAS,IAAI,mBAAmB,CAAC,CAAC;QAElF,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,uDAAyB,IAAI,KAAK,CAAC,WAAW,KAAK,gEAAkC,EAAE,CAAC;gBACzG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,OAAO,EAAE,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,yDAA2B,IAAI,KAAK,CAAC,WAAW,KAAK,iEAAmC;gBAAE,OAAO;YAEpH,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC;gBACzD,KAAK,EAAE;oBACL,EAAE,EAAE,KAAK,CAAC,SAAS;oBACnB,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,uCAA0B,CAAC,OAAO,EAAE,uCAA0B,CAAC,OAAO,CAAC,EAAE;iBACzF;gBACD,IAAI,EAAE,EAAE,MAAM,EAAE,uCAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;aACxE,CAAC,CAAC;YACH,MAAM,KAAK,GAAI,KAAK,CAAC,GAAG,CAAC,OAAsC,EAAE,KAAK,CAAC;YACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,mCAAmC,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,KAAK,KAAK,IAAA,qDAAyB,EAAC,KAAK,CAAC,EAAE,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AApCY,0EAA+B;AAOpC;IADL,IAAA,uBAAO,EAAC,yBAAiB,CAAC;;;;mEA6B1B;0CAnCU,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;qCAI8B,mDAAuB;GAHrD,+BAA+B,CAoC3C"}

package/dist/storage/migration/storage-migration.constants.d.ts

@@ -0,0 +1,69 @@
+/**
+ * The job type that lists a run's objects, creates one item per object and
+ * queues one {@link STORAGE_MIGRATE_OBJECT_TYPE} job per item. PERMANENT:
+ * rows outlive handlers. Server-only (no `nodeResultSchema`).
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATE_PLAN_TYPE = "storage.migrate_plan";
+/**
+ * The job type that copies ONE object to the run's target driver, verifies it
+ * and repoints its row. PERMANENT. Server-only: it needs both drivers' secrets,
+ * which are never brokered to a worker node.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATE_OBJECT_TYPE = "storage.migrate_object";
+/**
+ * The `subjectType` of a planner job (`subjectId` is the run id).
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_RUN_SUBJECT_TYPE = "storage_migration_run";
+/**
+ * The `subjectType` of a per-object job (`subjectId` is the item id).
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_ITEM_SUBJECT_TYPE = "storage_migration_item";
+/**
+ * The queue priority of both job types: background, the housekeeping value,
+ * so a migration never delays an upload's processing.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_PRIORITY: number;
+/**
+ * The raw-SQL partial unique index that allows one pending or running run.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_ACTIVE_INDEX = "storage_migration_runs_active_uniq_idx";
+/**
+ * The system access reason every migration query names: a run is
+ * deployment-wide (its `org_id` is NULL) and spans every organization's objects.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_SYSTEM_ACCESS_REASON = "storage-migration";
+/**
+ * The audit actions the migration writes.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_MIGRATION_AUDIT_ACTIONS: {
+    /** A run was started. */
+    readonly START: 'storage.migration.start';
+    /** A run was cancelled. */
+    readonly CANCEL: 'storage.migration.cancel';
+};
+/**
+ * Registers {@link STORAGE_MIGRATION_SYSTEM_ACCESS_REASON} with core's
+ * registry, once. The service and both handlers call it from their
+ * constructors (bootstrap, before the registry freezes), so code that builds
+ * them by hand (a database test) is covered too.
+ *
+ * @stability experimental
+ */
+export declare function registerStorageMigrationSystemAccessReason(): void;
+//# sourceMappingURL=storage-migration.constants.d.ts.map

package/dist/storage/migration/storage-migration.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.constants.d.ts","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration.constants.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,0BAA0B,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,2BAA2B,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAA8B,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,2CAA2C,CAAC;AAEvF;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC,sBAAsB,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE;IAC5C,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;CAIpC,CAAC;AAEX;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,IAAI,IAAI,CAOjE"}

package/dist/storage/migration/storage-migration.constants.js

@@ -0,0 +1,83 @@
+"use strict";
+// =============================================================================
+// Copy-only storage provider migration: the permanent strings (issue #1093)
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_MIGRATION_AUDIT_ACTIONS = exports.STORAGE_MIGRATION_SYSTEM_ACCESS_REASON = exports.STORAGE_MIGRATION_ACTIVE_INDEX = exports.STORAGE_MIGRATION_PRIORITY = exports.STORAGE_MIGRATION_ITEM_SUBJECT_TYPE = exports.STORAGE_MIGRATION_RUN_SUBJECT_TYPE = exports.STORAGE_MIGRATE_OBJECT_TYPE = exports.STORAGE_MIGRATE_PLAN_TYPE = void 0;
+exports.registerStorageMigrationSystemAccessReason = registerStorageMigrationSystemAccessReason;
+const index_1 = require("../../core/index");
+const index_2 = require("../../jobs/index");
+/**
+ * The job type that lists a run's objects, creates one item per object and
+ * queues one {@link STORAGE_MIGRATE_OBJECT_TYPE} job per item. PERMANENT:
+ * rows outlive handlers. Server-only (no `nodeResultSchema`).
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATE_PLAN_TYPE = 'storage.migrate_plan';
+/**
+ * The job type that copies ONE object to the run's target driver, verifies it
+ * and repoints its row. PERMANENT. Server-only: it needs both drivers' secrets,
+ * which are never brokered to a worker node.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATE_OBJECT_TYPE = 'storage.migrate_object';
+/**
+ * The `subjectType` of a planner job (`subjectId` is the run id).
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_RUN_SUBJECT_TYPE = 'storage_migration_run';
+/**
+ * The `subjectType` of a per-object job (`subjectId` is the item id).
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_ITEM_SUBJECT_TYPE = 'storage_migration_item';
+/**
+ * The queue priority of both job types: background, the housekeeping value,
+ * so a migration never delays an upload's processing.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_PRIORITY = index_2.HOUSEKEEPING_PRIORITY;
+/**
+ * The raw-SQL partial unique index that allows one pending or running run.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_ACTIVE_INDEX = 'storage_migration_runs_active_uniq_idx';
+/**
+ * The system access reason every migration query names: a run is
+ * deployment-wide (its `org_id` is NULL) and spans every organization's objects.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_SYSTEM_ACCESS_REASON = 'storage-migration';
+/**
+ * The audit actions the migration writes.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_MIGRATION_AUDIT_ACTIONS = {
+    START: 'storage.migration.start',
+    CANCEL: 'storage.migration.cancel',
+};
+/**
+ * Registers {@link STORAGE_MIGRATION_SYSTEM_ACCESS_REASON} with core's
+ * registry, once. The service and both handlers call it from their
+ * constructors (bootstrap, before the registry freezes), so code that builds
+ * them by hand (a database test) is covered too.
+ *
+ * @stability experimental
+ */
+function registerStorageMigrationSystemAccessReason() {
+    if (index_1.systemAccessReasonRegistry.has(exports.STORAGE_MIGRATION_SYSTEM_ACCESS_REASON))
+        return;
+    (0, index_1.registerSystemAccessReason)({
+        id: exports.STORAGE_MIGRATION_SYSTEM_ACCESS_REASON,
+        description: 'Copy-only storage provider migration: deployment-wide runs (NULL org_id) and the objects of every organization they copy.',
+    });
+}
+//# sourceMappingURL=storage-migration.constants.js.map

package/dist/storage/migration/storage-migration.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.constants.js","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration.constants.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;;;AAmFhF,gGAOC;AAxFD,4CAA0F;AAC1F,4CAAyD;AAEzD;;;;;;GAMG;AACU,QAAA,yBAAyB,GAAG,sBAAsB,CAAC;AAEhE;;;;;;GAMG;AACU,QAAA,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE;;;;GAIG;AACU,QAAA,kCAAkC,GAAG,uBAAuB,CAAC;AAE1E;;;;GAIG;AACU,QAAA,mCAAmC,GAAG,wBAAwB,CAAC;AAE5E;;;;;GAKG;AACU,QAAA,0BAA0B,GAAW,6BAAqB,CAAC;AAExE;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,wCAAwC,CAAC;AAEvF;;;;;GAKG;AACU,QAAA,sCAAsC,GAAG,mBAAmB,CAAC;AAE1E;;;;GAIG;AACU,QAAA,+BAA+B,GAKxC;IACF,KAAK,EAAE,yBAAyB;IAChC,MAAM,EAAE,0BAA0B;CAC1B,CAAC;AAEX;;;;;;;GAOG;AACH,SAAgB,0CAA0C;IACxD,IAAI,kCAA0B,CAAC,GAAG,CAAC,8CAAsC,CAAC;QAAE,OAAO;IACnF,IAAA,kCAA0B,EAAC;QACzB,EAAE,EAAE,8CAAsC;QAC1C,WAAW,EACT,2HAA2H;KAC9H,CAAC,CAAC;AACL,CAAC"}

package/dist/storage/migration/storage-migration.controller.d.ts

@@ -0,0 +1,26 @@
+import { StartStorageMigrationDto, type StorageMigrationListQuery } from './dto/storage-migration.dto';
+import { StorageMigrationService, type StorageMigrationRunPage, type StorageMigrationRunView } from './storage-migration.service';
+/**
+ * The `/api/admin/storage/migrations` routes (`storage_config:read|write`): start, list, read and cancel a copy-only provider migration.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare class StorageMigrationController {
+    private readonly migrations;
+    constructor(migrations: StorageMigrationService);
+    start(dto: StartStorageMigrationDto, userId: string): Promise<{
+        data: StorageMigrationRunView;
+    }>;
+    list(query: StorageMigrationListQuery): Promise<{
+        data: StorageMigrationRunPage;
+    }>;
+    get(runId: string): Promise<{
+        data: StorageMigrationRunView;
+    }>;
+    cancel(runId: string, userId: string): Promise<{
+        data: StorageMigrationRunView;
+    }>;
+}
+//# sourceMappingURL=storage-migration.controller.d.ts.map

package/dist/storage/migration/storage-migration.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.controller.d.ts","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration.controller.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,wBAAwB,EAIxB,KAAK,yBAAyB,EAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAYlI;;;;;;GAMG;AACH,qBAEa,0BAA0B;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,uBAAuB;IAkB1D,KAAK,CACD,GAAG,EAAE,wBAAwB,EAClB,MAAM,EAAE,MAAM,GAChC,OAAO,CAAC;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC;IAavC,IAAI,CACuD,KAAK,EAAE,yBAAyB,GAC9F,OAAO,CAAC;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC;IAavC,GAAG,CAAgC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC;IAkB7F,MAAM,CACqB,KAAK,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,GAChC,OAAO,CAAC;QAAE,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC;CAG9C"}

package/dist/storage/migration/storage-migration.controller.js

@@ -0,0 +1,135 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageMigrationController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const nestjs_zod_1 = require("nestjs-zod");
+const index_1 = require("../../identity/index");
+const storage_constants_1 = require("../storage.constants");
+const storage_migration_dto_1 = require("./dto/storage-migration.dto");
+const storage_migration_service_1 = require("./storage-migration.service");
+// =============================================================================
+// /api/admin/storage/migrations — copy-only storage provider migration (#1093)
+// =============================================================================
+//
+// The same permission pair as `/api/admin/storage-config` (`storage_config:*`):
+// a migration decides where the deployment's bytes live, exactly the authority
+// the configuration screen already grants. Starting and cancelling write;
+// listing and reading read.
+// =============================================================================
+/**
+ * The `/api/admin/storage/migrations` routes (`storage_config:read|write`): start, list, read and cancel a copy-only provider migration.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+let StorageMigrationController = class StorageMigrationController {
+    migrations;
+    constructor(migrations) {
+        this.migrations = migrations;
+    }
+    async start(dto, userId) {
+        return { data: await this.migrations.start(dto, userId) };
+    }
+    async list(query) {
+        return { data: await this.migrations.list(query) };
+    }
+    async get(runId) {
+        return { data: await this.migrations.get(runId) };
+    }
+    async cancel(runId, userId) {
+        return { data: await this.migrations.cancel(runId, userId) };
+    }
+};
+exports.StorageMigrationController = StorageMigrationController;
+__decorate([
+    (0, common_1.Post)(),
+    (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.STORAGE_CONFIG_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.CREATED),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Start a copy-only storage provider migration (Admin only)',
+        description: 'Copies every `ready` object recorded on `sourceProvider` to `targetProvider`, one queue job per ' +
+            'object: the bytes are streamed (never buffered), verified by reading them back (byte count and ' +
+            'sha256), and only then is the row repointed. **The source object is never deleted**; it stays as a ' +
+            'fallback. Returns at once; poll `GET /api/admin/storage/migrations/:runId` for progress.\n\n' +
+            'Both drivers must be registered and configured, and must not name the same bucket (`400`, ' +
+            '`details.reason`). **One run at a time**: `409` with the active run at `details.activeRunId`.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'The run was started', type: storage_migration_dto_1.StorageMigrationRunDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error, an unknown or unconfigured driver, or the same bucket on both sides' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'A run is already pending or running (`details.activeRunId`)' }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [storage_migration_dto_1.StartStorageMigrationDto, String]),
+    __metadata("design:returntype", Promise)
+], StorageMigrationController.prototype, "start", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.STORAGE_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List storage provider migrations (Admin only)',
+        description: 'Runs newest first. The counts are recomputed from the runs\' items on every read.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'page', required: false, type: Number, description: 'Page number (default: 1)' }),
+    (0, swagger_1.ApiQuery)({ name: 'pageSize', required: false, type: Number, description: 'Runs per page (default: 20, max: 100)' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'One page of runs', type: storage_migration_dto_1.StorageMigrationRunListDto }),
+    __param(0, (0, common_1.Query)(new nestjs_zod_1.ZodValidationPipe(storage_migration_dto_1.storageMigrationListQuerySchema))),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], StorageMigrationController.prototype, "list", null);
+__decorate([
+    (0, common_1.Get)(':runId'),
+    (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.STORAGE_CONFIG_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Get a storage provider migration (Admin only)',
+        description: 'One run with live counts: total, migrated, failed, skipped and pending (queued or being copied).',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'runId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The run', type: storage_migration_dto_1.StorageMigrationRunDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No such run' }),
+    __param(0, (0, common_1.Param)('runId', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], StorageMigrationController.prototype, "get", null);
+__decorate([
+    (0, common_1.Post)(':runId/cancel'),
+    (0, index_1.Auth)({ permissions: [storage_constants_1.PERMISSIONS.STORAGE_CONFIG_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Cancel a storage provider migration (Admin only)',
+        description: 'Stops a pending or running run before its next unclaimed object: queued objects are marked ' +
+            '`skipped` at once. An object being copied at that moment finishes (its copy is verified). ' +
+            'Objects already repointed stay on the target, and every source object is untouched.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'runId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The cancelled run', type: storage_migration_dto_1.StorageMigrationRunDto }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'No such run' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'The run already finished' }),
+    __param(0, (0, common_1.Param)('runId', common_1.ParseUUIDPipe)),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], StorageMigrationController.prototype, "cancel", null);
+exports.StorageMigrationController = StorageMigrationController = __decorate([
+    (0, swagger_1.ApiTags)('Storage Configuration'),
+    (0, common_1.Controller)('admin/storage/migrations'),
+    __metadata("design:paramtypes", [storage_migration_service_1.StorageMigrationService])
+], StorageMigrationController);
+//# sourceMappingURL=storage-migration.controller.js.map

package/dist/storage/migration/storage-migration.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.controller.js","sourceRoot":"","sources":["../../../src/storage/migration/storage-migration.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAgH;AAChH,6CAAyF;AACzF,2CAA+C;AAE/C,gDAAyD;AACzD,4DAAmD;AACnD,uEAMqC;AACrC,2EAAkI;AAElI,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,0EAA0E;AAC1E,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;GAMG;AAGI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACR;IAA7B,YAA6B,UAAmC;QAAnC,eAAU,GAAV,UAAU,CAAyB;IAAG,CAAC;IAkB9D,AAAN,KAAK,CAAC,KAAK,CACD,GAA6B,EAClB,MAAc;QAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IAWK,AAAN,KAAK,CAAC,IAAI,CACuD,KAAgC;QAE/F,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACrD,CAAC;IAWK,AAAN,KAAK,CAAC,GAAG,CAAgC,KAAa;QACpD,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,CAAC;IAgBK,AAAN,KAAK,CAAC,MAAM,CACqB,KAAa,EACzB,MAAc;QAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC;CACF,CAAA;AA1EY,gEAA0B;AAmB/B;IAhBL,IAAA,aAAI,GAAE;IACN,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,oBAAoB,CAAC,EAAE,CAAC;IACzD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,OAAO,CAAC;IAC5B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,2DAA2D;QACpE,WAAW,EACT,kGAAkG;YAClG,iGAAiG;YACjG,qGAAqG;YACrG,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;KAClG,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,8CAAsB,EAAE,CAAC;IAC9F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,uFAAuF,EAAE,CAAC;IAClI,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;IAEtG,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;qCADL,gDAAwB;;uDAItC;AAWK;IATL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACxD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,mFAAmF;KACjG,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAClG,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IACnH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,kDAA0B,EAAE,CAAC;IAE7F,WAAA,IAAA,cAAK,EAAC,IAAI,8BAAiB,CAAC,uDAA+B,CAAC,CAAC,CAAA;;;;sDAG/D;AAWK;IATL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACxD,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,kGAAkG;KAChH,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,8CAAsB,EAAE,CAAC;IAClF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IAC9C,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,sBAAa,CAAC,CAAA;;;;qDAEvC;AAgBK;IAdL,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,+BAAW,CAAC,oBAAoB,CAAC,EAAE,CAAC;IACzD,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,6FAA6F;YAC7F,4FAA4F;YAC5F,qFAAqF;KACxF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,8CAAsB,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACxD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IAEnE,WAAA,IAAA,cAAK,EAAC,OAAO,EAAE,sBAAa,CAAC,CAAA;IAC7B,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;;;;wDAGnB;qCAzEU,0BAA0B;IAFtC,IAAA,iBAAO,EAAC,uBAAuB,CAAC;IAChC,IAAA,mBAAU,EAAC,0BAA0B,CAAC;qCAEI,mDAAuB;GADrD,0BAA0B,CA0EtC"}