@marinoscar/platform-contract 0.1.0-next.3 → 0.1.0-next.4

package/dist/cjs/db-backup/constants.d.ts

@@ -0,0 +1,314 @@
+/**
+ * The five `DatabaseBackupStatus` values, as a tuple Zod can build an enum
+ * from.
+ *
+ * A hand-copied list guarded in BOTH directions, exactly as
+ * `jobs/dto/job-response.dto.ts` guards its own: `satisfies` catches a value
+ * listed here that the schema does not have, and `BackupStatusesAreExhaustive` (in the API)
+ * catches a value the schema has that this file forgot — the direction that
+ * would otherwise fail silently, publishing a filter enum that cannot express a
+ * real row's status.
+ *
+ * @stability stable
+ */
+export declare const BACKUP_STATUSES: readonly ["pending", "running", "completed", "failed", "stale"];
+/**
+ * One {@link BACKUP_STATUSES} value.
+ *
+ * @stability stable
+ */
+export type BackupStatusName = (typeof BACKUP_STATUSES)[number];
+/**
+ * The three `DatabaseBackupTrigger` values, with the same two guards.
+ *
+ * @stability stable
+ */
+export declare const BACKUP_TRIGGERS: readonly ["manual", "scheduled", "pre_restore"];
+/**
+ * One {@link BACKUP_TRIGGERS} value.
+ *
+ * @stability stable
+ */
+export type BackupTriggerName = (typeof BACKUP_TRIGGERS)[number];
+/**
+ * The six values `database_backup_runs.restore_status` can hold.
+ *
+ * ⚠ NO `satisfies` GUARD IS POSSIBLE HERE, and that is a property of the
+ * column rather than an oversight: `restore_status` is a plain `text` in
+ * `schema.prisma`, not a Postgres enum, precisely so that adding `rolled_back`
+ * cost no migration. There is therefore no generated union for the compiler to
+ * check this tuple against.
+ *
+ * Re-derived rather than imported from `database-restore.service.ts` so that a
+ * DTO file does not depend on a service — the same discipline
+ * `ACTIVE_BACKUP_STATUSES` follows — and `db-backup-restore.dto.spec.ts`
+ * asserts the two lists agree, so they cannot drift apart in silence.
+ *
+ * @stability stable
+ */
+export declare const RESTORE_STATUSES: readonly ["restoring", "verifying", "swapping", "completed", "failed", "rolled_back"];
+/**
+ * One {@link RESTORE_STATUSES} value.
+ *
+ * @stability stable
+ */
+export type RestoreStatusName = (typeof RESTORE_STATUSES)[number];
+/**
+ * The statuses that hold the single-active-run slot.
+ *
+ * Re-derived from {@link BACKUP_STATUSES} rather than imported from
+ * `db-backup-runner.service.ts` so that a DTO file does not depend on a service
+ * — but it is the same pair, and `db-backup-admin.service.spec.ts` asserts the
+ * two lists agree, so they cannot drift apart in silence.
+ *
+ * @stability stable
+ */
+export declare const ACTIVE_BACKUP_STATUSES: readonly ["pending", "running"];
+/**
+ * The two outcomes `CancelBackupResultDto` can report.
+ *
+ * Mirrors `CancelBackupResult` in `db-backup-runner.service.ts` one-for-one and
+ * on purpose: this is that type on the wire, not a summary of it.
+ *
+ * @stability stable
+ */
+export declare const CANCEL_OUTCOMES: readonly ["signalled", "not_running_here"];
+/**
+ * The two normal answers. There is deliberately no third, and no error one.
+ *
+ * @stability stable
+ */
+export declare const NODE_CREDENTIAL_PREFLIGHT_OUTCOMES: readonly ["ok", "guided"];
+/**
+ * Why `restore.available` is false. One today; the enum is the contract.
+ *
+ * @stability stable
+ */
+export declare const RESTORE_UNAVAILABLE_REASONS: readonly ["deployment_mode_saas"];
+/**
+ * The word `POST runs/:id/restore` requires. See this file's header.
+ *
+ * @stability stable
+ */
+export declare const RESTORE_CONFIRMATION = "RESTORE";
+/**
+ * The word `POST runs/:id/rollback` requires. Deliberately not the same word.
+ *
+ * @stability stable
+ */
+export declare const ROLLBACK_CONFIRMATION = "ROLLBACK";
+/**
+ * The three normal answers. `mode`, not the status code, is the discriminator.
+ *
+ * @stability stable
+ */
+export declare const RESTORE_MODES: readonly ["running", "guided", "blocked"];
+/**
+ * One {@link RESTORE_MODES} value.
+ *
+ * @stability stable
+ */
+export type RestoreMode = (typeof RESTORE_MODES)[number];
+/**
+ * The three normal answers.
+ *
+ * Mirrors `RestoreRollbackResult` in `database-restore.service.ts` one-for-one
+ * and on purpose: this is that type on the wire, not a summary of it — the same
+ * discipline `CANCEL_OUTCOMES` follows.
+ *
+ * @stability stable
+ */
+export declare const ROLLBACK_MODES: readonly ["renamed", "restore_started", "unavailable"];
+/**
+ * One {@link ROLLBACK_MODES} value.
+ *
+ * @stability stable
+ */
+export type RollbackMode = (typeof ROLLBACK_MODES)[number];
+/**
+ * The name of the `POST runs/:id/restore` body field that overrides the
+ * `schema_compatibility` gate.
+ *
+ * ⚠ IT IS THE API'S FIELD NAME, NOT THE PRE-FLIGHT SERVICE'S OPTION NAME, and
+ * the difference is the whole point. A `blocked` restore's `overrideParameter`
+ * exists to tell a CLIENT which field to set on its next request, so publishing
+ * the internal option name (`overrideSchemaMismatch`) would hand an operator a
+ * parameter the endpoint rejects.
+ *
+ * The API's restore DTO ties its own schema to it at compile time
+ * (`RestoreOverrideFieldIsReal`) and at run time in its spec.
+ *
+ * @stability stable
+ */
+export declare const RESTORE_SCHEMA_OVERRIDE_FIELD = "overrideSchemaCheck";
+/**
+ * The restore pre-flight's BUILT-IN gates, in the order they are evaluated and
+ * reported. `rls_bypass` (#740) reports how the restore session gets past
+ * row-level security, on pass as well as on failure.
+ *
+ * Not a closed list of every gate: an app registers its own with
+ * `registerRestoreGate` (`@marinoscar/platform-api/db-backup`), which run after
+ * these and report under their own ids (see `restoreGateIdSchema`). This
+ * list names the eight the platform ships, for labels and defaults.
+ *
+ * @stability stable
+ */
+export declare const BUILTIN_RESTORE_GATE_IDS: readonly ["pg_client_version", "admin_connection", "createdb_privilege", "extensions", "rls_bypass", "disk_space", "replicas", "schema_compatibility"];
+/**
+ * The same eight ids under their former name.
+ *
+ * @deprecated Renamed {@link BUILTIN_RESTORE_GATE_IDS}: the gate id is an open
+ * vocabulary now, so this is no longer "every gate id". Kept as an alias for
+ * one release.
+ * @stability stable
+ */
+export declare const RESTORE_GATE_IDS: readonly ["pg_client_version", "admin_connection", "createdb_privilege", "extensions", "rls_bypass", "disk_space", "replicas", "schema_compatibility"];
+/**
+ * One built-in restore gate id.
+ *
+ * @stability stable
+ */
+export type BuiltinRestoreGateId = (typeof BUILTIN_RESTORE_GATE_IDS)[number];
+/**
+ * A restore gate id: one of the built-ins, or an id an app registered.
+ * Widened to `string` (an open vocabulary); narrow with
+ * {@link BuiltinRestoreGateId} where only the platform's own gates matter.
+ *
+ * @stability stable
+ */
+export type RestoreGateId = BuiltinRestoreGateId | (string & {});
+/**
+ * The shape of a restore gate id: lowercase letters, digits, `_` and `-`,
+ * starting with a letter. Every built-in id matches, and so does an app's
+ * `cdn-quiesced`.
+ *
+ * @stability experimental
+ */
+export declare const RESTORE_GATE_ID_PATTERN: RegExp;
+/**
+ * `databaseBackup.timeOfDay`: 24-hour `HH:MM`, zero-padded.
+ *
+ * A string rather than two numbers because it is one field on one form and one
+ * value in one cron-ish schedule; the regex is what stops `"2:00"`, `"25:00"`
+ * and `"02:60"` from reaching a scheduler that would have to guess.
+ *
+ * @stability stable
+ */
+export declare const BACKUP_TIME_OF_DAY_PATTERN: RegExp;
+/**
+ * How often a scheduled backup runs (`databaseBackup.frequency`).
+ *
+ * @stability stable
+ */
+export declare const BACKUP_FREQUENCIES: readonly ["daily", "weekly", "monthly", "cron"];
+/**
+ * The shortest gap, in minutes, a `frequency: 'cron'` expression may leave
+ * between two fires (one hour). The scheduler ticks every ten minutes and a
+ * dump is a whole-database read, so a finer cadence would stack dumps rather
+ * than protect anything.
+ *
+ * @stability experimental
+ */
+export declare const BACKUP_CRON_MIN_INTERVAL_MINUTES = 60;
+/**
+ * The characters a `cron` expression may contain: digits, `*`, `/`, `,`, `-`
+ * and spaces. A shape check only; the API validates the expression with the
+ * scheduler's own parser (and the minimum interval) when it is written.
+ *
+ * @stability experimental
+ */
+export declare const BACKUP_CRON_PATTERN: RegExp;
+/**
+ * What a restore does with the database it displaced
+ * (`databaseBackup.restoreRollbackMode`).
+ *
+ * @stability stable
+ */
+export declare const RESTORE_ROLLBACK_MODES: readonly ["retain_database", "drop_database"];
+/**
+ * The entries of a zod enum built from a value list (`{ manual: 'manual', ... }`):
+ * the schemas cast `z.enum(list)` to `z.ZodEnum<DbBackupEnum<typeof list>>`
+ * so the declarations name the list instead of spelling every entry.
+ *
+ * @typeParam T - the value list.
+ *
+ * @stability experimental
+ */
+export type DbBackupEnum<T extends readonly string[]> = {
+    [K in T[number]]: K;
+};
+/**
+ * The event emitted once a backup run settles (`completed`, `failed`,
+ * `stale`), after the row is written and outside any transaction. The payload
+ * is {@link DbBackupRunCompletedEvent}. Permanent: a listener subscribes by
+ * this string.
+ *
+ * @extensionPoint event
+ * @stability experimental
+ */
+export declare const DB_BACKUP_RUN_COMPLETED_EVENT = "db_backup.run.completed";
+/**
+ * The event emitted once a restore settles (`completed` after the swap,
+ * `failed`), after the audit write and outside any transaction. The payload is
+ * {@link DbBackupRestoreCompletedEvent}. Permanent.
+ *
+ * @extensionPoint event
+ * @stability experimental
+ */
+export declare const DB_BACKUP_RESTORE_COMPLETED_EVENT = "db_backup.restore.completed";
+/**
+ * What `db_backup.run.completed` carries. JSON-safe (it also travels the
+ * cross-replica event bus), and free of secrets.
+ *
+ * @stability experimental
+ */
+export interface DbBackupRunCompletedEvent {
+    /** The `database_backup_runs` row. */
+    runId: string;
+    /** How the run ended: `completed`, `failed` or `stale`. */
+    status: BackupStatusName;
+    /** The id of the target the archive was written to (the run's `storageProvider`). */
+    targetId: string;
+    /** The archive's size in bytes (`0` when none was written). A JSON number: exact up to 2^53. */
+    sizeBytes: number;
+    /** Wall-clock milliseconds from start to settle (`0` when the run never started). */
+    durationMs: number;
+}
+/**
+ * What `db_backup.restore.completed` carries: the same shape as
+ * {@link DbBackupRunCompletedEvent}, for the restore of the archive `runId`.
+ * `status` is `completed` or `failed`; `sizeBytes` is the archive's size and
+ * `durationMs` the restore's own duration.
+ *
+ * @stability experimental
+ */
+export interface DbBackupRestoreCompletedEvent {
+    /** The backup run whose archive was restored. */
+    runId: string;
+    /** `completed` (the swap landed) or `failed`. */
+    status: 'completed' | 'failed';
+    /** The id of the target the archive was read from. */
+    targetId: string;
+    /** The archive's size in bytes. */
+    sizeBytes: number;
+    /** Milliseconds from the restore's start to its end. */
+    durationMs: number;
+}
+/**
+ * How one mirror target fared for one run (the `meta` of its
+ * `db_backup.mirror.*` audit row, and what the `backup.mirrors` Doctor check
+ * reads).
+ *
+ * @stability experimental
+ */
+export interface BackupMirrorResult {
+    /** The mirror target's id. */
+    targetId: string;
+    /** `ok` when the copy landed and was read back; `failed` otherwise. */
+    status: 'ok' | 'failed';
+    /** Bytes written to the mirror (`0` on failure). */
+    sizeBytes: number;
+    /** Why it failed; absent on success. Never carries a credential. */
+    error?: string;
+}
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/db-backup/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/db-backup/constants.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,iEAMlB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,eAAe,iDAIlB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,uFAOnB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,iCAAwE,CAAC;AAE5G;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,4CAA6C,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,2BAA4B,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,mCAAoC,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,2CAA4C,CAAC;AAEvE;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,wDAAyD,CAAC;AAErF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,wJAS3B,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wJAA2B,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AAEjE;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,iDAAkD,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,QAAoB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,+CAAgD,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,MAAM,EAAE,IAAI;KAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;CAAE,CAAC;AAEhF;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,gCAAgC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,MAAM,EAAE,gBAAgB,CAAC;IACzB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/cjs/db-backup/constants.js

@@ -0,0 +1,243 @@
+"use strict";
+// =============================================================================
+// Database backup and restore: plain values of the slice's wire shapes
+// (issue #740, PP-8.7)
+// =============================================================================
+//
+// Zod-free, so a consumer that needs only a status list or a confirmation word
+// (the web app) never bundles the schemas or zod. Moved from the API's
+// `db-backup/dto/*.dto.ts`, `db-backup/restore-preflight.service.ts` and
+// `common/schemas/settings.schema.ts` with their comments; the API re-exports
+// them.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DB_BACKUP_RESTORE_COMPLETED_EVENT = exports.DB_BACKUP_RUN_COMPLETED_EVENT = exports.RESTORE_ROLLBACK_MODES = exports.BACKUP_CRON_PATTERN = exports.BACKUP_CRON_MIN_INTERVAL_MINUTES = exports.BACKUP_FREQUENCIES = exports.BACKUP_TIME_OF_DAY_PATTERN = exports.RESTORE_GATE_ID_PATTERN = exports.RESTORE_GATE_IDS = exports.BUILTIN_RESTORE_GATE_IDS = exports.RESTORE_SCHEMA_OVERRIDE_FIELD = exports.ROLLBACK_MODES = exports.RESTORE_MODES = exports.ROLLBACK_CONFIRMATION = exports.RESTORE_CONFIRMATION = exports.RESTORE_UNAVAILABLE_REASONS = exports.NODE_CREDENTIAL_PREFLIGHT_OUTCOMES = exports.CANCEL_OUTCOMES = exports.ACTIVE_BACKUP_STATUSES = exports.RESTORE_STATUSES = exports.BACKUP_TRIGGERS = exports.BACKUP_STATUSES = void 0;
+/**
+ * The five `DatabaseBackupStatus` values, as a tuple Zod can build an enum
+ * from.
+ *
+ * A hand-copied list guarded in BOTH directions, exactly as
+ * `jobs/dto/job-response.dto.ts` guards its own: `satisfies` catches a value
+ * listed here that the schema does not have, and `BackupStatusesAreExhaustive` (in the API)
+ * catches a value the schema has that this file forgot — the direction that
+ * would otherwise fail silently, publishing a filter enum that cannot express a
+ * real row's status.
+ *
+ * @stability stable
+ */
+exports.BACKUP_STATUSES = [
+    'pending',
+    'running',
+    'completed',
+    'failed',
+    'stale',
+];
+/**
+ * The three `DatabaseBackupTrigger` values, with the same two guards.
+ *
+ * @stability stable
+ */
+exports.BACKUP_TRIGGERS = [
+    'manual',
+    'scheduled',
+    'pre_restore',
+];
+/**
+ * The six values `database_backup_runs.restore_status` can hold.
+ *
+ * ⚠ NO `satisfies` GUARD IS POSSIBLE HERE, and that is a property of the
+ * column rather than an oversight: `restore_status` is a plain `text` in
+ * `schema.prisma`, not a Postgres enum, precisely so that adding `rolled_back`
+ * cost no migration. There is therefore no generated union for the compiler to
+ * check this tuple against.
+ *
+ * Re-derived rather than imported from `database-restore.service.ts` so that a
+ * DTO file does not depend on a service — the same discipline
+ * `ACTIVE_BACKUP_STATUSES` follows — and `db-backup-restore.dto.spec.ts`
+ * asserts the two lists agree, so they cannot drift apart in silence.
+ *
+ * @stability stable
+ */
+exports.RESTORE_STATUSES = [
+    'restoring',
+    'verifying',
+    'swapping',
+    'completed',
+    'failed',
+    'rolled_back',
+];
+/**
+ * The statuses that hold the single-active-run slot.
+ *
+ * Re-derived from {@link BACKUP_STATUSES} rather than imported from
+ * `db-backup-runner.service.ts` so that a DTO file does not depend on a service
+ * — but it is the same pair, and `db-backup-admin.service.spec.ts` asserts the
+ * two lists agree, so they cannot drift apart in silence.
+ *
+ * @stability stable
+ */
+exports.ACTIVE_BACKUP_STATUSES = ['pending', 'running'];
+/**
+ * The two outcomes `CancelBackupResultDto` can report.
+ *
+ * Mirrors `CancelBackupResult` in `db-backup-runner.service.ts` one-for-one and
+ * on purpose: this is that type on the wire, not a summary of it.
+ *
+ * @stability stable
+ */
+exports.CANCEL_OUTCOMES = ['signalled', 'not_running_here'];
+/**
+ * The two normal answers. There is deliberately no third, and no error one.
+ *
+ * @stability stable
+ */
+exports.NODE_CREDENTIAL_PREFLIGHT_OUTCOMES = ['ok', 'guided'];
+/**
+ * Why `restore.available` is false. One today; the enum is the contract.
+ *
+ * @stability stable
+ */
+exports.RESTORE_UNAVAILABLE_REASONS = ['deployment_mode_saas'];
+/**
+ * The word `POST runs/:id/restore` requires. See this file's header.
+ *
+ * @stability stable
+ */
+exports.RESTORE_CONFIRMATION = 'RESTORE';
+/**
+ * The word `POST runs/:id/rollback` requires. Deliberately not the same word.
+ *
+ * @stability stable
+ */
+exports.ROLLBACK_CONFIRMATION = 'ROLLBACK';
+/**
+ * The three normal answers. `mode`, not the status code, is the discriminator.
+ *
+ * @stability stable
+ */
+exports.RESTORE_MODES = ['running', 'guided', 'blocked'];
+/**
+ * The three normal answers.
+ *
+ * Mirrors `RestoreRollbackResult` in `database-restore.service.ts` one-for-one
+ * and on purpose: this is that type on the wire, not a summary of it — the same
+ * discipline `CANCEL_OUTCOMES` follows.
+ *
+ * @stability stable
+ */
+exports.ROLLBACK_MODES = ['renamed', 'restore_started', 'unavailable'];
+/**
+ * The name of the `POST runs/:id/restore` body field that overrides the
+ * `schema_compatibility` gate.
+ *
+ * ⚠ IT IS THE API'S FIELD NAME, NOT THE PRE-FLIGHT SERVICE'S OPTION NAME, and
+ * the difference is the whole point. A `blocked` restore's `overrideParameter`
+ * exists to tell a CLIENT which field to set on its next request, so publishing
+ * the internal option name (`overrideSchemaMismatch`) would hand an operator a
+ * parameter the endpoint rejects.
+ *
+ * The API's restore DTO ties its own schema to it at compile time
+ * (`RestoreOverrideFieldIsReal`) and at run time in its spec.
+ *
+ * @stability stable
+ */
+exports.RESTORE_SCHEMA_OVERRIDE_FIELD = 'overrideSchemaCheck';
+/**
+ * The restore pre-flight's BUILT-IN gates, in the order they are evaluated and
+ * reported. `rls_bypass` (#740) reports how the restore session gets past
+ * row-level security, on pass as well as on failure.
+ *
+ * Not a closed list of every gate: an app registers its own with
+ * `registerRestoreGate` (`@marinoscar/platform-api/db-backup`), which run after
+ * these and report under their own ids (see `restoreGateIdSchema`). This
+ * list names the eight the platform ships, for labels and defaults.
+ *
+ * @stability stable
+ */
+exports.BUILTIN_RESTORE_GATE_IDS = [
+    'pg_client_version',
+    'admin_connection',
+    'createdb_privilege',
+    'extensions',
+    'rls_bypass',
+    'disk_space',
+    'replicas',
+    'schema_compatibility',
+];
+/**
+ * The same eight ids under their former name.
+ *
+ * @deprecated Renamed {@link BUILTIN_RESTORE_GATE_IDS}: the gate id is an open
+ * vocabulary now, so this is no longer "every gate id". Kept as an alias for
+ * one release.
+ * @stability stable
+ */
+exports.RESTORE_GATE_IDS = exports.BUILTIN_RESTORE_GATE_IDS;
+/**
+ * The shape of a restore gate id: lowercase letters, digits, `_` and `-`,
+ * starting with a letter. Every built-in id matches, and so does an app's
+ * `cdn-quiesced`.
+ *
+ * @stability experimental
+ */
+exports.RESTORE_GATE_ID_PATTERN = /^[a-z][a-z0-9_-]{1,63}$/;
+/**
+ * `databaseBackup.timeOfDay`: 24-hour `HH:MM`, zero-padded.
+ *
+ * A string rather than two numbers because it is one field on one form and one
+ * value in one cron-ish schedule; the regex is what stops `"2:00"`, `"25:00"`
+ * and `"02:60"` from reaching a scheduler that would have to guess.
+ *
+ * @stability stable
+ */
+exports.BACKUP_TIME_OF_DAY_PATTERN = /^([01]\d|2[0-3]):[0-5]\d$/;
+/**
+ * How often a scheduled backup runs (`databaseBackup.frequency`).
+ *
+ * @stability stable
+ */
+exports.BACKUP_FREQUENCIES = ['daily', 'weekly', 'monthly', 'cron'];
+/**
+ * The shortest gap, in minutes, a `frequency: 'cron'` expression may leave
+ * between two fires (one hour). The scheduler ticks every ten minutes and a
+ * dump is a whole-database read, so a finer cadence would stack dumps rather
+ * than protect anything.
+ *
+ * @stability experimental
+ */
+exports.BACKUP_CRON_MIN_INTERVAL_MINUTES = 60;
+/**
+ * The characters a `cron` expression may contain: digits, `*`, `/`, `,`, `-`
+ * and spaces. A shape check only; the API validates the expression with the
+ * scheduler's own parser (and the minimum interval) when it is written.
+ *
+ * @stability experimental
+ */
+exports.BACKUP_CRON_PATTERN = /^[0-9*/,\-\s]+$/;
+/**
+ * What a restore does with the database it displaced
+ * (`databaseBackup.restoreRollbackMode`).
+ *
+ * @stability stable
+ */
+exports.RESTORE_ROLLBACK_MODES = ['retain_database', 'drop_database'];
+/**
+ * The event emitted once a backup run settles (`completed`, `failed`,
+ * `stale`), after the row is written and outside any transaction. The payload
+ * is {@link DbBackupRunCompletedEvent}. Permanent: a listener subscribes by
+ * this string.
+ *
+ * @extensionPoint event
+ * @stability experimental
+ */
+exports.DB_BACKUP_RUN_COMPLETED_EVENT = 'db_backup.run.completed';
+/**
+ * The event emitted once a restore settles (`completed` after the swap,
+ * `failed`), after the audit write and outside any transaction. The payload is
+ * {@link DbBackupRestoreCompletedEvent}. Permanent.
+ *
+ * @extensionPoint event
+ * @stability experimental
+ */
+exports.DB_BACKUP_RESTORE_COMPLETED_EVENT = 'db_backup.restore.completed';
+//# sourceMappingURL=constants.js.map

package/dist/cjs/db-backup/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/db-backup/constants.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uEAAuE;AACvE,uBAAuB;AACvB,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,yEAAyE;AACzE,8EAA8E;AAC9E,QAAQ;AACR,gFAAgF;;;AAEhF;;;;;;;;;;;;GAYG;AACU,QAAA,eAAe,GAAG;IAC7B,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,OAAO;CACC,CAAC;AASX;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B,QAAQ;IACR,WAAW;IACX,aAAa;CACL,CAAC;AASX;;;;;;;;;;;;;;;GAeG;AACU,QAAA,gBAAgB,GAAG;IAC9B,WAAW;IACX,WAAW;IACX,UAAU;IACV,WAAW;IACX,QAAQ;IACR,aAAa;CACL,CAAC;AASX;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,CAAC,SAAS,EAAE,SAAS,CAAgD,CAAC;AAE5G;;;;;;;GAOG;AACU,QAAA,eAAe,GAAG,CAAC,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAE1E;;;;GAIG;AACU,QAAA,kCAAkC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAU,CAAC;AAE5E;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,CAAC,sBAAsB,CAAU,CAAC;AAE7E;;;;GAIG;AACU,QAAA,oBAAoB,GAAG,SAAS,CAAC;AAE9C;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,UAAU,CAAC;AAEhD;;;;GAIG;AACU,QAAA,aAAa,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AASvE;;;;;;;;GAQG;AACU,QAAA,cAAc,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,aAAa,CAAU,CAAC;AASrF;;;;;;;;;;;;;;GAcG;AACU,QAAA,6BAA6B,GAAG,qBAAqB,CAAC;AAEnE;;;;;;;;;;;GAWG;AACU,QAAA,wBAAwB,GAAG;IACtC,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;IACpB,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,sBAAsB;CACd,CAAC;AAEX;;;;;;;GAOG;AACU,QAAA,gBAAgB,GAAG,gCAAwB,CAAC;AAkBzD;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;;;;;;;GAQG;AACU,QAAA,0BAA0B,GAAG,2BAA2B,CAAC;AAEtE;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAElF;;;;;;;GAOG;AACU,QAAA,gCAAgC,GAAG,EAAE,CAAC;AAEnD;;;;;;GAMG;AACU,QAAA,mBAAmB,GAAG,iBAAiB,CAAC;AAErD;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,CAAC,iBAAiB,EAAE,eAAe,CAAU,CAAC;AAapF;;;;;;;;GAQG;AACU,QAAA,6BAA6B,GAAG,yBAAyB,CAAC;AAEvE;;;;;;;GAOG;AACU,QAAA,iCAAiC,GAAG,6BAA6B,CAAC"}

package/dist/cjs/db-backup/index.d.ts

@@ -0,0 +1,19 @@
+export { ACTIVE_BACKUP_STATUSES, BACKUP_CRON_MIN_INTERVAL_MINUTES, BACKUP_CRON_PATTERN, BACKUP_FREQUENCIES, BACKUP_STATUSES, BACKUP_TIME_OF_DAY_PATTERN, BACKUP_TRIGGERS, BUILTIN_RESTORE_GATE_IDS, CANCEL_OUTCOMES, DB_BACKUP_RESTORE_COMPLETED_EVENT, DB_BACKUP_RUN_COMPLETED_EVENT, NODE_CREDENTIAL_PREFLIGHT_OUTCOMES, RESTORE_CONFIRMATION, RESTORE_GATE_ID_PATTERN, RESTORE_GATE_IDS, RESTORE_MODES, RESTORE_ROLLBACK_MODES, RESTORE_SCHEMA_OVERRIDE_FIELD, RESTORE_STATUSES, RESTORE_UNAVAILABLE_REASONS, ROLLBACK_CONFIRMATION, ROLLBACK_MODES, } from './constants.js';
+export type { BackupMirrorResult, BackupStatusName, BackupTriggerName, BuiltinRestoreGateId, DbBackupEnum, DbBackupRestoreCompletedEvent, DbBackupRunCompletedEvent, RestoreGateId, RestoreMode, RestoreStatusName, RollbackMode, } from './constants.js';
+export { backupRetentionSchema, databaseBackupResponseSchema, databaseBackupSettingsPatchSchema, databaseBackupSettingsSchema, systemDatabaseBackupPatchSchema, systemDatabaseBackupSchema } from './schemas.js';
+export type { BackupRetention, DatabaseBackupSettingsPatchInput, SystemDatabaseBackupValue } from './schemas.js';
+export { databaseBackupConfigSchema, updateDatabaseBackupConfigSchema } from './schemas.js';
+export type { DatabaseBackupConfigResponse, UpdateDatabaseBackupConfig } from './schemas.js';
+export { backupRunSchema } from './schemas.js';
+export type { BackupRunResponse } from './schemas.js';
+export { backupRunListQuerySchema } from './schemas.js';
+export type { BackupRunListQuery } from './schemas.js';
+export { backupDownloadUrlSchema, cancelBackupResultSchema, deleteBackupResultSchema } from './schemas.js';
+export type { BackupDownloadUrl, CancelBackupResult, DeleteBackupResult } from './schemas.js';
+export { restoreGateIdSchema, restoreGateSchema, restorePreflightSchema, restoreRollbackPlanSchema, rollbackRenamedSchema, rollbackRestoreRequestSchema, rollbackRestoreResponseSchema, rollbackRestoreStartedSchema, rollbackUnavailableSchema, startRestoreBlockedSchema, startRestoreGuidedSchema, startRestoreRequestSchema, startRestoreResponseSchema, startRestoreRunningSchema } from './schemas.js';
+export type { RestorePreflightView, RollbackRestoreRequest, RollbackRestoreResponse, StartRestoreRequest, StartRestoreResponse } from './schemas.js';
+export { guidedJobRoleInstructionsSchema, nodeCredentialPreflightSchema } from './schemas.js';
+export type { NodeCredentialPreflight } from './schemas.js';
+export { dbBackupRunResultSchema } from './schemas.js';
+export type { DbBackupRunResult } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/db-backup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/db-backup/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,0BAA0B,EAC1B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,sBAAsB,EACtB,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,6BAA6B,EAC7B,yBAAyB,EACzB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,YAAY,GACb,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AACjN,YAAY,EAAE,eAAe,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAGjH,OAAO,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,MAAM,cAAc,CAAC;AAC5F,YAAY,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAG7F,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC3G,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAG9F,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAC7Y,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGrJ,OAAO,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC9F,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAG5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}