@marinoscar/platform-contract 0.1.0-next.3 → 0.1.0-next.4

package/dist/cjs/credentials/constants.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The tiers a system or org credential purpose may be stored in: `system` is
+ * the deployment's store, `org` an organization's.
+ *
+ * @stability experimental
+ */
+export declare const CREDENTIAL_TIERS: readonly ["system", "org"];
+/**
+ * One of {@link CREDENTIAL_TIERS}.
+ *
+ * @stability experimental
+ */
+export type CredentialTierValue = (typeof CREDENTIAL_TIERS)[number];
+/**
+ * Who answered a credential resolution: the user's own key, their
+ * organization's, the deployment's, or nobody's. Safe to show or log.
+ *
+ * @stability experimental
+ */
+export declare const CREDENTIAL_SOURCES: readonly ["user", "org", "system", "none"];
+/**
+ * One of {@link CREDENTIAL_SOURCES}.
+ *
+ * @stability experimental
+ */
+export type CredentialSourceValue = (typeof CREDENTIAL_SOURCES)[number];
+/**
+ * Field names that would, or plausibly could, carry secret material. No
+ * credential response schema may declare one; the credentials conformance
+ * suite scans every `*InfoSchema` for them.
+ *
+ * @stability experimental
+ */
+export declare const SECRET_BEARING_KEYS: readonly ["secret", "secretValue", "plaintext", "password", "value", "ciphertext", "encrypted", "payload"];
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/credentials/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/credentials/constants.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,4BAA6B,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,4CAA6C,CAAC;AAE7E;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,4GAStB,CAAC"}

package/dist/cjs/credentials/constants.js

@@ -0,0 +1,39 @@
+"use strict";
+// =============================================================================
+// Credentials constants (issue #735, PP-8.8): zod-free, so a client that needs
+// only a tier list or the secret-bearing key list never bundles zod.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECRET_BEARING_KEYS = exports.CREDENTIAL_SOURCES = exports.CREDENTIAL_TIERS = void 0;
+/**
+ * The tiers a system or org credential purpose may be stored in: `system` is
+ * the deployment's store, `org` an organization's.
+ *
+ * @stability experimental
+ */
+exports.CREDENTIAL_TIERS = ['system', 'org'];
+/**
+ * Who answered a credential resolution: the user's own key, their
+ * organization's, the deployment's, or nobody's. Safe to show or log.
+ *
+ * @stability experimental
+ */
+exports.CREDENTIAL_SOURCES = ['user', 'org', 'system', 'none'];
+/**
+ * Field names that would, or plausibly could, carry secret material. No
+ * credential response schema may declare one; the credentials conformance
+ * suite scans every `*InfoSchema` for them.
+ *
+ * @stability experimental
+ */
+exports.SECRET_BEARING_KEYS = [
+    'secret',
+    'secretValue',
+    'plaintext',
+    'password',
+    'value',
+    'ciphertext',
+    'encrypted',
+    'payload',
+];
+//# sourceMappingURL=constants.js.map

package/dist/cjs/credentials/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/credentials/constants.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,qEAAqE;AACrE,gFAAgF;;;AAEhF;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAU,CAAC;AAS3D;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAS7E;;;;;;GAMG;AACU,QAAA,mBAAmB,GAAG;IACjC,QAAQ;IACR,aAAa;IACb,WAAW;IACX,UAAU;IACV,OAAO;IACP,YAAY;IACZ,WAAW;IACX,SAAS;CACD,CAAC"}

package/dist/cjs/credentials/index.d.ts

@@ -0,0 +1,5 @@
+export { CREDENTIAL_SOURCES, CREDENTIAL_TIERS, SECRET_BEARING_KEYS } from './constants.js';
+export type { CredentialSourceValue, CredentialTierValue } from './constants.js';
+export { credentialInfoSchema, orgCredentialInfoSchema, userCredentialInfoSchema } from './schemas.js';
+export type { CredentialInfoDto, OrgCredentialInfoDto, UserCredentialInfoDto } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/credentials/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC3F,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACvG,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/cjs/credentials/index.js

@@ -0,0 +1,17 @@
+"use strict";
+// `@marinoscar/platform-contract/credentials`: the presentation-safe wire
+// shapes of a stored credential (issue #735, PP-8.8). The API's credentials
+// slice returns these types' runtime equivalents; a feature that presents a
+// credential embeds one. constants.ts is zod-free. Documented in ./README.md.
+// Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userCredentialInfoSchema = exports.orgCredentialInfoSchema = exports.credentialInfoSchema = exports.SECRET_BEARING_KEYS = exports.CREDENTIAL_TIERS = exports.CREDENTIAL_SOURCES = void 0;
+var constants_js_1 = require("./constants.js");
+Object.defineProperty(exports, "CREDENTIAL_SOURCES", { enumerable: true, get: function () { return constants_js_1.CREDENTIAL_SOURCES; } });
+Object.defineProperty(exports, "CREDENTIAL_TIERS", { enumerable: true, get: function () { return constants_js_1.CREDENTIAL_TIERS; } });
+Object.defineProperty(exports, "SECRET_BEARING_KEYS", { enumerable: true, get: function () { return constants_js_1.SECRET_BEARING_KEYS; } });
+var schemas_js_1 = require("./schemas.js");
+Object.defineProperty(exports, "credentialInfoSchema", { enumerable: true, get: function () { return schemas_js_1.credentialInfoSchema; } });
+Object.defineProperty(exports, "orgCredentialInfoSchema", { enumerable: true, get: function () { return schemas_js_1.orgCredentialInfoSchema; } });
+Object.defineProperty(exports, "userCredentialInfoSchema", { enumerable: true, get: function () { return schemas_js_1.userCredentialInfoSchema; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/credentials/index.ts"],"names":[],"mappings":";AAAA,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,+BAA+B;;;AAE/B,+CAA2F;AAAlF,kHAAA,kBAAkB,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAAE,mHAAA,mBAAmB,OAAA;AAElE,2CAAuG;AAA9F,kHAAA,oBAAoB,OAAA;AAAE,qHAAA,uBAAuB,OAAA;AAAE,sHAAA,wBAAwB,OAAA"}

package/dist/cjs/credentials/schemas.d.ts

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+/**
+ * A deployment credential, as the API presents it (`CredentialInfo`).
+ *
+ * @stability experimental
+ */
+export declare const credentialInfoSchema: z.ZodObject<{
+    purpose: z.ZodString;
+    name: z.ZodString;
+    hint: z.ZodNullable<z.ZodString>;
+    label: z.ZodNullable<z.ZodString>;
+    updatedByUserId: z.ZodNullable<z.ZodUUID>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+/**
+ * The inferred type of {@link credentialInfoSchema}.
+ *
+ * @stability experimental
+ */
+export type CredentialInfoDto = z.infer<typeof credentialInfoSchema>;
+/**
+ * A user's own credential, as the API presents it to that user
+ * (`UserCredentialInfo`): no owner id and no provenance (the owner is the only
+ * writer).
+ *
+ * @stability experimental
+ */
+export declare const userCredentialInfoSchema: z.ZodObject<{
+    purpose: z.ZodString;
+    name: z.ZodString;
+    hint: z.ZodNullable<z.ZodString>;
+    label: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+/**
+ * The inferred type of {@link userCredentialInfoSchema}.
+ *
+ * @stability experimental
+ */
+export type UserCredentialInfoDto = z.infer<typeof userCredentialInfoSchema>;
+/**
+ * An organization's credential, as the API presents it inside that
+ * organization (`OrgCredentialInfo`): no organization id.
+ *
+ * @stability experimental
+ */
+export declare const orgCredentialInfoSchema: z.ZodObject<{
+    purpose: z.ZodString;
+    name: z.ZodString;
+    hint: z.ZodNullable<z.ZodString>;
+    label: z.ZodNullable<z.ZodString>;
+    updatedByUserId: z.ZodNullable<z.ZodUUID>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+/**
+ * The inferred type of {@link orgCredentialInfoSchema}.
+ *
+ * @stability experimental
+ */
+export type OrgCredentialInfoDto = z.infer<typeof orgCredentialInfoSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/cjs/credentials/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/credentials/schemas.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;iBAe/B,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;;;;;;;iBAanC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;iBAelC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/cjs/credentials/schemas.js

@@ -0,0 +1,82 @@
+"use strict";
+// =============================================================================
+// Credentials: the presentation-safe wire shapes of a stored credential
+// (issue #735, PP-8.8)
+// =============================================================================
+//
+// What a feature returns when it presents a credential it owns (the AI
+// provider card, the storage page, an app's own key page). There is no
+// generic credentials route, on purpose: each owning feature exposes its own,
+// and embeds one of these. None of them has a field able to carry a secret,
+// the ciphertext, the row id or the owner id; the hint is the only
+// derivative of the secret, and it is presentation-only. Dates are ISO
+// strings, always present fields are `.nullable()`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.orgCredentialInfoSchema = exports.userCredentialInfoSchema = exports.credentialInfoSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * A deployment credential, as the API presents it (`CredentialInfo`).
+ *
+ * @stability experimental
+ */
+exports.credentialInfoSchema = zod_1.z.object({
+    /** The purpose (and cipher sub-key domain): `smtp`, `storage`, ... */
+    purpose: zod_1.z.string(),
+    /** The discriminator within the purpose: `default`, a provider id, ... */
+    name: zod_1.z.string(),
+    /** A non-secret display aid, `••••abcd`; `null` for a row written outside the store. */
+    hint: zod_1.z.string().nullable(),
+    /** The admin-entered description, or `null`. */
+    label: zod_1.z.string().nullable(),
+    /** Who last set it; `null` when that user was deleted. */
+    updatedByUserId: zod_1.z.uuid().nullable(),
+    /** When it was first stored (ISO 8601). */
+    createdAt: zod_1.z.string(),
+    /** When it last changed (ISO 8601). */
+    updatedAt: zod_1.z.string(),
+});
+/**
+ * A user's own credential, as the API presents it to that user
+ * (`UserCredentialInfo`): no owner id and no provenance (the owner is the only
+ * writer).
+ *
+ * @stability experimental
+ */
+exports.userCredentialInfoSchema = zod_1.z.object({
+    /** The user credential purpose. */
+    purpose: zod_1.z.string(),
+    /** The discriminator within the purpose: `default`, ... */
+    name: zod_1.z.string(),
+    /** A non-secret display aid, `••••abcd`, or `null`. */
+    hint: zod_1.z.string().nullable(),
+    /** The user-entered description, or `null`. */
+    label: zod_1.z.string().nullable(),
+    /** When it was first stored (ISO 8601). */
+    createdAt: zod_1.z.string(),
+    /** When it last changed (ISO 8601). */
+    updatedAt: zod_1.z.string(),
+});
+/**
+ * An organization's credential, as the API presents it inside that
+ * organization (`OrgCredentialInfo`): no organization id.
+ *
+ * @stability experimental
+ */
+exports.orgCredentialInfoSchema = zod_1.z.object({
+    /** A purpose registered with the `org` tier. */
+    purpose: zod_1.z.string(),
+    /** The discriminator within the purpose: `default`, a provider id, ... */
+    name: zod_1.z.string(),
+    /** A non-secret display aid, `••••abcd`, or `null`. */
+    hint: zod_1.z.string().nullable(),
+    /** The admin-entered description, or `null`. */
+    label: zod_1.z.string().nullable(),
+    /** Who last set it; `null` when that user was deleted. */
+    updatedByUserId: zod_1.z.uuid().nullable(),
+    /** When it was first stored (ISO 8601). */
+    createdAt: zod_1.z.string(),
+    /** When it last changed (ISO 8601). */
+    updatedAt: zod_1.z.string(),
+});
+//# sourceMappingURL=schemas.js.map

package/dist/cjs/credentials/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/credentials/schemas.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,wEAAwE;AACxE,uBAAuB;AACvB,gFAAgF;AAChF,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,8EAA8E;AAC9E,4EAA4E;AAC5E,mEAAmE;AACnE,uEAAuE;AACvE,oDAAoD;AACpD,gFAAgF;;;AAEhF,6BAAwB;AAExB;;;;GAIG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,sEAAsE;IACtE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,0EAA0E;IAC1E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,wFAAwF;IACxF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,gDAAgD;IAChD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,0DAA0D;IAC1D,eAAe,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,2CAA2C;IAC3C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,uCAAuC;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AASH;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,mCAAmC;IACnC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,2DAA2D;IAC3D,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,uDAAuD;IACvD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+CAA+C;IAC/C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,2CAA2C;IAC3C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,uCAAuC;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AASH;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,gDAAgD;IAChD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,0EAA0E;IAC1E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,uDAAuD;IACvD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,gDAAgD;IAChD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,0DAA0D;IAC1D,eAAe,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,2CAA2C;IAC3C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,uCAAuC;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC"}

package/dist/cjs/db-backup/config.d.ts

@@ -0,0 +1,76 @@
+import { z } from 'zod';
+import { type DbBackupEnum } from './constants.js';
+/**
+ * The `PUT config` body: the settings namespace's own patch schema, unchanged.
+ *
+ * Not `.strict()`. The global `ZodValidationPipe` strips unknown keys, which is
+ * the behaviour every other settings write in this API already has: a client
+ * that sends a field a newer build understands and this one does not gets its
+ * known fields applied rather than a 400 it cannot act on.
+ *
+ * @stability stable
+ */
+export declare const updateDatabaseBackupConfigSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    frequency: z.ZodOptional<z.ZodEnum<DbBackupEnum<readonly ["daily", "weekly", "monthly", "cron"]>>>;
+    dayOfWeek: z.ZodOptional<z.ZodNumber>;
+    dayOfMonth: z.ZodOptional<z.ZodNumber>;
+    timeOfDay: z.ZodOptional<z.ZodString>;
+    timezone: z.ZodOptional<z.ZodString>;
+    retentionCount: z.ZodOptional<z.ZodNumber>;
+    cron: z.ZodOptional<z.ZodString>;
+    retention: z.ZodOptional<z.ZodObject<{
+        count: z.ZodOptional<z.ZodNumber>;
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    storageProvider: z.ZodOptional<z.ZodString>;
+    runStaleMinutes: z.ZodOptional<z.ZodNumber>;
+    compressionLevel: z.ZodOptional<z.ZodNumber>;
+    restoreRollbackMode: z.ZodOptional<z.ZodEnum<DbBackupEnum<["retain_database", "drop_database"]>>>;
+    oldDatabaseRetentionHours: z.ZodOptional<z.ZodNumber>;
+    nodeOffloadEnabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+/**
+ * The parsed shape `DatabaseBackupAdminService.updateConfig` consumes.
+ *
+ * @stability stable
+ */
+export type UpdateDatabaseBackupConfig = z.output<typeof updateDatabaseBackupConfigSchema>;
+/**
+ * `GET`/`PUT /api/admin/db-backup/config` response: the stored policy plus three computed fields.
+ *
+ * @stability stable
+ */
+export declare const databaseBackupConfigSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    frequency: z.ZodEnum<DbBackupEnum<readonly ["daily", "weekly", "monthly", "cron"]>>;
+    dayOfWeek: z.ZodNumber;
+    dayOfMonth: z.ZodNumber;
+    timeOfDay: z.ZodString;
+    timezone: z.ZodString;
+    retentionCount: z.ZodNumber;
+    cron: z.ZodOptional<z.ZodString>;
+    retention: z.ZodOptional<z.ZodObject<{
+        count: z.ZodOptional<z.ZodNumber>;
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    storageProvider: z.ZodString;
+    runStaleMinutes: z.ZodNumber;
+    compressionLevel: z.ZodNumber;
+    restoreRollbackMode: z.ZodEnum<DbBackupEnum<["retain_database", "drop_database"]>>;
+    oldDatabaseRetentionHours: z.ZodNumber;
+    nodeOffloadEnabled: z.ZodBoolean;
+    nextRunAt: z.ZodNullable<z.ZodISODateTime>;
+    activeRunId: z.ZodNullable<z.ZodUUID>;
+    restore: z.ZodObject<{
+        available: z.ZodBoolean;
+        reason: z.ZodNullable<z.ZodEnum<DbBackupEnum<readonly ["deployment_mode_saas"]>>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+/**
+ * The exact object shape `getConfig` produces, and therefore the wire shape.
+ *
+ * @stability stable
+ */
+export type DatabaseBackupConfigResponse = z.infer<typeof databaseBackupConfigSchema>;
+//# sourceMappingURL=config.d.ts.map

package/dist/cjs/db-backup/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/db-backup/config.ts"],"names":[],"mappings":"AA6CA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAA+B,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAIhF;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;iBAAkC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE3F;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;iBAiDrC,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/cjs/db-backup/config.js

@@ -0,0 +1,115 @@
+"use strict";
+// =============================================================================
+// The backup policy, read and written (issue #283, epic #254)
+// =============================================================================
+//
+// One settings namespace (`databaseBackup`) seen from two directions: what an
+// administrator sends to change it, and what they get back to look at.
+//
+// -----------------------------------------------------------------------------
+// THE REQUEST SCHEMA IS `systemDatabaseBackupPatchSchema`, IMPORTED AND NOT
+// RE-DECLARED
+// -----------------------------------------------------------------------------
+//
+// Every bound in it — `compressionLevel` 0-9, `retentionCount` 1-365,
+// `timeOfDay` matching `BACKUP_TIME_OF_DAY_PATTERN`, `dayOfMonth` stopping at
+// 28 so that "monthly" never skips February — is already stated once in
+// `common/schemas/settings.schema.ts`, and `PUT /api/system-settings` already
+// enforces exactly that schema over exactly this namespace. A second copy here
+// would be two schemas over one column, and the copy that drifts is always the
+// one nobody is looking at: the settings page would accept a value this route
+// refuses, or worse, this route would accept one the settings page refuses and
+// write it to the same JSONB.
+//
+// This is the same argument `db-backup-storage.ts` makes for having ONE
+// storage-provider rule shared by the write path and the run path.
+//
+// EVERY FIELD IS OPTIONAL, which is what makes the route a partial update in
+// the sense the issue asks for: `{ "enabled": true }` is a legal body. An
+// administrator changing the hour must not have to echo back twelve fields they
+// did not touch — a form that re-sends everything is a form that silently
+// reverts whatever another admin changed while it was open.
+//
+// -----------------------------------------------------------------------------
+// THE RESPONSE IS THE POLICY PLUS TWO COMPUTED FIELDS
+// -----------------------------------------------------------------------------
+//
+// `nextRunAt` and `activeRunId` are not stored anywhere and are not settings.
+// They are here because the question an administrator actually has on this
+// screen is not "what did I save" but "is this going to do what I meant, and is
+// something happening right now" — and both were previously unanswerable
+// without waiting a day to find out.
+//
+// See `DatabaseBackupAdminService.getConfig` for why `nextRunAt` is computed
+// rather than stored, and why it is `null` in two quite different situations.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.databaseBackupConfigSchema = exports.updateDatabaseBackupConfigSchema = void 0;
+const zod_1 = require("zod");
+const constants_js_1 = require("./constants.js");
+const settings_schemas_js_1 = require("./settings-schemas.js");
+/**
+ * The `PUT config` body: the settings namespace's own patch schema, unchanged.
+ *
+ * Not `.strict()`. The global `ZodValidationPipe` strips unknown keys, which is
+ * the behaviour every other settings write in this API already has: a client
+ * that sends a field a newer build understands and this one does not gets its
+ * known fields applied rather than a 400 it cannot act on.
+ *
+ * @stability stable
+ */
+exports.updateDatabaseBackupConfigSchema = settings_schemas_js_1.systemDatabaseBackupPatchSchema;
+/**
+ * `GET`/`PUT /api/admin/db-backup/config` response: the stored policy plus three computed fields.
+ *
+ * @stability stable
+ */
+exports.databaseBackupConfigSchema = settings_schemas_js_1.systemDatabaseBackupSchema.extend({
+    /**
+     * When the schedule will next fire, in UTC.
+     *
+     * COMPUTED ON EVERY READ from the settings above, never stored. The cron in
+     * `tasks/db-backup-schedule.task.ts` is the only thing that fires a scheduled
+     * backup; this field is a projection of the same rules and writes nothing, so
+     * reading this endpoint can never cause, delay or skip a backup.
+     *
+     * `null` means "no next run", and there are two ways to get one — a client
+     * rendering this field should say "not scheduled" rather than guessing which:
+     *
+     *   1. `enabled` is false. Nothing is scheduled, which is the answer.
+     *   2. The schedule cannot be projected — a `timezone` this runtime does not
+     *      know. `PUT config` refuses such a value, so this can only be a row
+     *      that predates the check (a seed, a restored settings blob, a
+     *      hand-edited JSONB), and the response stays a 200 precisely so the
+     *      screen that can FIX it still loads. See
+     *      `DatabaseBackupAdminService.getConfig`.
+     */
+    nextRunAt: zod_1.z.iso.datetime().nullable(),
+    /**
+     * The run currently holding the single-active-run slot, or `null`.
+     *
+     * ⚠ A DISPLAY VALUE, AND NOT A PRE-FLIGHT CHECK. Nothing may read this and
+     * conclude that a `POST runs` will succeed: between this read and that write
+     * the scheduler on another replica can claim the slot. The arbiter is the
+     * partial unique index and it always will be — see
+     * `docs/specs/database-backup.md`, "Indexes and the single-active-run guard",
+     * for why a `findFirst` before the insert is racy exactly when it matters.
+     */
+    activeRunId: zod_1.z.uuid().nullable(),
+    /**
+     * Whether this deployment offers in-app restore and rollback (#685).
+     *
+     * A DEPLOYMENT FACT, not part of the stored policy and not settable through
+     * `PUT config`: it comes from `DEPLOYMENT_MODE`, which only whoever runs the
+     * infrastructure can change. `available: false` means the restore and
+     * rollback routes answer 403 for everyone; `reason` says why, with the same
+     * token those 403s carry in `details.reason`. Backups are unaffected.
+     */
+    restore: zod_1.z.object({
+        /** Available. */
+        available: zod_1.z.boolean(),
+        /** Reason. */
+        reason: zod_1.z.enum(constants_js_1.RESTORE_UNAVAILABLE_REASONS).nullable(),
+    }),
+});
+//# sourceMappingURL=config.js.map

package/dist/cjs/db-backup/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/db-backup/config.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,cAAc;AACd,gFAAgF;AAChF,EAAE;AACF,sEAAsE;AACtE,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8BAA8B;AAC9B,EAAE;AACF,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,gFAAgF;AAChF,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AACzE,qCAAqC;AACrC,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;;;AAEhF,6BAAwB;AAExB,iDAAgF;AAEhF,+DAAoG;AAEpG;;;;;;;;;GASG;AACU,QAAA,gCAAgC,GAAG,qDAA+B,CAAC;AAShF;;;;GAIG;AACU,QAAA,0BAA0B,GAAG,gDAA0B,CAAC,MAAM,CAAC;IAC1E;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,EAAE,OAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEtC;;;;;;;;;OASG;IACH,WAAW,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAEhC;;;;;;;;OAQG;IACH,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC;QAChB,iBAAiB;QACjB,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;QACtB,cAAc;QACd,MAAM,EAAG,OAAC,CAAC,IAAI,CAAC,0CAA2B,CAAiE,CAAC,QAAQ,EAAE;KACxH,CAAC;CACH,CAAC,CAAC"}