@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/services/backup-pipeline.js

@@ -0,0 +1,286 @@
+/**
+ * Running a dump or restore without a shell.
+ *
+ * Every one of these was `execFile('/bin/sh', ['-c', "pg_dump … | gzip > file"])`,
+ * which has three faults and the first is the serious one:
+ *
+ *   1. **A shell pipeline reports only the LAST command's exit status.**
+ *      `pg_dump … | gzip > file` exits 0 when pg_dump fails, because gzip
+ *      succeeded in writing its (empty) output. Verified: a pipeline whose
+ *      first command does not exist exits 0 and leaves a 20-byte file. So a
+ *      backup that dumped nothing was recorded as a backup — with a row in
+ *      the store, a size, and a timestamp — and the operator found out when
+ *      they tried to restore it.
+ *   2. Names and paths were interpolated into a command string. A container,
+ *      user or database name containing a space or a quote breaks the
+ *      command; the values come from a project's own config, so this is a
+ *      correctness problem before it is anything else.
+ *   3. The uncompressed local path buffered the entire dump in memory with a
+ *      100 MB ceiling, which an ordinary database exceeds.
+ *
+ * Streaming through `spawn` fixes all three: both ends of the pipe are real
+ * processes whose exit codes are observed, arguments are passed as an array
+ * so nothing is parsed, and nothing is held in memory.
+ *
+ * ## …and the file only takes its name once it is whole
+ *
+ * All of that catches a dump that FAILS. None of it catches a dump that is
+ * never allowed to finish: the process killed, the host disk full, the VM
+ * stopped mid-write. There no catch of ours runs, and the stream has been
+ * writing under the FINAL name since its first byte.
+ *
+ * Measured in `~/.omnitron/backups` after this host filled on 2026-09-14 —
+ * `main_…07-51….sql.gz` at 98 304 bytes and `quotes_…sql.gz` at 1.5 MB,
+ * both a gzip header with the body cut off, both sitting under their final
+ * names where a restore would have taken them. So the write goes to
+ * `<name>.partial` and is renamed once the exit code has been checked.
+ */
+import { spawn } from 'node:child_process';
+import { createGzip, createGunzip } from 'node:zlib';
+import fs from 'node:fs';
+import { pipeline } from 'node:stream/promises';
+/**
+ * Render a byte count so a small backup cannot be mistaken for an empty one.
+ *
+ * `backup list` printed `(size / 1024 / 1024).toFixed(2) + ' MB'`, which shows
+ * every backup under ten kilobytes as `0.00 MB`. On this host that is 261 of
+ * 391 files — mostly legitimate dumps of small databases, rendered
+ * indistinguishable from a dump that captured nothing.
+ */
+export function formatBackupSize(bytes) {
+    if (!Number.isFinite(bytes) || bytes < 0)
+        return '—';
+    if (bytes === 0)
+        return 'empty';
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    if (bytes < 1024 * 1024 * 1024)
+        return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+    return `${(bytes / (1024 * 1024 * 1024)).toFixed(2)} GB`;
+}
+/**
+ * A moment as UTC, to the second, with the zone written on it.
+ *
+ * `backup list` printed `new Date(createdAt).toLocaleString()` — the daemon
+ * host's local time with no zone at all — beside filenames that carry UTC.
+ * Measured on the master: `geo_2026-09-23T08-19-04-…` listed as
+ * `9/23/2026, 11:19:04 AM`, three hours apart and nothing saying which of the
+ * two was right. Lives here, beside `formatBackupSize`, because this is the
+ * one module both the daemon and the CLI load without the service's graph.
+ */
+export function formatUtc(moment) {
+    const d = new Date(moment);
+    if (Number.isNaN(d.getTime()))
+        return String(moment);
+    return d.toISOString().replace(/\.\d{3}Z$/, 'Z');
+}
+/** Shortest id prefix of at least `min` characters that still tells every id apart. */
+export function uniqueIdPrefixLength(ids, min = 8) {
+    const longest = ids.reduce((n, id) => Math.max(n, id.length), 0);
+    for (let len = min; len < longest; len++) {
+        if (new Set(ids.map((id) => id.slice(0, len))).size === ids.length)
+            return len;
+    }
+    return Math.max(min, longest);
+}
+/** Below this, a prefix names a handful of backups at random rather than one on purpose. */
+export const MIN_BACKUP_ID_PREFIX = 4;
+/**
+ * The one backup an id — or an unambiguous prefix of one — names.
+ *
+ * `restoreBackup` compared the argument with `===` against a full UUID, and
+ * nothing the CLI printed carried one: `backup list` showed Database,
+ * Filename cut to 24 characters (`geo_2026-09-23T08-19-04-`, the id is after
+ * the cut) and Size; `backup create` printed `[a63dbcf4]`, eight characters
+ * that restore then refused as "not found". Shared by the daemon and the CLI,
+ * so both sides read a prefix the same way.
+ *
+ * @throws naming every candidate when the prefix matches more than one, and
+ *         saying so when it matches none — never a guess.
+ */
+export function resolveBackupId(rows, idOrPrefix, describe = (row) => row.id) {
+    const wanted = String(idOrPrefix ?? '').trim().toLowerCase();
+    const exact = rows.find((r) => r.id.toLowerCase() === wanted);
+    if (exact)
+        return exact;
+    if (wanted.length < MIN_BACKUP_ID_PREFIX) {
+        throw new Error(`Backup '${idOrPrefix}' not found — an id prefix needs at least ${MIN_BACKUP_ID_PREFIX} characters`);
+    }
+    const matches = rows.filter((r) => r.id.toLowerCase().startsWith(wanted));
+    if (matches.length === 1)
+        return matches[0];
+    if (matches.length === 0)
+        throw new Error(`Backup '${idOrPrefix}' not found`);
+    throw new Error(`Backup id prefix '${idOrPrefix}' matches ${matches.length} backups: ` +
+        `${matches.map(describe).join('; ')} — give more of the id`);
+}
+const DEFAULT_TIMEOUT_MS = 600_000;
+/**
+ * What to say about a child our own timer killed.
+ *
+ * It closes with `code === null`, and the only message this produced was
+ * "docker exited with code null". Measured on the master, 2026-09-23:
+ * «Creating backup main» at 06:04:08Z, the next line 603 s later, and a pass
+ * summary of `{"total":6,"ok":5}` — the one reason anybody needed, that the
+ * 600 s timeout had fired, was never written down in words.
+ */
+function killedByTimer(command, timeoutMs, stderr) {
+    const limit = timeoutMs >= 1000 ? `${Math.round(timeoutMs / 1000)} s` : `${timeoutMs} ms`;
+    return `${command} did not finish within ${limit} and was killed` + (stderr ? `: ${stderr.trim()}` : '');
+}
+/**
+ * Run `command args…`, sending stdout to `outputPath`, optionally gzipped.
+ *
+ * @throws when the command exits non-zero, carrying its stderr — which the
+ *         shell version discarded along with the exit status.
+ */
+export async function dumpToFile(command, args, outputPath, compress, options = {}) {
+    // Written under a name that is not a backup, and renamed once it is one.
+    const staging = `${outputPath}.partial`;
+    await fs.promises.rm(staging, { force: true });
+    const child = spawn(command, args, {
+        env: options.env ?? process.env,
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    let stderr = '';
+    child.stderr.on('data', (chunk) => {
+        // Bounded: a failing pg_dump can be talkative, and the reason is at the
+        // start rather than the end.
+        if (stderr.length < 8192)
+            stderr += String(chunk);
+    });
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        child.kill('SIGKILL');
+    }, timeoutMs);
+    // Attached before anything is awaited, so neither event can be missed and
+    // no 'error' arrives without a listener.
+    const started = new Promise((resolve, reject) => {
+        child.once('spawn', resolve);
+        child.once('error', reject);
+    });
+    const exited = new Promise((resolve, reject) => {
+        child.once('close', resolve);
+        child.once('error', reject);
+    });
+    // A spawn failure rejects both promises, and only `started` is awaited on
+    // that path — leaving `exited` rejected with nobody listening, which under
+    // Node's default is a crash of the whole process. Marking it handled here
+    // costs nothing and is not a swallowed error: the same failure still
+    // arrives through `started`.
+    exited.catch(() => undefined);
+    let pumping;
+    try {
+        // Wait for the process to exist before creating the file. `spawn` reports
+        // ENOENT asynchronously, so the previous version had already opened the
+        // write stream by then: the catch below removed the file, and the stream
+        // — still opening — recreated it a moment later. A failed dump left an
+        // empty file on disk, which is the one thing this module's own comment
+        // says must not happen. It showed up as a test failing only in a loaded
+        // full run, because load is what decides which side of the race wins.
+        await started;
+        const out = fs.createWriteStream(staging);
+        pumping = compress ? pipeline(child.stdout, createGzip(), out) : pipeline(child.stdout, out);
+        // Both of these must be awaited together. Awaiting only the stream would
+        // resolve on a clean EOF from a command that then exits non-zero — which
+        // is exactly the failure the shell version could not see.
+        const [, code] = await Promise.all([pumping, exited]);
+        if (code !== 0) {
+            if (timedOut)
+                throw new Error(killedByTimer(command, timeoutMs, stderr));
+            throw new Error(`${command} exited with code ${code}${stderr ? `: ${stderr.trim()}` : ''}`);
+        }
+        // Only now does the name exist. Rename within a directory is atomic, so
+        // the visible state is binary: either no file, or a complete one. The
+        // guard above covers a dump that FAILED; this covers one that was never
+        // allowed to finish — the process killed, the host disk full — where no
+        // catch of ours runs at all.
+        await fs.promises.rename(staging, outputPath);
+    }
+    catch (err) {
+        // Let the pipeline finish failing before removing the file. Otherwise the
+        // same race returns by the other door: `Promise.all` rejects on the exit
+        // code while the stream is still writing, and the write lands after the
+        // removal. Its rejection is also the one nothing else is waiting on.
+        if (pumping)
+            await pumping.catch(() => undefined);
+        // A partial file is worse than none: it has a plausible size and restores
+        // nothing. Both names, because the rename may have happened before a
+        // later step threw.
+        await fs.promises.rm(staging, { force: true });
+        await fs.promises.rm(outputPath, { force: true });
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Feed `inputPath` into `command args…` on stdin, optionally gunzipping.
+ *
+ * @throws when the command exits non-zero, carrying its stderr.
+ */
+export async function restoreFromFile(command, args, inputPath, compressed, options = {}) {
+    const child = spawn(command, args, {
+        env: options.env ?? process.env,
+        stdio: ['pipe', 'ignore', 'pipe'],
+    });
+    let stderr = '';
+    child.stderr.on('data', (chunk) => {
+        if (stderr.length < 8192)
+            stderr += String(chunk);
+    });
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        child.kill('SIGKILL');
+    }, timeoutMs);
+    const started = new Promise((resolve, reject) => {
+        child.once('spawn', resolve);
+        child.once('error', reject);
+    });
+    const exited = new Promise((resolve, reject) => {
+        child.once('close', resolve);
+        child.once('error', reject);
+    });
+    // A spawn failure rejects both promises, and only `started` is awaited on
+    // that path — leaving `exited` rejected with nobody listening, which under
+    // Node's default is a crash of the whole process. Marking it handled here
+    // costs nothing and is not a swallowed error: the same failure still
+    // arrives through `started`.
+    exited.catch(() => undefined);
+    let pumping;
+    try {
+        // Same reason as `dumpToFile`: nothing is opened until the process is
+        // known to exist. Here it costs less — a read stream on a missing command
+        // leaves no artefact — but a file handle opened for a process that never
+        // started is still a handle nobody closes.
+        await started;
+        const input = fs.createReadStream(inputPath);
+        pumping = compressed ? pipeline(input, createGunzip(), child.stdin) : pipeline(input, child.stdin);
+        const [, code] = await Promise.all([pumping, exited]);
+        if (code !== 0) {
+            if (timedOut)
+                throw new Error(killedByTimer(command, timeoutMs, stderr));
+            throw new Error(`${command} exited with code ${code}${stderr ? `: ${stderr.trim()}` : ''}`);
+        }
+    }
+    catch (err) {
+        if (pumping)
+            await pumping.catch(() => undefined);
+        // Killing the reader breaks the pipe into it, and that EPIPE can reach
+        // here before the exit code does — the timeout is still the reason.
+        if (timedOut)
+            throw new Error(killedByTimer(command, timeoutMs, stderr), { cause: err });
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=backup-pipeline.js.map

package/dist/services/backup-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-pipeline.js","sourceRoot":"","sources":["../../src/services/backup-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACrD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClF,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,MAA8B;IACtD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,GAAa,EAAE,GAAG,GAAG,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAS,EACT,UAAkB,EAClB,QAAQ,GAAuB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;IAE9C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAC9D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,6CAA6C,oBAAoB,aAAa,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC;IAC9E,MAAM,IAAI,KAAK,CACb,qBAAqB,UAAU,aAAa,OAAO,CAAC,MAAM,YAAY;QACpE,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAC9D,CAAC;AACJ,CAAC;AASD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,CAAC;IAC1F,OAAO,GAAG,OAAO,0BAA0B,KAAK,iBAAiB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,IAAc,EACd,UAAkB,EAClB,QAAiB,EACjB,OAAO,GAAoB,EAAE;IAE7B,yEAAyE;IACzE,MAAM,OAAO,GAAG,GAAG,UAAU,UAAU,CAAC;IACxC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,0EAA0E;IAC1E,yCAAyC;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9B,IAAI,OAAkC,CAAC;IAEvC,IAAI,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,OAAO,CAAC;QAEd,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE7F,yEAAyE;QACzE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,6BAA6B;QAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,0EAA0E;QAC1E,qEAAqE;QACrE,oBAAoB;QACpB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,IAAc,EACd,SAAiB,EACjB,UAAmB,EACnB,OAAO,GAAoB,EAAE;IAE7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9B,IAAI,OAAkC,CAAC;IAEvC,IAAI,CAAC;QACH,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,OAAO,CAAC;QAEd,MAAM,KAAK,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnG,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/services/backup-schedule.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Backup schedule specifications — what a user is allowed to type, and what
+ * the daemon is allowed to do with it.
+ *
+ * The RPC field, the DTO field, the CLI argument and the old parser were all
+ * called `cron`, and the parser accepted three English words or a bare number
+ * of milliseconds. Everything else fell through to a hardcoded 24 hours. So
+ * `0 3 * * *` — the most ordinary nightly-backup expression there is — became
+ * "every 24 hours starting whenever the daemon last restarted", silently, and
+ * `30 2 * * *` became `parseInt('30 2 * * *')` = **a 30-millisecond timer**:
+ * a continuous pg_dump loop, a filling disk, and a retention pass racing it.
+ *
+ * Two rules follow from that, and they are the point of this module.
+ *
+ * Cron expressions are parsed as cron. Not approximated by an interval —
+ * "daily at 03:00" and "every 86 400 000 ms" are different schedules, and the
+ * difference is exactly what an operator picked a cron expression to express.
+ *
+ * Nothing unrecognised gets a default. A schedule the daemon cannot read is a
+ * schedule the operator has to be told about, because the alternative is a
+ * backup that runs at a time nobody chose — which looks like it is working.
+ */
+/** Word forms kept from the original parser; existing schedules use them. */
+export declare const PRESETS: Record<string, number>;
+/**
+ * Floor for the bare-milliseconds form.
+ *
+ * A backup interval under a minute is not a choice anyone makes; it is what a
+ * cron expression looks like after `parseInt` has eaten it. Rejecting the
+ * range turns the old failure into a message.
+ */
+export declare const MIN_INTERVAL_MS = 60000;
+export type SchedulePlan = {
+    kind: 'interval';
+    intervalMs: number;
+    spec: string;
+} | {
+    kind: 'cron';
+    expression: string;
+    spec: string;
+};
+export declare class ScheduleParseError extends Error {
+    constructor(spec: string, reason: string);
+}
+/**
+ * Read a schedule specification.
+ *
+ * @throws ScheduleParseError — always, rather than falling back to a default.
+ */
+export declare function parseSchedule(spec: string): SchedulePlan;
+/**
+ * Milliseconds from `from` until the next occurrence of `expression`.
+ *
+ * Never returns zero or negative: a cron whose next occurrence is now would
+ * otherwise arm a zero-delay timer, and the loop that produces is the one
+ * this module was written to remove.
+ */
+export declare function nextCronDelay(expression: string, from?: Date): number;
+/**
+ * One-line description for logs and `backup schedules` output.
+ *
+ * Cron expressions are evaluated in the daemon's local timezone — the
+ * conventional behaviour, and the one `cron-parser` implements — which means
+ * `0 3 * * *` is 03:00 wherever the daemon runs, not 03:00 UTC. On a server
+ * whose clock is not the operator's that is a several-hour difference that
+ * nothing else would ever mention, so the zone is named here.
+ */
+export declare function describeSchedule(plan: SchedulePlan, timeZone?: string): string;
+//# sourceMappingURL=backup-schedule.d.ts.map

package/dist/services/backup-schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-schedule.d.ts","sourceRoot":"","sources":["../../src/services/backup-schedule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,6EAA6E;AAC7E,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAI1C,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAOvC;CACF;AAOD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA6CxD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,IAAiB,GAAG,MAAM,CAKjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,YAAY,EAClB,QAAQ,GAAE,MAAyD,GAClE,MAAM,CAOR"}

package/dist/services/backup-schedule.js

@@ -0,0 +1,132 @@
+/**
+ * Backup schedule specifications — what a user is allowed to type, and what
+ * the daemon is allowed to do with it.
+ *
+ * The RPC field, the DTO field, the CLI argument and the old parser were all
+ * called `cron`, and the parser accepted three English words or a bare number
+ * of milliseconds. Everything else fell through to a hardcoded 24 hours. So
+ * `0 3 * * *` — the most ordinary nightly-backup expression there is — became
+ * "every 24 hours starting whenever the daemon last restarted", silently, and
+ * `30 2 * * *` became `parseInt('30 2 * * *')` = **a 30-millisecond timer**:
+ * a continuous pg_dump loop, a filling disk, and a retention pass racing it.
+ *
+ * Two rules follow from that, and they are the point of this module.
+ *
+ * Cron expressions are parsed as cron. Not approximated by an interval —
+ * "daily at 03:00" and "every 86 400 000 ms" are different schedules, and the
+ * difference is exactly what an operator picked a cron expression to express.
+ *
+ * Nothing unrecognised gets a default. A schedule the daemon cannot read is a
+ * schedule the operator has to be told about, because the alternative is a
+ * backup that runs at a time nobody chose — which looks like it is working.
+ */
+import { CronExpressionParser } from 'cron-parser';
+/** Word forms kept from the original parser; existing schedules use them. */
+export const PRESETS = {
+    hourly: 3_600_000,
+    daily: 86_400_000,
+    weekly: 604_800_000,
+};
+/**
+ * Floor for the bare-milliseconds form.
+ *
+ * A backup interval under a minute is not a choice anyone makes; it is what a
+ * cron expression looks like after `parseInt` has eaten it. Rejecting the
+ * range turns the old failure into a message.
+ */
+export const MIN_INTERVAL_MS = 60_000;
+export class ScheduleParseError extends Error {
+    constructor(spec, reason) {
+        super(`Cannot read backup schedule ${JSON.stringify(spec)}: ${reason}. ` +
+            `Accepted: a cron expression ("0 3 * * *"), a preset (${Object.keys(PRESETS).join(', ')}), ` +
+            `or an interval in milliseconds (at least ${MIN_INTERVAL_MS}).`);
+        this.name = 'ScheduleParseError';
+    }
+}
+/** True when the string is a bare integer — no sign, no units, no padding. */
+function isBareInteger(spec) {
+    return /^\d+$/.test(spec);
+}
+/**
+ * Read a schedule specification.
+ *
+ * @throws ScheduleParseError — always, rather than falling back to a default.
+ */
+export function parseSchedule(spec) {
+    const trimmed = String(spec ?? '').trim();
+    if (!trimmed)
+        throw new ScheduleParseError(spec, 'it is empty');
+    const preset = PRESETS[trimmed.toLowerCase()];
+    if (preset !== undefined)
+        return { kind: 'interval', intervalMs: preset, spec: trimmed };
+    if (isBareInteger(trimmed)) {
+        // `Number` rather than `parseInt`: `parseInt('30 2 * * *')` returning 30
+        // is the whole reason this module exists, and a form that stops reading
+        // at the first thing it does not understand has no place here.
+        const ms = Number(trimmed);
+        if (!Number.isSafeInteger(ms))
+            throw new ScheduleParseError(spec, 'the interval is not a usable integer');
+        if (ms < MIN_INTERVAL_MS) {
+            throw new ScheduleParseError(spec, `an interval of ${ms} ms is below the ${MIN_INTERVAL_MS} ms floor`);
+        }
+        return { kind: 'interval', intervalMs: ms, spec: trimmed };
+    }
+    // Anything else has to be cron, and has to prove it by producing an
+    // occurrence. `cron-parser` accepts 5- and 6-field forms and the `@daily`
+    // family; whatever it rejects, we reject — plus one thing it accepts and
+    // we do not.
+    //
+    // It pads a short expression on the left, so `* * *` becomes `* * * * *`:
+    // a mistyped daily schedule silently turns into a pg_dump every minute.
+    // That is a smaller copy of the failure this module exists to remove, so
+    // the field count is checked before the parser is asked.
+    if (!trimmed.startsWith('@')) {
+        const fields = trimmed.split(/\s+/).length;
+        if (fields < 5) {
+            throw new ScheduleParseError(spec, `a cron expression needs 5 fields (or 6 with seconds), this has ${fields}`);
+        }
+    }
+    try {
+        const parsed = CronExpressionParser.parse(trimmed);
+        parsed.next();
+        return { kind: 'cron', expression: trimmed, spec: trimmed };
+    }
+    catch (err) {
+        throw new ScheduleParseError(spec, err.message || 'it is not a cron expression');
+    }
+}
+/**
+ * Milliseconds from `from` until the next occurrence of `expression`.
+ *
+ * Never returns zero or negative: a cron whose next occurrence is now would
+ * otherwise arm a zero-delay timer, and the loop that produces is the one
+ * this module was written to remove.
+ */
+export function nextCronDelay(expression, from = new Date()) {
+    // Local time, per the note on `describeSchedule`.
+    const parsed = CronExpressionParser.parse(expression, { currentDate: from });
+    const delay = parsed.next().getTime() - from.getTime();
+    return delay > 0 ? delay : 1;
+}
+/**
+ * One-line description for logs and `backup schedules` output.
+ *
+ * Cron expressions are evaluated in the daemon's local timezone — the
+ * conventional behaviour, and the one `cron-parser` implements — which means
+ * `0 3 * * *` is 03:00 wherever the daemon runs, not 03:00 UTC. On a server
+ * whose clock is not the operator's that is a several-hour difference that
+ * nothing else would ever mention, so the zone is named here.
+ */
+export function describeSchedule(plan, timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone) {
+    if (plan.kind === 'cron')
+        return `cron ${plan.expression} (${timeZone})`;
+    const ms = plan.intervalMs;
+    if (ms % 86_400_000 === 0)
+        return `every ${ms / 86_400_000}d`;
+    if (ms % 3_600_000 === 0)
+        return `every ${ms / 3_600_000}h`;
+    if (ms % 60_000 === 0)
+        return `every ${ms / 60_000}m`;
+    return `every ${ms}ms`;
+}
+//# sourceMappingURL=backup-schedule.js.map

package/dist/services/backup-schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-schedule.js","sourceRoot":"","sources":["../../src/services/backup-schedule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,OAAO,GAA2B;IAC7C,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAMtC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,IAAY,EAAE,MAAc;QACtC,KAAK,CACH,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI;YAChE,wDAAwD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC5F,4CAA4C,eAAe,IAAI,CAClE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEzF,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,yEAAyE;QACzE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QAC1G,IAAI,EAAE,GAAG,eAAe,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,oBAAoB,eAAe,WAAW,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC7D,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,yEAAyE;IACzE,aAAa;IACb,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,yDAAyD;IACzD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAC1B,IAAI,EACJ,kEAAkE,MAAM,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAG,GAAa,CAAC,OAAO,IAAI,6BAA6B,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,IAAI,GAAS,IAAI,IAAI,EAAE;IACvE,kDAAkD;IAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IACvD,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAkB,EAClB,QAAQ,GAAW,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ;IAEnE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,QAAQ,IAAI,CAAC,UAAU,KAAK,QAAQ,GAAG,CAAC;IACzE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,IAAI,EAAE,GAAG,UAAU,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,GAAG,UAAU,GAAG,CAAC;IAC9D,IAAI,EAAE,GAAG,SAAS,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,GAAG,SAAS,GAAG,CAAC;IAC5D,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC;IACtD,OAAO,SAAS,EAAE,IAAI,CAAC;AACzB,CAAC"}

package/dist/services/backup.rpc-service.d.ts

@@ -3,14 +3,31 @@
  *
  * Netron RPC endpoints for database backup management from webapp and CLI.
  */
-import type { BackupService, BackupInfo } from './backup.service.js';
-export declare class BackupRpcService {
+import type { BackupService, BackupInfo, BackupStatus } from './backup.service.js';
+import type { IOmnitronBackupsService } from '../shared/dto/services.js';
+export declare class BackupRpcService implements IOmnitronBackupsService {
     private readonly backups;
     constructor(backups: BackupService);
     createBackup(data: {
         database: string;
         compress?: boolean;
     }): Promise<BackupInfo>;
+    /** Back up every database of every running stack. */
+    createAllBackups(): Promise<Array<{
+        database: string;
+        ok: boolean;
+        id?: string;
+        size?: number;
+        error?: string;
+    }>>;
+    /** Full backup: all stack DBs + minio storage + tor keys + daemon-state. */
+    createFullBackup(): Promise<Array<{
+        target: string;
+        ok: boolean;
+        id?: string;
+        size?: number;
+        error?: string;
+    }>>;
     listBackups(data?: {
         database?: string;
     }): Promise<BackupInfo[]>;
@@ -33,5 +50,17 @@ export declare class BackupRpcService {
     getSchedule(data: {
         database: string;
     }): Promise<string | null>;
+    listSchedules(): Promise<Record<string, string>>;
+    removeSchedule(data: {
+        database: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    /**
+     * Each schedule's last pass and next run, and which stacks this host backs
+     * up at all. `backup schedules` and `backup list` printed «unknown» in their
+     * place: the service computed it and no call reached it.
+     */
+    getBackupStatus(): Promise<BackupStatus>;
 }
 //# sourceMappingURL=backup.rpc-service.d.ts.map

package/dist/services/backup.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backup.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/backup.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAErE,qBACa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,aAAa;IAG7C,YAAY,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAKjF,WAAW,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAKhE,aAAa,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMxE,YAAY,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMvE,WAAW,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMpF,WAAW,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAGtE"}
+{"version":3,"file":"backup.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/backup.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE,qBACa,gBAAiB,YAAW,uBAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,aAAa,EAAI;IAGjD,YAAY,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAEtF;IAED,qDAAqD;IAE/C,gBAAgB,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAEtH;IAED,4EAA4E;IAEtE,gBAAgB,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAEpH;IAGK,WAAW,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAErE;IAGK,aAAa,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAG7E;IAGK,YAAY,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAG5E;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGzF;IAGK,WAAW,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEpE;IAGK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAErD;IAGK,cAAc,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAG9E;IAED;;;;OAIG;IAEG,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC,CAE7C;CACF"}

package/dist/services/backup.rpc-service.js

@@ -22,6 +22,14 @@ let BackupRpcService = class BackupRpcService {
     async createBackup(data) {
         return this.backups.createBackup(data.database, data.compress != null ? { compress: data.compress } : undefined);
     }
+    /** Back up every database of every running stack. */
+    async createAllBackups() {
+        return this.backups.createAllBackups();
+    }
+    /** Full backup: all stack DBs + minio storage + tor keys + daemon-state. */
+    async createFullBackup() {
+        return this.backups.createFullBackup();
+    }
     async listBackups(data) {
         return this.backups.listBackups(data?.database);
     }
@@ -40,6 +48,21 @@ let BackupRpcService = class BackupRpcService {
     async getSchedule(data) {
         return this.backups.getSchedule(data.database);
     }
+    async listSchedules() {
+        return this.backups.listSchedules();
+    }
+    async removeSchedule(data) {
+        await this.backups.removeSchedule(data.database);
+        return { success: true };
+    }
+    /**
+     * Each schedule's last pass and next run, and which stacks this host backs
+     * up at all. `backup schedules` and `backup list` printed «unknown» in their
+     * place: the service computed it and no call reached it.
+     */
+    async getBackupStatus() {
+        return this.backups.getStatus();
+    }
 };
 __decorate([
     Public({ auth: { roles: ADMIN_ROLES } }),
@@ -47,6 +70,18 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], BackupRpcService.prototype, "createBackup", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BackupRpcService.prototype, "createAllBackups", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BackupRpcService.prototype, "createFullBackup", null);
 __decorate([
     Public({ auth: { roles: VIEWER_ROLES } }),
     __metadata("design:type", Function),
@@ -77,6 +112,24 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], BackupRpcService.prototype, "getSchedule", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BackupRpcService.prototype, "listSchedules", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BackupRpcService.prototype, "removeSchedule", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BackupRpcService.prototype, "getBackupStatus", null);
 BackupRpcService = __decorate([
     Service({ name: 'OmnitronBackups' }),
     __metadata("design:paramtypes", [Function])