@tickernelz/wardmote-db 2026.1109.0 → 2026.1112.0

package/dist/agent-chat-migration.test.js

@@ -55,7 +55,7 @@ async function assertConstraints(sql, row) {
 }
 describePostgres("persistent agent chat migration", () => {
     it("applies to a fresh database and enforces conversation identity and message retry uniqueness", async () => {
-        const database = await startEmbeddedPostgresTestDatabase("paperclip-chat-migration-fresh-");
+        const database = await startEmbeddedPostgresTestDatabase("wardmote-chat-migration-fresh-");
         cleanups.push(database.cleanup);
         const sql = postgres(database.connectionString, { max: 1, onnotice: () => { } });
         try {
@@ -66,7 +66,7 @@ describePostgres("persistent agent chat migration", () => {
         }
     }, 30_000);
     it("replays over pre-release columns and constraints without losing history or weakening the state guard", async () => {
-        const database = await startEmbeddedPostgresTestDatabase("paperclip-chat-migration-replay-");
+        const database = await startEmbeddedPostgresTestDatabase("wardmote-chat-migration-replay-");
         cleanups.push(database.cleanup);
         const sql = postgres(database.connectionString, { max: 1, onnotice: () => { } });
         try {

package/dist/agent-chat-migration.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-migration.test.js","sourceRoot":"","sources":["../src/agent-chat-migration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAEhH,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,gBAAgB,aAAa,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACvG,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,MAAM,QAAQ,GAA+B,EAAE,CAAC;AAChD,MAAM,OAAO,GAAG,MAAM,8BAA8B,EAAE,CAAC;AACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAEtE,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,QAAQ,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI,CAAC,GAAiB;IACnC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,aAAa,UAAU,EAAE,EAAE,CAAC;IAC3C,MAAM,GAAG,CAAA,0DAA0D,SAAS,4BAA4B,CAAC;IACzG,MAAM,GAAG,CAAA,yEAAyE,OAAO,KAAK,SAAS,wCAAwC,CAAC;IAChJ,MAAM,GAAG,CAAA;cACG,MAAM,kBAAkB,GAAG,MAAM,eAAe,uBAAuB,CAAC;IACpF,MAAM,GAAG,CAAA;;cAEG,OAAO,KAAK,SAAS,uBAAuB,OAAO;QACzD,OAAO,KAAK,MAAM,mBAAmB,SAAS,GAAG,CAAC;IACxD,MAAM,GAAG,CAAA;cACG,SAAS,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM,yDAAyD,CAAC;IACpH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAiB,EAAE,GAAqC;IACvF,KAAK,MAAM,MAAM,IAAI;QACnB,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC5B,EAAE,MAAM,EAAE,MAAM,EAAE;QAClB,EAAE,MAAM,EAAE,WAAW,EAAE;QACvB,EAAE,iBAAiB,EAAE,IAAI,EAAE;QAC3B,EAAE,oBAAoB,EAAE,IAAI,EAAE;KAC/B,EAAE,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,CAAA,qBAAqB,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC;aAC1E,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,CAAA;cACJ,GAAG,CAAC,SAAS,+BAA+B,GAAG,CAAC,OAAO,kBAAkB,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,cAAc,CAAC;SAC3H,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,GAAG,CAAA;cACJ,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,yCAAyC,CAAC;SAC/F,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,CAAA;cACG,GAAG,CAAC,SAAS,kCAAkC,GAAG,CAAC,OAAO,kBAAkB,GAAG,CAAC,OAAO,8BAA8B,CAAC;IAClI,MAAM,GAAG,CAAA,0DAA0D,GAAG,CAAC,SAAS,sCAAsC,CAAC;AACzH,CAAC;AAED,gBAAgB,CAAC,iCAAiC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,iCAAiC,CAAC,CAAC;QAC5F,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,kCAAkC,CAAC,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAA,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9E,MAAM,aAAa,GAAG,MAAM,GAAG,CAAA,2CAA2C,GAAG,CAAC,SAAS,EAAE,CAAC;YAC1F,wEAAwE;YACxE,+EAA+E;YAC/E,MAAM,GAAG,CAAA,uEAAuE,CAAC;YACjF,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;iBACpG,OAAO,CAAC,gDAAgD,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9B,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrE,MAAM,GAAG,CAAA;oBACG,aAAa,CAAC,KAAK,CAAE,KAAK,GAAG,CAAC,SAAS,0BAA0B,GAAG,CAAC,OAAO,KAAK,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,eAAe,KAAK,EAAE,SAAS,CAAC;YAC1J,CAAC;YAED,MAAM,GAAG,CAAA,yDAAyD,aAAa,EAAE,CAAC;YAClF,MAAM,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;gBACvE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,aAAa,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACxD,6EAA6E;YAC7E,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC3B,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;oBACvE,IAAI,SAAS,CAAC,IAAI,EAAE;wBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,GAAG,CAAA,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,GAAG,CAAA,2CAA2C,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAA,yDAAyD,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACxG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agent-chat-migration.test.js","sourceRoot":"","sources":["../src/agent-chat-migration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAEhH,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,gBAAgB,aAAa,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACvG,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,MAAM,QAAQ,GAA+B,EAAE,CAAC;AAChD,MAAM,OAAO,GAAG,MAAM,8BAA8B,EAAE,CAAC;AACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAEtE,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,QAAQ,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI,CAAC,GAAiB;IACnC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,aAAa,UAAU,EAAE,EAAE,CAAC;IAC3C,MAAM,GAAG,CAAA,0DAA0D,SAAS,4BAA4B,CAAC;IACzG,MAAM,GAAG,CAAA,yEAAyE,OAAO,KAAK,SAAS,wCAAwC,CAAC;IAChJ,MAAM,GAAG,CAAA;cACG,MAAM,kBAAkB,GAAG,MAAM,eAAe,uBAAuB,CAAC;IACpF,MAAM,GAAG,CAAA;;cAEG,OAAO,KAAK,SAAS,uBAAuB,OAAO;QACzD,OAAO,KAAK,MAAM,mBAAmB,SAAS,GAAG,CAAC;IACxD,MAAM,GAAG,CAAA;cACG,SAAS,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM,yDAAyD,CAAC;IACpH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAiB,EAAE,GAAqC;IACvF,KAAK,MAAM,MAAM,IAAI;QACnB,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC5B,EAAE,MAAM,EAAE,MAAM,EAAE;QAClB,EAAE,MAAM,EAAE,WAAW,EAAE;QACvB,EAAE,iBAAiB,EAAE,IAAI,EAAE;QAC3B,EAAE,oBAAoB,EAAE,IAAI,EAAE;KAC/B,EAAE,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,CAAA,qBAAqB,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC;aAC1E,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,CAAA;cACJ,GAAG,CAAC,SAAS,+BAA+B,GAAG,CAAC,OAAO,kBAAkB,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,cAAc,CAAC;SAC3H,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,GAAG,CAAA;cACJ,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,yCAAyC,CAAC;SAC/F,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,CAAA;cACG,GAAG,CAAC,SAAS,kCAAkC,GAAG,CAAC,OAAO,kBAAkB,GAAG,CAAC,OAAO,8BAA8B,CAAC;IAClI,MAAM,GAAG,CAAA,0DAA0D,GAAG,CAAC,SAAS,sCAAsC,CAAC;AACzH,CAAC;AAED,gBAAgB,CAAC,iCAAiC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,gCAAgC,CAAC,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,iCAAiC,CAAC,CAAC;QAC5F,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAA,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9E,MAAM,aAAa,GAAG,MAAM,GAAG,CAAA,2CAA2C,GAAG,CAAC,SAAS,EAAE,CAAC;YAC1F,wEAAwE;YACxE,+EAA+E;YAC/E,MAAM,GAAG,CAAA,uEAAuE,CAAC;YACjF,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;iBACpG,OAAO,CAAC,gDAAgD,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9B,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrE,MAAM,GAAG,CAAA;oBACG,aAAa,CAAC,KAAK,CAAE,KAAK,GAAG,CAAC,SAAS,0BAA0B,GAAG,CAAC,OAAO,KAAK,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,eAAe,KAAK,EAAE,SAAS,CAAC;YAC1J,CAAC;YAED,MAAM,GAAG,CAAA,yDAAyD,aAAa,EAAE,CAAC;YAClF,MAAM,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;gBACvE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,aAAa,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,sBAAsB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACxD,6EAA6E;YAC7E,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC3B,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;oBACvE,IAAI,SAAS,CAAC,IAAI,EAAE;wBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,GAAG,CAAA,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,GAAG,CAAA,2CAA2C,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAA,yDAAyD,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACxG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/dist/backup-lib.d.ts

@@ -2,6 +2,18 @@ export type BackupRetentionPolicy = {
     dailyDays: number;
     weeklyWeeks: number;
     monthlyMonths: number;
+    /** Keep only this many newest verified backups; null or absent keeps the daily/weekly/monthly tiers. */
+    maxFiles?: number | null;
+};
+export type BackupDiskSpace = {
+    freeBytes: number;
+    totalBytes: number;
+};
+export type BackupSpaceGuard = {
+    reservePercent: number;
+    reserveBytes: number;
+    headroomFactor?: number;
+    statfs?: (dir: string) => BackupDiskSpace;
 };
 export type RunDatabaseBackupOptions = {
     connectionString: string;
@@ -20,17 +32,43 @@ export type RunDatabaseBackupOptions = {
     backupEngine?: "auto" | "pg_dump" | "javascript";
     /** Optional durability gate. A rejected archive must not prune history. */
     verifyBeforePrune?: (backupFile: string) => Promise<void>;
+    /** Writes under `<backupDir>/pinned`, outside rotation, for release and rollback dumps. */
+    pinned?: boolean;
+    /** Deletes pinned backups older than this many days during rotated runs; null or 0 keeps them. */
+    pinnedMaxAgeDays?: number | null;
+    /** Skips the backup instead of filling the volume when free space is short. */
+    spaceGuard?: BackupSpaceGuard | null;
 };
 export type RunDatabaseBackupResult = {
     backupFile: string;
     sizeBytes: number;
     prunedCount: number;
+    /** Rotated backups that could not be read; kept, not counted toward maxFiles. */
+    unreadableBackups?: string[];
 };
 export type RunDatabaseRestoreOptions = {
     connectionString: string;
     backupFile: string;
     connectTimeoutSeconds?: number;
 };
+export declare const DATABASE_BACKUP_FILENAME_PREFIX = "wardmote";
+export declare const PINNED_BACKUP_DIRNAME = "pinned";
+export declare const DATABASE_BACKUP_SKIPPED_MARKER = "backup-skipped.json";
+export declare class DatabaseBackupSkippedError extends Error {
+    readonly backupDir: string;
+    readonly freeBytes: number;
+    readonly requiredBytes: number;
+    readonly code = "database_backup_skipped_low_disk";
+    constructor(backupDir: string, freeBytes: number, requiredBytes: number);
+}
+export declare function readBackupDiskSpace(dir: string): BackupDiskSpace;
+export declare function pinnedBackupDir(backupDir: string): string;
+/** Decompresses a gzip backup end to end; rejects empty, truncated or corrupt archives. */
+export declare function verifyGzipBackup(file: string): Promise<void>;
+/** Deletes partial backups left by a killed backup process; returns the number removed. */
+export declare function removeAbandonedPartialBackups(backupDir: string, nowMs?: number): number;
+/** Renames backups written under the retired filename prefix so retention keeps pruning them; idempotent. */
+export declare function adoptRetiredBackupFilenames(backupDir: string): number;
 export declare function createBufferedTextFileWriter(filePath: string, maxBufferedBytes?: number): {
     emit(line: string): void;
     drain(): Promise<void>;

package/dist/backup-lib.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backup-lib.d.ts","sourceRoot":"","sources":["../src/backup-lib.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;IACjD,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAmZF,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,SAAoC;IA8B/G,IAAI,OAAO,MAAM;IAUX,KAAK;IAOL,QAAQ,QAAQ,MAAM,GAAG,MAAM;IAS/B,KAAK;IAQL,KAAK;EAgBd;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA8iBxG;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCvF;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAIlF"}
+{"version":3,"file":"backup-lib.d.ts","sourceRoot":"","sources":["../src/backup-lib.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,eAAe,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;IACjD,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,2FAA2F;IAC3F,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AA0EF,eAAO,MAAM,+BAA+B,aAAa,CAAC;AAC1D,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAC9C,eAAO,MAAM,8BAA8B,wBAAwB,CAAC;AAIpE,qBAAa,0BAA2B,SAAQ,KAAK;IAIjD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM;IALhC,QAAQ,CAAC,IAAI,sCAAsC;IAEnD,YACW,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EAM/B;CACF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAGhE;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEzD;AASD,2FAA2F;AAC3F,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOlE;AA2JD,2FAA2F;AAC3F,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,MAAM,CAiB3F;AAED,6GAA6G;AAC7G,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWrE;AA2UD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,SAAoC;IA8B/G,IAAI,OAAO,MAAM;IAUX,KAAK;IAOL,QAAQ,QAAQ,MAAM,GAAG,MAAM;IAS/B,KAAK;IAQL,KAAK;EAgBd;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA4kBxG;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCvF;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAOlF"}

package/dist/backup-lib.js

@@ -1,8 +1,9 @@
-import { createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, statSync, unlinkSync } from "node:fs";
-import { basename, resolve } from "node:path";
+import { createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, renameSync, rmSync, statfsSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { basename, join, resolve } from "node:path";
 import { createInterface } from "node:readline";
 import { spawn } from "node:child_process";
 import { open as openFile } from "node:fs/promises";
+import { Writable } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGunzip, createGzip } from "node:zlib";
 import postgres from "postgres";
@@ -47,6 +48,225 @@ function monthlyRetentionCutoff(nowMs, monthlyMonths) {
     const now = new Date(nowMs);
     return Date.UTC(now.getUTCFullYear(), now.getUTCMonth() - months, 1);
 }
+export const DATABASE_BACKUP_FILENAME_PREFIX = "wardmote";
+export const PINNED_BACKUP_DIRNAME = "pinned";
+export const DATABASE_BACKUP_SKIPPED_MARKER = "backup-skipped.json";
+const DEFAULT_BACKUP_HEADROOM_FACTOR = 1.5;
+const DAY_MS = 24 * 60 * 60 * 1000;
+export class DatabaseBackupSkippedError extends Error {
+    backupDir;
+    freeBytes;
+    requiredBytes;
+    code = "database_backup_skipped_low_disk";
+    constructor(backupDir, freeBytes, requiredBytes) {
+        super(`Database backup skipped: ${formatBackupSize(freeBytes)} free on the backup volume, ${formatBackupSize(requiredBytes)} required (last backup x${DEFAULT_BACKUP_HEADROOM_FACTOR} plus reserve).`);
+        this.backupDir = backupDir;
+        this.freeBytes = freeBytes;
+        this.requiredBytes = requiredBytes;
+        this.name = "DatabaseBackupSkippedError";
+    }
+}
+export function readBackupDiskSpace(dir) {
+    const stats = statfsSync(dir);
+    return { freeBytes: stats.bavail * stats.bsize, totalBytes: stats.blocks * stats.bsize };
+}
+export function pinnedBackupDir(backupDir) {
+    return join(backupDir, PINNED_BACKUP_DIRNAME);
+}
+const verifiedBackups = new Map();
+function backupIdentity(file) {
+    const stats = statSync(file);
+    return `${stats.size}:${stats.mtimeMs}`;
+}
+/** Decompresses a gzip backup end to end; rejects empty, truncated or corrupt archives. */
+export async function verifyGzipBackup(file) {
+    if (statSync(file).size === 0)
+        throw new Error(`Backup ${basename(file)} is empty`);
+    await pipeline(createReadStream(file, { highWaterMark: 1024 * 1024 }), createGunzip({ chunkSize: 1024 * 1024 }), new Writable({ write(_chunk, _encoding, callback) { callback(); } }));
+}
+function isArchiveCorruption(error) {
+    const code = error?.code;
+    return typeof code === "string" && code.startsWith("Z_");
+}
+async function checkBackup(file) {
+    const stats = statSync(file, { throwIfNoEntry: false });
+    if (!stats || stats.size === 0)
+        return "invalid";
+    if (!file.endsWith(".gz"))
+        return "valid";
+    if (verifiedBackups.get(file) === `${stats.size}:${stats.mtimeMs}`)
+        return "valid";
+    try {
+        await verifyGzipBackup(file);
+    }
+    catch (error) {
+        return isArchiveCorruption(error) ? "invalid" : "unreadable";
+    }
+    verifiedBackups.set(file, backupIdentity(file));
+    return "valid";
+}
+function listRotationBackups(backupDir, filenamePrefix) {
+    if (!existsSync(backupDir))
+        return [];
+    const entries = [];
+    for (const name of readdirSync(backupDir)) {
+        if (!name.startsWith(`${filenamePrefix}-`) || !isBackupFilename(name))
+            continue;
+        const fullPath = resolve(backupDir, name);
+        const stats = statSync(fullPath, { throwIfNoEntry: false });
+        if (!stats?.isFile())
+            continue;
+        entries.push({ fullPath, sizeBytes: stats.size, mtimeMs: stats.mtimeMs });
+    }
+    return entries.sort((a, b) => b.mtimeMs - a.mtimeMs);
+}
+function removeBackupFile(file) {
+    rmSync(file, { force: true });
+    verifiedBackups.delete(file);
+}
+async function pruneToMaxFiles(backupDir, filenamePrefix, maxFiles, newestFile) {
+    let kept = 1;
+    let removed = 0;
+    const unreadable = [];
+    for (const entry of listRotationBackups(backupDir, filenamePrefix)) {
+        if (entry.fullPath === newestFile)
+            continue;
+        const check = await checkBackup(entry.fullPath);
+        if (check === "unreadable") {
+            unreadable.push(entry.fullPath);
+            continue;
+        }
+        if (kept < maxFiles && check === "valid") {
+            kept += 1;
+            continue;
+        }
+        removeBackupFile(entry.fullPath);
+        removed += 1;
+    }
+    return { removed, unreadable };
+}
+function prunePinnedBackups(backupDir, maxAgeDays, nowMs = Date.now()) {
+    if (!maxAgeDays || maxAgeDays <= 0)
+        return 0;
+    const dir = pinnedBackupDir(backupDir);
+    if (!existsSync(dir))
+        return 0;
+    let removed = 0;
+    for (const name of readdirSync(dir)) {
+        if (!isBackupFilename(name))
+            continue;
+        const fullPath = resolve(dir, name);
+        const stats = statSync(fullPath, { throwIfNoEntry: false });
+        if (!stats?.isFile() || nowMs - stats.mtimeMs < maxAgeDays * DAY_MS)
+            continue;
+        removeBackupFile(fullPath);
+        removed += 1;
+    }
+    return removed;
+}
+function backupReserveBytes(guard, totalBytes) {
+    return Math.max(guard.reserveBytes, Math.ceil((totalBytes * guard.reservePercent) / 100));
+}
+/** Frees room for one more backup by dropping the oldest rotated files, never the newest valid one; otherwise records a skip and throws. */
+async function ensureBackupSpace(input) {
+    const { guard } = input;
+    const statfs = guard.statfs ?? readBackupDiskSpace;
+    const existing = listRotationBackups(input.backupDir, input.filenamePrefix);
+    const lastSize = existing.find((entry) => entry.sizeBytes > 0)?.sizeBytes ?? 0;
+    const space = statfs(input.targetDir);
+    const requiredBytes = Math.ceil(lastSize * (guard.headroomFactor ?? DEFAULT_BACKUP_HEADROOM_FACTOR)) +
+        backupReserveBytes(guard, space.totalBytes);
+    if (space.freeBytes >= requiredBytes)
+        return 0;
+    if (input.rotate) {
+        const invalid = [];
+        const valid = [];
+        for (const entry of existing) {
+            const check = await checkBackup(entry.fullPath);
+            if (check === "valid")
+                valid.push(entry);
+            else if (check === "invalid")
+                invalid.push(entry);
+        }
+        const chosen = [];
+        let reclaimed = 0;
+        for (const entry of [...invalid, ...valid.slice(1).reverse()]) {
+            if (space.freeBytes + reclaimed >= requiredBytes)
+                break;
+            chosen.push(entry);
+            reclaimed += entry.sizeBytes;
+        }
+        if (space.freeBytes + reclaimed >= requiredBytes) {
+            for (const entry of chosen)
+                removeBackupFile(entry.fullPath);
+            return chosen.length;
+        }
+        writeFileSync(join(input.backupDir, DATABASE_BACKUP_SKIPPED_MARKER), JSON.stringify({
+            skippedAt: new Date().toISOString(),
+            freeBytes: space.freeBytes,
+            requiredBytes,
+            totalBytes: space.totalBytes,
+        }));
+    }
+    throw new DatabaseBackupSkippedError(input.backupDir, space.freeBytes, requiredBytes);
+}
+const RETIRED_BACKUP_FILENAME_PREFIX = "paperclip";
+function isBackupFilename(name) {
+    return name.endsWith(".sql") || name.endsWith(".sql.gz");
+}
+const PARTIAL_BACKUP_PATTERN = /\.(\d+)\.partial$/;
+const ABANDONED_PARTIAL_BACKUP_AGE_MS = 24 * 60 * 60 * 1000;
+const activePartialBackupFiles = new Set();
+function partialBackupPath(finalPath) {
+    return `${finalPath}.${process.pid}.partial`;
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+/** Deletes partial backups left by a killed backup process; returns the number removed. */
+export function removeAbandonedPartialBackups(backupDir, nowMs = Date.now()) {
+    if (!existsSync(backupDir))
+        return 0;
+    let removed = 0;
+    for (const name of readdirSync(backupDir)) {
+        const match = PARTIAL_BACKUP_PATTERN.exec(name);
+        if (!match || !isBackupFilename(name.slice(0, match.index)))
+            continue;
+        const fullPath = resolve(backupDir, name);
+        const pid = Number(match[1]);
+        const ownerGone = pid === process.pid ? !activePartialBackupFiles.has(fullPath) : !isProcessAlive(pid);
+        if (!ownerGone) {
+            const mtimeMs = statSync(fullPath, { throwIfNoEntry: false })?.mtimeMs;
+            if (mtimeMs === undefined || nowMs - mtimeMs < ABANDONED_PARTIAL_BACKUP_AGE_MS)
+                continue;
+        }
+        rmSync(fullPath, { force: true });
+        removed += 1;
+    }
+    return removed;
+}
+/** Renames backups written under the retired filename prefix so retention keeps pruning them; idempotent. */
+export function adoptRetiredBackupFilenames(backupDir) {
+    if (!existsSync(backupDir))
+        return 0;
+    let renamed = 0;
+    for (const name of readdirSync(backupDir)) {
+        if (!name.startsWith(`${RETIRED_BACKUP_FILENAME_PREFIX}-`) || !isBackupFilename(name))
+            continue;
+        const next = resolve(backupDir, `${DATABASE_BACKUP_FILENAME_PREFIX}${name.slice(RETIRED_BACKUP_FILENAME_PREFIX.length)}`);
+        if (existsSync(next))
+            continue;
+        renameSync(resolve(backupDir, name), next);
+        renamed += 1;
+    }
+    return renamed;
+}
 /**
  * Tiered backup pruning:
  * - Daily tier: keep ALL backups from the last `dailyDays` days
@@ -65,7 +285,7 @@ function pruneOldBackups(backupDir, retention, filenamePrefix) {
     for (const name of readdirSync(backupDir)) {
         if (!name.startsWith(`${filenamePrefix}-`))
             continue;
-        if (!name.endsWith(".sql") && !name.endsWith(".sql.gz"))
+        if (!isBackupFilename(name))
             continue;
         const fullPath = resolve(backupDir, name);
         const stat = statSync(fullPath);
@@ -419,7 +639,7 @@ export function createBufferedTextFileWriter(filePath, maxBufferedBytes = DEFAUL
     };
 }
 export async function runDatabaseBackup(opts) {
-    const filenamePrefix = opts.filenamePrefix ?? "paperclip";
+    const filenamePrefix = opts.filenamePrefix ?? DATABASE_BACKUP_FILENAME_PREFIX;
     const retention = opts.retention;
     const connectTimeout = Math.max(1, Math.trunc(opts.connectTimeoutSeconds ?? 5));
     const backupEngine = opts.backupEngine ?? "auto";
@@ -435,13 +655,57 @@ export async function runDatabaseBackup(opts) {
         sqlClosed = true;
         await sql.end();
     };
-    mkdirSync(opts.backupDir, { recursive: true });
+    const targetDir = opts.pinned ? pinnedBackupDir(opts.backupDir) : opts.backupDir;
+    mkdirSync(targetDir, { recursive: true });
+    if (filenamePrefix === DATABASE_BACKUP_FILENAME_PREFIX)
+        adoptRetiredBackupFilenames(opts.backupDir);
     // Initial and final sleep checks can run within the same second. A failed
     // second checkpoint must never overwrite the first verified recovery point.
     const checkpointSuffix = opts.verifyBeforePrune ? `-${randomUUID()}` : "";
-    const sqlFile = resolve(opts.backupDir, `${filenamePrefix}-${timestamp()}${checkpointSuffix}.sql`);
-    const backupFile = `${sqlFile}.gz`;
+    removeAbandonedPartialBackups(targetDir);
+    let freedForSpace = 0;
+    if (opts.spaceGuard) {
+        try {
+            freedForSpace = await ensureBackupSpace({
+                backupDir: opts.backupDir,
+                targetDir,
+                filenamePrefix,
+                guard: opts.spaceGuard,
+                rotate: !opts.pinned,
+            });
+        }
+        catch (error) {
+            await closeSql();
+            throw error;
+        }
+    }
+    const finalSqlFile = resolve(targetDir, `${filenamePrefix}-${timestamp()}${checkpointSuffix}.sql`);
+    const backupFile = `${finalSqlFile}.gz`;
+    const sqlFile = partialBackupPath(finalSqlFile);
+    const partialBackupFile = partialBackupPath(backupFile);
+    activePartialBackupFiles.add(sqlFile);
+    activePartialBackupFiles.add(partialBackupFile);
     const writer = createBufferedTextFileWriter(sqlFile);
+    const finalizeBackup = async () => {
+        await verifyGzipBackup(partialBackupFile);
+        renameSync(partialBackupFile, backupFile);
+        verifiedBackups.set(backupFile, backupIdentity(backupFile));
+        const sizeBytes = statSync(backupFile).size;
+        await opts.verifyBeforePrune?.(backupFile);
+        if (opts.pinned)
+            return { backupFile, sizeBytes, prunedCount: freedForSpace };
+        const rotated = retention.maxFiles && retention.maxFiles > 0
+            ? await pruneToMaxFiles(opts.backupDir, filenamePrefix, retention.maxFiles, backupFile)
+            : { removed: pruneOldBackups(opts.backupDir, retention, filenamePrefix), unreadable: [] };
+        const prunedCount = freedForSpace + rotated.removed + prunePinnedBackups(opts.backupDir, opts.pinnedMaxAgeDays);
+        rmSync(join(opts.backupDir, DATABASE_BACKUP_SKIPPED_MARKER), { force: true });
+        return {
+            backupFile,
+            sizeBytes,
+            prunedCount,
+            ...(rotated.unreadable.length > 0 ? { unreadableBackups: rotated.unreadable } : {}),
+        };
+    };
     try {
         if (backupEngine === "pg_dump" || (backupEngine === "auto" && canUsePgDump)) {
             await sql `SELECT 1`;
@@ -450,15 +714,15 @@ export async function runDatabaseBackup(opts) {
                 await closeSql();
                 await runPgDumpBackup({
                     connectionString: opts.connectionString,
-                    backupFile,
+                    backupFile: partialBackupFile,
                     connectTimeout,
                 });
                 dumped = true;
             }
             catch (error) {
-                if (existsSync(backupFile)) {
+                if (existsSync(partialBackupFile)) {
                     try {
-                        unlinkSync(backupFile);
+                        unlinkSync(partialBackupFile);
                     }
                     catch { /* ignore */ }
                 }
@@ -474,10 +738,7 @@ export async function runDatabaseBackup(opts) {
                 // pg_dump succeeds, archive verification or persistence failures
                 // must retain their original error and must not reuse a closed writer.
                 await writer.abort();
-                const sizeBytes = statSync(backupFile).size;
-                await opts.verifyBeforePrune?.(backupFile);
-                const prunedCount = pruneOldBackups(opts.backupDir, retention, filenamePrefix);
-                return { backupFile, sizeBytes, prunedCount };
+                return await finalizeBackup();
             }
         }
         await sql `SELECT 1`;
@@ -489,7 +750,7 @@ export async function runDatabaseBackup(opts) {
         const emitStatementBoundary = () => {
             emit(STATEMENT_BREAKPOINT);
         };
-        emit("-- Paperclip database backup");
+        emit("-- Wardmote database backup");
         emit(`-- Created: ${new Date().toISOString()}`);
         emit("");
         emitStatement("BEGIN;");
@@ -884,35 +1145,26 @@ export async function runDatabaseBackup(opts) {
         await writer.close();
         // Compress the SQL file with gzip
         const sqlReadStream = createReadStream(sqlFile);
-        const gzWriteStream = createWriteStream(backupFile);
+        const gzWriteStream = createWriteStream(partialBackupFile);
         await pipeline(sqlReadStream, createGzip(), gzWriteStream);
         unlinkSync(sqlFile);
-        const sizeBytes = statSync(backupFile).size;
-        await opts.verifyBeforePrune?.(backupFile);
-        const prunedCount = pruneOldBackups(opts.backupDir, retention, filenamePrefix);
-        return {
-            backupFile,
-            sizeBytes,
-            prunedCount,
-        };
+        return await finalizeBackup();
     }
     catch (error) {
         await writer.abort();
-        if (existsSync(backupFile)) {
-            try {
-                unlinkSync(backupFile);
-            }
-            catch { /* ignore */ }
-        }
-        if (existsSync(sqlFile)) {
-            try {
-                unlinkSync(sqlFile);
+        for (const file of [backupFile, partialBackupFile, sqlFile]) {
+            if (existsSync(file)) {
+                try {
+                    unlinkSync(file);
+                }
+                catch { /* ignore */ }
             }
-            catch { /* ignore */ }
         }
         throw error;
     }
     finally {
+        activePartialBackupFiles.delete(sqlFile);
+        activePartialBackupFiles.delete(partialBackupFile);
         await closeSql();
     }
 }
@@ -953,6 +1205,9 @@ export async function runDatabaseRestore(opts) {
 export function formatDatabaseBackupResult(result) {
     const size = formatBackupSize(result.sizeBytes);
     const pruned = result.prunedCount > 0 ? `; pruned ${result.prunedCount} old backup(s)` : "";
-    return `${result.backupFile} (${size}${pruned})`;
+    const unreadable = result.unreadableBackups?.length
+        ? `; kept ${result.unreadableBackups.length} unreadable backup(s)`
+        : "";
+    return `${result.backupFile} (${size}${pruned}${unreadable})`;
 }
 //# sourceMappingURL=backup-lib.js.map