@trieb.work/payload-plugin-backup-mongodb 0.1.1

package/dist/endpoints/paths/admin-preview.js

@@ -0,0 +1,102 @@
+import { getResolvedCronBackupSettings, resolveBackupArchiveRead, resolveBackupBlobAccess } from '../../core/backupSettings';
+import { getBackupSourcePreviewForManual } from '../../core/backupSourcePreview';
+import { getRestorePreviewForAdminRestore } from '../../core/restorePreview';
+import { jsonError, readRequestJson, requireBackupAdmin } from '../shared';
+/**
+ * Admin backup source preview and restore archive preview (both POST).
+ */ export function createAdminPreviewEndpoints(options) {
+    return [
+        {
+            handler: async (req)=>{
+                const auth = await requireBackupAdmin(req, options);
+                if (auth instanceof Response) {
+                    return auth;
+                }
+                const { payload } = req;
+                const body = await readRequestJson(req);
+                const locale = typeof body?.locale === 'string' ? body.locale : undefined;
+                const preferredLocales = locale ? [
+                    locale,
+                    'de',
+                    'en'
+                ] : [
+                    'de',
+                    'en'
+                ];
+                try {
+                    const preview = await getBackupSourcePreviewForManual(payload, {
+                        preferredLocales
+                    });
+                    return Response.json(preview);
+                } catch (error) {
+                    const message = error instanceof Error ? error.message : 'Preview failed';
+                    payload.logger.error({
+                        err: error
+                    }, '[backup-endpoint] Backup source preview failed');
+                    return Response.json({
+                        error: message
+                    }, {
+                        status: 422
+                    });
+                }
+            },
+            method: 'post',
+            path: '/backup-mongodb/admin/backup-preview'
+        },
+        {
+            handler: async (req)=>{
+                const auth = await requireBackupAdmin(req, options);
+                if (auth instanceof Response) {
+                    return auth;
+                }
+                const { payload } = req;
+                const body = await readRequestJson(req);
+                const url = body?.url;
+                if (!url || typeof url !== 'string') {
+                    return jsonError('Missing url', 400);
+                }
+                try {
+                    new URL(url);
+                } catch  {
+                    return jsonError('Invalid url', 400);
+                }
+                const settings = await getResolvedCronBackupSettings(payload);
+                const backupRead = resolveBackupArchiveRead(settings, body?.pathname);
+                if (resolveBackupBlobAccess(settings) === 'private' && !backupRead) {
+                    return jsonError('Missing pathname (required for dedicated backup blob store)', 400);
+                }
+                const locale = typeof body?.locale === 'string' ? body.locale : undefined;
+                const preferredLocales = locale ? [
+                    locale,
+                    'de',
+                    'en'
+                ] : [
+                    'de',
+                    'en'
+                ];
+                try {
+                    const preview = await getRestorePreviewForAdminRestore(payload, url, {
+                        backupRead: backupRead ?? undefined,
+                        preferredLocales
+                    });
+                    return Response.json(preview);
+                } catch (error) {
+                    const message = error instanceof Error ? error.message : 'Preview failed';
+                    payload.logger.error({
+                        err: error,
+                        url
+                    }, '[backup-endpoint] Restore preview failed');
+                    return Response.json({
+                        error: message
+                    }, {
+                        status: 422
+                    });
+                }
+            },
+            method: 'post',
+            path: '/backup-mongodb/admin/restore-preview'
+        }
+    ];
+}
+
+//# sourceMappingURL=admin-preview.js.map

package/dist/endpoints/paths/admin-preview.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/endpoints/paths/admin-preview.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { BackupPluginOptions } from '../../types'\n\nimport {\n  getResolvedCronBackupSettings,\n  resolveBackupArchiveRead,\n  resolveBackupBlobAccess,\n} from '../../core/backupSettings'\nimport { getBackupSourcePreviewForManual } from '../../core/backupSourcePreview'\nimport { getRestorePreviewForAdminRestore } from '../../core/restorePreview'\nimport { jsonError, readRequestJson, requireBackupAdmin } from '../shared'\n\n/**\n * Admin backup source preview and restore archive preview (both POST).\n */\nexport function createAdminPreviewEndpoints(options: BackupPluginOptions): Endpoint[] {\n  return [\n    {\n      handler: async (req) => {\n        const auth = await requireBackupAdmin(req, options)\n        if (auth instanceof Response) {\n          return auth\n        }\n\n        const { payload } = req\n        const body = (await readRequestJson(req)) as { locale?: string }\n        const locale = typeof body?.locale === 'string' ? body.locale : undefined\n        const preferredLocales = locale ? [locale, 'de', 'en'] : ['de', 'en']\n\n        try {\n          const preview = await getBackupSourcePreviewForManual(payload, { preferredLocales })\n          return Response.json(preview)\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Preview failed'\n          payload.logger.error({ err: error }, '[backup-endpoint] Backup source preview failed')\n          return Response.json({ error: message }, { status: 422 })\n        }\n      },\n      method: 'post',\n      path: '/backup-mongodb/admin/backup-preview',\n    },\n    {\n      handler: async (req) => {\n        const auth = await requireBackupAdmin(req, options)\n        if (auth instanceof Response) {\n          return auth\n        }\n\n        const { payload } = req\n        const body = (await readRequestJson(req)) as {\n          locale?: string\n          pathname?: string\n          url?: string\n        }\n        const url = body?.url\n\n        if (!url || typeof url !== 'string') {\n          return jsonError('Missing url', 400)\n        }\n\n        try {\n          new URL(url)\n        } catch {\n          return jsonError('Invalid url', 400)\n        }\n\n        const settings = await getResolvedCronBackupSettings(payload)\n        const backupRead = resolveBackupArchiveRead(settings, body?.pathname)\n        if (resolveBackupBlobAccess(settings) === 'private' && !backupRead) {\n          return jsonError('Missing pathname (required for dedicated backup blob store)', 400)\n        }\n\n        const locale = typeof body?.locale === 'string' ? body.locale : undefined\n        const preferredLocales = locale ? [locale, 'de', 'en'] : ['de', 'en']\n\n        try {\n          const preview = await getRestorePreviewForAdminRestore(payload, url, {\n            backupRead: backupRead ?? undefined,\n            preferredLocales,\n          })\n          return Response.json(preview)\n        } catch (error) {\n          const message = error instanceof Error ? error.message : 'Preview failed'\n          payload.logger.error({ err: error, url }, '[backup-endpoint] Restore preview failed')\n          return Response.json({ error: message }, { status: 422 })\n        }\n      },\n      method: 'post',\n      path: '/backup-mongodb/admin/restore-preview',\n    },\n  ]\n}\n"],"names":["getResolvedCronBackupSettings","resolveBackupArchiveRead","resolveBackupBlobAccess","getBackupSourcePreviewForManual","getRestorePreviewForAdminRestore","jsonError","readRequestJson","requireBackupAdmin","createAdminPreviewEndpoints","options","handler","req","auth","Response","payload","body","locale","undefined","preferredLocales","preview","json","error","message","Error","logger","err","status","method","path","url","URL","settings","backupRead","pathname"],"mappings":"AAIA,SACEA,6BAA6B,EAC7BC,wBAAwB,EACxBC,uBAAuB,QAClB,4BAA2B;AAClC,SAASC,+BAA+B,QAAQ,iCAAgC;AAChF,SAASC,gCAAgC,QAAQ,4BAA2B;AAC5E,SAASC,SAAS,EAAEC,eAAe,EAAEC,kBAAkB,QAAQ,YAAW;AAE1E;;CAEC,GACD,OAAO,SAASC,4BAA4BC,OAA4B;IACtE,OAAO;QACL;YACEC,SAAS,OAAOC;gBACd,MAAMC,OAAO,MAAML,mBAAmBI,KAAKF;gBAC3C,IAAIG,gBAAgBC,UAAU;oBAC5B,OAAOD;gBACT;gBAEA,MAAM,EAAEE,OAAO,EAAE,GAAGH;gBACpB,MAAMI,OAAQ,MAAMT,gBAAgBK;gBACpC,MAAMK,SAAS,OAAOD,MAAMC,WAAW,WAAWD,KAAKC,MAAM,GAAGC;gBAChE,MAAMC,mBAAmBF,SAAS;oBAACA;oBAAQ;oBAAM;iBAAK,GAAG;oBAAC;oBAAM;iBAAK;gBAErE,IAAI;oBACF,MAAMG,UAAU,MAAMhB,gCAAgCW,SAAS;wBAAEI;oBAAiB;oBAClF,OAAOL,SAASO,IAAI,CAACD;gBACvB,EAAE,OAAOE,OAAO;oBACd,MAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,OAAO,GAAG;oBACzDR,QAAQU,MAAM,CAACH,KAAK,CAAC;wBAAEI,KAAKJ;oBAAM,GAAG;oBACrC,OAAOR,SAASO,IAAI,CAAC;wBAAEC,OAAOC;oBAAQ,GAAG;wBAAEI,QAAQ;oBAAI;gBACzD;YACF;YACAC,QAAQ;YACRC,MAAM;QACR;QACA;YACElB,SAAS,OAAOC;gBACd,MAAMC,OAAO,MAAML,mBAAmBI,KAAKF;gBAC3C,IAAIG,gBAAgBC,UAAU;oBAC5B,OAAOD;gBACT;gBAEA,MAAM,EAAEE,OAAO,EAAE,GAAGH;gBACpB,MAAMI,OAAQ,MAAMT,gBAAgBK;gBAKpC,MAAMkB,MAAMd,MAAMc;gBAElB,IAAI,CAACA,OAAO,OAAOA,QAAQ,UAAU;oBACnC,OAAOxB,UAAU,eAAe;gBAClC;gBAEA,IAAI;oBACF,IAAIyB,IAAID;gBACV,EAAE,OAAM;oBACN,OAAOxB,UAAU,eAAe;gBAClC;gBAEA,MAAM0B,WAAW,MAAM/B,8BAA8Bc;gBACrD,MAAMkB,aAAa/B,yBAAyB8B,UAAUhB,MAAMkB;gBAC5D,IAAI/B,wBAAwB6B,cAAc,aAAa,CAACC,YAAY;oBAClE,OAAO3B,UAAU,+DAA+D;gBAClF;gBAEA,MAAMW,SAAS,OAAOD,MAAMC,WAAW,WAAWD,KAAKC,MAAM,GAAGC;gBAChE,MAAMC,mBAAmBF,SAAS;oBAACA;oBAAQ;oBAAM;iBAAK,GAAG;oBAAC;oBAAM;iBAAK;gBAErE,IAAI;oBACF,MAAMG,UAAU,MAAMf,iCAAiCU,SAASe,KAAK;wBACnEG,YAAYA,cAAcf;wBAC1BC;oBACF;oBACA,OAAOL,SAASO,IAAI,CAACD;gBACvB,EAAE,OAAOE,OAAO;oBACd,MAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,OAAO,GAAG;oBACzDR,QAAQU,MAAM,CAACH,KAAK,CAAC;wBAAEI,KAAKJ;wBAAOQ;oBAAI,GAAG;oBAC1C,OAAOhB,SAASO,IAAI,CAAC;wBAAEC,OAAOC;oBAAQ,GAAG;wBAAEI,QAAQ;oBAAI;gBACzD;YACF;YACAC,QAAQ;YACRC,MAAM;QACR;KACD;AACH"}

package/dist/endpoints/paths/admin-restore.d.ts

@@ -0,0 +1,3 @@
+import type { Endpoint } from 'payload';
+import type { BackupPluginOptions } from '../../types';
+export declare function createAdminRestoreEndpoint(options: BackupPluginOptions): Endpoint;

package/dist/endpoints/paths/admin-restore.js

@@ -0,0 +1,74 @@
+import { after } from 'next/server';
+import { getResolvedCronBackupSettings, resolveBackupArchiveRead, resolveBackupBlobAccess, resolveBackupBlobToken } from '../../core/backupSettings';
+import { restoreBackup } from '../../core/restore';
+import { completeBackupTask, createBackupTask, failBackupTask } from '../../core/taskProgress';
+import { jsonError, readRequestJson, requireBackupAdmin } from '../shared';
+export function createAdminRestoreEndpoint(options) {
+    return {
+        handler: async (req)=>{
+            const auth = await requireBackupAdmin(req, options);
+            if (auth instanceof Response) {
+                return auth;
+            }
+            const { payload } = req;
+            const settings = await getResolvedCronBackupSettings(payload);
+            const blobToken = resolveBackupBlobToken(settings);
+            const blobAccess = resolveBackupBlobAccess(settings);
+            if (!blobToken) {
+                return jsonError('Service unavailable', 503);
+            }
+            const body = await readRequestJson(req);
+            const pathname = body?.pathname;
+            const url = body?.url;
+            const clientSkipRaw = body?.skipCollections;
+            const clientSkip = Array.isArray(clientSkipRaw) ? clientSkipRaw.filter((x)=>typeof x === 'string' && x.length > 0 && x.length < 512) : [];
+            if (!url || typeof url !== 'string') {
+                return jsonError('Missing url', 400);
+            }
+            try {
+                new URL(url);
+            } catch  {
+                return jsonError('Invalid url', 400);
+            }
+            const backupRead = resolveBackupArchiveRead(settings, pathname);
+            if (blobAccess === 'private' && !backupRead) {
+                return jsonError('Missing pathname (required for dedicated backup blob store)', 400);
+            }
+            const { pollSecret, taskId } = await createBackupTask(payload, 'restore', 'Restore queued');
+            payload.logger.info({
+                taskId,
+                url
+            }, '[backup-endpoint] Restore queued');
+            const collectionBlacklist = [
+                ...new Set([
+                    'backup-tasks',
+                    ...clientSkip
+                ])
+            ];
+            const restoreArchiveMedia = body?.restoreArchiveMedia !== false;
+            after(restoreBackup(payload, url, collectionBlacklist, false, taskId, {
+                backupRead: backupRead ?? undefined,
+                blobAccess,
+                blobToken,
+                restoreArchiveMedia
+            }).then(()=>completeBackupTask(payload, taskId, 'Restore completed')).catch(async (error)=>{
+                await failBackupTask(payload, taskId, error);
+                payload.logger.error({
+                    err: error,
+                    taskId,
+                    url
+                }, '[backup-endpoint] Restore failed');
+            }));
+            return Response.json({
+                pollSecret,
+                taskId
+            }, {
+                status: 202
+            });
+        },
+        method: 'post',
+        path: '/backup-mongodb/admin/restore'
+    };
+}
+
+//# sourceMappingURL=admin-restore.js.map

package/dist/endpoints/paths/admin-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/endpoints/paths/admin-restore.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport { after } from 'next/server'\n\nimport type { BackupPluginOptions } from '../../types'\n\nimport {\n  getResolvedCronBackupSettings,\n  resolveBackupArchiveRead,\n  resolveBackupBlobAccess,\n  resolveBackupBlobToken,\n} from '../../core/backupSettings'\nimport { restoreBackup } from '../../core/restore'\nimport { completeBackupTask, createBackupTask, failBackupTask } from '../../core/taskProgress'\nimport { jsonError, readRequestJson, requireBackupAdmin } from '../shared'\n\nexport function createAdminRestoreEndpoint(options: BackupPluginOptions): Endpoint {\n  return {\n    handler: async (req) => {\n      const auth = await requireBackupAdmin(req, options)\n      if (auth instanceof Response) {\n        return auth\n      }\n\n      const { payload } = req\n      const settings = await getResolvedCronBackupSettings(payload)\n      const blobToken = resolveBackupBlobToken(settings)\n      const blobAccess = resolveBackupBlobAccess(settings)\n      if (!blobToken) {\n        return jsonError('Service unavailable', 503)\n      }\n\n      const body = (await readRequestJson(req)) as Record<string, unknown>\n      const pathname = body?.pathname\n      const url = body?.url\n      const clientSkipRaw = body?.skipCollections\n      const clientSkip = Array.isArray(clientSkipRaw)\n        ? clientSkipRaw.filter(\n            (x: unknown): x is string => typeof x === 'string' && x.length > 0 && x.length < 512,\n          )\n        : []\n\n      if (!url || typeof url !== 'string') {\n        return jsonError('Missing url', 400)\n      }\n      try {\n        new URL(url)\n      } catch {\n        return jsonError('Invalid url', 400)\n      }\n\n      const backupRead = resolveBackupArchiveRead(settings, pathname)\n      if (blobAccess === 'private' && !backupRead) {\n        return jsonError('Missing pathname (required for dedicated backup blob store)', 400)\n      }\n\n      const { pollSecret, taskId } = await createBackupTask(payload, 'restore', 'Restore queued')\n\n      payload.logger.info({ taskId, url }, '[backup-endpoint] Restore queued')\n\n      const collectionBlacklist = [...new Set(['backup-tasks', ...clientSkip])]\n      const restoreArchiveMedia = body?.restoreArchiveMedia !== false\n\n      after(\n        restoreBackup(payload, url, collectionBlacklist, false, taskId, {\n          backupRead: backupRead ?? undefined,\n          blobAccess,\n          blobToken,\n          restoreArchiveMedia,\n        })\n          .then(() => completeBackupTask(payload, taskId, 'Restore completed'))\n          .catch(async (error) => {\n            await failBackupTask(payload, taskId, error)\n            payload.logger.error({ err: error, taskId, url }, '[backup-endpoint] Restore failed')\n          }),\n      )\n\n      return Response.json({ pollSecret, taskId }, { status: 202 })\n    },\n    method: 'post',\n    path: '/backup-mongodb/admin/restore',\n  }\n}\n"],"names":["after","getResolvedCronBackupSettings","resolveBackupArchiveRead","resolveBackupBlobAccess","resolveBackupBlobToken","restoreBackup","completeBackupTask","createBackupTask","failBackupTask","jsonError","readRequestJson","requireBackupAdmin","createAdminRestoreEndpoint","options","handler","req","auth","Response","payload","settings","blobToken","blobAccess","body","pathname","url","clientSkipRaw","skipCollections","clientSkip","Array","isArray","filter","x","length","URL","backupRead","pollSecret","taskId","logger","info","collectionBlacklist","Set","restoreArchiveMedia","undefined","then","catch","error","err","json","status","method","path"],"mappings":"AAEA,SAASA,KAAK,QAAQ,cAAa;AAInC,SACEC,6BAA6B,EAC7BC,wBAAwB,EACxBC,uBAAuB,EACvBC,sBAAsB,QACjB,4BAA2B;AAClC,SAASC,aAAa,QAAQ,qBAAoB;AAClD,SAASC,kBAAkB,EAAEC,gBAAgB,EAAEC,cAAc,QAAQ,0BAAyB;AAC9F,SAASC,SAAS,EAAEC,eAAe,EAAEC,kBAAkB,QAAQ,YAAW;AAE1E,OAAO,SAASC,2BAA2BC,OAA4B;IACrE,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,OAAO,MAAML,mBAAmBI,KAAKF;YAC3C,IAAIG,gBAAgBC,UAAU;gBAC5B,OAAOD;YACT;YAEA,MAAM,EAAEE,OAAO,EAAE,GAAGH;YACpB,MAAMI,WAAW,MAAMlB,8BAA8BiB;YACrD,MAAME,YAAYhB,uBAAuBe;YACzC,MAAME,aAAalB,wBAAwBgB;YAC3C,IAAI,CAACC,WAAW;gBACd,OAAOX,UAAU,uBAAuB;YAC1C;YAEA,MAAMa,OAAQ,MAAMZ,gBAAgBK;YACpC,MAAMQ,WAAWD,MAAMC;YACvB,MAAMC,MAAMF,MAAME;YAClB,MAAMC,gBAAgBH,MAAMI;YAC5B,MAAMC,aAAaC,MAAMC,OAAO,CAACJ,iBAC7BA,cAAcK,MAAM,CAClB,CAACC,IAA4B,OAAOA,MAAM,YAAYA,EAAEC,MAAM,GAAG,KAAKD,EAAEC,MAAM,GAAG,OAEnF,EAAE;YAEN,IAAI,CAACR,OAAO,OAAOA,QAAQ,UAAU;gBACnC,OAAOf,UAAU,eAAe;YAClC;YACA,IAAI;gBACF,IAAIwB,IAAIT;YACV,EAAE,OAAM;gBACN,OAAOf,UAAU,eAAe;YAClC;YAEA,MAAMyB,aAAahC,yBAAyBiB,UAAUI;YACtD,IAAIF,eAAe,aAAa,CAACa,YAAY;gBAC3C,OAAOzB,UAAU,+DAA+D;YAClF;YAEA,MAAM,EAAE0B,UAAU,EAAEC,MAAM,EAAE,GAAG,MAAM7B,iBAAiBW,SAAS,WAAW;YAE1EA,QAAQmB,MAAM,CAACC,IAAI,CAAC;gBAAEF;gBAAQZ;YAAI,GAAG;YAErC,MAAMe,sBAAsB;mBAAI,IAAIC,IAAI;oBAAC;uBAAmBb;iBAAW;aAAE;YACzE,MAAMc,sBAAsBnB,MAAMmB,wBAAwB;YAE1DzC,MACEK,cAAca,SAASM,KAAKe,qBAAqB,OAAOH,QAAQ;gBAC9DF,YAAYA,cAAcQ;gBAC1BrB;gBACAD;gBACAqB;YACF,GACGE,IAAI,CAAC,IAAMrC,mBAAmBY,SAASkB,QAAQ,sBAC/CQ,KAAK,CAAC,OAAOC;gBACZ,MAAMrC,eAAeU,SAASkB,QAAQS;gBACtC3B,QAAQmB,MAAM,CAACQ,KAAK,CAAC;oBAAEC,KAAKD;oBAAOT;oBAAQZ;gBAAI,GAAG;YACpD;YAGJ,OAAOP,SAAS8B,IAAI,CAAC;gBAAEZ;gBAAYC;YAAO,GAAG;gBAAEY,QAAQ;YAAI;QAC7D;QACAC,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/paths/admin-seed.d.ts

@@ -0,0 +1,3 @@
+import type { Endpoint } from 'payload';
+import type { BackupPluginOptions } from '../../types';
+export declare function createAdminSeedEndpoint(options: BackupPluginOptions): Endpoint | null;

package/dist/endpoints/paths/admin-seed.js

@@ -0,0 +1,47 @@
+import { after } from 'next/server';
+import { restoreBackup, restoreSeedMedia } from '../../core/restore';
+import { completeBackupTask, createBackupTask, failBackupTask } from '../../core/taskProgress';
+import { requireBackupAdmin, requireBlobEnv } from '../shared';
+export function createAdminSeedEndpoint(options) {
+    const seedUrl = options.seedDemoDumpUrl;
+    if (!seedUrl) {
+        return null;
+    }
+    return {
+        handler: async (req)=>{
+            const blobErr = requireBlobEnv();
+            if (blobErr) {
+                return blobErr;
+            }
+            const auth = await requireBackupAdmin(req, options);
+            if (auth instanceof Response) {
+                return auth;
+            }
+            const { payload } = req;
+            const { pollSecret, taskId } = await createBackupTask(payload, 'seed', 'Seed queued');
+            payload.logger.info({
+                taskId
+            }, '[backup-endpoint] Seed queued');
+            after(restoreSeedMedia(payload, taskId).then(()=>restoreBackup(payload, seedUrl, [
+                    'users',
+                    'roles'
+                ], false, taskId)).then(()=>completeBackupTask(payload, taskId, 'Seed completed')).catch(async (error)=>{
+                await failBackupTask(payload, taskId, error);
+                payload.logger.error({
+                    err: error,
+                    taskId
+                }, '[backup-endpoint] Seed failed');
+            }));
+            return Response.json({
+                pollSecret,
+                taskId
+            }, {
+                status: 202
+            });
+        },
+        method: 'post',
+        path: '/backup-mongodb/admin/seed'
+    };
+}
+
+//# sourceMappingURL=admin-seed.js.map

package/dist/endpoints/paths/admin-seed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/endpoints/paths/admin-seed.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport { after } from 'next/server'\n\nimport type { BackupPluginOptions } from '../../types'\n\nimport { restoreBackup, restoreSeedMedia } from '../../core/restore'\nimport { completeBackupTask, createBackupTask, failBackupTask } from '../../core/taskProgress'\nimport { requireBackupAdmin, requireBlobEnv } from '../shared'\n\nexport function createAdminSeedEndpoint(options: BackupPluginOptions): Endpoint | null {\n  const seedUrl = options.seedDemoDumpUrl\n  if (!seedUrl) {\n    return null\n  }\n\n  return {\n    handler: async (req) => {\n      const blobErr = requireBlobEnv()\n      if (blobErr) {\n        return blobErr\n      }\n\n      const auth = await requireBackupAdmin(req, options)\n      if (auth instanceof Response) {\n        return auth\n      }\n\n      const { payload } = req\n      const { pollSecret, taskId } = await createBackupTask(payload, 'seed', 'Seed queued')\n\n      payload.logger.info({ taskId }, '[backup-endpoint] Seed queued')\n\n      after(\n        restoreSeedMedia(payload, taskId)\n          .then(() => restoreBackup(payload, seedUrl, ['users', 'roles'], false, taskId))\n          .then(() => completeBackupTask(payload, taskId, 'Seed completed'))\n          .catch(async (error) => {\n            await failBackupTask(payload, taskId, error)\n            payload.logger.error({ err: error, taskId }, '[backup-endpoint] Seed failed')\n          }),\n      )\n\n      return Response.json({ pollSecret, taskId }, { status: 202 })\n    },\n    method: 'post',\n    path: '/backup-mongodb/admin/seed',\n  }\n}\n"],"names":["after","restoreBackup","restoreSeedMedia","completeBackupTask","createBackupTask","failBackupTask","requireBackupAdmin","requireBlobEnv","createAdminSeedEndpoint","options","seedUrl","seedDemoDumpUrl","handler","req","blobErr","auth","Response","payload","pollSecret","taskId","logger","info","then","catch","error","err","json","status","method","path"],"mappings":"AAEA,SAASA,KAAK,QAAQ,cAAa;AAInC,SAASC,aAAa,EAAEC,gBAAgB,QAAQ,qBAAoB;AACpE,SAASC,kBAAkB,EAAEC,gBAAgB,EAAEC,cAAc,QAAQ,0BAAyB;AAC9F,SAASC,kBAAkB,EAAEC,cAAc,QAAQ,YAAW;AAE9D,OAAO,SAASC,wBAAwBC,OAA4B;IAClE,MAAMC,UAAUD,QAAQE,eAAe;IACvC,IAAI,CAACD,SAAS;QACZ,OAAO;IACT;IAEA,OAAO;QACLE,SAAS,OAAOC;YACd,MAAMC,UAAUP;YAChB,IAAIO,SAAS;gBACX,OAAOA;YACT;YAEA,MAAMC,OAAO,MAAMT,mBAAmBO,KAAKJ;YAC3C,IAAIM,gBAAgBC,UAAU;gBAC5B,OAAOD;YACT;YAEA,MAAM,EAAEE,OAAO,EAAE,GAAGJ;YACpB,MAAM,EAAEK,UAAU,EAAEC,MAAM,EAAE,GAAG,MAAMf,iBAAiBa,SAAS,QAAQ;YAEvEA,QAAQG,MAAM,CAACC,IAAI,CAAC;gBAAEF;YAAO,GAAG;YAEhCnB,MACEE,iBAAiBe,SAASE,QACvBG,IAAI,CAAC,IAAMrB,cAAcgB,SAASP,SAAS;oBAAC;oBAAS;iBAAQ,EAAE,OAAOS,SACtEG,IAAI,CAAC,IAAMnB,mBAAmBc,SAASE,QAAQ,mBAC/CI,KAAK,CAAC,OAAOC;gBACZ,MAAMnB,eAAeY,SAASE,QAAQK;gBACtCP,QAAQG,MAAM,CAACI,KAAK,CAAC;oBAAEC,KAAKD;oBAAOL;gBAAO,GAAG;YAC/C;YAGJ,OAAOH,SAASU,IAAI,CAAC;gBAAER;gBAAYC;YAAO,GAAG;gBAAEQ,QAAQ;YAAI;QAC7D;QACAC,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/paths/admin-settings.d.ts

@@ -0,0 +1,3 @@
+import type { Endpoint } from 'payload';
+import type { BackupPluginOptions } from '../../types';
+export declare function createAdminSettingsEndpoints(options: BackupPluginOptions): Endpoint[];

package/dist/endpoints/paths/admin-settings.js

@@ -0,0 +1,230 @@
+import { list } from '@vercel/blob';
+import { after } from 'next/server';
+import { transferBackupBlobsToToken } from '../../core/backupBlobTransfer';
+import { BACKUP_SETTINGS_SLUG, getResolvedCronBackupSettings, normalizeSkipMongoCollections, resolveBackupBlobAccess, resolveBackupBlobToken, toPayloadSkipRows } from '../../core/backupSettings';
+import { validateBackupBlobToken } from '../../core/blobTokenValidate';
+import { completeBackupTask, createBackupTask, failBackupTask, updateBackupTask } from '../../core/taskProgress';
+import { describeCronSchedule, readVercelBackupCronFromRepo } from '../../core/vercelBackupCron';
+import { maskBlobReadWriteToken, shouldPreserveBackupBlobTokenField } from '../../utils/maskBlobToken';
+import { readRequestJson, requireBackupAdmin } from '../shared';
+function clampBackupsToKeep(n) {
+    if (typeof n !== 'number' || !Number.isFinite(n)) {
+        return 10;
+    }
+    return Math.min(365, Math.max(1, Math.floor(n)));
+}
+function buildSettingsJson(stored, options, vercelCron, humanDescription, transfer) {
+    const t = transfer ?? {
+        deferred: false,
+        failed: 0,
+        performed: false,
+        skipped: 0,
+        total: 0,
+        transferred: 0
+    };
+    return {
+        id: stored.id,
+        backupBlobAccess: stored.backupBlobAccess,
+        backupBlobAccessEffective: resolveBackupBlobAccess(stored),
+        backupBlobTokenMasked: maskBlobReadWriteToken(stored.backupBlobReadWriteToken),
+        backupsToKeep: stored.backupsToKeep,
+        cron: vercelCron ? {
+            configFileRelative: vercelCron.configFileRelative,
+            humanDescription,
+            path: vercelCron.path,
+            schedule: vercelCron.schedule
+        } : null,
+        effectiveBackupsToKeep: typeof options.backupsToKeep === 'number' ? options.backupsToKeep : stored.backupsToKeep,
+        hasBackupBlobReadWriteToken: stored.backupBlobReadWriteToken.trim().length > 0,
+        includeMediaForCron: stored.includeMediaForCron,
+        pluginBackupsToKeepOverride: typeof options.backupsToKeep === 'number',
+        skipMongoCollections: stored.skipMongoCollections,
+        transfer: t
+    };
+}
+export function createAdminSettingsEndpoints(options) {
+    return [
+        {
+            handler: async (req)=>{
+                const auth = await requireBackupAdmin(req, options);
+                if (auth instanceof Response) {
+                    return auth;
+                }
+                const { payload } = req;
+                const stored = await getResolvedCronBackupSettings(payload);
+                const vercelCron = readVercelBackupCronFromRepo();
+                const humanDescription = vercelCron?.schedule != null ? describeCronSchedule(vercelCron.schedule) : null;
+                return Response.json(buildSettingsJson(stored, options, vercelCron, humanDescription, undefined));
+            },
+            method: 'get',
+            path: '/backup-mongodb/admin/settings'
+        },
+        {
+            handler: async (req)=>{
+                const auth = await requireBackupAdmin(req, options);
+                if (auth instanceof Response) {
+                    return auth;
+                }
+                const { payload } = req;
+                const body = await readRequestJson(req);
+                const backupsToKeep = clampBackupsToKeep(body?.backupsToKeep);
+                const skipMongoCollections = normalizeSkipMongoCollections(body?.skipMongoCollections);
+                const includeMediaForCron = body?.includeMediaForCron === true;
+                const transferBackupBlobs = typeof body?.transferBackupBlobs === 'boolean' ? body.transferBackupBlobs : false;
+                const deleteBackupBlobsFromSource = typeof body?.deleteBackupBlobsFromSource === 'boolean' ? body.deleteBackupBlobsFromSource : false;
+                const requestedRaw = typeof body?.backupBlobReadWriteToken === 'string' ? body.backupBlobReadWriteToken : '';
+                const requestedTrimmed = requestedRaw.trim();
+                let stored = await getResolvedCronBackupSettings(payload);
+                const previousAccess = resolveBackupBlobAccess(stored);
+                const previousBackupBlobToken = stored.backupBlobReadWriteToken.trim();
+                const hadStoredToken = previousBackupBlobToken.length > 0;
+                const preserveTokenField = shouldPreserveBackupBlobTokenField(requestedTrimmed, hadStoredToken);
+                const tokenForDb = preserveTokenField ? previousBackupBlobToken : requestedTrimmed;
+                // Access detection: re-probe when the token actually changes; preserve existing otherwise;
+                // clear when the override is removed (falls back to heuristic on the default env token).
+                let backupBlobAccessForDb = stored.backupBlobAccess;
+                if (!preserveTokenField) {
+                    if (tokenForDb.length === 0) {
+                        backupBlobAccessForDb = null;
+                    } else {
+                        const validation = await validateBackupBlobToken(tokenForDb);
+                        if (!validation.ok) {
+                            return Response.json({
+                                error: `Blob token rejected: ${validation.error ?? 'unknown error'}`
+                            }, {
+                                status: 422
+                            });
+                        }
+                        backupBlobAccessForDb = validation.access ?? null;
+                    }
+                }
+                if (!stored.id) {
+                    await payload.create({
+                        collection: BACKUP_SETTINGS_SLUG,
+                        data: {
+                            backupBlobAccess: backupBlobAccessForDb,
+                            backupBlobReadWriteToken: tokenForDb,
+                            backupsToKeep,
+                            includeMediaForCron,
+                            skipMongoCollections: toPayloadSkipRows(skipMongoCollections)
+                        },
+                        overrideAccess: true
+                    });
+                } else {
+                    await payload.update({
+                        id: stored.id,
+                        collection: BACKUP_SETTINGS_SLUG,
+                        data: {
+                            backupBlobAccess: backupBlobAccessForDb,
+                            backupBlobReadWriteToken: tokenForDb,
+                            backupsToKeep,
+                            includeMediaForCron,
+                            skipMongoCollections: toPayloadSkipRows(skipMongoCollections)
+                        },
+                        overrideAccess: true
+                    });
+                }
+                stored = await getResolvedCronBackupSettings(payload);
+                if (!stored.id) {
+                    return Response.json({
+                        error: 'Could not persist backup settings'
+                    }, {
+                        status: 500
+                    });
+                }
+                const vercelCron = readVercelBackupCronFromRepo();
+                const humanDescription = vercelCron?.schedule != null ? describeCronSchedule(vercelCron.schedule) : null;
+                const newBlobToken = stored.backupBlobReadWriteToken.trim();
+                // Read blobs from the *previous* store when rotating tokens; otherwise first-time setup
+                // reads from BLOB_READ_WRITE_TOKEN (default Vercel store).
+                const sourceTokenForTransfer = previousBackupBlobToken.length > 0 ? previousBackupBlobToken : (process.env.BLOB_READ_WRITE_TOKEN || '').trim();
+                const shouldTransferToNewBlobToken = newBlobToken.length > 0 && sourceTokenForTransfer.length > 0 && newBlobToken !== sourceTokenForTransfer;
+                if (!transferBackupBlobs || !shouldTransferToNewBlobToken) {
+                    return Response.json(buildSettingsJson(stored, options, vercelCron, humanDescription, {
+                        deferred: false,
+                        failed: 0,
+                        performed: false,
+                        skipped: 0,
+                        total: 0,
+                        transferred: 0
+                    }));
+                }
+                const targetToken = resolveBackupBlobToken(stored);
+                const targetAccess = resolveBackupBlobAccess(stored);
+                const { blobs } = await list({
+                    limit: 1000,
+                    prefix: 'backups/',
+                    token: sourceTokenForTransfer
+                });
+                const total = blobs.length;
+                if (total === 0) {
+                    const summary = await transferBackupBlobsToToken(payload, sourceTokenForTransfer, targetToken, {
+                        deleteFromSource: deleteBackupBlobsFromSource,
+                        sourceAccessHint: previousAccess,
+                        targetAccess
+                    });
+                    return Response.json(buildSettingsJson(stored, options, vercelCron, humanDescription, {
+                        deferred: false,
+                        failed: summary.failed,
+                        performed: true,
+                        skipped: summary.skipped,
+                        total: summary.total,
+                        transferred: summary.transferred
+                    }));
+                }
+                const { pollSecret, taskId } = await createBackupTask(payload, 'blobTransfer', JSON.stringify({
+                    failed: 0,
+                    pathname: '',
+                    total,
+                    transferred: 0
+                }));
+                after((async ()=>{
+                    try {
+                        await updateBackupTask(payload, taskId, {
+                            message: JSON.stringify({
+                                failed: 0,
+                                pathname: '',
+                                total,
+                                transferred: 0
+                            }),
+                            status: 'running'
+                        });
+                        const summary = await transferBackupBlobsToToken(payload, sourceTokenForTransfer, targetToken, {
+                            deleteFromSource: deleteBackupBlobsFromSource,
+                            sourceAccessHint: previousAccess,
+                            targetAccess,
+                            taskId
+                        });
+                        await completeBackupTask(payload, taskId, JSON.stringify({
+                            failed: summary.failed,
+                            pathname: '',
+                            phase: 'done',
+                            total: summary.total,
+                            transferred: summary.transferred
+                        }));
+                    } catch (e) {
+                        await failBackupTask(payload, taskId, e);
+                        payload.logger.error({
+                            err: e,
+                            taskId
+                        }, '[backup-settings] Blob transfer task failed');
+                    }
+                })());
+                return Response.json(buildSettingsJson(stored, options, vercelCron, humanDescription, {
+                    deferred: true,
+                    failed: 0,
+                    performed: true,
+                    pollSecret,
+                    skipped: 0,
+                    taskId,
+                    total,
+                    transferred: 0
+                }));
+            },
+            method: 'patch',
+            path: '/backup-mongodb/admin/settings'
+        }
+    ];
+}
+
+//# sourceMappingURL=admin-settings.js.map

package/dist/endpoints/paths/admin-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/endpoints/paths/admin-settings.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport { list } from '@vercel/blob'\nimport { after } from 'next/server'\n\nimport type { BackupPluginOptions } from '../../types'\n\nimport { transferBackupBlobsToToken } from '../../core/backupBlobTransfer'\nimport {\n  BACKUP_SETTINGS_SLUG,\n  getResolvedCronBackupSettings,\n  normalizeSkipMongoCollections,\n  resolveBackupBlobAccess,\n  resolveBackupBlobToken,\n  toPayloadSkipRows,\n} from '../../core/backupSettings'\nimport { validateBackupBlobToken } from '../../core/blobTokenValidate'\nimport {\n  completeBackupTask,\n  createBackupTask,\n  failBackupTask,\n  updateBackupTask,\n} from '../../core/taskProgress'\nimport { describeCronSchedule, readVercelBackupCronFromRepo } from '../../core/vercelBackupCron'\nimport {\n  maskBlobReadWriteToken,\n  shouldPreserveBackupBlobTokenField,\n} from '../../utils/maskBlobToken'\nimport { readRequestJson, requireBackupAdmin } from '../shared'\n\nfunction clampBackupsToKeep(n: unknown): number {\n  if (typeof n !== 'number' || !Number.isFinite(n)) {\n    return 10\n  }\n  return Math.min(365, Math.max(1, Math.floor(n)))\n}\n\nfunction buildSettingsJson(\n  stored: Awaited<ReturnType<typeof getResolvedCronBackupSettings>>,\n  options: BackupPluginOptions,\n  vercelCron: ReturnType<typeof readVercelBackupCronFromRepo>,\n  humanDescription: null | string,\n  transfer:\n    | {\n        deferred: boolean\n        failed: number\n        performed: boolean\n        pollSecret?: string\n        skipped: number\n        taskId?: string\n        total: number\n        transferred: number\n      }\n    | undefined,\n) {\n  const t = transfer ?? {\n    deferred: false,\n    failed: 0,\n    performed: false,\n    skipped: 0,\n    total: 0,\n    transferred: 0,\n  }\n  return {\n    id: stored.id,\n    backupBlobAccess: stored.backupBlobAccess,\n    backupBlobAccessEffective: resolveBackupBlobAccess(stored),\n    backupBlobTokenMasked: maskBlobReadWriteToken(stored.backupBlobReadWriteToken),\n    backupsToKeep: stored.backupsToKeep,\n    cron: vercelCron\n      ? {\n          configFileRelative: vercelCron.configFileRelative,\n          humanDescription,\n          path: vercelCron.path,\n          schedule: vercelCron.schedule,\n        }\n      : null,\n    effectiveBackupsToKeep:\n      typeof options.backupsToKeep === 'number' ? options.backupsToKeep : stored.backupsToKeep,\n    hasBackupBlobReadWriteToken: stored.backupBlobReadWriteToken.trim().length > 0,\n    includeMediaForCron: stored.includeMediaForCron,\n    pluginBackupsToKeepOverride: typeof options.backupsToKeep === 'number',\n    skipMongoCollections: stored.skipMongoCollections,\n    transfer: t,\n  }\n}\n\nexport function createAdminSettingsEndpoints(options: BackupPluginOptions): Endpoint[] {\n  return [\n    {\n      handler: async (req) => {\n        const auth = await requireBackupAdmin(req, options)\n        if (auth instanceof Response) {\n          return auth\n        }\n\n        const { payload } = req\n        const stored = await getResolvedCronBackupSettings(payload)\n        const vercelCron = readVercelBackupCronFromRepo()\n        const humanDescription =\n          vercelCron?.schedule != null ? describeCronSchedule(vercelCron.schedule) : null\n\n        return Response.json(\n          buildSettingsJson(stored, options, vercelCron, humanDescription, undefined),\n        )\n      },\n      method: 'get',\n      path: '/backup-mongodb/admin/settings',\n    },\n    {\n      handler: async (req) => {\n        const auth = await requireBackupAdmin(req, options)\n        if (auth instanceof Response) {\n          return auth\n        }\n\n        const { payload } = req\n        const body = (await readRequestJson(req)) as Record<string, unknown>\n        const backupsToKeep = clampBackupsToKeep(body?.backupsToKeep)\n        const skipMongoCollections = normalizeSkipMongoCollections(body?.skipMongoCollections)\n        const includeMediaForCron = body?.includeMediaForCron === true\n        const transferBackupBlobs =\n          typeof body?.transferBackupBlobs === 'boolean' ? body.transferBackupBlobs : false\n        const deleteBackupBlobsFromSource =\n          typeof body?.deleteBackupBlobsFromSource === 'boolean'\n            ? body.deleteBackupBlobsFromSource\n            : false\n        const requestedRaw =\n          typeof body?.backupBlobReadWriteToken === 'string' ? body.backupBlobReadWriteToken : ''\n        const requestedTrimmed = requestedRaw.trim()\n\n        let stored = await getResolvedCronBackupSettings(payload)\n        const previousAccess = resolveBackupBlobAccess(stored)\n        const previousBackupBlobToken = stored.backupBlobReadWriteToken.trim()\n        const hadStoredToken = previousBackupBlobToken.length > 0\n        const preserveTokenField = shouldPreserveBackupBlobTokenField(\n          requestedTrimmed,\n          hadStoredToken,\n        )\n        const tokenForDb = preserveTokenField ? previousBackupBlobToken : requestedTrimmed\n\n        // Access detection: re-probe when the token actually changes; preserve existing otherwise;\n        // clear when the override is removed (falls back to heuristic on the default env token).\n        let backupBlobAccessForDb: 'private' | 'public' | null = stored.backupBlobAccess\n        if (!preserveTokenField) {\n          if (tokenForDb.length === 0) {\n            backupBlobAccessForDb = null\n          } else {\n            const validation = await validateBackupBlobToken(tokenForDb)\n            if (!validation.ok) {\n              return Response.json(\n                { error: `Blob token rejected: ${validation.error ?? 'unknown error'}` },\n                { status: 422 },\n              )\n            }\n            backupBlobAccessForDb = validation.access ?? null\n          }\n        }\n\n        if (!stored.id) {\n          await payload.create({\n            collection: BACKUP_SETTINGS_SLUG,\n            data: {\n              backupBlobAccess: backupBlobAccessForDb,\n              backupBlobReadWriteToken: tokenForDb,\n              backupsToKeep,\n              includeMediaForCron,\n              skipMongoCollections: toPayloadSkipRows(skipMongoCollections),\n            },\n            overrideAccess: true,\n          })\n        } else {\n          await payload.update({\n            id: stored.id,\n            collection: BACKUP_SETTINGS_SLUG,\n            data: {\n              backupBlobAccess: backupBlobAccessForDb,\n              backupBlobReadWriteToken: tokenForDb,\n              backupsToKeep,\n              includeMediaForCron,\n              skipMongoCollections: toPayloadSkipRows(skipMongoCollections),\n            },\n            overrideAccess: true,\n          })\n        }\n\n        stored = await getResolvedCronBackupSettings(payload)\n        if (!stored.id) {\n          return Response.json({ error: 'Could not persist backup settings' }, { status: 500 })\n        }\n\n        const vercelCron = readVercelBackupCronFromRepo()\n        const humanDescription =\n          vercelCron?.schedule != null ? describeCronSchedule(vercelCron.schedule) : null\n\n        const newBlobToken = stored.backupBlobReadWriteToken.trim()\n        // Read blobs from the *previous* store when rotating tokens; otherwise first-time setup\n        // reads from BLOB_READ_WRITE_TOKEN (default Vercel store).\n        const sourceTokenForTransfer =\n          previousBackupBlobToken.length > 0\n            ? previousBackupBlobToken\n            : (process.env.BLOB_READ_WRITE_TOKEN || '').trim()\n\n        const shouldTransferToNewBlobToken =\n          newBlobToken.length > 0 &&\n          sourceTokenForTransfer.length > 0 &&\n          newBlobToken !== sourceTokenForTransfer\n\n        if (!transferBackupBlobs || !shouldTransferToNewBlobToken) {\n          return Response.json(\n            buildSettingsJson(stored, options, vercelCron, humanDescription, {\n              deferred: false,\n              failed: 0,\n              performed: false,\n              skipped: 0,\n              total: 0,\n              transferred: 0,\n            }),\n          )\n        }\n\n        const targetToken = resolveBackupBlobToken(stored)\n        const targetAccess = resolveBackupBlobAccess(stored)\n        const { blobs } = await list({\n          limit: 1000,\n          prefix: 'backups/',\n          token: sourceTokenForTransfer,\n        })\n        const total = blobs.length\n\n        if (total === 0) {\n          const summary = await transferBackupBlobsToToken(\n            payload,\n            sourceTokenForTransfer,\n            targetToken,\n            {\n              deleteFromSource: deleteBackupBlobsFromSource,\n              sourceAccessHint: previousAccess,\n              targetAccess,\n            },\n          )\n          return Response.json(\n            buildSettingsJson(stored, options, vercelCron, humanDescription, {\n              deferred: false,\n              failed: summary.failed,\n              performed: true,\n              skipped: summary.skipped,\n              total: summary.total,\n              transferred: summary.transferred,\n            }),\n          )\n        }\n\n        const { pollSecret, taskId } = await createBackupTask(\n          payload,\n          'blobTransfer',\n          JSON.stringify({ failed: 0, pathname: '', total, transferred: 0 }),\n        )\n\n        after(\n          (async () => {\n            try {\n              await updateBackupTask(payload, taskId, {\n                message: JSON.stringify({ failed: 0, pathname: '', total, transferred: 0 }),\n                status: 'running',\n              })\n              const summary = await transferBackupBlobsToToken(\n                payload,\n                sourceTokenForTransfer,\n                targetToken,\n                {\n                  deleteFromSource: deleteBackupBlobsFromSource,\n                  sourceAccessHint: previousAccess,\n                  targetAccess,\n                  taskId,\n                },\n              )\n              await completeBackupTask(\n                payload,\n                taskId,\n                JSON.stringify({\n                  failed: summary.failed,\n                  pathname: '',\n                  phase: 'done',\n                  total: summary.total,\n                  transferred: summary.transferred,\n                }),\n              )\n            } catch (e) {\n              await failBackupTask(payload, taskId, e)\n              payload.logger.error(\n                { err: e, taskId },\n                '[backup-settings] Blob transfer task failed',\n              )\n            }\n          })(),\n        )\n\n        return Response.json(\n          buildSettingsJson(stored, options, vercelCron, humanDescription, {\n            deferred: true,\n            failed: 0,\n            performed: true,\n            pollSecret,\n            skipped: 0,\n            taskId,\n            total,\n            transferred: 0,\n          }),\n        )\n      },\n      method: 'patch',\n      path: '/backup-mongodb/admin/settings',\n    },\n  ]\n}\n"],"names":["list","after","transferBackupBlobsToToken","BACKUP_SETTINGS_SLUG","getResolvedCronBackupSettings","normalizeSkipMongoCollections","resolveBackupBlobAccess","resolveBackupBlobToken","toPayloadSkipRows","validateBackupBlobToken","completeBackupTask","createBackupTask","failBackupTask","updateBackupTask","describeCronSchedule","readVercelBackupCronFromRepo","maskBlobReadWriteToken","shouldPreserveBackupBlobTokenField","readRequestJson","requireBackupAdmin","clampBackupsToKeep","n","Number","isFinite","Math","min","max","floor","buildSettingsJson","stored","options","vercelCron","humanDescription","transfer","t","deferred","failed","performed","skipped","total","transferred","id","backupBlobAccess","backupBlobAccessEffective","backupBlobTokenMasked","backupBlobReadWriteToken","backupsToKeep","cron","configFileRelative","path","schedule","effectiveBackupsToKeep","hasBackupBlobReadWriteToken","trim","length","includeMediaForCron","pluginBackupsToKeepOverride","skipMongoCollections","createAdminSettingsEndpoints","handler","req","auth","Response","payload","json","undefined","method","body","transferBackupBlobs","deleteBackupBlobsFromSource","requestedRaw","requestedTrimmed","previousAccess","previousBackupBlobToken","hadStoredToken","preserveTokenField","tokenForDb","backupBlobAccessForDb","validation","ok","error","status","access","create","collection","data","overrideAccess","update","newBlobToken","sourceTokenForTransfer","process","env","BLOB_READ_WRITE_TOKEN","shouldTransferToNewBlobToken","targetToken","targetAccess","blobs","limit","prefix","token","summary","deleteFromSource","sourceAccessHint","pollSecret","taskId","JSON","stringify","pathname","message","phase","e","logger","err"],"mappings":"AAEA,SAASA,IAAI,QAAQ,eAAc;AACnC,SAASC,KAAK,QAAQ,cAAa;AAInC,SAASC,0BAA0B,QAAQ,gCAA+B;AAC1E,SACEC,oBAAoB,EACpBC,6BAA6B,EAC7BC,6BAA6B,EAC7BC,uBAAuB,EACvBC,sBAAsB,EACtBC,iBAAiB,QACZ,4BAA2B;AAClC,SAASC,uBAAuB,QAAQ,+BAA8B;AACtE,SACEC,kBAAkB,EAClBC,gBAAgB,EAChBC,cAAc,EACdC,gBAAgB,QACX,0BAAyB;AAChC,SAASC,oBAAoB,EAAEC,4BAA4B,QAAQ,8BAA6B;AAChG,SACEC,sBAAsB,EACtBC,kCAAkC,QAC7B,4BAA2B;AAClC,SAASC,eAAe,EAAEC,kBAAkB,QAAQ,YAAW;AAE/D,SAASC,mBAAmBC,CAAU;IACpC,IAAI,OAAOA,MAAM,YAAY,CAACC,OAAOC,QAAQ,CAACF,IAAI;QAChD,OAAO;IACT;IACA,OAAOG,KAAKC,GAAG,CAAC,KAAKD,KAAKE,GAAG,CAAC,GAAGF,KAAKG,KAAK,CAACN;AAC9C;AAEA,SAASO,kBACPC,MAAiE,EACjEC,OAA4B,EAC5BC,UAA2D,EAC3DC,gBAA+B,EAC/BC,QAWa;IAEb,MAAMC,IAAID,YAAY;QACpBE,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,SAAS;QACTC,OAAO;QACPC,aAAa;IACf;IACA,OAAO;QACLC,IAAIZ,OAAOY,EAAE;QACbC,kBAAkBb,OAAOa,gBAAgB;QACzCC,2BAA2BrC,wBAAwBuB;QACnDe,uBAAuB5B,uBAAuBa,OAAOgB,wBAAwB;QAC7EC,eAAejB,OAAOiB,aAAa;QACnCC,MAAMhB,aACF;YACEiB,oBAAoBjB,WAAWiB,kBAAkB;YACjDhB;YACAiB,MAAMlB,WAAWkB,IAAI;YACrBC,UAAUnB,WAAWmB,QAAQ;QAC/B,IACA;QACJC,wBACE,OAAOrB,QAAQgB,aAAa,KAAK,WAAWhB,QAAQgB,aAAa,GAAGjB,OAAOiB,aAAa;QAC1FM,6BAA6BvB,OAAOgB,wBAAwB,CAACQ,IAAI,GAAGC,MAAM,GAAG;QAC7EC,qBAAqB1B,OAAO0B,mBAAmB;QAC/CC,6BAA6B,OAAO1B,QAAQgB,aAAa,KAAK;QAC9DW,sBAAsB5B,OAAO4B,oBAAoB;QACjDxB,UAAUC;IACZ;AACF;AAEA,OAAO,SAASwB,6BAA6B5B,OAA4B;IACvE,OAAO;QACL;YACE6B,SAAS,OAAOC;gBACd,MAAMC,OAAO,MAAM1C,mBAAmByC,KAAK9B;gBAC3C,IAAI+B,gBAAgBC,UAAU;oBAC5B,OAAOD;gBACT;gBAEA,MAAM,EAAEE,OAAO,EAAE,GAAGH;gBACpB,MAAM/B,SAAS,MAAMzB,8BAA8B2D;gBACnD,MAAMhC,aAAahB;gBACnB,MAAMiB,mBACJD,YAAYmB,YAAY,OAAOpC,qBAAqBiB,WAAWmB,QAAQ,IAAI;gBAE7E,OAAOY,SAASE,IAAI,CAClBpC,kBAAkBC,QAAQC,SAASC,YAAYC,kBAAkBiC;YAErE;YACAC,QAAQ;YACRjB,MAAM;QACR;QACA;YACEU,SAAS,OAAOC;gBACd,MAAMC,OAAO,MAAM1C,mBAAmByC,KAAK9B;gBAC3C,IAAI+B,gBAAgBC,UAAU;oBAC5B,OAAOD;gBACT;gBAEA,MAAM,EAAEE,OAAO,EAAE,GAAGH;gBACpB,MAAMO,OAAQ,MAAMjD,gBAAgB0C;gBACpC,MAAMd,gBAAgB1B,mBAAmB+C,MAAMrB;gBAC/C,MAAMW,uBAAuBpD,8BAA8B8D,MAAMV;gBACjE,MAAMF,sBAAsBY,MAAMZ,wBAAwB;gBAC1D,MAAMa,sBACJ,OAAOD,MAAMC,wBAAwB,YAAYD,KAAKC,mBAAmB,GAAG;gBAC9E,MAAMC,8BACJ,OAAOF,MAAME,gCAAgC,YACzCF,KAAKE,2BAA2B,GAChC;gBACN,MAAMC,eACJ,OAAOH,MAAMtB,6BAA6B,WAAWsB,KAAKtB,wBAAwB,GAAG;gBACvF,MAAM0B,mBAAmBD,aAAajB,IAAI;gBAE1C,IAAIxB,SAAS,MAAMzB,8BAA8B2D;gBACjD,MAAMS,iBAAiBlE,wBAAwBuB;gBAC/C,MAAM4C,0BAA0B5C,OAAOgB,wBAAwB,CAACQ,IAAI;gBACpE,MAAMqB,iBAAiBD,wBAAwBnB,MAAM,GAAG;gBACxD,MAAMqB,qBAAqB1D,mCACzBsD,kBACAG;gBAEF,MAAME,aAAaD,qBAAqBF,0BAA0BF;gBAElE,2FAA2F;gBAC3F,yFAAyF;gBACzF,IAAIM,wBAAqDhD,OAAOa,gBAAgB;gBAChF,IAAI,CAACiC,oBAAoB;oBACvB,IAAIC,WAAWtB,MAAM,KAAK,GAAG;wBAC3BuB,wBAAwB;oBAC1B,OAAO;wBACL,MAAMC,aAAa,MAAMrE,wBAAwBmE;wBACjD,IAAI,CAACE,WAAWC,EAAE,EAAE;4BAClB,OAAOjB,SAASE,IAAI,CAClB;gCAAEgB,OAAO,CAAC,qBAAqB,EAAEF,WAAWE,KAAK,IAAI,iBAAiB;4BAAC,GACvE;gCAAEC,QAAQ;4BAAI;wBAElB;wBACAJ,wBAAwBC,WAAWI,MAAM,IAAI;oBAC/C;gBACF;gBAEA,IAAI,CAACrD,OAAOY,EAAE,EAAE;oBACd,MAAMsB,QAAQoB,MAAM,CAAC;wBACnBC,YAAYjF;wBACZkF,MAAM;4BACJ3C,kBAAkBmC;4BAClBhC,0BAA0B+B;4BAC1B9B;4BACAS;4BACAE,sBAAsBjD,kBAAkBiD;wBAC1C;wBACA6B,gBAAgB;oBAClB;gBACF,OAAO;oBACL,MAAMvB,QAAQwB,MAAM,CAAC;wBACnB9C,IAAIZ,OAAOY,EAAE;wBACb2C,YAAYjF;wBACZkF,MAAM;4BACJ3C,kBAAkBmC;4BAClBhC,0BAA0B+B;4BAC1B9B;4BACAS;4BACAE,sBAAsBjD,kBAAkBiD;wBAC1C;wBACA6B,gBAAgB;oBAClB;gBACF;gBAEAzD,SAAS,MAAMzB,8BAA8B2D;gBAC7C,IAAI,CAAClC,OAAOY,EAAE,EAAE;oBACd,OAAOqB,SAASE,IAAI,CAAC;wBAAEgB,OAAO;oBAAoC,GAAG;wBAAEC,QAAQ;oBAAI;gBACrF;gBAEA,MAAMlD,aAAahB;gBACnB,MAAMiB,mBACJD,YAAYmB,YAAY,OAAOpC,qBAAqBiB,WAAWmB,QAAQ,IAAI;gBAE7E,MAAMsC,eAAe3D,OAAOgB,wBAAwB,CAACQ,IAAI;gBACzD,wFAAwF;gBACxF,2DAA2D;gBAC3D,MAAMoC,yBACJhB,wBAAwBnB,MAAM,GAAG,IAC7BmB,0BACA,AAACiB,CAAAA,QAAQC,GAAG,CAACC,qBAAqB,IAAI,EAAC,EAAGvC,IAAI;gBAEpD,MAAMwC,+BACJL,aAAalC,MAAM,GAAG,KACtBmC,uBAAuBnC,MAAM,GAAG,KAChCkC,iBAAiBC;gBAEnB,IAAI,CAACrB,uBAAuB,CAACyB,8BAA8B;oBACzD,OAAO/B,SAASE,IAAI,CAClBpC,kBAAkBC,QAAQC,SAASC,YAAYC,kBAAkB;wBAC/DG,UAAU;wBACVC,QAAQ;wBACRC,WAAW;wBACXC,SAAS;wBACTC,OAAO;wBACPC,aAAa;oBACf;gBAEJ;gBAEA,MAAMsD,cAAcvF,uBAAuBsB;gBAC3C,MAAMkE,eAAezF,wBAAwBuB;gBAC7C,MAAM,EAAEmE,KAAK,EAAE,GAAG,MAAMhG,KAAK;oBAC3BiG,OAAO;oBACPC,QAAQ;oBACRC,OAAOV;gBACT;gBACA,MAAMlD,QAAQyD,MAAM1C,MAAM;gBAE1B,IAAIf,UAAU,GAAG;oBACf,MAAM6D,UAAU,MAAMlG,2BACpB6D,SACA0B,wBACAK,aACA;wBACEO,kBAAkBhC;wBAClBiC,kBAAkB9B;wBAClBuB;oBACF;oBAEF,OAAOjC,SAASE,IAAI,CAClBpC,kBAAkBC,QAAQC,SAASC,YAAYC,kBAAkB;wBAC/DG,UAAU;wBACVC,QAAQgE,QAAQhE,MAAM;wBACtBC,WAAW;wBACXC,SAAS8D,QAAQ9D,OAAO;wBACxBC,OAAO6D,QAAQ7D,KAAK;wBACpBC,aAAa4D,QAAQ5D,WAAW;oBAClC;gBAEJ;gBAEA,MAAM,EAAE+D,UAAU,EAAEC,MAAM,EAAE,GAAG,MAAM7F,iBACnCoD,SACA,gBACA0C,KAAKC,SAAS,CAAC;oBAAEtE,QAAQ;oBAAGuE,UAAU;oBAAIpE;oBAAOC,aAAa;gBAAE;gBAGlEvC,MACE,AAAC,CAAA;oBACC,IAAI;wBACF,MAAMY,iBAAiBkD,SAASyC,QAAQ;4BACtCI,SAASH,KAAKC,SAAS,CAAC;gCAAEtE,QAAQ;gCAAGuE,UAAU;gCAAIpE;gCAAOC,aAAa;4BAAE;4BACzEyC,QAAQ;wBACV;wBACA,MAAMmB,UAAU,MAAMlG,2BACpB6D,SACA0B,wBACAK,aACA;4BACEO,kBAAkBhC;4BAClBiC,kBAAkB9B;4BAClBuB;4BACAS;wBACF;wBAEF,MAAM9F,mBACJqD,SACAyC,QACAC,KAAKC,SAAS,CAAC;4BACbtE,QAAQgE,QAAQhE,MAAM;4BACtBuE,UAAU;4BACVE,OAAO;4BACPtE,OAAO6D,QAAQ7D,KAAK;4BACpBC,aAAa4D,QAAQ5D,WAAW;wBAClC;oBAEJ,EAAE,OAAOsE,GAAG;wBACV,MAAMlG,eAAemD,SAASyC,QAAQM;wBACtC/C,QAAQgD,MAAM,CAAC/B,KAAK,CAClB;4BAAEgC,KAAKF;4BAAGN;wBAAO,GACjB;oBAEJ;gBACF,CAAA;gBAGF,OAAO1C,SAASE,IAAI,CAClBpC,kBAAkBC,QAAQC,SAASC,YAAYC,kBAAkB;oBAC/DG,UAAU;oBACVC,QAAQ;oBACRC,WAAW;oBACXkE;oBACAjE,SAAS;oBACTkE;oBACAjE;oBACAC,aAAa;gBACf;YAEJ;YACA0B,QAAQ;YACRjB,MAAM;QACR;KACD;AACH"}

package/dist/endpoints/paths/admin-task.d.ts

@@ -0,0 +1,3 @@
+import type { Endpoint } from 'payload';
+import type { BackupPluginOptions } from '../../types';
+export declare function createAdminTaskEndpoint(options: BackupPluginOptions): Endpoint;

package/dist/endpoints/paths/admin-task.js

@@ -0,0 +1,34 @@
+import { getBackupTask, pollSecretsMatch, stripPollSecretForClient } from '../../core/taskProgress';
+import { getAuthorizedBackupAdmin, jsonError } from '../shared';
+export function createAdminTaskEndpoint(options) {
+    return {
+        handler: async (req)=>{
+            const { payload } = req;
+            const id = req.routeParams?.id;
+            if (typeof id !== 'string' || !id) {
+                return jsonError('Not found', 404);
+            }
+            const task = await getBackupTask(payload, id);
+            if (!task) {
+                return jsonError('Not found', 404);
+            }
+            const url = new URL(req.url);
+            const bearer = req.headers.get('authorization')?.match(/^Bearer\s+(\S+)\s*$/i)?.[1];
+            const querySecret = url.searchParams.get('pollSecret');
+            const provided = bearer ?? querySecret ?? '';
+            const storedSecret = typeof task.pollSecret === 'string' ? task.pollSecret : null;
+            const pollOk = storedSecret && provided.length > 0 && pollSecretsMatch(provided, storedSecret);
+            if (!pollOk) {
+                const user = await getAuthorizedBackupAdmin(req, options);
+                if (!user) {
+                    return jsonError('Unauthorized', 401);
+                }
+            }
+            return Response.json(stripPollSecretForClient(task));
+        },
+        method: 'get',
+        path: '/backup-mongodb/admin/task/:id'
+    };
+}
+
+//# sourceMappingURL=admin-task.js.map

package/dist/endpoints/paths/admin-task.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/endpoints/paths/admin-task.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { BackupPluginOptions } from '../../types'\n\nimport { getBackupTask, pollSecretsMatch, stripPollSecretForClient } from '../../core/taskProgress'\nimport { getAuthorizedBackupAdmin, jsonError } from '../shared'\n\nexport function createAdminTaskEndpoint(options: BackupPluginOptions): Endpoint {\n  return {\n    handler: async (req) => {\n      const { payload } = req\n      const id = req.routeParams?.id\n      if (typeof id !== 'string' || !id) {\n        return jsonError('Not found', 404)\n      }\n\n      const task = await getBackupTask(payload, id)\n\n      if (!task) {\n        return jsonError('Not found', 404)\n      }\n\n      const url = new URL((req as unknown as Request).url)\n      const bearer = req.headers.get('authorization')?.match(/^Bearer\\s+(\\S+)\\s*$/i)?.[1]\n      const querySecret = url.searchParams.get('pollSecret')\n      const provided = bearer ?? querySecret ?? ''\n\n      const storedSecret = typeof task.pollSecret === 'string' ? task.pollSecret : null\n      const pollOk = storedSecret && provided.length > 0 && pollSecretsMatch(provided, storedSecret)\n\n      if (!pollOk) {\n        const user = await getAuthorizedBackupAdmin(req, options)\n        if (!user) {\n          return jsonError('Unauthorized', 401)\n        }\n      }\n\n      return Response.json(stripPollSecretForClient(task))\n    },\n    method: 'get',\n    path: '/backup-mongodb/admin/task/:id',\n  }\n}\n"],"names":["getBackupTask","pollSecretsMatch","stripPollSecretForClient","getAuthorizedBackupAdmin","jsonError","createAdminTaskEndpoint","options","handler","req","payload","id","routeParams","task","url","URL","bearer","headers","get","match","querySecret","searchParams","provided","storedSecret","pollSecret","pollOk","length","user","Response","json","method","path"],"mappings":"AAIA,SAASA,aAAa,EAAEC,gBAAgB,EAAEC,wBAAwB,QAAQ,0BAAyB;AACnG,SAASC,wBAAwB,EAAEC,SAAS,QAAQ,YAAW;AAE/D,OAAO,SAASC,wBAAwBC,OAA4B;IAClE,OAAO;QACLC,SAAS,OAAOC;YACd,MAAM,EAAEC,OAAO,EAAE,GAAGD;YACpB,MAAME,KAAKF,IAAIG,WAAW,EAAED;YAC5B,IAAI,OAAOA,OAAO,YAAY,CAACA,IAAI;gBACjC,OAAON,UAAU,aAAa;YAChC;YAEA,MAAMQ,OAAO,MAAMZ,cAAcS,SAASC;YAE1C,IAAI,CAACE,MAAM;gBACT,OAAOR,UAAU,aAAa;YAChC;YAEA,MAAMS,MAAM,IAAIC,IAAI,AAACN,IAA2BK,GAAG;YACnD,MAAME,SAASP,IAAIQ,OAAO,CAACC,GAAG,CAAC,kBAAkBC,MAAM,yBAAyB,CAAC,EAAE;YACnF,MAAMC,cAAcN,IAAIO,YAAY,CAACH,GAAG,CAAC;YACzC,MAAMI,WAAWN,UAAUI,eAAe;YAE1C,MAAMG,eAAe,OAAOV,KAAKW,UAAU,KAAK,WAAWX,KAAKW,UAAU,GAAG;YAC7E,MAAMC,SAASF,gBAAgBD,SAASI,MAAM,GAAG,KAAKxB,iBAAiBoB,UAAUC;YAEjF,IAAI,CAACE,QAAQ;gBACX,MAAME,OAAO,MAAMvB,yBAAyBK,KAAKF;gBACjD,IAAI,CAACoB,MAAM;oBACT,OAAOtB,UAAU,gBAAgB;gBACnC;YACF;YAEA,OAAOuB,SAASC,IAAI,CAAC1B,yBAAyBU;QAChD;QACAiB,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/paths/admin-validate-blob-token.d.ts

@@ -0,0 +1,8 @@
+import type { Endpoint } from 'payload';
+import type { BackupPluginOptions } from '../../types';
+/**
+ * Admin-only validation endpoint for a (candidate) Vercel Blob read/write token. Probes the store
+ * by uploading and deleting a tiny marker file and reports back whether the token is usable and
+ * which access level (public/private) the store accepts.
+ */
+export declare function createAdminValidateBlobTokenEndpoint(options: BackupPluginOptions): Endpoint;

package/dist/endpoints/paths/admin-validate-blob-token.js

@@ -0,0 +1,26 @@
+import { validateBackupBlobToken } from '../../core/blobTokenValidate';
+import { readRequestJson, requireBackupAdmin } from '../shared';
+/**
+ * Admin-only validation endpoint for a (candidate) Vercel Blob read/write token. Probes the store
+ * by uploading and deleting a tiny marker file and reports back whether the token is usable and
+ * which access level (public/private) the store accepts.
+ */ export function createAdminValidateBlobTokenEndpoint(options) {
+    return {
+        handler: async (req)=>{
+            const auth = await requireBackupAdmin(req, options);
+            if (auth instanceof Response) {
+                return auth;
+            }
+            const body = await readRequestJson(req);
+            const token = typeof body?.token === 'string' ? body.token : '';
+            const result = await validateBackupBlobToken(token);
+            return Response.json(result, {
+                status: result.ok ? 200 : 422
+            });
+        },
+        method: 'post',
+        path: '/backup-mongodb/admin/validate-blob-token'
+    };
+}
+
+//# sourceMappingURL=admin-validate-blob-token.js.map