@vibesdotdev/storage 0.0.2 → 1.0.0-rc.4

package/dist/backup/core/rotate.js

@@ -0,0 +1,153 @@
+/**
+ * Applying a target's declared rotation to its stored snapshots.
+ *
+ * Rotation runs as its own step, before a job's snapshots and independent of
+ * their outcome, so a run that hangs or fails never leaves old snapshots in
+ * place. For one target run (one destination directory, one home):
+ *
+ * - `planRotation` (successful rows only) names the superseded snapshots;
+ * - a superseded snapshot is pruned only when every file it recorded is a
+ *   regular file lexically inside the destination directory (never a link,
+ *   never a path elsewhere); anything else skips that snapshot, reported, and
+ *   leaves its row untouched;
+ * - stale staging (`<name>.<timestamp>.vacuum` and its `.vacuum-journal`) is a
+ *   leftover of a VACUUM INTO that never finished: stale when a later run of
+ *   this target has since started (its timestamp precedes the newest recorded
+ *   run's start), so an in-flight run's staging is never touched.
+ *
+ * `planTargetRotation` only reads. `applyTargetRotation` removes exactly the
+ * planned paths, each re-checked as a regular file, and marks the pruned rows
+ * `pruned`; a dry run reports the plan without calling it.
+ */
+import { settle, valueFreeFailure } from "@vibesdotdev/kernel";
+import { hostStat } from "../../host-files.js";
+import { backupEntryKind } from "./io.js";
+import { planRotation } from "./rotation.js";
+/** One superseded snapshot and the recorded files its pruning removes. */
+/** A superseded snapshot left in place, and why. */
+/** A stale staging file the sweep removes. */
+/** Records per page when a target's provenance is read. */
+const PROVENANCE_PAGE = 200;
+/** Every provenance row of one target run (a per-home run reads only its home's rows). */
+export async function targetRecords(store, targetId, home) {
+    const rows = [];
+    for (let offset = 0;; offset += PROVENANCE_PAGE) {
+        const page = await store.list({ where: { targetId }, limit: PROVENANCE_PAGE, offset });
+        rows.push(...page.items);
+        if (!page.hasMore || page.items.length === 0)
+            break;
+    }
+    return rows.filter((row) => (row.home ?? null) === home);
+}
+/** `<name>.<YYYY-MM-DDTHH-MM-SS-mmmZ>` as `snapshotPathFor` writes it, back to epoch ms. */
+function stagingStartedMs(name) {
+    const match = /\.(\d{4}-\d{2}-\d{2})T(\d{2})-(\d{2})-(\d{2})-(\d{3})Z\.vacuum(?:-journal)?$/.exec(name);
+    if (!match)
+        return null;
+    const [, day, h, m, s, ms] = match;
+    const parsed = Date.parse(`${day}T${h}:${m}:${s}.${ms}Z`);
+    return Number.isNaN(parsed) ? null : parsed;
+}
+/**
+ * Whether `path` lies lexically under `destDir`. Recorded paths are joined by
+ * the snapshot (already normal); one with a `.` or `..` segment is never
+ * inside. The destination itself may be a link the user placed (a volume
+ * elsewhere); only the files under it are checked as regular files.
+ */
+function inside(io, destDir, path) {
+    if (!io.path.isAbsolute(path) || path.split(/[\\/]/).some((segment) => segment === "." || segment === ".."))
+        return false;
+    for (let current = io.path.dirname(path); current !== io.path.dirname(current); current = io.path.dirname(current)) {
+        if (current === destDir)
+            return true;
+    }
+    return false;
+}
+/** What applying `policy` to one target run would do; reads only. */
+export async function planTargetRotation(io, input) {
+    const decision = planRotation(input.records, input.policy);
+    const prune = [];
+    const skipped = [];
+    for (const record of decision.prune) {
+        const files = [];
+        let skip;
+        for (const file of record.files) {
+            if (!inside(io, input.destDir, file.path)) {
+                skip = "backup-rotation-file-outside-destination";
+                break;
+            }
+            const kind = await backupEntryKind(io, file.path);
+            if (kind === "missing")
+                continue; // already gone: nothing to remove, the row is still superseded
+            if (kind !== "file") {
+                skip = "backup-rotation-file-not-regular";
+                break;
+            }
+            files.push({ path: file.path, bytes: file.bytes });
+        }
+        if (skip)
+            skipped.push({ snapshotId: record.id, reason: skip });
+        else
+            prune.push({ snapshotId: record.id, startedAt: new Date(record.startedAt).toISOString(), files, bytes: files.reduce((sum, f) => sum + f.bytes, 0) });
+    }
+    const newestStart = Math.max(Number.NEGATIVE_INFINITY, ...input.records.map((row) => new Date(row.startedAt).getTime()));
+    const staging = [];
+    if ((await backupEntryKind(io, input.destDir)) !== "missing") {
+        for (const entry of await io.fs.list(input.destDir)) {
+            if (entry.kind !== "file")
+                continue;
+            const started = stagingStartedMs(entry.name);
+            if (started === null || !(started < newestStart))
+                continue;
+            const path = io.path.join(input.destDir, entry.name);
+            const stat = await hostStat(io.fs, path);
+            if (stat?.kind === "file")
+                staging.push({ path, bytes: stat.size });
+        }
+    }
+    return {
+        targetId: input.targetId,
+        home: input.home,
+        destDir: input.destDir,
+        kept: decision.keep.length,
+        prune,
+        skipped,
+        staging,
+        pruneBytes: prune.reduce((sum, p) => sum + p.bytes, 0),
+        stagingBytes: staging.reduce((sum, s) => sum + s.bytes, 0),
+    };
+}
+/** Remove exactly the planned paths (each still a regular file) and mark the pruned rows. */
+export async function applyTargetRotation(io, store, plan) {
+    const outcome = { pruned: [], removedBytes: 0, failures: [] };
+    const removeFile = async (path, bytes) => {
+        const removed = await settle(async () => {
+            if ((await backupEntryKind(io, path)) !== "file")
+                return 0; // gone, or no longer a regular file: never followed
+            await io.fs.remove(path);
+            return bytes;
+        });
+        if (!removed.ok) {
+            outcome.failures.push({ path, failure: valueFreeFailure(removed.cause) });
+            return false;
+        }
+        outcome.removedBytes += removed.value;
+        return true;
+    };
+    for (const entry of plan.prune) {
+        let complete = true;
+        for (const file of entry.files)
+            complete = (await removeFile(file.path, file.bytes)) && complete;
+        if (!complete)
+            continue; // a row is marked pruned only when every one of its files is gone
+        const marked = await settle(() => store.update(entry.snapshotId, { status: "pruned" }));
+        if (marked.ok)
+            outcome.pruned.push(entry.snapshotId);
+        else
+            outcome.failures.push({ path: entry.snapshotId, failure: valueFreeFailure(marked.cause) });
+    }
+    for (const stale of plan.staging)
+        await removeFile(stale.path, stale.bytes);
+    return outcome;
+}
+//# sourceMappingURL=rotate.js.map

package/dist/backup/core/rotate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate.js","sourceRoot":"","sources":["../../../src/backup/core/rotate.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG/C,OAAO,EAAE,eAAe,EAAiB,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,0EAA0E;AAG1E,oDAAoD;AAGpD,8CAA8C;AAE9C,2DAA2D;AAC3D,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA2D,EAC3D,QAAgB,EAChB,IAAmB;IAEnB,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,4FAA4F;AAC5F,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,EAAY,EAAE,OAAe,EAAE,IAAY;IACzD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1H,KAAK,IAAI,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnH,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAY,EACZ,KAA0H;IAE1H,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,IAAI,IAAwC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,GAAG,0CAA0C,CAAC;gBAClD,MAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,+DAA+D;YACjG,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,GAAG,kCAAkC,CAAC;gBAC1C,MAAM;YACR,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5J,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,GAAG,WAAW,CAAC;gBAAE,SAAS;YAC3D,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;QAC1B,KAAK;QACL,OAAO;QACP,OAAO;QACP,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAY,EACZ,KAA6D,EAC7D,IAAwB;IAExB,MAAM,OAAO,GAA0B,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAE,KAAa,EAAoB,EAAE;QACzE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,CAAC,CAAC,oDAAoD;YAChH,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;YAAE,QAAQ,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC;QACjG,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,kEAAkE;QAC3F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;;YAChD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/backup/core/rotation.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Snapshot rotation — given a list of provenance records for a single
+ * target, decide which snapshot ids to retain and which to prune.
+ *
+ * Buckets:
+ *  - daily: most recent N successful snapshots per day
+ *  - weekly: most recent successful snapshot per ISO week, beyond the daily window
+ *  - monthly: most recent successful snapshot per calendar month, beyond the weekly window
+ *  - forever: when `keepForever` is true, never prune anything (rotation only marks).
+ */
+import type { BackupRotationPolicy } from "../schemas/target.ts";
+import type { SnapshotRecord } from "../schemas/snapshot.ts";
+export interface RotationDecision {
+    keep: SnapshotRecord[];
+    prune: SnapshotRecord[];
+    tags: Map<string, string>;
+}
+export declare function planRotation(snapshots: SnapshotRecord[], policy: BackupRotationPolicy): RotationDecision;
+//# sourceMappingURL=rotation.d.ts.map

package/dist/backup/core/rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotation.d.ts","sourceRoot":"","sources":["../../../src/backup/core/rotation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3B;AAqCD,wBAAgB,YAAY,CAC1B,SAAS,EAAE,cAAc,EAAE,EAC3B,MAAM,EAAE,oBAAoB,GAC3B,gBAAgB,CA8DlB"}

package/dist/backup/core/rotation.js

@@ -0,0 +1,100 @@
+/**
+ * Snapshot rotation — given a list of provenance records for a single
+ * target, decide which snapshot ids to retain and which to prune.
+ *
+ * Buckets:
+ *  - daily: most recent N successful snapshots per day
+ *  - weekly: most recent successful snapshot per ISO week, beyond the daily window
+ *  - monthly: most recent successful snapshot per calendar month, beyond the weekly window
+ *  - forever: when `keepForever` is true, never prune anything (rotation only marks).
+ */
+function dayKey(d) {
+    return d.toISOString().slice(0, 10); // YYYY-MM-DD
+}
+function isoWeekKey(d) {
+    // ISO week, simplified — `YYYY-Www`
+    const target = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+    const dayNum = (target.getUTCDay() + 6) % 7;
+    target.setUTCDate(target.getUTCDate() - dayNum + 3);
+    const firstThursday = target.valueOf();
+    target.setUTCMonth(0, 1);
+    if (target.getUTCDay() !== 4) {
+        target.setUTCMonth(0, 1 + ((4 - target.getUTCDay() + 7) % 7));
+    }
+    const weekNo = 1 + Math.ceil((firstThursday - target.valueOf()) / (7 * 24 * 3600 * 1000));
+    return `${d.getUTCFullYear()}-W${String(weekNo).padStart(2, "0")}`;
+}
+function monthKey(d) {
+    return d.toISOString().slice(0, 7); // YYYY-MM
+}
+/** A run's start as epoch milliseconds, whether the row holds an ISO string or a Date. */
+function startedMs(snapshot) {
+    return new Date(snapshot.startedAt).getTime();
+}
+/** Only a successful snapshot is a rotation candidate: it is the one kind a later success supersedes. */
+function isSuccessful(snapshot) {
+    return snapshot.status === "success" || snapshot.status === "verified";
+}
+export function planRotation(snapshots, policy) {
+    // Only successful snapshots fill keep buckets or are pruned. Failed, pending,
+    // empty and already-pruned rows are always kept: they are a run's record
+    // (diagnostics), never a superseded copy of the data.
+    const successful = snapshots
+        .filter(isSuccessful)
+        .sort((a, b) => startedMs(b) - startedMs(a)); // newest first
+    const keepIds = new Set();
+    const tags = new Map();
+    const dailySeen = new Map();
+    for (const s of successful) {
+        const k = dayKey(new Date(s.startedAt));
+        if (dailySeen.has(k))
+            continue;
+        dailySeen.set(k, s);
+        if (dailySeen.size <= policy.keepDaily) {
+            keepIds.add(s.id);
+            tags.set(s.id, `daily:${k}`);
+        }
+    }
+    const weeklySeen = new Map();
+    for (const s of successful) {
+        const k = isoWeekKey(new Date(s.startedAt));
+        if (weeklySeen.has(k))
+            continue;
+        weeklySeen.set(k, s);
+        if (weeklySeen.size <= policy.keepWeekly && !keepIds.has(s.id)) {
+            keepIds.add(s.id);
+            tags.set(s.id, `weekly:${k}`);
+        }
+    }
+    if (policy.keepMonthly > 0) {
+        const monthlySeen = new Map();
+        for (const s of successful) {
+            const k = monthKey(new Date(s.startedAt));
+            if (monthlySeen.has(k))
+                continue;
+            monthlySeen.set(k, s);
+            if (monthlySeen.size <= policy.keepMonthly && !keepIds.has(s.id)) {
+                keepIds.add(s.id);
+                tags.set(s.id, `monthly:${k}`);
+            }
+        }
+    }
+    if (policy.keepForever) {
+        // keepForever overrides — nothing gets pruned.
+        return {
+            keep: snapshots,
+            prune: [],
+            tags,
+        };
+    }
+    const keep = [];
+    const prune = [];
+    for (const s of snapshots) {
+        if (isSuccessful(s) && !keepIds.has(s.id))
+            prune.push(s);
+        else
+            keep.push(s);
+    }
+    return { keep, prune, tags };
+}
+//# sourceMappingURL=rotation.js.map

package/dist/backup/core/rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotation.js","sourceRoot":"","sources":["../../../src/backup/core/rotation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,SAAS,MAAM,CAAC,CAAO;IACrB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,CAAO;IACzB,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,IAAI,CACrB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAC9D,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACvC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GACV,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAO;IACvB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU;AAChD,CAAC;AAED,0FAA0F;AAC1F,SAAS,SAAS,CAAC,QAAwB;IACzC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,yGAAyG;AACzG,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,SAA2B,EAC3B,MAA4B;IAE5B,8EAA8E;IAC9E,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,UAAU,GAAG,SAAS;SACzB,MAAM,CAAC,YAAY,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;IAE/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/B,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrB,IAAI,UAAU,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1C,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,+CAA+C;QAC/C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,EAAE;YACT,IAAI;SACL,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACpD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/backup/core/snapshot.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Snapshot core — runs a single `BackupTargetDescriptor` against the host
+ * filesystem through the runtime's kinds (`./io.ts`): no host API of its own.
+ *
+ * Supported source kinds:
+ *  - `sqlite`: `VACUUM INTO` through LocalDB's SQLite driver kind, for an
+ *    atomic, compacted snapshot that is then verified (tables, row count)
+ *  - `file`: byte copy + sha256
+ *  - `directory`: recursive byte copy, bounded in depth and entry count
+ *
+ * Every declared file that exists is copied: the primary and each sidecar.
+ * A missing primary never short-circuits (config.home keeps its key before
+ * config.json exists); none of them existing is the distinct `empty` outcome.
+ *
+ * Links are never followed or copied. A source, sidecar or directory entry
+ * that is a symbolic link is skipped and the run fails once with the typed,
+ * value-free `backup-source-symlink` reason; what else exists is still kept.
+ * Every snapshot file is written owner-only (0600).
+ */
+import type { BackupTargetDescriptor } from "../schemas/target.ts";
+import type { SnapshotResult } from "../schemas/snapshot.ts";
+import { type ResolvedTargetPaths } from "./paths.ts";
+import { type BackupIo } from "./io.ts";
+/** One run's outcome from the core: the job adds the run's home and preflight notices. */
+export type SnapshotCoreResult = Omit<SnapshotResult, "notices" | "home"> & {
+    home?: string;
+};
+export interface RunSnapshotOptions {
+    /** Snapshot id provided by caller (so caller can record provenance with same id). */
+    snapshotId: string;
+    /** Now-ish timestamp used for filename derivation. */
+    timestamp: string;
+    /** Skip sha256 (faster, less safe) — default: false. */
+    skipHash?: boolean;
+    /** The target's paths, resolved on the caller's runtime (`resolveTargetPaths`). */
+    paths: ResolvedTargetPaths;
+    /** The run's host capabilities (`backupIoOf(runtime)`). */
+    io: BackupIo;
+}
+/** The outcome text of a target none of whose declared files exist (status `empty`). */
+export declare const BACKUP_TARGET_EMPTY = "backup-target-empty: none of the target's declared files exist; nothing was snapshotted";
+/** The outcome text of a run that skipped one or more symbolic links (status `failed`). */
+export declare const BACKUP_SOURCE_SYMLINK = "backup-source-symlink: a source entry is a symbolic link; links are never followed or copied";
+export declare function runSnapshot(target: BackupTargetDescriptor, options: RunSnapshotOptions): Promise<SnapshotCoreResult>;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/backup/core/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/backup/core/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEvE,OAAO,EAAmI,KAAK,QAAQ,EAAmB,MAAM,SAAS,CAAC;AAE1L,0FAA0F;AAC1F,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,KAAK,EAAE,mBAAmB,CAAC;IAC3B,2DAA2D;IAC3D,EAAE,EAAE,QAAQ,CAAC;CACd;AAED,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,4FAC2D,CAAC;AAE5F,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB,iGAC8D,CAAC;AAkHjG,wBAAsB,WAAW,CAC/B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CA0F7B"}

package/dist/backup/core/snapshot.js

@@ -0,0 +1,217 @@
+/**
+ * Snapshot core — runs a single `BackupTargetDescriptor` against the host
+ * filesystem through the runtime's kinds (`./io.ts`): no host API of its own.
+ *
+ * Supported source kinds:
+ *  - `sqlite`: `VACUUM INTO` through LocalDB's SQLite driver kind, for an
+ *    atomic, compacted snapshot that is then verified (tables, row count)
+ *  - `file`: byte copy + sha256
+ *  - `directory`: recursive byte copy, bounded in depth and entry count
+ *
+ * Every declared file that exists is copied: the primary and each sidecar.
+ * A missing primary never short-circuits (config.home keeps its key before
+ * config.json exists); none of them existing is the distinct `empty` outcome.
+ *
+ * Links are never followed or copied. A source, sidecar or directory entry
+ * that is a symbolic link is skipped and the run fails once with the typed,
+ * value-free `backup-source-symlink` reason; what else exists is still kept.
+ * Every snapshot file is written owner-only (0600).
+ */
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from "@vibesdotdev/kernel";
+import { snapshotPathFor } from "./paths.js";
+import { chmodChecked } from "@vibesdotdev/filesystem";
+import { BACKUP_DIRECTORY_MAX_DEPTH, BACKUP_DIRECTORY_MAX_ENTRIES, BACKUP_FILE_MODE, backupEntryKind, copyFileNoFollow, hashFileNoFollow } from "./io.js";
+/** The outcome text of a target none of whose declared files exist (status `empty`). */
+export const BACKUP_TARGET_EMPTY = "backup-target-empty: none of the target's declared files exist; nothing was snapshotted";
+/** The outcome text of a run that skipped one or more symbolic links (status `failed`). */
+export const BACKUP_SOURCE_SYMLINK = "backup-source-symlink: a source entry is a symbolic link; links are never followed or copied";
+/** A failure's value-free facts on one line (`CapabilityError INVALID_INPUT backup-source-kind-mismatch`). */
+function failureLine(facts) {
+    return [facts.name, facts.code, facts.reason].filter((part) => part !== undefined).join(" ");
+}
+function recordFile(state, destPath, hashed, source) {
+    const file = { path: destPath, bytes: hashed.bytes, source };
+    if (!state.skipHash)
+        file.sha256 = hashed.sha256;
+    state.files.push(file);
+}
+/** Copy one regular file in chunks, never through a link. */
+async function copyFile(state, sourcePath, destPath, source) {
+    recordFile(state, destPath, await copyFileNoFollow(state.io, sourcePath, destPath, state.targetId), source);
+}
+/** `"` doubled: a SQLite identifier quoted from `sqlite_master`. */
+function quoteIdentifier(name) {
+    return `"${name.replace(/"/g, '""')}"`;
+}
+async function snapshotSqlite(state, sourcePath, destPath, source) {
+    const { io } = state;
+    const driver = await io.sqlite();
+    const staging = `${destPath}.vacuum`;
+    await io.fs.mkdir(io.path.dirname(destPath), { recursive: true, mode: 0o700 });
+    try {
+        const src = driver.open(sourcePath, { readonly: true, create: false });
+        try {
+            // VACUUM INTO writes a clean, compacted copy; quotes are doubled for the literal.
+            src.exec(`VACUUM INTO '${staging.replace(/'/g, "''")}'`);
+        }
+        finally {
+            src.close();
+        }
+        // Made owner-only, then moved into place (same directory: no copy).
+        await chmodChecked(io.fs, staging, BACKUP_FILE_MODE);
+        await io.fs.rename(staging, destPath);
+    }
+    finally {
+        if ((await backupEntryKind(io, staging)) === "file")
+            await io.fs.remove(staging);
+    }
+    const dst = driver.open(destPath, { readonly: true, create: false });
+    try {
+        const tablesSeen = dst
+            .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'")
+            .all()
+            .map((row) => row.name);
+        let rowCount = 0;
+        for (const table of tablesSeen) {
+            rowCount += dst.prepare(`SELECT COUNT(*) AS n FROM ${quoteIdentifier(table)}`).get()?.n ?? 0;
+        }
+        recordFile(state, destPath, await hashFileNoFollow(io, destPath, state.targetId), source);
+        return { rowCount, tablesSeen };
+    }
+    finally {
+        dst.close();
+    }
+}
+/** Copy a directory tree, skipping (and counting) links, bounded in depth and entries. */
+async function snapshotDirectory(state, sourceDir, destDir, relative, depth) {
+    const { io } = state;
+    if (depth > BACKUP_DIRECTORY_MAX_DEPTH || state.files.length > BACKUP_DIRECTORY_MAX_ENTRIES) {
+        throw new CapabilityError("A directory backup source exceeds the declared walk bounds.", "INVALID_INPUT", {
+            reason: "backup-source-too-large",
+            retryable: false,
+            details: { targetId: state.targetId, maxDepth: BACKUP_DIRECTORY_MAX_DEPTH, maxEntries: BACKUP_DIRECTORY_MAX_ENTRIES },
+        });
+    }
+    await io.fs.mkdir(destDir, { recursive: true, mode: 0o700 });
+    const entries = [...(await io.fs.list(sourceDir))].sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+    for (const entry of entries) {
+        const src = io.path.join(sourceDir, entry.name);
+        const dst = io.path.join(destDir, entry.name);
+        const rel = relative ? `${relative}/${entry.name}` : entry.name;
+        if (entry.kind === "symlink") {
+            state.symlinks += 1;
+        }
+        else if (entry.kind === "directory") {
+            await snapshotDirectory(state, src, dst, rel, depth + 1);
+        }
+        else if (entry.kind === "file") {
+            await copySkippingLink(state, src, dst, rel);
+        }
+    }
+}
+/**
+ * Copy a file, or skip and count it when it is a link. A link that appears
+ * after this check (a race) is still never followed: the no-follow read
+ * refuses it and the run fails typed (`backup-source-symlink`).
+ */
+async function copySkippingLink(state, sourcePath, destPath, source) {
+    if ((await backupEntryKind(state.io, sourcePath)) === "symlink") {
+        state.symlinks += 1;
+        return;
+    }
+    await copyFile(state, sourcePath, destPath, source);
+}
+export async function runSnapshot(target, options) {
+    const startedAt = Date.now();
+    const { sourcePath, destDir } = options.paths;
+    const { io } = options;
+    const state = {
+        io,
+        targetId: target.id,
+        timestamp: options.timestamp,
+        skipHash: options.skipHash ?? false,
+        files: [],
+        symlinks: 0,
+    };
+    const outcome = (status, rowCount, error) => ({
+        targetId: target.id,
+        snapshotId: options.snapshotId,
+        status,
+        files: state.files,
+        rowCount,
+        durationMs: Date.now() - startedAt,
+        error,
+    });
+    let rowCount = null;
+    const tablesSeen = [];
+    let primary = "missing";
+    try {
+        const primaryName = io.path.basename(sourcePath);
+        primary = await backupEntryKind(io, sourcePath);
+        const destPath = snapshotPathFor(io.path, destDir, sourcePath, options.timestamp);
+        if (primary === "symlink") {
+            state.symlinks += 1;
+        }
+        else if (primary === "file" && target.source.kind === "sqlite") {
+            const probe = await snapshotSqlite(state, sourcePath, destPath, primaryName);
+            rowCount = probe.rowCount;
+            tablesSeen.push(...probe.tablesSeen);
+        }
+        else if (primary === "file" && target.source.kind === "file") {
+            await copySkippingLink(state, sourcePath, destPath, primaryName);
+        }
+        else if (primary === "directory" && target.source.kind === "directory") {
+            await snapshotDirectory(state, sourcePath, destPath, primaryName, 0);
+        }
+        else if (primary !== "missing") {
+            // A primary of another kind than declared (e.g. a directory where a file is declared).
+            throw new CapabilityError("A backup source is not the kind its target declares.", "INVALID_INPUT", {
+                reason: "backup-source-kind-mismatch",
+                retryable: false,
+                details: { targetId: target.id, declared: target.source.kind, found: primary },
+            });
+        }
+        // Sidecars (siblings of source — e.g. .key for identity, -wal/-shm for sqlite).
+        for (const sidecarName of target.source.sidecars) {
+            const sidecarSrc = io.path.join(io.path.dirname(sourcePath), sidecarName);
+            const kind = await backupEntryKind(io, sidecarSrc);
+            if (kind === "missing")
+                continue;
+            if (kind === "symlink") {
+                state.symlinks += 1;
+                continue;
+            }
+            await copySkippingLink(state, sidecarSrc, snapshotPathFor(io.path, destDir, sidecarSrc, options.timestamp), sidecarName);
+        }
+    }
+    catch (err) {
+        // The run's value-free facts (class, code, reason), never a thrown text that may name a path.
+        const failure = CaughtFailureSchema.parse(err);
+        return { ...outcome("failed", rowCount, failureLine(valueFreeFailure(failure))), failure: valueFreeFailure(failure) };
+    }
+    if (state.symlinks > 0) {
+        // Reported once for the run, value-free: what else exists was kept.
+        return outcome("failed", rowCount, `${BACKUP_SOURCE_SYMLINK} (${state.symlinks} skipped)`);
+    }
+    if (primary === "missing") {
+        if (target.source.required)
+            return outcome("failed", null, `source missing: ${sourcePath}`);
+        // Nothing the target declares exists: a distinct outcome, never success.
+        if (state.files.length === 0)
+            return outcome("empty", null, BACKUP_TARGET_EMPTY);
+        // The primary is optional and absent: what exists is kept; its table
+        // expectations have nothing to verify.
+        return outcome("success", null, null);
+    }
+    // Verification expectations
+    if (target.verify.minRows && rowCount !== null && rowCount < target.verify.minRows) {
+        return outcome("failed", rowCount, `verify failed: rowCount ${rowCount} < minRows ${target.verify.minRows}`);
+    }
+    for (const requiredTable of target.verify.requiredTables) {
+        if (!tablesSeen.includes(requiredTable)) {
+            return outcome("failed", rowCount, `verify failed: required table missing: ${requiredTable}`);
+        }
+    }
+    return outcome("verified", rowCount, null);
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/backup/core/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/backup/core/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAyB,MAAM,qBAAqB,CAAC;AAIpH,OAAO,EAAE,eAAe,EAA4B,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAkC,MAAM,SAAS,CAAC;AAkB1L,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,yFAAyF,CAAC;AAE5F,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAChC,8FAA8F,CAAC;AAEjG,8GAA8G;AAC9G,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/F,CAAC;AAaD,SAAS,UAAU,CAAC,KAAe,EAAE,QAAgB,EAAE,MAAkB,EAAE,MAAc;IACvF,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,UAAkB,EAAE,QAAgB,EAAE,MAAc;IAC3F,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9G,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAAe,EACf,UAAkB,EAClB,QAAgB,EAChB,MAAc;IAEd,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,GAAG,QAAQ,SAAS,CAAC;IACrC,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,kFAAkF;YAClF,GAAG,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QACD,oEAAoE;QACpE,MAAM,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,MAAM;YAAE,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG;aACnB,OAAO,CAAmB,gFAAgF,CAAC;aAC3G,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAgB,6BAA6B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9G,CAAC;QACD,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,iBAAiB,CAAC,KAAe,EAAE,SAAiB,EAAE,OAAe,EAAE,QAAgB,EAAE,KAAa;IACnH,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,GAAG,0BAA0B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,6DAA6D,EAAE,eAAe,EAAE;YACxG,MAAM,EAAE,yBAAyB;YACjC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,0BAA0B,EAAE,UAAU,EAAE,4BAA4B,EAAE;SACtH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,KAAe,EAAE,UAAkB,EAAE,QAAgB,EAAE,MAAc;IACnG,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAChE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA8B,EAC9B,OAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC9C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;IACvB,MAAM,KAAK,GAAa;QACtB,EAAE;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;QACnC,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAgC,EAAE,QAAuB,EAAE,KAAoB,EAAsB,EAAE,CAAC,CAAC;QACxH,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAClC,KAAK;KACN,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,GAAgD,SAAS,CAAC;IAErE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC7E,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/D,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACzE,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,uFAAuF;YACvF,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,eAAe,EAAE;gBACjG,MAAM,EAAE,6BAA6B;gBACrC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACnD,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8FAA8F;QAC9F,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACvB,oEAAoE;QACpE,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,qBAAqB,KAAK,KAAK,CAAC,QAAQ,WAAW,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,mBAAmB,UAAU,EAAE,CAAC,CAAC;QAC5F,yEAAyE;QACzE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACjF,qEAAqE;QACrE,uCAAuC;QACvC,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnF,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,QAAQ,cAAc,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,0CAA0C,aAAa,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/backup/docs/backup.disaster-recovery.docs.descriptor.d.ts

@@ -0,0 +1,19 @@
+declare const descriptor: {
+    kind: "docs/topic";
+    id: string;
+    title: string;
+    summary: string;
+    body: {
+        type: "markdown";
+        sourceType: "raw";
+        source: string;
+    };
+    parent: string;
+    order: number;
+    tags: string[];
+    surfaces: readonly ["cli", "in-app"];
+    hardware: readonly ["consumer", "cloud"];
+    enabled: boolean;
+};
+export default descriptor;
+//# sourceMappingURL=backup.disaster-recovery.docs.descriptor.d.ts.map

package/dist/backup/docs/backup.disaster-recovery.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.disaster-recovery.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../src/backup/docs/backup.disaster-recovery.docs.descriptor.ts"],"names":[],"mappings":"AA4BA,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;CAaf,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/backup/docs/backup.disaster-recovery.docs.descriptor.js

@@ -0,0 +1,42 @@
+const source = `---
+title: Disaster-recovery contracts
+summary: Declare authority planes and verify isolated restore drills without handling secret values
+tags: [backup, disaster-recovery, restore, rpo, rto]
+parent: backup
+order: 1
+surfaces: [cli, in-app]
+hardware: [consumer, cloud]
+---
+
+# Disaster-recovery contracts
+
+The \`backup/recovery-plan\` kind is a declarative inventory of authoritative
+and derived data planes. A plan records cross-provider destinations, retention,
+encryption key references, restore dependencies, RPO/RTO, destructive-restore
+approval, and the verification checks an isolated drill must produce.
+
+Coverage is explicit: \`declared\` means a descriptor or destination exists;
+\`implemented\` means a writer exists; \`verified\` means artifact integrity was
+checked; and \`drill-verified\` requires isolated restore evidence. These states
+are intentionally not interchangeable.
+
+\`RecoveryDrillEvidenceSchema\` rejects production targets and any workflow that
+reads or records secret values. \`verifyRecoveryDrillEvidence(plan, evidence)\`
+then checks plane coverage, provider isolation, required checks, RPO/RTO, and
+isolated-target cleanup.
+`;
+const descriptor = {
+    kind: "docs/topic",
+    id: "backup.disaster-recovery",
+    title: "Disaster-recovery contracts",
+    summary: "Declare authority planes and verify isolated restore drills without handling secret values",
+    body: { type: "markdown", sourceType: "raw", source },
+    parent: "backup",
+    order: 1,
+    tags: ["backup", "disaster-recovery", "restore", "rpo", "rto"],
+    surfaces: ["cli", "in-app"],
+    hardware: ["consumer", "cloud"],
+    enabled: true,
+};
+export default descriptor;
+//# sourceMappingURL=backup.disaster-recovery.docs.descriptor.js.map