crewly 1.11.4 → 1.11.6

package/dist/cli/backend/src/services/backup/backup-archive.service.js

@@ -0,0 +1,309 @@
+/**
+ * Backup Archive Service (P0)
+ *
+ * Builds a portable workspace backup: a single `.tar.gz` containing a
+ * top-level `manifest.json`, the captured `CREWLY_HOME` globals (under
+ * `home/`), each project's `.crewly/` tree (under `projects/<id>/`), and
+ * optionally `chat.db`.
+ *
+ * Runs locally with no Cloud dependency — `crewly backup create`. The Cloud
+ * upload/park step (Pro-gated) is a later phase and consumes the archive this
+ * service produces. See specs/2026-06-07-workspace-backup.md.
+ *
+ * @module services/backup/backup-archive.service
+ */
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { create as tarCreate } from 'tar';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { safeReadJson } from '../../utils/file-io.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { BACKUP_SCHEMA_VERSION, } from './backup.types.js';
+const execFileAsync = promisify(execFile);
+/**
+ * Top-level CREWLY_HOME entries that are MACHINE-SPECIFIC, secret, runtime, or
+ * would cause recursion — never captured. chat.db is handled separately via
+ * the SQLite online backup API, so it's excluded from the generic file walk.
+ */
+const GLOBAL_EXCLUDE_TOPLEVEL = new Set([
+    'device.json',
+    'cloud',
+    'credentials',
+    'telegram-credentials.json',
+    'runtime.json',
+    '.orchestrator-state',
+    'session-state.json',
+    'logs',
+    'teams-backup.json',
+    'teams-backup-history',
+    'backups', // our own output dir
+    'chat.db',
+    'chat.db-wal',
+    'chat.db-shm',
+]);
+/** Directory names excluded at ANY depth (runtime/session/log noise). */
+const EXCLUDE_DIR_ANYWHERE = new Set(['sessions', 'logs', '.orchestrator-state']);
+/** True for files excluded at any depth (ephemeral session logs). */
+function isExcludedFile(name) {
+    return name.endsWith('.jsonl');
+}
+/**
+ * Service that builds workspace backup archives.
+ */
+export class BackupArchiveService {
+    logger;
+    constructor(logger) {
+        this.logger = logger ?? LoggerService.getInstance().createComponentLogger('BackupArchive');
+    }
+    /**
+     * Build a workspace backup archive.
+     *
+     * Captures CREWLY_HOME globals (exclude-based, so new data domains are
+     * picked up automatically), each project's `.crewly/` tree (walked from
+     * projects.json) with git provenance, and chat.db (unless excluded). Stages
+     * everything into a temp dir, writes the manifest, and tars it to `outPath`.
+     *
+     * @param options - Build options (createdAt is required — no clock in lib code)
+     * @returns The archive path, manifest, and total captured bytes
+     * @throws If CREWLY_HOME does not exist or the tar write fails
+     */
+    async createArchive(options) {
+        const home = options.homePath ?? getCrewlyHomePath();
+        const homeStat = await fs.stat(home).catch(() => null);
+        if (!homeStat?.isDirectory()) {
+            throw new Error(`CREWLY_HOME not found or not a directory: ${home}`);
+        }
+        const outPath = options.outPath ??
+            path.join(home, 'backups', `workspace-${options.createdAt.replace(/[:.]/g, '-')}.tar.gz`);
+        const staging = await fs.mkdtemp(path.join(os.tmpdir(), 'crewly-backup-'));
+        try {
+            let totalBytes = 0;
+            // 1) Global CREWLY_HOME files → staging/home/<rel>
+            const global = [];
+            for (const rel of await this.collectGlobalFiles(home)) {
+                const entry = await this.stageFile(home, rel, staging, path.join('home', rel));
+                global.push(entry);
+                totalBytes += entry.bytes;
+            }
+            // 2) Per-project .crewly trees → staging/projects/<id>/<rel>
+            const projects = await this.collectProjects(home, staging);
+            for (const p of projects)
+                for (const f of p.files)
+                    totalBytes += f.bytes;
+            // 3) chat.db via SQLite online backup → staging/chat.db
+            const chatDb = options.excludeChatDb
+                ? { included: false, skippedReason: 'excluded by option' }
+                : await this.captureChatDb(home, staging);
+            if (chatDb.bytes)
+                totalBytes += chatDb.bytes;
+            // 4) Manifest
+            const manifest = {
+                schemaVersion: BACKUP_SCHEMA_VERSION,
+                crewlyVersion: this.readCrewlyVersion(),
+                createdAt: options.createdAt,
+                sourceDeviceId: options.sourceDeviceId ?? null,
+                sourceDeviceName: options.sourceDeviceName ?? null,
+                sourceHomePath: home,
+                ownerSub: options.ownerSub ?? null,
+                global,
+                projects,
+                chatDb,
+                crypto: { mode: 'none' },
+            };
+            await fs.writeFile(path.join(staging, 'manifest.json'), JSON.stringify(manifest, null, 2), 'utf8');
+            // 5) tar.gz the staging dir
+            await fs.mkdir(path.dirname(outPath), { recursive: true });
+            await tarCreate({ gzip: true, file: outPath, cwd: staging }, ['.']);
+            this.logger.info('Workspace backup created', {
+                outPath,
+                globalFiles: global.length,
+                projects: projects.length,
+                chatDb: chatDb.included,
+                totalBytes,
+            });
+            return { archivePath: outPath, manifest, totalBytes };
+        }
+        finally {
+            await fs.rm(staging, { recursive: true, force: true }).catch(() => undefined);
+        }
+    }
+    /**
+     * Recursively collect capturable global files under CREWLY_HOME (relative
+     * paths). Exclude-based so new data domains are captured automatically.
+     *
+     * @param home - CREWLY_HOME absolute path
+     * @returns Relative file paths (POSIX-style) to capture
+     */
+    async collectGlobalFiles(home) {
+        const out = [];
+        const walk = async (absDir, rel, isTop) => {
+            const entries = await fs.readdir(absDir, { withFileTypes: true }).catch(() => []);
+            for (const e of entries) {
+                if (isTop && GLOBAL_EXCLUDE_TOPLEVEL.has(e.name))
+                    continue;
+                if (e.isDirectory() && EXCLUDE_DIR_ANYWHERE.has(e.name))
+                    continue;
+                const childRel = rel ? `${rel}/${e.name}` : e.name;
+                if (e.isDirectory()) {
+                    await walk(path.join(absDir, e.name), childRel, false);
+                }
+                else if (e.isFile() && !isExcludedFile(e.name)) {
+                    out.push(childRel);
+                }
+            }
+        };
+        await walk(home, '', true);
+        return out;
+    }
+    /**
+     * Walk projects.json and capture each project's `.crewly/` tree + git
+     * provenance into staging/projects/<id>/.
+     *
+     * @param home - CREWLY_HOME absolute path
+     * @param staging - staging dir root
+     * @returns Project entries for the manifest
+     */
+    async collectProjects(home, staging) {
+        const projects = await safeReadJson(path.join(home, 'projects.json'), []);
+        const result = [];
+        for (const proj of projects) {
+            const crewlyDir = path.join(proj.path, '.crewly');
+            const dirStat = await fs.stat(crewlyDir).catch(() => null);
+            if (!dirStat?.isDirectory())
+                continue; // project gone / never initialized
+            const files = [];
+            const walk = async (absDir, rel) => {
+                const entries = await fs.readdir(absDir, { withFileTypes: true }).catch(() => []);
+                for (const e of entries) {
+                    if (e.isDirectory() && EXCLUDE_DIR_ANYWHERE.has(e.name))
+                        continue;
+                    const childRel = rel ? `${rel}/${e.name}` : e.name;
+                    if (e.isDirectory())
+                        await walk(path.join(absDir, e.name), childRel);
+                    else if (e.isFile() && !isExcludedFile(e.name)) {
+                        const archivePath = `projects/${proj.id}/.crewly/${childRel}`;
+                        files.push(await this.stageFile(crewlyDir, childRel, staging, archivePath));
+                    }
+                }
+            };
+            await walk(crewlyDir, '');
+            result.push({
+                id: proj.id,
+                name: proj.name,
+                sourcePath: proj.path,
+                git: await this.readGitProvenance(proj.path),
+                files,
+            });
+        }
+        return result;
+    }
+    /**
+     * Read `origin` remote + HEAD commit for a project dir (best-effort).
+     *
+     * @param projectPath - Absolute project path
+     * @returns Git provenance (nulls when not a repo / unavailable)
+     */
+    async readGitProvenance(projectPath) {
+        const run = async (args) => {
+            try {
+                const { stdout } = await execFileAsync('git', ['-C', projectPath, ...args], { timeout: 5000 });
+                const v = stdout.trim();
+                return v.length > 0 ? v : null;
+            }
+            catch {
+                return null;
+            }
+        };
+        return {
+            remote: await run(['remote', 'get-url', 'origin']),
+            commit: await run(['rev-parse', 'HEAD']),
+        };
+    }
+    /**
+     * Capture chat.db via the SQLite online backup API (consistent snapshot of a
+     * possibly-live DB). Degrades gracefully when chat.db is absent or the native
+     * module can't load — the backup just omits it with a recorded reason.
+     *
+     * @param home - CREWLY_HOME absolute path
+     * @param staging - staging dir root
+     * @returns chat.db manifest record
+     */
+    async captureChatDb(home, staging) {
+        const dbPath = path.join(home, 'chat.db');
+        if (!(await fs.stat(dbPath).catch(() => null))?.isFile()) {
+            return { included: false, skippedReason: 'chat.db not present' };
+        }
+        const dest = path.join(staging, 'chat.db');
+        try {
+            const mod = (await import('better-sqlite3'));
+            const Database = mod.default;
+            const db = new Database(dbPath, { readonly: true, fileMustExist: true });
+            try {
+                await db.backup(dest);
+            }
+            finally {
+                db.close();
+            }
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            this.logger.warn('chat.db capture skipped', { reason });
+            return { included: false, skippedReason: `sqlite backup failed: ${reason}` };
+        }
+        const { sha256, bytes } = await hashAndSize(dest);
+        return { included: true, sha256, bytes };
+    }
+    /**
+     * Copy a source file into the staging archive layout, returning its manifest
+     * entry (archive-relative path + sha256 + size).
+     *
+     * @param srcRoot - Root the relative path is resolved against
+     * @param rel - Source path relative to srcRoot (POSIX-style)
+     * @param staging - staging dir root
+     * @param archivePath - Destination path inside the archive
+     * @returns Manifest file entry
+     */
+    async stageFile(srcRoot, rel, staging, archivePath) {
+        const src = path.join(srcRoot, ...rel.split('/'));
+        const dest = path.join(staging, ...archivePath.split('/'));
+        await fs.mkdir(path.dirname(dest), { recursive: true });
+        await fs.copyFile(src, dest);
+        const { sha256, bytes } = await hashAndSize(dest);
+        return { path: archivePath, sha256, bytes };
+    }
+    /**
+     * Read the running Crewly version (best-effort). Uses npm_package_version —
+     * the same source as tracing.service.ts — which works under both the ESM
+     * runtime and the CJS test runner (no import.meta / __dirname).
+     *
+     * @returns Version string or 'unknown'
+     */
+    readCrewlyVersion() {
+        return process.env.npm_package_version ?? 'unknown';
+    }
+}
+/**
+ * Stream a file through SHA-256 and return the hex digest + byte size.
+ *
+ * @param filePath - File to hash
+ * @returns sha256 (hex) and byte size
+ */
+async function hashAndSize(filePath) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash('sha256');
+        let bytes = 0;
+        const stream = createReadStream(filePath);
+        stream.on('data', (chunk) => {
+            bytes += chunk.length;
+            hash.update(chunk);
+        });
+        stream.on('error', reject);
+        stream.on('end', () => resolve({ sha256: hash.digest('hex'), bytes }));
+    });
+}
+//# sourceMappingURL=backup-archive.service.js.map

package/dist/cli/backend/src/services/backup/backup-archive.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-archive.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-archive.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,qBAAqB,GAMtB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS;IAC9C,aAAa;IACb,OAAO;IACP,aAAa;IACb,2BAA2B;IAC3B,cAAc;IACd,qBAAqB;IACrB,oBAAoB;IACpB,MAAM;IACN,mBAAmB;IACnB,sBAAsB;IACtB,SAAS,EAAE,qBAAqB;IAChC,SAAS;IACT,aAAa;IACb,aAAa;CACd,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAE1F,qEAAqE;AACrE,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAkB;IAEzC,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;IAC7F,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CAAC,OAA4B;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE5F,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,mDAAmD;YACnD,MAAM,MAAM,GAAsB,EAAE,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC;YAC5B,CAAC;YAED,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;oBAAE,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC;YAEzE,wDAAwD;YACxD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa;gBAClC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE;gBAC1D,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,KAAK;gBAAE,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC;YAE7C,cAAc;YACd,MAAM,QAAQ,GAAmB;gBAC/B,aAAa,EAAE,qBAAqB;gBACpC,aAAa,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBACvC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;gBAC9C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;gBAClD,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;gBAClC,MAAM;gBACN,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACzB,CAAC;YACF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEnG,4BAA4B;YAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAEpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAC3C,OAAO;gBACP,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,MAAM,EAAE,MAAM,CAAC,QAAQ;gBACvB,UAAU;aACX,CAAC,CAAC;YAEH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,KAAc,EAAiB,EAAE;YAChF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,KAAK,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC3D,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACzD,CAAC;qBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,OAAe;QACzD,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAChC,EAAE,CACH,CAAC;QACF,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;gBAAE,SAAS,CAAC,mCAAmC;YAE1E,MAAM,KAAK,GAAsB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAAiB,EAAE;gBAChE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACnD,IAAI,CAAC,CAAC,WAAW,EAAE;wBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;yBAChE,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/C,MAAM,WAAW,GAAG,YAAY,IAAI,CAAC,EAAE,YAAY,QAAQ,EAAE,CAAC;wBAC9D,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;YACF,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAE1B,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,IAAI;gBACrB,GAAG,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5C,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACjD,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAA0B,EAAE;YAC3D,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/F,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,aAAa,CACzB,IAAY,EACZ,OAAe;QAEf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAE1C,CAAC;YACF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,yBAAyB,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,GAAW,EAAE,OAAe,EAAE,WAAmB;QACxF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IACtD,CAAC;CACF;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/backend/src/services/backup/backup-cloud.client.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Backup Cloud Client (P3)
+ *
+ * OSS-side HTTP client for the Pro-gated cloud backup service
+ * (`/api/cloud/backup`). Used by `crewly backup push/pull/list` to park an
+ * archive in the cloud and pull it back on another machine.
+ *
+ * Transport-only: it streams files to/from the cloud and surfaces a friendly
+ * upgrade error on 402. Auth (access token) + base URL come from
+ * CloudClientService; both are injected so this is testable without the cloud.
+ *
+ * @module services/backup/backup-cloud.client
+ */
+/** Thrown when the account isn't Pro (HTTP 402). */
+export declare class BackupNotProError extends Error {
+    readonly code = "upgrade_required";
+    constructor(message?: string);
+}
+/** Thrown on any other cloud backup HTTP failure. */
+export declare class BackupCloudError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/** A cloud snapshot as returned by the service (client-facing view). */
+export interface CloudBackupItem {
+    backupId: string;
+    deviceName: string | null;
+    deviceId: string | null;
+    sizeBytes: number;
+    sha256: string | null;
+    cryptoMode: 'sse' | 'none';
+    createdAt: string;
+}
+/** Metadata sent with an upload. */
+export interface PushMeta {
+    backupId?: string;
+    deviceName?: string | null;
+    deviceId?: string | null;
+    sha256?: string | null;
+}
+/** HTTP client for the cloud backup endpoints. */
+export declare class BackupCloudClient {
+    private readonly opts;
+    private readonly fetchImpl;
+    constructor(opts: {
+        baseUrl: string;
+        token: string;
+        fetchImpl?: typeof fetch;
+    });
+    private url;
+    private authHeaders;
+    /** List this account's cloud snapshots (newest first). */
+    list(): Promise<CloudBackupItem[]>;
+    /**
+     * Upload an archive to the cloud. Streams the file with its Content-Length so
+     * the service can enforce quota before accepting the blob.
+     *
+     * @param archivePath - Local archive (.tar.gz)
+     * @param meta - Optional backupId + device/sha metadata
+     * @returns The created snapshot record
+     */
+    push(archivePath: string, meta?: PushMeta): Promise<CloudBackupItem>;
+    /**
+     * Download a snapshot to `destPath` (streamed).
+     *
+     * @param backupId - Snapshot id
+     * @param destPath - Local file to write
+     */
+    pull(backupId: string, destPath: string): Promise<void>;
+    /** Delete a cloud snapshot. */
+    remove(backupId: string): Promise<void>;
+    /** Map non-2xx responses to typed errors (402 → upgrade). */
+    private assertOk;
+}
+//# sourceMappingURL=backup-cloud.client.d.ts.map

package/dist/cli/backend/src/services/backup/backup-cloud.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-cloud.client.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-cloud.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,oDAAoD;AACpD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,sBAAsB;gBACvB,OAAO,SAA+E;CAInG;AAED,qDAAqD;AACrD,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,MAAM,CAAC,EAAE,MAAM;gBAD/B,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA;CAKlC;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oCAAoC;AACpC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,kDAAkD;AAClD,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAGtB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;KAAE;IAKrF,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,WAAW;IAInB,0DAA0D;IACpD,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAOxC;;;;;;;OAOG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAsB9E;;;;;OAKG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,+BAA+B;IACzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,6DAA6D;YAC/C,QAAQ;CAoBvB"}

package/dist/cli/backend/src/services/backup/backup-cloud.client.js

@@ -0,0 +1,134 @@
+/**
+ * Backup Cloud Client (P3)
+ *
+ * OSS-side HTTP client for the Pro-gated cloud backup service
+ * (`/api/cloud/backup`). Used by `crewly backup push/pull/list` to park an
+ * archive in the cloud and pull it back on another machine.
+ *
+ * Transport-only: it streams files to/from the cloud and surfaces a friendly
+ * upgrade error on 402. Auth (access token) + base URL come from
+ * CloudClientService; both are injected so this is testable without the cloud.
+ *
+ * @module services/backup/backup-cloud.client
+ */
+import { createReadStream, createWriteStream } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+/** Thrown when the account isn't Pro (HTTP 402). */
+export class BackupNotProError extends Error {
+    code = 'upgrade_required';
+    constructor(message = 'Cloud backup requires a Pro plan. Upgrade at https://crewlyai.com/pricing.') {
+        super(message);
+        this.name = 'BackupNotProError';
+    }
+}
+/** Thrown on any other cloud backup HTTP failure. */
+export class BackupCloudError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'BackupCloudError';
+    }
+}
+/** HTTP client for the cloud backup endpoints. */
+export class BackupCloudClient {
+    opts;
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    url(suffix) {
+        return `${this.opts.baseUrl.replace(/\/$/, '')}/api/cloud/backup${suffix}`;
+    }
+    authHeaders(extra = {}) {
+        return { Authorization: `Bearer ${this.opts.token}`, ...extra };
+    }
+    /** List this account's cloud snapshots (newest first). */
+    async list() {
+        const res = await this.fetchImpl(this.url(''), { headers: this.authHeaders() });
+        await this.assertOk(res);
+        const json = (await res.json());
+        return json.data?.backups ?? [];
+    }
+    /**
+     * Upload an archive to the cloud. Streams the file with its Content-Length so
+     * the service can enforce quota before accepting the blob.
+     *
+     * @param archivePath - Local archive (.tar.gz)
+     * @param meta - Optional backupId + device/sha metadata
+     * @returns The created snapshot record
+     */
+    async push(archivePath, meta = {}) {
+        const stat = await fs.stat(archivePath);
+        const query = meta.backupId ? `?backupId=${encodeURIComponent(meta.backupId)}` : '';
+        const headers = this.authHeaders({
+            'Content-Type': 'application/gzip',
+            'Content-Length': String(stat.size),
+            ...(meta.deviceName ? { 'X-Device-Name': meta.deviceName } : {}),
+            ...(meta.deviceId ? { 'X-Device-Id': meta.deviceId } : {}),
+            ...(meta.sha256 ? { 'X-Backup-Sha256': meta.sha256 } : {}),
+        });
+        const res = await this.fetchImpl(this.url(query), {
+            method: 'POST',
+            headers,
+            body: createReadStream(archivePath),
+            // Node fetch requires this for a streaming request body.
+            duplex: 'half',
+        });
+        await this.assertOk(res);
+        const json = (await res.json());
+        return json.data;
+    }
+    /**
+     * Download a snapshot to `destPath` (streamed).
+     *
+     * @param backupId - Snapshot id
+     * @param destPath - Local file to write
+     */
+    async pull(backupId, destPath) {
+        const res = await this.fetchImpl(this.url(`/${encodeURIComponent(backupId)}`), { headers: this.authHeaders() });
+        await this.assertOk(res);
+        if (!res.body)
+            throw new BackupCloudError('Empty download response from cloud.');
+        await fs.mkdir(path.dirname(destPath), { recursive: true });
+        await pipeline(Readable.fromWeb(res.body), createWriteStream(destPath));
+    }
+    /** Delete a cloud snapshot. */
+    async remove(backupId) {
+        const res = await this.fetchImpl(this.url(`/${encodeURIComponent(backupId)}`), {
+            method: 'DELETE',
+            headers: this.authHeaders(),
+        });
+        await this.assertOk(res);
+    }
+    /** Map non-2xx responses to typed errors (402 → upgrade). */
+    async assertOk(res) {
+        if (res.ok)
+            return;
+        if (res.status === 402) {
+            let msg;
+            try {
+                msg = (await res.json()).error;
+            }
+            catch {
+                /* ignore */
+            }
+            throw new BackupNotProError(msg);
+        }
+        let message = `Cloud backup request failed (HTTP ${res.status}).`;
+        try {
+            const j = (await res.json());
+            if (j.error)
+                message = j.error;
+        }
+        catch {
+            /* non-JSON body */
+        }
+        throw new BackupCloudError(message, res.status);
+    }
+}
+//# sourceMappingURL=backup-cloud.client.js.map

package/dist/cli/backend/src/services/backup/backup-cloud.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-cloud.client.js","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-cloud.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,oDAAoD;AACpD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,kBAAkB,CAAC;IACnC,YAAY,OAAO,GAAG,4EAA4E;QAChG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,MAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAqBD,kDAAkD;AAClD,MAAM,OAAO,iBAAiB;IAIT;IAHF,SAAS,CAAe;IAEzC,YACmB,IAAkE;QAAlE,SAAI,GAAJ,IAAI,CAA8D;QAEnF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAEO,GAAG,CAAC,MAAc;QACxB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC;IAC7E,CAAC;IAEO,WAAW,CAAC,QAAgC,EAAE;QACpD,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAClE,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+C,CAAC;QAC9E,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,OAAiB,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YAC/B,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAmC;YACrE,yDAAyD;YACzD,MAAM,EAAE,MAAM;SACqB,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,QAAgB;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAC;QACjF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAA8C,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YAC7E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,6DAA6D;IACrD,KAAK,CAAC,QAAQ,CAAC,GAAa;QAClC,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO;QACnB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,GAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,GAAG,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC,KAAK,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,GAAG,qCAAqC,GAAG,CAAC,MAAM,IAAI,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;YACnD,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/cli/backend/src/services/backup/backup-restore.service.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Backup Restore Service (P1)
+ *
+ * Restores a workspace archive (produced by BackupArchiveService) onto this
+ * machine to resume work after a machine dies / is replaced.
+ *
+ * Safety model:
+ *   - `preview()` is non-destructive (dry-run) — reports the plan + conflicts.
+ *   - `restore()` snapshots the CURRENT CREWLY_HOME first (rollback), refuses
+ *     on overlapping ids unless mode='overwrite', then applies and — on any
+ *     failure — rolls back from the snapshot.
+ *   - device.json is NEVER in the archive, so the target keeps its own identity.
+ *   - cron `nextRunAt` is reset to null so the scheduler recomputes from
+ *     `cronExpression` (no stale fires); runtime/session state is wiped so
+ *     agents start clean.
+ *
+ * See specs/2026-06-07-workspace-backup.md.
+ *
+ * @module services/backup/backup-restore.service
+ */
+import { type ComponentLogger } from '../core/logger.service.js';
+import { type RestoreOptions, type RestorePlan, type RestoreResult } from './backup.types.js';
+/** Thrown by restore() when mode='abort' and the target has overlapping data. */
+export declare class RestoreConflictError extends Error {
+    readonly plan: RestorePlan;
+    constructor(message: string, plan: RestorePlan);
+}
+/**
+ * Service that restores workspace backup archives.
+ */
+export declare class BackupRestoreService {
+    private readonly logger;
+    constructor(logger?: ComponentLogger);
+    /**
+     * Non-destructive restore plan (dry-run): what would be created/overwritten,
+     * id conflicts, resolved project paths, and what's regenerated/discarded.
+     *
+     * @param options - Restore options (mode/pathMap affect conflict + path resolution)
+     * @returns The plan; never writes to disk
+     */
+    preview(options: RestoreOptions): Promise<RestorePlan>;
+    /**
+     * Restore the archive onto this machine.
+     *
+     * @param options - Restore options
+     * @returns Summary of what was restored
+     * @throws RestoreConflictError when mode='abort' and ids overlap
+     * @throws Error on integrity failure or unsupported schema (no changes applied)
+     */
+    restore(options: RestoreOptions): Promise<RestoreResult>;
+    /** Extract the archive to a fresh temp dir; returns its path. */
+    private extract;
+    /** Read + minimally validate the manifest from an extracted archive. */
+    private readManifest;
+    /** Verify every recorded file's sha256 against the extracted bytes. */
+    private verifyChecksums;
+    /** Build the dry-run plan (conflicts, resolved project paths, warnings). */
+    private buildPlan;
+    /** Copy every manifest global file from temp/home/* into CREWLY_HOME. */
+    private applyGlobals;
+    /** Copy each resolved project's `.crewly/` from the archive to its target path. */
+    private applyProjects;
+    /** Atomically swap chat.db into place (temp copy → rename). */
+    private applyChatDb;
+    /** Rewrite projects.json `path` entries using the resolved plan mapping. */
+    private rewriteProjectsJson;
+    /** Reset cron `nextRunAt` so the scheduler recomputes from cronExpression. */
+    private resetCron;
+    /** Remove runtime/session state so agents start clean on the restored machine. */
+    private wipeRuntime;
+    /** Recursively copy a directory tree, skipping top-level names in `skipTop`. */
+    private copyTree;
+    /** Recursive copy without the top-level skip filter. */
+    private copyTreeRec;
+    private pathExists;
+    private readJson;
+}
+//# sourceMappingURL=backup-restore.service.d.ts.map

package/dist/cli/backend/src/services/backup/backup-restore.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-restore.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-restore.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AASH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAQ3B,iFAAiF;AACjF,qBAAa,oBAAqB,SAAQ,KAAK;aAG3B,IAAI,EAAE,WAAW;gBADjC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,WAAW;CAKpC;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,MAAM,CAAC,EAAE,eAAe;IAIpC;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAW5D;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA4D9D,iEAAiE;YACnD,OAAO;IASrB,wEAAwE;YAC1D,YAAY;IAe1B,uEAAuE;YACzD,eAAe;IAiB7B,4EAA4E;YAC9D,SAAS;IAqDvB,yEAAyE;YAC3D,YAAY;IAc1B,mFAAmF;YACrE,aAAa;IAmB3B,+DAA+D;YACjD,WAAW;IAezB,4EAA4E;YAC9D,mBAAmB;IAgBjC,8EAA8E;YAChE,SAAS;IAgBvB,kFAAkF;YACpE,WAAW;IAQzB,gFAAgF;YAClE,QAAQ;IAYtB,wDAAwD;YAC1C,WAAW;YAUX,UAAU;YAIV,QAAQ;CAOvB"}