crewly 1.11.5 → 1.11.6

package/dist/backend/backend/src/services/backup/backup-cloud.client.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Backup Cloud Client (P3)
+ *
+ * OSS-side HTTP client for the Pro-gated cloud backup service
+ * (`/api/cloud/backup`). Used by `crewly backup push/pull/list` to park an
+ * archive in the cloud and pull it back on another machine.
+ *
+ * Transport-only: it streams files to/from the cloud and surfaces a friendly
+ * upgrade error on 402. Auth (access token) + base URL come from
+ * CloudClientService; both are injected so this is testable without the cloud.
+ *
+ * @module services/backup/backup-cloud.client
+ */
+/** Thrown when the account isn't Pro (HTTP 402). */
+export declare class BackupNotProError extends Error {
+    readonly code = "upgrade_required";
+    constructor(message?: string);
+}
+/** Thrown on any other cloud backup HTTP failure. */
+export declare class BackupCloudError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/** A cloud snapshot as returned by the service (client-facing view). */
+export interface CloudBackupItem {
+    backupId: string;
+    deviceName: string | null;
+    deviceId: string | null;
+    sizeBytes: number;
+    sha256: string | null;
+    cryptoMode: 'sse' | 'none';
+    createdAt: string;
+}
+/** Metadata sent with an upload. */
+export interface PushMeta {
+    backupId?: string;
+    deviceName?: string | null;
+    deviceId?: string | null;
+    sha256?: string | null;
+}
+/** HTTP client for the cloud backup endpoints. */
+export declare class BackupCloudClient {
+    private readonly opts;
+    private readonly fetchImpl;
+    constructor(opts: {
+        baseUrl: string;
+        token: string;
+        fetchImpl?: typeof fetch;
+    });
+    private url;
+    private authHeaders;
+    /** List this account's cloud snapshots (newest first). */
+    list(): Promise<CloudBackupItem[]>;
+    /**
+     * Upload an archive to the cloud. Streams the file with its Content-Length so
+     * the service can enforce quota before accepting the blob.
+     *
+     * @param archivePath - Local archive (.tar.gz)
+     * @param meta - Optional backupId + device/sha metadata
+     * @returns The created snapshot record
+     */
+    push(archivePath: string, meta?: PushMeta): Promise<CloudBackupItem>;
+    /**
+     * Download a snapshot to `destPath` (streamed).
+     *
+     * @param backupId - Snapshot id
+     * @param destPath - Local file to write
+     */
+    pull(backupId: string, destPath: string): Promise<void>;
+    /** Delete a cloud snapshot. */
+    remove(backupId: string): Promise<void>;
+    /** Map non-2xx responses to typed errors (402 → upgrade). */
+    private assertOk;
+}
+//# sourceMappingURL=backup-cloud.client.d.ts.map

package/dist/backend/backend/src/services/backup/backup-cloud.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-cloud.client.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-cloud.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,oDAAoD;AACpD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,sBAAsB;gBACvB,OAAO,SAA+E;CAInG;AAED,qDAAqD;AACrD,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,MAAM,CAAC,EAAE,MAAM;gBAD/B,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA;CAKlC;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oCAAoC;AACpC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,kDAAkD;AAClD,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAGtB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;KAAE;IAKrF,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,WAAW;IAInB,0DAA0D;IACpD,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAOxC;;;;;;;OAOG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAsB9E;;;;;OAKG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,+BAA+B;IACzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,6DAA6D;YAC/C,QAAQ;CAoBvB"}

package/dist/backend/backend/src/services/backup/backup-cloud.client.js

@@ -0,0 +1,134 @@
+/**
+ * Backup Cloud Client (P3)
+ *
+ * OSS-side HTTP client for the Pro-gated cloud backup service
+ * (`/api/cloud/backup`). Used by `crewly backup push/pull/list` to park an
+ * archive in the cloud and pull it back on another machine.
+ *
+ * Transport-only: it streams files to/from the cloud and surfaces a friendly
+ * upgrade error on 402. Auth (access token) + base URL come from
+ * CloudClientService; both are injected so this is testable without the cloud.
+ *
+ * @module services/backup/backup-cloud.client
+ */
+import { createReadStream, createWriteStream } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+/** Thrown when the account isn't Pro (HTTP 402). */
+export class BackupNotProError extends Error {
+    code = 'upgrade_required';
+    constructor(message = 'Cloud backup requires a Pro plan. Upgrade at https://crewlyai.com/pricing.') {
+        super(message);
+        this.name = 'BackupNotProError';
+    }
+}
+/** Thrown on any other cloud backup HTTP failure. */
+export class BackupCloudError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'BackupCloudError';
+    }
+}
+/** HTTP client for the cloud backup endpoints. */
+export class BackupCloudClient {
+    opts;
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    url(suffix) {
+        return `${this.opts.baseUrl.replace(/\/$/, '')}/api/cloud/backup${suffix}`;
+    }
+    authHeaders(extra = {}) {
+        return { Authorization: `Bearer ${this.opts.token}`, ...extra };
+    }
+    /** List this account's cloud snapshots (newest first). */
+    async list() {
+        const res = await this.fetchImpl(this.url(''), { headers: this.authHeaders() });
+        await this.assertOk(res);
+        const json = (await res.json());
+        return json.data?.backups ?? [];
+    }
+    /**
+     * Upload an archive to the cloud. Streams the file with its Content-Length so
+     * the service can enforce quota before accepting the blob.
+     *
+     * @param archivePath - Local archive (.tar.gz)
+     * @param meta - Optional backupId + device/sha metadata
+     * @returns The created snapshot record
+     */
+    async push(archivePath, meta = {}) {
+        const stat = await fs.stat(archivePath);
+        const query = meta.backupId ? `?backupId=${encodeURIComponent(meta.backupId)}` : '';
+        const headers = this.authHeaders({
+            'Content-Type': 'application/gzip',
+            'Content-Length': String(stat.size),
+            ...(meta.deviceName ? { 'X-Device-Name': meta.deviceName } : {}),
+            ...(meta.deviceId ? { 'X-Device-Id': meta.deviceId } : {}),
+            ...(meta.sha256 ? { 'X-Backup-Sha256': meta.sha256 } : {}),
+        });
+        const res = await this.fetchImpl(this.url(query), {
+            method: 'POST',
+            headers,
+            body: createReadStream(archivePath),
+            // Node fetch requires this for a streaming request body.
+            duplex: 'half',
+        });
+        await this.assertOk(res);
+        const json = (await res.json());
+        return json.data;
+    }
+    /**
+     * Download a snapshot to `destPath` (streamed).
+     *
+     * @param backupId - Snapshot id
+     * @param destPath - Local file to write
+     */
+    async pull(backupId, destPath) {
+        const res = await this.fetchImpl(this.url(`/${encodeURIComponent(backupId)}`), { headers: this.authHeaders() });
+        await this.assertOk(res);
+        if (!res.body)
+            throw new BackupCloudError('Empty download response from cloud.');
+        await fs.mkdir(path.dirname(destPath), { recursive: true });
+        await pipeline(Readable.fromWeb(res.body), createWriteStream(destPath));
+    }
+    /** Delete a cloud snapshot. */
+    async remove(backupId) {
+        const res = await this.fetchImpl(this.url(`/${encodeURIComponent(backupId)}`), {
+            method: 'DELETE',
+            headers: this.authHeaders(),
+        });
+        await this.assertOk(res);
+    }
+    /** Map non-2xx responses to typed errors (402 → upgrade). */
+    async assertOk(res) {
+        if (res.ok)
+            return;
+        if (res.status === 402) {
+            let msg;
+            try {
+                msg = (await res.json()).error;
+            }
+            catch {
+                /* ignore */
+            }
+            throw new BackupNotProError(msg);
+        }
+        let message = `Cloud backup request failed (HTTP ${res.status}).`;
+        try {
+            const j = (await res.json());
+            if (j.error)
+                message = j.error;
+        }
+        catch {
+            /* non-JSON body */
+        }
+        throw new BackupCloudError(message, res.status);
+    }
+}
+//# sourceMappingURL=backup-cloud.client.js.map

package/dist/backend/backend/src/services/backup/backup-cloud.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-cloud.client.js","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-cloud.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,oDAAoD;AACpD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,kBAAkB,CAAC;IACnC,YAAY,OAAO,GAAG,4EAA4E;QAChG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,MAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAqBD,kDAAkD;AAClD,MAAM,OAAO,iBAAiB;IAIT;IAHF,SAAS,CAAe;IAEzC,YACmB,IAAkE;QAAlE,SAAI,GAAJ,IAAI,CAA8D;QAEnF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAEO,GAAG,CAAC,MAAc;QACxB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC;IAC7E,CAAC;IAEO,WAAW,CAAC,QAAgC,EAAE;QACpD,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAClE,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+C,CAAC;QAC9E,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,OAAiB,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YAC/B,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAmC;YACrE,yDAAyD;YACzD,MAAM,EAAE,MAAM;SACqB,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,QAAgB;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,CAAC;QACjF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAA8C,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YAC7E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,6DAA6D;IACrD,KAAK,CAAC,QAAQ,CAAC,GAAa;QAClC,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO;QACnB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,GAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,GAAG,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC,KAAK,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,GAAG,qCAAqC,GAAG,CAAC,MAAM,IAAI,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;YACnD,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/backend/backend/src/services/backup/backup-restore.service.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Backup Restore Service (P1)
+ *
+ * Restores a workspace archive (produced by BackupArchiveService) onto this
+ * machine to resume work after a machine dies / is replaced.
+ *
+ * Safety model:
+ *   - `preview()` is non-destructive (dry-run) — reports the plan + conflicts.
+ *   - `restore()` snapshots the CURRENT CREWLY_HOME first (rollback), refuses
+ *     on overlapping ids unless mode='overwrite', then applies and — on any
+ *     failure — rolls back from the snapshot.
+ *   - device.json is NEVER in the archive, so the target keeps its own identity.
+ *   - cron `nextRunAt` is reset to null so the scheduler recomputes from
+ *     `cronExpression` (no stale fires); runtime/session state is wiped so
+ *     agents start clean.
+ *
+ * See specs/2026-06-07-workspace-backup.md.
+ *
+ * @module services/backup/backup-restore.service
+ */
+import { type ComponentLogger } from '../core/logger.service.js';
+import { type RestoreOptions, type RestorePlan, type RestoreResult } from './backup.types.js';
+/** Thrown by restore() when mode='abort' and the target has overlapping data. */
+export declare class RestoreConflictError extends Error {
+    readonly plan: RestorePlan;
+    constructor(message: string, plan: RestorePlan);
+}
+/**
+ * Service that restores workspace backup archives.
+ */
+export declare class BackupRestoreService {
+    private readonly logger;
+    constructor(logger?: ComponentLogger);
+    /**
+     * Non-destructive restore plan (dry-run): what would be created/overwritten,
+     * id conflicts, resolved project paths, and what's regenerated/discarded.
+     *
+     * @param options - Restore options (mode/pathMap affect conflict + path resolution)
+     * @returns The plan; never writes to disk
+     */
+    preview(options: RestoreOptions): Promise<RestorePlan>;
+    /**
+     * Restore the archive onto this machine.
+     *
+     * @param options - Restore options
+     * @returns Summary of what was restored
+     * @throws RestoreConflictError when mode='abort' and ids overlap
+     * @throws Error on integrity failure or unsupported schema (no changes applied)
+     */
+    restore(options: RestoreOptions): Promise<RestoreResult>;
+    /** Extract the archive to a fresh temp dir; returns its path. */
+    private extract;
+    /** Read + minimally validate the manifest from an extracted archive. */
+    private readManifest;
+    /** Verify every recorded file's sha256 against the extracted bytes. */
+    private verifyChecksums;
+    /** Build the dry-run plan (conflicts, resolved project paths, warnings). */
+    private buildPlan;
+    /** Copy every manifest global file from temp/home/* into CREWLY_HOME. */
+    private applyGlobals;
+    /** Copy each resolved project's `.crewly/` from the archive to its target path. */
+    private applyProjects;
+    /** Atomically swap chat.db into place (temp copy → rename). */
+    private applyChatDb;
+    /** Rewrite projects.json `path` entries using the resolved plan mapping. */
+    private rewriteProjectsJson;
+    /** Reset cron `nextRunAt` so the scheduler recomputes from cronExpression. */
+    private resetCron;
+    /** Remove runtime/session state so agents start clean on the restored machine. */
+    private wipeRuntime;
+    /** Recursively copy a directory tree, skipping top-level names in `skipTop`. */
+    private copyTree;
+    /** Recursive copy without the top-level skip filter. */
+    private copyTreeRec;
+    private pathExists;
+    private readJson;
+}
+//# sourceMappingURL=backup-restore.service.d.ts.map

package/dist/backend/backend/src/services/backup/backup-restore.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-restore.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/backup/backup-restore.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AASH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAQ3B,iFAAiF;AACjF,qBAAa,oBAAqB,SAAQ,KAAK;aAG3B,IAAI,EAAE,WAAW;gBADjC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,WAAW;CAKpC;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAE7B,MAAM,CAAC,EAAE,eAAe;IAIpC;;;;;;OAMG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAW5D;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA4D9D,iEAAiE;YACnD,OAAO;IASrB,wEAAwE;YAC1D,YAAY;IAe1B,uEAAuE;YACzD,eAAe;IAiB7B,4EAA4E;YAC9D,SAAS;IAqDvB,yEAAyE;YAC3D,YAAY;IAc1B,mFAAmF;YACrE,aAAa;IAmB3B,+DAA+D;YACjD,WAAW;IAezB,4EAA4E;YAC9D,mBAAmB;IAgBjC,8EAA8E;YAChE,SAAS;IAgBvB,kFAAkF;YACpE,WAAW;IAQzB,gFAAgF;YAClE,QAAQ;IAYtB,wDAAwD;YAC1C,WAAW;YAUX,UAAU;YAIV,QAAQ;CAOvB"}

package/dist/backend/backend/src/services/backup/backup-restore.service.js

@@ -0,0 +1,358 @@
+/**
+ * Backup Restore Service (P1)
+ *
+ * Restores a workspace archive (produced by BackupArchiveService) onto this
+ * machine to resume work after a machine dies / is replaced.
+ *
+ * Safety model:
+ *   - `preview()` is non-destructive (dry-run) — reports the plan + conflicts.
+ *   - `restore()` snapshots the CURRENT CREWLY_HOME first (rollback), refuses
+ *     on overlapping ids unless mode='overwrite', then applies and — on any
+ *     failure — rolls back from the snapshot.
+ *   - device.json is NEVER in the archive, so the target keeps its own identity.
+ *   - cron `nextRunAt` is reset to null so the scheduler recomputes from
+ *     `cronExpression` (no stale fires); runtime/session state is wiped so
+ *     agents start clean.
+ *
+ * See specs/2026-06-07-workspace-backup.md.
+ *
+ * @module services/backup/backup-restore.service
+ */
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { extract as tarExtract } from 'tar';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { BACKUP_SCHEMA_VERSION, } from './backup.types.js';
+/** Runtime/session state wiped on restore so agents start clean (relative to home). */
+const RUNTIME_WIPE = ['runtime.json', '.orchestrator-state', 'session-state.json'];
+/** Cron files whose `nextRunAt` is reset so the scheduler recomputes. */
+const CRON_FILES = ['recurring-checks.json', 'one-time-checks.json'];
+/** Thrown by restore() when mode='abort' and the target has overlapping data. */
+export class RestoreConflictError extends Error {
+    plan;
+    constructor(message, plan) {
+        super(message);
+        this.plan = plan;
+        this.name = 'RestoreConflictError';
+    }
+}
+/**
+ * Service that restores workspace backup archives.
+ */
+export class BackupRestoreService {
+    logger;
+    constructor(logger) {
+        this.logger = logger ?? LoggerService.getInstance().createComponentLogger('BackupRestore');
+    }
+    /**
+     * Non-destructive restore plan (dry-run): what would be created/overwritten,
+     * id conflicts, resolved project paths, and what's regenerated/discarded.
+     *
+     * @param options - Restore options (mode/pathMap affect conflict + path resolution)
+     * @returns The plan; never writes to disk
+     */
+    async preview(options) {
+        const home = options.homePath ?? getCrewlyHomePath();
+        const temp = await this.extract(options.archivePath);
+        try {
+            const manifest = await this.readManifest(temp);
+            return await this.buildPlan(manifest, home, options);
+        }
+        finally {
+            await fs.rm(temp, { recursive: true, force: true }).catch(() => undefined);
+        }
+    }
+    /**
+     * Restore the archive onto this machine.
+     *
+     * @param options - Restore options
+     * @returns Summary of what was restored
+     * @throws RestoreConflictError when mode='abort' and ids overlap
+     * @throws Error on integrity failure or unsupported schema (no changes applied)
+     */
+    async restore(options) {
+        const home = options.homePath ?? getCrewlyHomePath();
+        const mode = options.mode ?? 'abort';
+        const temp = await this.extract(options.archivePath);
+        try {
+            const manifest = await this.readManifest(temp);
+            if (manifest.schemaVersion > BACKUP_SCHEMA_VERSION) {
+                throw new Error(`Backup schemaVersion ${manifest.schemaVersion} is newer than supported ${BACKUP_SCHEMA_VERSION}; upgrade Crewly to restore it`);
+            }
+            await this.verifyChecksums(temp, manifest);
+            const plan = await this.buildPlan(manifest, home, options);
+            if (mode === 'abort' && (plan.conflicts.teams.length > 0 || plan.conflicts.projects.length > 0)) {
+                throw new RestoreConflictError(`Restore aborted: target already has ${plan.conflicts.teams.length} team(s) and ${plan.conflicts.projects.length} project(s) from this backup. Re-run with mode='overwrite' to replace them.`, plan);
+            }
+            // 1) Snapshot current home for rollback (best-effort full copy, sans backups/).
+            const rollbackSnapshotPath = path.join(home, 'backups', `pre-restore-${options.now.replace(/[:.]/g, '-')}`);
+            await fs.mkdir(home, { recursive: true });
+            await this.copyTree(home, rollbackSnapshotPath, new Set(['backups']));
+            try {
+                // 2) Apply
+                const restoredGlobalFiles = await this.applyGlobals(temp, home);
+                const restoredProjects = await this.applyProjects(temp, manifest, plan);
+                const chatDbRestored = await this.applyChatDb(temp, home, manifest);
+                await this.rewriteProjectsJson(home, plan);
+                await this.resetCron(home);
+                await this.wipeRuntime(home);
+                this.logger.info('Workspace restore applied', {
+                    restoredGlobalFiles,
+                    restoredProjects,
+                    chatDbRestored,
+                    rollbackSnapshotPath,
+                });
+                return { restoredGlobalFiles, restoredProjects, chatDbRestored, rollbackSnapshotPath, warnings: plan.warnings };
+            }
+            catch (applyErr) {
+                // 3) Rollback from the pre-restore snapshot.
+                this.logger.error('Restore failed mid-apply — rolling back', {
+                    error: applyErr instanceof Error ? applyErr.message : String(applyErr),
+                });
+                await this.copyTree(rollbackSnapshotPath, home, new Set(['backups'])).catch(() => undefined);
+                throw applyErr;
+            }
+        }
+        finally {
+            await fs.rm(temp, { recursive: true, force: true }).catch(() => undefined);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    /** Extract the archive to a fresh temp dir; returns its path. */
+    async extract(archivePath) {
+        if (!(await fs.stat(archivePath).catch(() => null))?.isFile()) {
+            throw new Error(`Backup archive not found: ${archivePath}`);
+        }
+        const temp = await fs.mkdtemp(path.join(os.tmpdir(), 'crewly-restore-'));
+        await tarExtract({ file: archivePath, cwd: temp });
+        return temp;
+    }
+    /** Read + minimally validate the manifest from an extracted archive. */
+    async readManifest(temp) {
+        const raw = await fs.readFile(path.join(temp, 'manifest.json'), 'utf8').catch(() => null);
+        if (!raw)
+            throw new Error('Invalid backup: manifest.json missing');
+        let manifest;
+        try {
+            manifest = JSON.parse(raw);
+        }
+        catch {
+            throw new Error('Invalid backup: manifest.json is not valid JSON');
+        }
+        if (typeof manifest.schemaVersion !== 'number' || !Array.isArray(manifest.global)) {
+            throw new Error('Invalid backup: manifest is missing required fields');
+        }
+        return manifest;
+    }
+    /** Verify every recorded file's sha256 against the extracted bytes. */
+    async verifyChecksums(temp, manifest) {
+        const entries = [
+            ...manifest.global,
+            ...manifest.projects.flatMap((p) => p.files),
+        ];
+        if (manifest.chatDb.included && manifest.chatDb.sha256) {
+            entries.push({ path: 'chat.db', sha256: manifest.chatDb.sha256 });
+        }
+        for (const e of entries) {
+            const abs = path.join(temp, ...e.path.split('/'));
+            const actual = await sha256File(abs).catch(() => null);
+            if (actual !== e.sha256) {
+                throw new Error(`Backup integrity check failed for ${e.path} (checksum mismatch or missing)`);
+            }
+        }
+    }
+    /** Build the dry-run plan (conflicts, resolved project paths, warnings). */
+    async buildPlan(manifest, home, options) {
+        const warnings = [];
+        // Teams present in the backup (ids parsed from home/teams/<id>/...).
+        const backupTeamIds = new Set();
+        for (const g of manifest.global) {
+            const m = g.path.match(/^home\/teams\/([^/]+)\//);
+            if (m && m[1] !== 'orchestrator')
+                backupTeamIds.add(m[1]);
+        }
+        const targetTeamIds = new Set((await fs.readdir(path.join(home, 'teams'), { withFileTypes: true }).catch(() => []))
+            .filter((d) => d.isDirectory() && d.name !== 'orchestrator')
+            .map((d) => d.name));
+        const conflictTeams = [...backupTeamIds].filter((id) => targetTeamIds.has(id));
+        const targetProjectIds = new Set((await this.readJson(path.join(home, 'projects.json'), [])).map((p) => p.id));
+        const conflictProjects = manifest.projects.map((p) => p.id).filter((id) => targetProjectIds.has(id));
+        const projects = [];
+        for (const p of manifest.projects) {
+            const mapped = options.pathMap?.[p.sourcePath];
+            let targetPath = null;
+            if (mapped)
+                targetPath = mapped;
+            else if (await this.pathExists(p.sourcePath))
+                targetPath = p.sourcePath;
+            const targetExists = targetPath ? await this.pathExists(targetPath) : false;
+            if (!targetPath) {
+                warnings.push(`Project "${p.name}" (${p.sourcePath}) has no target path on this machine — re-clone ${p.git.remote ?? 'the repo'} and pass --map ${p.sourcePath}=<new-path> to restore its .crewly data.`);
+            }
+            else if (!targetExists) {
+                warnings.push(`Project "${p.name}" target path ${targetPath} does not exist yet — its .crewly will be created there.`);
+            }
+            projects.push({ id: p.id, name: p.name, sourcePath: p.sourcePath, targetPath, git: p.git, targetExists });
+        }
+        return {
+            ok: !(options.mode !== 'overwrite' && (conflictTeams.length > 0 || conflictProjects.length > 0)),
+            manifestCreatedAt: manifest.createdAt,
+            sourceHomePath: manifest.sourceHomePath,
+            conflicts: { teams: conflictTeams, projects: conflictProjects },
+            globalFileCount: manifest.global.length,
+            projects,
+            chatDbIncluded: manifest.chatDb.included,
+            regenerated: ['device.json (kept this machine\'s identity — not in backup)'],
+            discarded: [...RUNTIME_WIPE, 'in-flight cron nextRunAt (recomputed)'],
+            warnings,
+        };
+    }
+    /** Copy every manifest global file from temp/home/* into CREWLY_HOME. */
+    async applyGlobals(temp, home) {
+        let n = 0;
+        for (const g of (await this.readManifest(temp)).global) {
+            // g.path = 'home/<rel>'
+            const rel = g.path.replace(/^home\//, '');
+            const src = path.join(temp, ...g.path.split('/'));
+            const dest = path.join(home, ...rel.split('/'));
+            await fs.mkdir(path.dirname(dest), { recursive: true });
+            await fs.copyFile(src, dest);
+            n += 1;
+        }
+        return n;
+    }
+    /** Copy each resolved project's `.crewly/` from the archive to its target path. */
+    async applyProjects(temp, manifest, plan) {
+        let n = 0;
+        const planById = new Map(plan.projects.map((p) => [p.id, p]));
+        for (const proj of manifest.projects) {
+            const target = planById.get(proj.id)?.targetPath;
+            if (!target)
+                continue; // unresolved — warned in the plan
+            for (const f of proj.files) {
+                // f.path = 'projects/<id>/.crewly/<rel>' → dest = <target>/.crewly/<rel>
+                const rel = f.path.replace(new RegExp(`^projects/${proj.id}/`), '');
+                const src = path.join(temp, ...f.path.split('/'));
+                const dest = path.join(target, ...rel.split('/'));
+                await fs.mkdir(path.dirname(dest), { recursive: true });
+                await fs.copyFile(src, dest);
+            }
+            n += 1;
+        }
+        return n;
+    }
+    /** Atomically swap chat.db into place (temp copy → rename). */
+    async applyChatDb(temp, home, manifest) {
+        if (!manifest.chatDb.included)
+            return false;
+        const src = path.join(temp, 'chat.db');
+        const finalDest = path.join(home, 'chat.db');
+        const tmpDest = path.join(home, `chat.db.restore-${Date.now()}.tmp`);
+        await fs.mkdir(home, { recursive: true });
+        await fs.copyFile(src, tmpDest);
+        await fs.rename(tmpDest, finalDest);
+        // Drop stale WAL/SHM sidecars so SQLite reopens cleanly from the restored db.
+        for (const sidecar of ['chat.db-wal', 'chat.db-shm']) {
+            await fs.rm(path.join(home, sidecar), { force: true }).catch(() => undefined);
+        }
+        return true;
+    }
+    /** Rewrite projects.json `path` entries using the resolved plan mapping. */
+    async rewriteProjectsJson(home, plan) {
+        const file = path.join(home, 'projects.json');
+        const projects = await this.readJson(file, []);
+        if (projects.length === 0)
+            return;
+        const targetById = new Map(plan.projects.map((p) => [p.id, p.targetPath]));
+        let changed = false;
+        for (const proj of projects) {
+            const target = targetById.get(proj.id);
+            if (target && target !== proj.path) {
+                proj.path = target;
+                changed = true;
+            }
+        }
+        if (changed)
+            await fs.writeFile(file, JSON.stringify(projects, null, 2), 'utf8');
+    }
+    /** Reset cron `nextRunAt` so the scheduler recomputes from cronExpression. */
+    async resetCron(home) {
+        for (const name of CRON_FILES) {
+            const file = path.join(home, name);
+            const items = await this.readJson(file, []);
+            if (!Array.isArray(items) || items.length === 0)
+                continue;
+            let changed = false;
+            for (const item of items) {
+                if ('nextRunAt' in item) {
+                    item.nextRunAt = null;
+                    changed = true;
+                }
+            }
+            if (changed)
+                await fs.writeFile(file, JSON.stringify(items, null, 2), 'utf8');
+        }
+    }
+    /** Remove runtime/session state so agents start clean on the restored machine. */
+    async wipeRuntime(home) {
+        for (const name of RUNTIME_WIPE) {
+            await fs.rm(path.join(home, name), { recursive: true, force: true }).catch(() => undefined);
+        }
+    }
+    // ---- small fs helpers ----
+    /** Recursively copy a directory tree, skipping top-level names in `skipTop`. */
+    async copyTree(srcDir, destDir, skipTop) {
+        const entries = await fs.readdir(srcDir, { withFileTypes: true }).catch(() => []);
+        await fs.mkdir(destDir, { recursive: true });
+        for (const e of entries) {
+            if (skipTop.has(e.name))
+                continue;
+            const s = path.join(srcDir, e.name);
+            const d = path.join(destDir, e.name);
+            if (e.isDirectory())
+                await this.copyTreeRec(s, d);
+            else if (e.isFile())
+                await fs.copyFile(s, d);
+        }
+    }
+    /** Recursive copy without the top-level skip filter. */
+    async copyTreeRec(srcDir, destDir) {
+        await fs.mkdir(destDir, { recursive: true });
+        for (const e of await fs.readdir(srcDir, { withFileTypes: true })) {
+            const s = path.join(srcDir, e.name);
+            const d = path.join(destDir, e.name);
+            if (e.isDirectory())
+                await this.copyTreeRec(s, d);
+            else if (e.isFile())
+                await fs.copyFile(s, d);
+        }
+    }
+    async pathExists(p) {
+        return !!(await fs.stat(p).catch(() => null));
+    }
+    async readJson(file, fallback) {
+        try {
+            return JSON.parse(await fs.readFile(file, 'utf8'));
+        }
+        catch {
+            return fallback;
+        }
+    }
+}
+/** Stream a file through SHA-256 → hex digest. */
+async function sha256File(filePath) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash('sha256');
+        const stream = createReadStream(filePath);
+        stream.on('data', (c) => hash.update(c));
+        stream.on('error', reject);
+        stream.on('end', () => resolve(hash.digest('hex')));
+    });
+}
+//# sourceMappingURL=backup-restore.service.js.map