jishushell 0.6.5 → 0.6.18

package/dist/services/backup/backup-admin.js

@@ -0,0 +1,246 @@
+import { existsSync, rmSync } from "fs";
+import { join } from "path";
+import { BACKUPS_DIR, TMP_DIR } from "../../config.js";
+import * as appService from "../app-common/service.js";
+import { normalizeInstanceId } from "../app-common/id-normalizer.js";
+import { assertNotLocked, backupInstance, cancelJob, createFromBackup, enqueueJob, enqueueJobAndWait, exportInstance, getAutoBackupConfig, getJob, getQueueStatus, importInstance, listAllBackupInstanceIds, listInstanceBackups, previewImport, restoreInstance, scheduleAutoBackup, cancelAutoBackup, storeUpload, updateJobProgress, } from "./backup-manager.js";
+import { verifyArchive } from "./backup-verify.js";
+import { validateId } from "../instances/admin.js";
+export class BackupAdminError extends Error {
+    statusCode;
+    payload;
+    constructor(statusCode, detail, extra = {}) {
+        super(detail);
+        this.statusCode = statusCode;
+        this.payload = { detail, ...extra };
+    }
+}
+export function isBackupAdminError(error) {
+    return error instanceof BackupAdminError;
+}
+function fail(statusCode, detail, extra = {}) {
+    throw new BackupAdminError(statusCode, detail, extra);
+}
+function assertValidId(id, field = "id") {
+    const err = validateId(id);
+    if (err)
+        fail(400, field === "id" ? err : `Invalid ${field}: ${err}`);
+}
+function assertSafeFilename(filename, field = "filename") {
+    if (!filename || filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+        fail(400, `Invalid ${field}`);
+    }
+}
+function assertInstanceWritable(instanceId) {
+    assertValidId(instanceId);
+    if (!appService.getInstance(instanceId))
+        fail(404, "Instance not found");
+    try {
+        assertNotLocked(instanceId);
+    }
+    catch (error) {
+        fail(error?.statusCode || 409, error?.message || `Instance ${instanceId} is locked`);
+    }
+}
+function normalizeInstanceName(name) {
+    return name.trim().toLowerCase();
+}
+function preflightNewInstance(newId, newName) {
+    assertValidId(newId);
+    let normalizedId;
+    try {
+        normalizedId = normalizeInstanceId(newId, "openclaw");
+    }
+    catch (error) {
+        fail(400, error?.message || "Invalid instance id");
+    }
+    const requestedName = typeof newName === "string" ? newName.trim() : "";
+    if (!requestedName || requestedName.length > 256) {
+        fail(400, "Name must be 1-256 characters");
+    }
+    if (appService.getInstance(normalizedId)) {
+        fail(409, `Application '${normalizedId}' already exists`);
+    }
+    const normalizedName = normalizeInstanceName(requestedName);
+    const existingByName = appService.listInstances().find((instance) => {
+        if (!instance || typeof instance.name !== "string")
+            return false;
+        return normalizeInstanceName(instance.name) === normalizedName;
+    });
+    if (existingByName) {
+        fail(409, `Application name '${requestedName}' already exists`, { existingId: existingByName.id });
+    }
+    return normalizedId;
+}
+function backupPath(instanceId, filename, field = "filename") {
+    assertValidId(instanceId);
+    assertSafeFilename(filename, field);
+    const filePath = join(BACKUPS_DIR, instanceId, filename);
+    if (!existsSync(filePath))
+        fail(404, "Backup file not found");
+    return filePath;
+}
+export function getBackupJob(jobId) {
+    return getJob(jobId);
+}
+export function getBackupQueueStatus() {
+    return getQueueStatus();
+}
+export function cancelBackupJob(jobId) {
+    return cancelJob(jobId);
+}
+export async function waitForBackupJob(jobId, opts = {}) {
+    const intervalMs = opts.intervalMs ?? 1500;
+    while (true) {
+        const job = getJob(jobId);
+        if (!job)
+            fail(404, "Job not found");
+        if (job.status === "completed")
+            return job;
+        if (job.status === "failed")
+            throw new Error(job.error || "Job failed");
+        opts.onProgress?.(job);
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    }
+}
+export function startBackupJob(instanceId, options = {}) {
+    assertInstanceWritable(instanceId);
+    return enqueueJob(instanceId, "manual-backup", async (job) => {
+        updateJobProgress(job.id, options.onlyConfig ? "Creating config backup..." : "Creating backup...");
+        const result = await backupInstance(instanceId, {
+            includeSessions: options.includeSessions,
+            includeWorkspace: options.includeWorkspace,
+            onlyConfig: options.onlyConfig,
+            scope: options.scope ?? "home",
+        });
+        return { filename: result.filename, size: result.size };
+    });
+}
+export function listBackups(instanceId) {
+    assertValidId(instanceId);
+    return listInstanceBackups(instanceId);
+}
+export function resolveBackupDownload(instanceId, filename) {
+    return {
+        filePath: backupPath(instanceId, filename),
+        downloadName: `${instanceId}-${filename}`,
+    };
+}
+export function deleteBackup(instanceId, filename) {
+    const filePath = backupPath(instanceId, filename);
+    rmSync(filePath, { force: true });
+}
+export async function verifyBackup(instanceId, filename) {
+    return verifyArchive(backupPath(instanceId, filename));
+}
+export function startRestoreJob(input) {
+    assertInstanceWritable(input.instanceId);
+    const filePath = backupPath(input.instanceId, input.filename);
+    return enqueueJob(input.instanceId, "restore", async (job) => {
+        updateJobProgress(job.id, "Restoring...");
+        return restoreInstance(input.instanceId, filePath);
+    });
+}
+export function startExportJob(instanceId, options = {}) {
+    assertInstanceWritable(instanceId);
+    return enqueueJob(instanceId, "export", async (job) => {
+        updateJobProgress(job.id, "Exporting...");
+        const result = await exportInstance(instanceId, { includeSessions: options.includeSessions });
+        return {
+            filename: result.filename,
+            filepath: result.filepath,
+            size: result.size,
+            warnings: result.manifest?.warnings,
+        };
+    });
+}
+export async function createInstanceFromBackup(input) {
+    assertValidId(input.sourceId, "source_id");
+    const normalizedNewId = preflightNewInstance(input.newId, input.newName);
+    const filePath = backupPath(input.sourceId, input.backupFile, "backup_file");
+    const requestedName = input.newName.trim();
+    const job = await enqueueJobAndWait(normalizedNewId, "create-from-backup", async (queuedJob) => {
+        updateJobProgress(queuedJob.id, "Creating instance from backup...");
+        return createFromBackup(filePath, {
+            newId: normalizedNewId,
+            newName: requestedName,
+            newDescription: input.newDescription,
+        });
+    });
+    return job.result || { ok: false, instance_id: normalizedNewId, warnings: ["Job completed without result"] };
+}
+export async function storeImportArchive(filePath) {
+    if (!existsSync(filePath))
+        fail(404, "Import file not found");
+    return storeUpload(filePath);
+}
+export function previewImportArchive(tempId) {
+    if (!tempId)
+        fail(400, "Missing temp_id");
+    return previewImport(tempId);
+}
+export async function commitImportArchive(input) {
+    if (!input.tempId)
+        fail(400, "Missing temp_id");
+    const normalizedId = preflightNewInstance(input.id, input.name);
+    const requestedName = input.name.trim();
+    const job = await enqueueJobAndWait(normalizedId, "import", async (queuedJob) => {
+        updateJobProgress(queuedJob.id, "Importing...");
+        return importInstance(input.tempId, {
+            id: normalizedId,
+            name: requestedName,
+            description: input.description,
+        });
+    });
+    return job.result || { ok: false, instance_id: normalizedId, detail: "Job completed without result" };
+}
+export function listOrphanedBackups() {
+    return listAllBackupInstanceIds()
+        .filter((id) => !appService.getInstance(id))
+        .map((id) => ({ instance_id: id, backups: listInstanceBackups(id) }));
+}
+export function deleteOrphanedBackup(instanceId, filename) {
+    assertSafeFilename(instanceId, "id");
+    assertSafeFilename(filename);
+    const filePath = join(BACKUPS_DIR, instanceId, filename);
+    if (!existsSync(filePath))
+        fail(404, "File not found");
+    rmSync(filePath, { force: true });
+}
+export function resolveExportDownload(instanceId, filename) {
+    assertValidId(instanceId);
+    assertSafeFilename(filename);
+    const filePath = join(TMP_DIR, "exports", instanceId, filename);
+    if (!existsSync(filePath))
+        fail(404, "Export file not found or expired");
+    return {
+        filePath,
+        downloadName: `${instanceId}-${filename}`,
+    };
+}
+export async function getAutoBackupSettings(instanceId) {
+    assertValidId(instanceId);
+    return (await getAutoBackupConfig(instanceId)) || { enabled: false };
+}
+export async function setAutoBackupSettings(instanceId, input) {
+    assertValidId(instanceId);
+    const meta = appService.getInstance(instanceId);
+    if (!meta)
+        fail(404, "Instance not found");
+    const current = (meta.auto_backup || {});
+    const config = {
+        ...current,
+        enabled: !!input.enabled,
+        interval_hours: input.interval_hours ?? current.interval_hours ?? 24,
+        keep_count: input.keep_count ?? current.keep_count ?? 7,
+    };
+    appService.updateInstanceMeta(instanceId, { auto_backup: config });
+    if (config.enabled) {
+        scheduleAutoBackup(instanceId, config);
+    }
+    else {
+        cancelAutoBackup(instanceId);
+    }
+    return { ok: true, config };
+}
+//# sourceMappingURL=backup-admin.js.map

package/dist/services/backup/backup-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-admin.js","sourceRoot":"","sources":["../../../src/services/backup/backup-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EACL,eAAe,EACf,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,MAAM,EACN,cAAc,EACd,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,UAAU,CAAS;IACnB,OAAO,CAA6C;IAEpD,YAAY,UAAkB,EAAE,MAAc,EAAE,QAAiC,EAAE;QACjF,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,gBAAgB,CAAC;AAC3C,CAAC;AAsCD,SAAS,IAAI,CAAC,UAAkB,EAAE,MAAc,EAAE,QAAiC,EAAE;IACnF,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,KAAK,GAAG,IAAI;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,IAAI,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,KAAK,GAAG,UAAU;IAC9D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,GAAG,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB;IAChD,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,IAAI,YAAY,UAAU,YAAY,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,OAAe;IAC1D,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,IAAI,qBAAqB,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,gBAAgB,YAAY,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAClE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,EAAE,qBAAqB,aAAa,kBAAkB,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,QAAgB,EAAE,KAAK,GAAG,UAAU;IAC1E,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,OAAuE,EAAE;IAEzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,GAAG,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,UAAyB,EAAE;IAC5E,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3D,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE;YAC9C,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;IACxE,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC1C,YAAY,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAgB;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAgB;IACrE,OAAO,aAAa,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3D,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1C,OAAO,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,UAAyB,EAAE;IAC5E,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpD,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QAC9F,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7F,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAC;QACpE,OAAO,gBAAgB,CAAC,QAAQ,EAAE;YAChC,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC9D,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAKzC;IACC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC9E,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAChD,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE;YAClC,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,wBAAwB,EAAE;SAC9B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,QAAgB;IACvE,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACrC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACvD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;IACxE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IACzE,OAAO;QACL,QAAQ;QACR,YAAY,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB;IAC5D,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,CAAC,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,KAAyE;IAEzE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,CAAE,IAAY,CAAC,WAAW,IAAI,EAAE,CAA8B,CAAC;IAC/E,MAAM,MAAM,GAAqB;QAC/B,GAAG,OAAO;QACV,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,IAAI,EAAE;QACpE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC;KACxD,CAAC;IAEF,UAAU,CAAC,kBAAkB,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/dist/services/backup/backup-manager.d.ts

@@ -0,0 +1,264 @@
+/**
+ * Encode an absolute filesystem path for use inside backup archives.
+ * Ported from OpenClaw official: encodeAbsolutePathForBackupArchive.
+ */
+export declare function encodeAbsolutePathForArchive(sourcePath: string): string;
+/**
+ * Decode a path produced by {@link encodeAbsolutePathForArchive} back to
+ * the original absolute filesystem path.
+ *
+ * - `"posix/Users/arm/foo"` → `"/Users/arm/foo"`
+ * - `"windows/C/Users/foo"` → `"C:\\Users\\foo"`
+ * - `"relative/some/path"`  → `"some/path"`
+ *
+ * Returns the input unchanged when the prefix is unrecognised.
+ */
+export declare function decodeArchivePath(encodedPath: string): string;
+export interface CallOpenclawBackupResult {
+    ok: boolean;
+    archivePath?: string;
+    error?: string;
+}
+/**
+ * Try to create a backup by calling the official `openclaw backup create` CLI.
+ * Returns ok:false if the binary is missing or the command fails.
+ */
+export declare function callOpenclawBackup(instanceId: string, outputDir: string, opts: {
+    onlyConfig?: boolean;
+    noWorkspace?: boolean;
+}): Promise<CallOpenclawBackupResult>;
+/** Ensure backup and tmp directories exist */
+export declare function ensureBackupDirs(): void;
+/**
+ * Get the per-instance export output directory (TMP_DIR/exports/<id>/).
+ * Exports live in an isolated subdirectory so the download route can enforce
+ * `:id` → file ownership and one instance's URL can't reach another's archive.
+ */
+export declare function getInstanceExportDir(instanceId: string): string;
+/** Clean up stale tmp files older than 30 minutes. Call on startup and periodically. */
+export declare function cleanupStaleTmpFiles(): number;
+/** Start periodic tmp cleanup. Call once at server startup. */
+export declare function startTmpCleanupScheduler(): void;
+/** Stop the cleanup scheduler (for graceful shutdown). */
+export declare function stopTmpCleanupScheduler(): void;
+/** Get the backup directory for an instance (creates if needed) */
+export declare function getInstanceBackupDir(instanceId: string): string;
+/** List all backup files for an instance, sorted by mtime descending (newest first) */
+export declare function listInstanceBackups(instanceId: string): Array<{
+    filename: string;
+    size: number;
+    created_at: string;
+    type: "auto-backup" | "manual-backup" | "pre-restore";
+}>;
+/** List all instance IDs that have backups (including orphans) */
+export declare function listAllBackupInstanceIds(): string[];
+/** Acquire an exclusive lock for an instance. Returns false if already locked. */
+export declare function acquireInstanceLock(instanceId: string, operation: string): boolean;
+/** Update heartbeat for a held lock. Call periodically during long operations. */
+export declare function touchInstanceLock(instanceId: string): void;
+/** Release the lock for an instance. */
+export declare function releaseInstanceLock(instanceId: string): void;
+/** Get current lock status for an instance (for status API). */
+export declare function getInstanceLockStatus(instanceId: string): {
+    locked: boolean;
+    operation?: string;
+} | null;
+/** Start a heartbeat interval for long operations. Returns a cleanup function. */
+export declare function startLockHeartbeat(instanceId: string, intervalMs?: number): () => void;
+/** Check if instance is locked. Throws with 409 status if locked. */
+export declare function assertNotLocked(instanceId: string): void;
+/** Detect whether system tar is GNU or BSD. Cached after first call. */
+export declare function detectTarVariant(): "gnu" | "bsd";
+interface TarEntry {
+    type: string;
+    size: number;
+    path: string;
+}
+/**
+ * Pre-scan a tar.gz archive for security threats.
+ * Throws on: path traversal, symlinks, hardlinks, absolute paths, oversized.
+ */
+export declare function preScanArchive(archivePath: string): {
+    entries: TarEntry[];
+    totalSize: number;
+};
+/**
+ * Safely extract a tar.gz archive to destDir.
+ * Pre-scans for security threats, then extracts with safety flags.
+ */
+export declare function safeExtract(archivePath: string, destDir: string): Promise<{
+    entries: TarEntry[];
+    totalSize: number;
+}>;
+export interface PackResult {
+    filename: string;
+    filepath: string;
+    size: number;
+    manifest: Record<string, any>;
+}
+/** Create a manual or auto backup of an instance */
+export declare function backupInstance(instanceId: string, opts?: {
+    includeSessions?: boolean;
+    includeWorkspace?: boolean;
+    onlyConfig?: boolean;
+    outputPath?: string;
+    type?: "manual-backup" | "auto-backup";
+    scope?: "state" | "home";
+}): Promise<PackResult>;
+export interface SelfPackOptions {
+    type: "manual-backup" | "auto-backup" | "pre-restore" | "export";
+    scope?: "state" | "home";
+    includeSessions?: boolean;
+    includeWorkspace?: boolean;
+    onlyConfig?: boolean;
+}
+/**
+ * Pack an instance in the official OpenClaw backup archive format.
+ * Layout: manifest.json at root + payload/<encoded-path>/.openclaw/...
+ * This is the fallback when `openclaw backup create` CLI is unavailable.
+ */
+export declare function selfPackOfficialFormat(instanceId: string, outputPath: string, opts: SelfPackOptions): Promise<PackResult>;
+export interface RestoreResult {
+    ok: boolean;
+    warnings: string[];
+    api_key_status: "preserved" | "lost" | "not_applicable";
+    rolled_back?: boolean;
+}
+/**
+ * Restore an instance from a backup file.
+ * Full flow: lock -> extract -> validate -> pre-restore backup -> stop -> restore -> rebuild -> start -> healthcheck -> rollback on failure
+ */
+export declare function restoreInstance(instanceId: string, backupFilePath: string): Promise<RestoreResult>;
+/**
+ * Create a new instance from a backup file.
+ * Does NOT copy model.env (new proxy token), provider.env (can't decrypt), or IM credentials.
+ * Hard rule: provider.env is always ignored — no decrypt attempt, no migration.
+ */
+export declare function createFromBackup(backupFilePath: string, opts: {
+    newId: string;
+    newName: string;
+    newDescription?: string;
+}): Promise<{
+    ok: boolean;
+    instance_id: string;
+    warnings: string[];
+}>;
+/**
+ * Export an instance for sharing. Uses WHITELIST strategy — only safe directories included.
+ * API keys and credentials are stripped. Sensitive fields in openclaw.json are scrubbed.
+ */
+export declare function exportInstance(instanceId: string, opts?: {
+    includeSessions?: boolean;
+    outputPath?: string;
+}): Promise<PackResult>;
+/** Step 1: Store uploaded file to tmp. Returns temp_id for subsequent calls. */
+export declare function storeUpload(filePath: string): Promise<{
+    temp_id: string;
+}>;
+/** Step 2: Preview an uploaded archive without creating an instance. */
+export declare function previewImport(tempId: string): Promise<{
+    manifest: Record<string, any> | null;
+    warnings: string[];
+    estimated_size: number;
+    format: "official" | "unknown";
+}>;
+/** Step 3: Create a new instance from a previously uploaded archive. */
+export declare function importInstance(tempId: string, opts: {
+    id: string;
+    name: string;
+    description?: string;
+}): Promise<{
+    ok: boolean;
+    instance_id: string;
+    warnings: string[];
+}>;
+/**
+ * Resolve the effective "archive root" inside an extracted tarball.
+ *
+ * Returns the directory where `manifest.json` and `payload/` live. Two
+ * archive layouts are supported:
+ *
+ *   1. **JishuShell self-pack** (`selfPackOfficialFormat`): writes
+ *      `manifest.json` and `payload/` directly at the archive root, so the
+ *      effective root is the extraction dir itself.
+ *
+ *   2. **Official OpenClaw `backup create`**: wraps everything inside a
+ *      single top-level directory named after the archive basename, e.g.
+ *      `2026-04-10T03-06-23.257Z-openclaw-backup/`. The wrapper name is
+ *      also advertised via `manifest.archiveRoot`.
+ *
+ * Detection strategy (cheapest first):
+ *   a. If `<tmpDir>/manifest.json` exists → self-pack → return tmpDir.
+ *   b. Else scan top-level entries; if exactly one is a directory containing
+ *      `manifest.json`, that's the official CLI wrapper → return it.
+ *   c. Fall back to tmpDir; the caller will throw its own missing-manifest
+ *      error with a meaningful path.
+ *
+ * Without this helper, `restoreInstance` / `importInstance` / `verifyArchive`
+ * would throw "Archive missing manifest.json" on every state-scope archive
+ * produced by the official CLI.
+ */
+export declare function resolveArchiveRoot(tmpDir: string): string;
+/**
+ * Locate the OpenClaw state directory inside an extracted archive.
+ *
+ * Finds a directory **literally named `.openclaw`** that contains an
+ * `openclaw.json` file. Uses BFS so the shallowest match wins, which guards
+ * against nested copies inside extensions/ or workspace/.
+ *
+ * This is intentionally stricter than "any directory containing
+ * openclaw.json". Historical archives may contain an outer-home config
+ * mirror, so a naive search can select the wrong level for home-scope
+ * archives.
+ */
+export declare function findStateDir(rootDir: string): string | null;
+interface AutoBackupConfig {
+    enabled: boolean;
+    interval_hours: number;
+    keep_count: number;
+    last_backup_at?: string;
+    last_backup_ok?: boolean;
+    consecutive_failures?: number;
+    warnings?: string[];
+}
+/** Get auto-backup config from instance.json */
+export declare function getAutoBackupConfig(instanceId: string): Promise<AutoBackupConfig | null>;
+/** Clean old auto-backup files, keeping only the newest `keepCount` */
+export declare function cleanOldAutoBackups(instanceId: string, keepCount: number): Promise<number>;
+export interface BackupJob {
+    id: string;
+    instanceId: string;
+    operation: "manual-backup" | "auto-backup" | "export" | "restore" | "import" | "create-from-backup";
+    status: "queued" | "running" | "completed" | "failed";
+    createdAt: number;
+    startedAt?: number;
+    completedAt?: number;
+    progress?: string;
+    error?: string;
+    result?: any;
+}
+/** Enqueue a backup operation. Returns the job immediately (non-blocking). */
+export declare function enqueueJob(instanceId: string, operation: BackupJob["operation"], executeFn: (job: BackupJob) => Promise<any>): BackupJob;
+/** Enqueue and wait for completion. Returns the completed job. */
+export declare function enqueueJobAndWait(instanceId: string, operation: BackupJob["operation"], executeFn: (job: BackupJob) => Promise<any>): Promise<BackupJob>;
+/** Update progress message for the currently running job */
+export declare function updateJobProgress(jobId: string, progress: string): void;
+/** Get full queue status */
+export declare function getQueueStatus(): {
+    current: BackupJob | null;
+    queued: BackupJob[];
+    recent: BackupJob[];
+};
+/** Get a specific job by ID (checks current, queue, and history) */
+export declare function getJob(jobId: string): BackupJob | null;
+/** Cancel a queued job (cannot cancel running jobs) */
+export declare function cancelJob(jobId: string): boolean;
+/** Schedule auto-backup for an instance */
+export declare function scheduleAutoBackup(instanceId: string, config: AutoBackupConfig): void;
+/** Cancel auto-backup for an instance */
+export declare function cancelAutoBackup(instanceId: string): void;
+/** Stop every per-instance auto-backup timer during Core shutdown. */
+export declare function shutdownAutoBackup(): void;
+/** Initialize auto-backup for all instances (call on server startup) */
+export declare function initAutoBackup(): Promise<void>;
+export {};