@blamejs/core 0.7.98 → 0.7.99

package/CHANGELOG.md

@@ -8,6 +8,8 @@ upgrading across more than a few patches at a time.
 
 ## v0.7.x
 
+- **0.7.99** (2026-05-06) — `b.db.integrityCheck()` + `b.db.integrityMonitor({ intervalMs, ... })` — periodic SQLite corruption detection. **`b.db.integrityCheck()`** runs `PRAGMA integrity_check` against the live database and returns `"ok"` on a healthy database, or an array of corruption description strings on damage. Operators wire this into `/healthz` handlers or one-off CLI checks. **`b.db.integrityMonitor({ intervalMs, onCorruption })`** runs the check on a schedule (24h default), emits `system.db.integrity_ok` / `system.db.integrity_corrupt` audit events, and fires the `db.integrity_check_ok` / `db.integrity_check_corrupt` observability counters. Optional `onCorruption(issues)` operator hook fires on every corrupt-result so operators can wire pager alerts. The previous boot-time-only integrity check (added in v0.7.79) continues to run unchanged at db.init; the monitor is for long-running deployments where filesystem-level corruption can develop after boot. Returns a handle with `.stop()` for graceful shutdown.
+
 - **0.7.98** (2026-05-06) — `b.ntpCheck.monitor({ intervalMs, ... })` — periodic clock-drift monitor that runs `checkDrift` on a schedule and emits audit + observability events on threshold crossings. Returns a handle with `.stop()` for graceful shutdown. Audit emissions: `system.ntp.checked` (every check), `system.ntp.drift_warn` (drift exceeds warn threshold), `system.ntp.drift_fatal` (drift exceeds fatal threshold), `system.ntp.unreachable` (every server in the list failed to respond). Observability event: `ntp.drift_ms` gauge on every successful check, labeled with the responding server. Optional `onDrift(result)` operator hook fires on every warning/fatal check so operators can wire pager / Slack notifications. The previous boot-time-only `b.ntpCheck.bootCheck` continues to run unchanged at db.init; the monitor is for long-running deployments where clock-drift can develop after boot (container with no RTC sync, ntpd stopped after boot, etc.). Closes the v0.7.79 audit-batch slice for continuous time integrity.
 
 - **0.7.97** (2026-05-06) — `b.compliance` lookup helpers. **`b.compliance.posturesByDomain(domain)`** returns every posture matching the named domain (`"privacy"` / `"health"` / `"payment"` / `"cybersecurity"` / `"financial-reporting"` / `"financial-resilience"` / `"product-cybersecurity"` / `"ai-governance"` / `"biometrics"` / `"audit-attestation"`). **`b.compliance.posturesByJurisdiction(jurisdiction)`** returns postures matching the ISO 3166 alpha-2 code, `EU`, or `international` — useful for multi-region deployments that resolve different posture configs per region. **`b.compliance.list()`** returns every posture as a `{ posture, name, citation, jurisdiction, domain }` row in canonical `KNOWN_POSTURES` order — admin UIs render the full set as a dropdown / table without iterating REGIME_MAP keys themselves. All three helpers are pure functions over the v0.7.94 REGIME_MAP and stay in sync with it as new postures land.

package/lib/db.js

@@ -59,6 +59,7 @@ var dbSchema = require("./db-schema");
 var { defineClass } = require("./framework-error");
 var { boot } = require("./log");
 var lazyRequire = require("./lazy-require");
+var observability = require("./observability");
 var ntpCheck = lazyRequire(function () { return require("./ntp-check"); });
 var safeAsync = require("./safe-async");
 var safeEnv = require("./parsers/safe-env");
@@ -1213,6 +1214,80 @@ module.exports = {
   // the snapshot source. Safe to call any time; no-op when no encPath
   // (plain mode) or when the plaintext DB doesn't exist.
   flushToDisk:         encryptToDisk,
+  // integrityCheck — runs PRAGMA integrity_check against the live db
+  // and returns "ok" on success, an array of corruption lines
+  // otherwise. Operators wire this into a periodic monitor or a
+  // /healthz handler.
+  integrityCheck:      function () {
+    _requireInit();
+    var rows = database.prepare("PRAGMA integrity_check").all();
+    if (rows.length === 1 && rows[0] && rows[0].integrity_check === "ok") return "ok";
+    return rows.map(function (r) { return r && r.integrity_check; }).filter(Boolean);
+  },
+  // integrityMonitor — periodic PRAGMA integrity_check runner. Returns
+  // a handle with .stop() for graceful shutdown. Audit emission on
+  // every check; observability event on corruption.
+  //
+  //   var mon = b.db.integrityMonitor({
+  //     intervalMs: C.TIME.hours(6),
+  //     onCorruption: function (issues) { /* operator hook — alerts */ },
+  //   });
+  //   ...
+  //   mon.stop();
+  //
+  // Audit emissions:
+  //   system.db.integrity_ok        — every clean check
+  //   system.db.integrity_corrupt   — corruption detected
+  //
+  // Observability event: db.integrity_check_ok counter on every clean
+  // check, db.integrity_check_corrupt counter on corruption.
+  integrityMonitor: function (opts) {
+    _requireInit();
+    opts = opts || {};
+    var intervalMs = opts.intervalMs || C.TIME.hours(24);
+    if (typeof intervalMs !== "number" || !isFinite(intervalMs) || intervalMs <= 0) {
+      throw new TypeError("db.integrityMonitor: intervalMs must be a positive finite number");
+    }
+    var auditOn = opts.audit !== false;
+
+    function _tick() {
+      var rows;
+      try { rows = database.prepare("PRAGMA integrity_check").all(); }
+      catch (_e) {
+        try { observability.safeEvent("db.integrity_check_failed", 1, {}); }
+        catch (_e2) { /* drop-silent */ }
+        return;
+      }
+      var ok = rows.length === 1 && rows[0] && rows[0].integrity_check === "ok";
+      if (ok) {
+        try { observability.safeEvent("db.integrity_check_ok", 1, {}); }
+        catch (_e) { /* drop-silent */ }
+        if (auditOn) {
+          try { audit.safeEmit({
+            action: "system.db.integrity_ok", outcome: "ok", metadata: {},
+          }); } catch (_e) { /* drop-silent */ }
+        }
+        return;
+      }
+      var issues = rows.map(function (r) { return r && r.integrity_check; }).filter(Boolean);
+      try { observability.safeEvent("db.integrity_check_corrupt", 1, {}); }
+      catch (_e) { /* drop-silent */ }
+      if (auditOn) {
+        try { audit.safeEmit({
+          action: "system.db.integrity_corrupt", outcome: "fail",
+          metadata: { issueCount: issues.length },
+        }); } catch (_e) { /* drop-silent */ }
+      }
+      if (typeof opts.onCorruption === "function") {
+        try { opts.onCorruption(issues); } catch (_e) { /* operator hook */ }
+      }
+    }
+
+    var handle = safeAsync.repeating(_tick, intervalMs, { name: "db-integrity-monitor" });
+    return {
+      stop: function () { if (handle) { handle.stop(); handle = null; } },
+    };
+  },
   // purgeAuditChain — narrow-purpose DELETE for audit-tools.purge.
   // Drops the BEFORE-DELETE append-only trigger inside a transaction,
   // executes the deletion, then re-installs the trigger so the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.7.98",
+  "version": "0.7.99",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cyclonedx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:387ca63b-9d87-46d5-a7a5-ff7e577e0bd3",
+  "serialNumber": "urn:uuid:a1c08980-f218-4272-8ccc-742e21f943c1",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-05-06T09:03:18.727Z",
+    "timestamp": "2026-05-06T09:14:16.202Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/core@0.7.98",
+      "bom-ref": "@blamejs/core@0.7.99",
       "type": "library",
       "name": "blamejs",
-      "version": "0.7.98",
+      "version": "0.7.99",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "The Node framework that owns its stack.",
-      "purl": "pkg:npm/%40blamejs/core@0.7.98",
+      "purl": "pkg:npm/%40blamejs/core@0.7.99",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/core@0.7.98",
+      "ref": "@blamejs/core@0.7.99",
       "dependsOn": []
     }
   ]