@cavelang/store 0.27.3 → 0.29.0

package/Authors.md

@@ -0,0 +1,5 @@
+# Authors
+
+By adding their name to this file, all listed authors confirm they have copyright over their contributions to this project and are waiving these rights, placing their work in the public domain in accordance with the CC0 1.0 Universal Public Domain Dedication.
+
+- Mirek Rusin (Switzerland)

package/License.md

@@ -0,0 +1,6 @@
+# CC0 1.0 Universal (CC0 1.0) Public Domain Dedication
+
+To the extent possible under law, the authors listed in [Authors.md](./Authors.md) have waived all copyright and related or neighboring rights to this software and associated documentation files (the "Software").
+
+For more information, please see:
+https://creativecommons.org/publicdomain/zero/1.0/

package/README.md

@@ -1,9 +1,10 @@
 # @cavelang/store
 
-CAVE persistence on the **Node.js builtin `node:sqlite`** — no native
-dependencies. Implements the spec §13 storage model: the exact §13.1/§13.2
-schema (`cave_claim`, `cave_context`, `cave_tag`, `cave_edge`, `cave_fts`
-FTS5), append-only belief series, and inverse-aware reads.
+CAVE persistence through an explicit synchronous SQLite adapter. The default
+Node entry uses the builtin `node:sqlite` with no native dependencies; browser
+runtimes can inject a WASM implementation. Implements the spec §13 storage model: the exact §13.1/§13.2
+schema (`cave_claim`, `cave_context`, `cave_provenance`, `cave_tag`, `cave_edge`, `cave_fts`
+full-text index), append-only belief series, and inverse-aware reads.
 
 ```ts
 import { open } from '@cavelang/store'
@@ -15,24 +16,108 @@ monorepo CONTAINS packages/api @ 90%
 `)
 store.currentBeliefs()                       // one row — one fact, one key, conf 0.9
 store.reverse('packages/api')                // [{ verb: 'CONTAINS', rel: 'PART-OF', source: 'monorepo' }]
-store.exportText({ current: true })          // canonical CAVE text back out
+store.exportText({ current: true })          // canonical text through internal
+store.exportText({ maxSensitivity: 'restricted' }) // complete portable history
 ```
 
+Runtime selection is explicit at non-Node composition boundaries:
+
+```ts
+import { openWith, type SqliteAdapter } from '@cavelang/store/adapter'
+
+declare const adapter: SqliteAdapter
+const store = openWith(adapter, ':memory:')
+```
+
+`SqliteAdapter` declares the SQL statement surface plus immediate/savepoint
+transactions, FTS4 or FTS5, optional extension loading, and optional exact
+snapshot support. The concrete Node adapter is also available from
+`@cavelang/store/adapter/node`. The shared adapter contract suite runs against
+both Node SQLite and the website's SQL.js/WASM adapter.
+
+## Composable query SQL
+
+`QuerySql` is the public source of truth for semantics shared by store,
+CAVE-Q, shapes, generated clients, and views:
+
+```ts
+import { QuerySql } from '@cavelang/store'
+
+const boundary = QuerySql.asOfBoundary('2026-07-16')!
+const currentThen = QuerySql.current(QuerySql.claims(boundary))
+const rows = store.db.prepare(`SELECT * FROM (${currentThen}) WHERE conf > 0`).all()
+```
+
+`current()` selects latest tx per claim key without filtering negation or
+retraction; consumers add those predicates for their read mode. `aliasEdges`,
+`aliasPairs`, `aliasClosure`, and `aliasSame` implement entity-only current
+positive ALIAS semantics. `transactionBounds` and `asOfBoundary` use
+`Time.parseBoundary` for shared whole-period/whole-second semantics
+(offset-less timestamps are UTC) and exact-transaction rules. Fragments own no
+ordering or outer filtering, so consumers can extend them without copying
+semantic clauses.
+
+## External records
+
+Database rows (`Row.t`, snake_case columns) are the storage-oriented API and
+may evolve with the schema. Use `store.recordOf(row)` for serialized or
+cross-process data. It returns `cave.claim/v1`: transaction identity (`id`,
+`tx`, `key`), canonical CAVE text, the semantic `Claim.t`, and explicit
+provenance dimensions. `Record.encode`/`Record.decode` own the JSON contract;
+decoding rejects unknown versions and verifies transaction, key, and canonical
+text identity. The checked-in v1 fixture is the compatibility baseline for
+future decoders.
+
 ## Semantics
 
+- **Schema upgrades are explicit** (§13.2.1): `PRAGMA user_version` records
+  the local format (current version 1; version 0 is the unversioned legacy
+  baseline). `open()` rejects newer stores, applies every older migration in
+  order with its backfill and version update in one `BEGIN IMMEDIATE`
+  transaction, then validates required tables, indexes, and columns. A crash
+  leaves a resumable old or complete new version—never a committed half-step.
+  Migrations are forward-only; make rollback points by closing all users and
+  copying the closed SQLite file before upgrade.
+- **Exact backup is an online SQLite snapshot** (§13.2.2): `backup()` runs
+  `VACUUM INTO` to a temporary sibling, verifies integrity, foreign keys and
+  schema, fsyncs it, computes SHA-256, and atomically publishes it. WAL-visible
+  committed rows and concurrent readers/writers are safe. `restoreBackup()`
+  verifies the source and temporary copy before atomic publication and refuses
+  destination WAL/SHM/journal sidecars. `verifyBackup()` supports independent checks.
 - **Append-only** (§9.1): `ingest` only inserts; every row carries a
   monotonic UUIDv7 in `id` and `tx`, so `MAX(tx)` per `claim_key` is the
-  current belief. Each ingest call is one SQLite transaction.
+  current belief. Each ingest call is one SQLite transaction. Outer writes
+  reserve SQLite's write lock and re-observe `MAX(tx)` before minting, so
+  concurrent processes allocate in commit order; lock contention waits for
+  up to five seconds before surfacing `SQLITE_BUSY`.
+- **History is permanent** (§9.6): retraction appends a `0%` row; it never
+  erases the earlier row, `raw_line`, metadata, FTS text, export, backup, or
+  peer copy. The store has no row-level redact/forget API because local
+  deletion cannot guarantee erasure across SQLite remnants and distributed
+  copies. Keep secrets and selectively erasable data out of CAVE; recover
+  from accidental ingestion by quarantining every copy and rebuilding from
+  reviewed safe input.
+- **Publication is sensitivity-scoped** (§9.7):
+  `#sensitivity:public|internal|confidential|restricted` labels each immutable
+  row; unlabeled means `internal`, while flat, malformed and unknown labels
+  fail closed as `restricted`. Export defaults to a maximum of `internal`.
+  Select `restricted` explicitly for complete portable text history. This is routing metadata,
+  not encryption, access control, erasure or a retention boundary.
 - **One row per fact** (§13.3): inverse writes are canonicalized before
   keying (`@cavelang/canonical`), inverse *reads* are query-time views —
   `forward()` uses the subject index, `reverse()` the object index with the
   relation named via the registry's `inverseOf`. Nothing is materialized.
-- **Registry persistence is in-band**: `REVERSE` and `X IS verb` claims are
+- **Registry persistence is in-band**: `REVERSE`, `RENAMED-TO`, and `X IS verb` claims are
   ordinary rows; on open the store replays them (in tx order) on top of the
   initial registry, which defaults to the standard §5.5 prelude pairs. The
   replay predicate mirrors the canonicalizer exactly — qualifier-condition
   rows never declare, and `X IS verb` needs a verb-shaped subject — so the
   registry after reopen equals the registry at close.
+- **Verb renames preserve history** (§5.8): after `OLD RENAMED-TO NEW`,
+  either spelling writes the stable `OLD` storage verb and therefore the same
+  claim key. `NEW` is preferred for authors while `OLD` remains compatible;
+  declaration replay on reopen and `registryAsOf` preserve the same
+  transaction-time boundary semantics as inverse declarations.
 - **Traversal defaults**: `forward`/`reverse`/`topicMembers`/`topicsOf`
   read *current beliefs* and skip negated (`VERB NOT`) and retracted
   (`@ 0%`) rows; opt back in with `{ negated: true, retracted: true }`.
@@ -52,6 +137,18 @@ store.exportText({ current: true })          // canonical CAVE text back out
   different actors keeps separate belief series (§9.4). A written `@src:`
   always wins; `raw_line` stays as authored. Interchange replay (`cave
   import`) passes no source, preserving exported keys.
+- **Provenance dimensions are explicit** (§9.5.1): every row projects
+  actor, physical source, lifecycle run, and `scope:` domain into indexed
+  `cave_provenance` entries. Contexts and keys remain the compatibility text
+  representation. Lifecycle systems use `run` lookup rather than authored
+  `src:` strings; resolution reads actor/source. Opening old stores backfills
+  only established actor/run prefixes, decoded sources, and explicit scopes.
+- **Source spans retain source identity** (§9.8):
+  `@src:docs/design%20notes.md#L10-L20` carries a one-based inclusive range;
+  `SourceSpan` owns escaping and parsing. The exact context remains in the
+  claim key, while resolution/reliability strip the line fragment before
+  policy matching. `AppendOptions.contexts` lets connectors attach structured
+  spans before keying without rewriting generated CAVE text.
 - **Contradiction resolution is opt-in** (§26): `{ resolve: true }` on
   traversal reads only the winners — coexisting series about one fact
   (claim key modulo `src:` contexts and polarity) collapse to the row the
@@ -74,6 +171,7 @@ store.exportText({ current: true })          // canonical CAVE text back out
 | `insertResult(result, {source})` | | append a pre-canonicalized `@cavelang/canonical` result |
 | `currentBeliefs({minConf})` | §13.5 | latest row per key |
 | `currentBelief(key)` / `history(key)` | §9.1 | one fact's belief series |
+| `provenanceOf(rowOrId)` / `byProvenance(dimension, value)` | §9.5.1 | inspect or filter actor/source/run/domain |
 | `resolvedBeliefs({aliases})` | §26 | one winner per resolution group |
 | `contested({aliases})` | §26.4 | contested groups, candidates ranked winner-first — the fusion feed |
 | `resolutionPolicy()` | §26.3 | effective policy: built-ins merged with in-band declarations |
@@ -83,11 +181,14 @@ store.exportText({ current: true })          // canonical CAVE text back out
 | `byTag(key, value?)` | §13.5 | flat (`value` omitted → `IS NULL`) or scoped |
 | `byContext(ctx)` | §13.5 | context filter |
 | `topicMembers(t)` / `topicsOf(e)` | §11.2 | topic layer over `CONTAINS` |
-| `search(q, {raw})` | §13.2 | FTS5; literal phrase by default |
+| `search(q, {raw, limit, maxSensitivity})` | §13.2 | adapter full-text search; literal phrase by default, `limit` caps in the query; sensitivity is opt-in for enclosing publication surfaces |
 | `edgesOf(id)` | §13.2 | qualifier/grouping edges with roles |
 | `toClaim(row)` | | reconstruct the canonical claim + side tables |
-| `exportText({current})` | | emit canonical CAVE text |
-| `db` | | raw `DatabaseSync` — used by `@cavelang/query` |
+| `registry()` / `baseRegistry()` | §5.5 | current registry and its configured pre-declaration base |
+| `recordOf(row)` | | map a storage row to the stable `cave.claim/v1` JSON contract |
+| `exportText({current, tx, maxSensitivity})` | §9.7 | emit sensitivity-scoped canonical CAVE text (default maximum `internal`); `tx` includes replayable `;@` row identities; `current` compacts, never sanitizes; complete portable history requires `restricted` |
+| `backup(store, path)` / `verifyBackup(path)` / `restoreBackup(snapshot, path)` | §13.2.2 | exact verified SQLite snapshot lifecycle |
+| `adapter` / `db` | | selected adapter capabilities and its raw structural database handle |
 
 ## Storage decisions
 
@@ -100,14 +201,19 @@ store.exportText({ current: true })          // canonical CAVE text back out
   normalized §13.4 forms. Same for `delta_*`.
 - **`id` doubles as `tx`** by default: a UUIDv7 is both unique and
   time-ordered, and per-row tx ids keep same-document belief updates
-  ordered by line.
-- **`search()` phrase-quotes by default** — FTS5 would parse
+  ordered by line. Allocation is database-serialized across processes;
+  nested store transactions remain savepoints.
+- **`search()` phrase-quotes by default** — SQLite full-text syntax would parse
   `token-expiry` as a column filter; `{ raw: true }` opts into full MATCH
   syntax.
 - **Current-only export remaps edge endpoints** to the current row of each
   endpoint's claim key: a superseded qualified parent keeps its `WHEN`
   attached to the surviving belief, and orphaned condition claims are never
   promoted to top-level facts.
+- **Sensitivity filtering follows current resolution**: the latest row is
+  selected before its audience is checked, so a hidden current belief never
+  revives an older visible row. Full-history export checks each row. Edges with
+  either endpoint hidden are omitted.
 
 ## Tests
 
@@ -124,5 +230,6 @@ cross-actor retraction, stamped round-trips), the §26 resolution policy
 (human-over-ingest precedence, reliability weighting, longest-prefix
 specificity, polarity contests, no self-elevation, alias-widened
 groups, contested ranking), the §11.2 topic reads, edge persistence,
-registry rebuild across reopen, transactional strict ingest and export
-round-trips.
+registry and lifecycle rebuild across reopen, transactional strict ingest and export
+round-trips, ordered schema migration, newer-version rejection, transactional
+rollback/retry, and closed-file backup recovery.

package/dist/src/adapter-entry.d.ts

@@ -0,0 +1,9 @@
+/** Explicit, runtime-neutral SQLite composition surface. */
+export { openWith } from './runtime.ts';
+export type { Store } from './runtime.ts';
+export * as Resolve from './resolve.ts';
+export * as Row from './row.ts';
+export * as QuerySql from './query-sql.ts';
+export * as Record from './record.ts';
+export type { Adapter as SqliteAdapter, BackupCapability as SqliteBackupCapability, Capabilities as SqliteCapabilities, Database as SqliteDatabase, OpenOptions as SqliteOpenOptions, Row as SqliteRow, Statement as SqliteStatement, Value as SqliteValue, } from './adapter.ts';
+//# sourceMappingURL=adapter-entry.d.ts.map

package/dist/src/adapter-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-entry.d.ts","sourceRoot":"","sources":["../../src/adapter-entry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,YAAY,EACV,OAAO,IAAI,aAAa,EACxB,gBAAgB,IAAI,sBAAsB,EAC1C,YAAY,IAAI,kBAAkB,EAClC,QAAQ,IAAI,cAAc,EAC1B,WAAW,IAAI,iBAAiB,EAChC,GAAG,IAAI,SAAS,EAChB,SAAS,IAAI,eAAe,EAC5B,KAAK,IAAI,WAAW,GACrB,MAAM,cAAc,CAAA"}

package/dist/src/adapter-entry.js

@@ -0,0 +1,7 @@
+/** Explicit, runtime-neutral SQLite composition surface. */
+export { openWith } from "./runtime.js";
+export * as Resolve from "./resolve.js";
+export * as Row from "./row.js";
+export * as QuerySql from "./query-sql.js";
+export * as Record from "./record.js";
+//# sourceMappingURL=adapter-entry.js.map

package/dist/src/adapter-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-entry.js","sourceRoot":"","sources":["../../src/adapter-entry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAEvC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA"}

package/dist/src/adapter.d.ts

@@ -0,0 +1,51 @@
+/** Runtime-neutral SQLite contract used by the CAVE store. */
+export type Value = null | number | bigint | string | Uint8Array;
+export type Row = Record<string, unknown>;
+export type Statement = {
+    readonly all: (...params: Value[]) => Row[];
+    readonly get: (...params: Value[]) => Row | undefined;
+    readonly run: (...params: Value[]) => {
+        readonly changes: number | bigint;
+        readonly lastInsertRowid: number | bigint;
+    };
+};
+export type Database = {
+    readonly exec: (sql: string) => void;
+    readonly prepare: (sql: string) => Statement;
+    readonly close: () => void;
+};
+export type OpenOptions = {
+    readonly readOnly?: boolean;
+    /** Permit native extension loading when the implementation supports it. */
+    readonly allowExtension?: boolean;
+};
+export type BackupCapability = {
+    /** Absolute or implementation-defined source location; null for memory stores. */
+    readonly location: (db: Database) => string | null;
+    readonly inTransaction: (db: Database) => boolean;
+    /** Write a transactionally consistent standalone database image. */
+    readonly write: (db: Database, destination: string) => void;
+};
+export type Capabilities = {
+    /** CAVE requires immediate write transactions and nested savepoints. */
+    readonly transactions: {
+        readonly immediate: true;
+        readonly savepoints: true;
+    };
+    /** Full-text virtual-table implementation used by the schema. */
+    readonly fullText: 'fts4' | 'fts5';
+    /** Optional loading of native SQLite extensions. */
+    readonly loadExtension?: (db: Database, path: string) => void;
+    /** Optional exact snapshot support. */
+    readonly backup?: BackupCapability;
+};
+/**
+ * A synchronous SQLite implementation. Runtime selection happens by passing
+ * one of these to `openWith`, never by replacing source modules at build time.
+ */
+export type Adapter = {
+    readonly name: string;
+    readonly capabilities: Capabilities;
+    readonly open: (path: string, options?: OpenOptions) => Database;
+};
+//# sourceMappingURL=adapter.d.ts.map

package/dist/src/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/adapter.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAE9D,MAAM,MAAM,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAA;AAChE,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEzC,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,EAAE,CAAA;IAC3C,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,SAAS,CAAA;IACrD,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK;QACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;QACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAAA;KAC1C,CAAA;CACF,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,QAAQ,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAA;IACjD,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5D,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;QACxB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,CAAA;IACD,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;IAClC,oDAAoD;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7D,uCAAuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;CACnC,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,KAAK,QAAQ,CAAA;CACjE,CAAA"}

package/dist/src/adapter.js

@@ -0,0 +1,3 @@
+/** Runtime-neutral SQLite contract used by the CAVE store. */
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/src/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/adapter.ts"],"names":[],"mappings":"AAAA,8DAA8D"}

package/dist/src/backup.d.ts

@@ -0,0 +1,23 @@
+/** Exact SQLite snapshot backup, verification, and atomic restore. */
+import type { Store } from './store.ts';
+export type Snapshot = {
+    readonly path: string;
+    readonly bytes: number;
+    readonly sha256: string;
+    readonly schemaVersion: number;
+    readonly rows: number;
+    readonly maxTx: null | string;
+};
+export type WriteOptions = {
+    /** Replace an existing destination atomically. Never permits source = destination. */
+    readonly force?: boolean;
+};
+/** Validate a standalone snapshot without migrating or mutating it. */
+export declare const verifyBackup: (path: string, expectedSha256?: string) => Snapshot;
+/** Create and atomically publish a verified, point-in-time SQLite snapshot. */
+export declare const backup: (store: Store, destination: string, options?: WriteOptions) => Snapshot;
+/** Verify a snapshot, then atomically restore its exact bytes to a stopped destination. */
+export declare const restoreBackup: (snapshotPath: string, destination: string, options?: WriteOptions & {
+    expectedSha256?: string;
+}) => Snapshot;
+//# sourceMappingURL=backup.d.ts.map

package/dist/src/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/backup.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAQtE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAIvC,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAA;AAgED,uEAAuE;AACvE,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,EAAE,iBAAiB,MAAM,KAAG,QAmCpE,CAAA;AAED,+EAA+E;AAC/E,eAAO,MAAM,MAAM,GAAI,OAAO,KAAK,EAAE,aAAa,MAAM,EAAE,UAAS,YAAiB,KAAG,QA2BtF,CAAA;AAED,2FAA2F;AAC3F,eAAO,MAAM,aAAa,GACxB,cAAc,MAAM,EACpB,aAAa,MAAM,EACnB,UAAS,YAAY,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,KACvD,QA0BF,CAAA"}

package/dist/src/backup.js

@@ -0,0 +1,164 @@
+/** Exact SQLite snapshot backup, verification, and atomic restore. */
+import { createHash, randomBytes } from 'node:crypto';
+import { closeSync, copyFileSync, existsSync, fsyncSync, linkSync, openSync, readSync, realpathSync, renameSync, rmSync, statSync } from 'node:fs';
+import { basename, dirname, resolve } from 'node:path';
+import { nodeSqliteAdapter } from "./node-adapter.js";
+import * as Schema from "./schema.js";
+const temporaryPath = (destination) => {
+    const target = resolve(destination);
+    return resolve(dirname(target), `.${basename(target)}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`);
+};
+const hashFile = (path) => {
+    const hash = createHash('sha256');
+    const fd = openSync(path, 'r');
+    const buffer = Buffer.allocUnsafe(1024 * 1024);
+    try {
+        for (;;) {
+            const size = readSync(fd, buffer, 0, buffer.length, null);
+            if (size === 0)
+                break;
+            hash.update(buffer.subarray(0, size));
+        }
+    }
+    finally {
+        closeSync(fd);
+    }
+    return hash.digest('hex');
+};
+const syncFile = (path) => {
+    const fd = openSync(path, 'r');
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+};
+const syncDirectory = (path) => {
+    let fd;
+    try {
+        fd = openSync(dirname(resolve(path)), 'r');
+        fsyncSync(fd);
+    }
+    catch {
+        // Some platforms do not permit opening/fsyncing a directory. The fully
+        // written database itself is still synced before publication.
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+};
+const publish = (temporary, destination, force) => {
+    const target = resolve(destination);
+    if (force) {
+        renameSync(temporary, target);
+        syncDirectory(target);
+        return;
+    }
+    // A hard link publishes the fully written inode atomically and fails if a
+    // racing process created the destination after the initial existence check.
+    linkSync(temporary, target);
+    rmSync(temporary);
+    syncDirectory(target);
+};
+const samePath = (left, right) => existsSync(left) && existsSync(right) ?
+    realpathSync(left) === realpathSync(right) :
+    resolve(left) === resolve(right);
+/** Validate a standalone snapshot without migrating or mutating it. */
+export const verifyBackup = (path, expectedSha256) => {
+    const target = resolve(path);
+    if (!existsSync(target)) {
+        throw new Error(`CAVE backup: ${target}: no such file`);
+    }
+    const db = nodeSqliteAdapter.open(target, { readOnly: true });
+    let schemaVersion = 0;
+    let rows = 0;
+    let maxTx = null;
+    try {
+        const integrity = db.prepare('PRAGMA integrity_check').all();
+        if (integrity.length !== 1 || integrity[0]?.integrity_check !== 'ok') {
+            throw new Error(`integrity_check failed: ${integrity.map(row => row.integrity_check).join('; ')}`);
+        }
+        const foreignKeys = db.prepare('PRAGMA foreign_key_check').all();
+        if (foreignKeys.length > 0) {
+            throw new Error(`foreign_key_check failed for ${foreignKeys.length} row(s)`);
+        }
+        schemaVersion = db.prepare('PRAGMA user_version').get().user_version;
+        if (schemaVersion !== Schema.currentVersion) {
+            throw new Error(`schema version ${schemaVersion} is not the exact-backup format ${Schema.currentVersion}`);
+        }
+        Schema.validate(db, schemaVersion);
+        const summary = db.prepare('SELECT COUNT(*) AS rows, MAX(tx) AS max_tx FROM cave_claim').get();
+        rows = summary.rows;
+        maxTx = summary.max_tx;
+    }
+    finally {
+        db.close();
+    }
+    const sha256 = hashFile(target);
+    if (expectedSha256 !== undefined && sha256 !== expectedSha256.toLowerCase()) {
+        throw new Error(`CAVE backup: SHA-256 mismatch: expected ${expectedSha256.toLowerCase()}, got ${sha256}`);
+    }
+    return { path: target, bytes: statSync(target).size, sha256, schemaVersion, rows, maxTx };
+};
+/** Create and atomically publish a verified, point-in-time SQLite snapshot. */
+export const backup = (store, destination, options = {}) => {
+    const target = resolve(destination);
+    const capability = store.adapter.capabilities.backup;
+    if (capability === undefined) {
+        throw new Error(`CAVE backup: SQLite adapter ${JSON.stringify(store.adapter.name)} does not support exact snapshots`);
+    }
+    const source = capability.location(store.db);
+    if (source !== null && samePath(source, target)) {
+        throw new Error('CAVE backup: destination is the source database');
+    }
+    if (existsSync(target) && options.force !== true) {
+        throw new Error(`CAVE backup: ${target} already exists; pass force to replace it`);
+    }
+    if (capability.inTransaction(store.db)) {
+        throw new Error('CAVE backup: cannot snapshot inside an open transaction');
+    }
+    const temporary = temporaryPath(target);
+    try {
+        capability.write(store.db, temporary);
+        syncFile(temporary);
+        const checked = verifyBackup(temporary);
+        publish(temporary, target, options.force === true);
+        return { ...checked, path: target };
+    }
+    catch (error) {
+        rmSync(temporary, { force: true });
+        throw error;
+    }
+};
+/** Verify a snapshot, then atomically restore its exact bytes to a stopped destination. */
+export const restoreBackup = (snapshotPath, destination, options = {}) => {
+    const source = resolve(snapshotPath);
+    const target = resolve(destination);
+    if (samePath(source, target)) {
+        throw new Error('CAVE restore: snapshot and destination are the same file');
+    }
+    if (existsSync(target) && options.force !== true) {
+        throw new Error(`CAVE restore: ${target} already exists; pass force to replace it`);
+    }
+    for (const suffix of ['-wal', '-shm', '-journal']) {
+        if (existsSync(`${target}${suffix}`)) {
+            throw new Error(`CAVE restore: refusing while ${target}${suffix} exists; stop all users and remove stale sidecars`);
+        }
+    }
+    const checked = verifyBackup(source, options.expectedSha256);
+    const temporary = temporaryPath(target);
+    try {
+        copyFileSync(source, temporary);
+        syncFile(temporary);
+        const copied = verifyBackup(temporary, checked.sha256);
+        publish(temporary, target, options.force === true);
+        return { ...copied, path: target };
+    }
+    catch (error) {
+        rmSync(temporary, { force: true });
+        throw error;
+    }
+};
+//# sourceMappingURL=backup.js.map

package/dist/src/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/backup.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EACL,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAC5E,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAC3C,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAgBrC,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAU,EAAE;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC9G,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACzD,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAK;YACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAQ,EAAE;IACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAQ,EAAE;IAC3C,IAAI,EAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC1C,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,8DAA8D;IAChE,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAA;IACrC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAc,EAAQ,EAAE;IAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,IAAI,KAAK,EAAE,CAAC;QACV,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAC7B,aAAa,CAAC,MAAM,CAAC,CAAA;QACrB,OAAM;IACR,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC3B,MAAM,CAAC,SAAS,CAAC,CAAA;IACjB,aAAa,CAAC,MAAM,CAAC,CAAA;AACvB,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CACxD,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;AAEpC,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,cAAuB,EAAY,EAAE;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,gBAAgB,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,GAAkB,IAAI,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAmC,CAAA;QAC7F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,EAAE,CAAA;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,CAAC,MAAM,SAAS,CAAC,CAAA;QAC9E,CAAC;QACD,aAAa,GAAI,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA+B,CAAC,YAAY,CAAA;QAClG,IAAI,aAAa,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,aAAa,mCAAmC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA;QAC5G,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,EACnD,CAAA;QACzC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACnB,KAAK,GAAG,OAAO,CAAC,MAAM,CAAA;IACxB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,cAAc,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC3F,CAAC,CAAA;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAY,EAAE,WAAmB,EAAE,UAAwB,EAAE,EAAY,EAAE;IAChG,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAA;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;IACvH,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5C,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,2CAA2C,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QACrC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACnB,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACvC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;QAClD,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,YAAoB,EACpB,WAAmB,EACnB,UAAsD,EAAE,EAC9C,EAAE;IACZ,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,2CAA2C,CAAC,CAAA;IACrF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAClD,IAAI,UAAU,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,GAAG,MAAM,mDAAmD,CAAC,CAAA;QACrH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAC/B,QAAQ,CAAC,SAAS,CAAC,CAAA;QACnB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACtD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;QAClD,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClC,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/src/index.d.ts

@@ -13,9 +13,17 @@
  */
 export * as Resolve from './resolve.ts';
 export * as Row from './row.ts';
+export * as QuerySql from './query-sql.ts';
+export * as Record from './record.ts';
+export * as Provenance from './provenance.ts';
 export * as Schema from './schema.ts';
+export * as Sensitivity from './sensitivity.ts';
+export { backup, restoreBackup, verifyBackup } from './backup.ts';
+export type { Snapshot as BackupSnapshot, WriteOptions as BackupWriteOptions } from './backup.ts';
 export { open } from './open.ts';
 export type { Store } from './open.ts';
 export { defaultDbPath } from './store.ts';
 export type { AppendOptions, ForwardFact, IngestResult, ReverseFact, TraverseOptions } from './store.ts';
+export type { Dimension as ProvenanceDimension, Input as ProvenanceInput, t as ProvenanceRecord } from './provenance.ts';
+export type { Level as SensitivityLevel } from './sensitivity.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,YAAY,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACjE,YAAY,EAAE,QAAQ,IAAI,cAAc,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,YAAY,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACxG,YAAY,EAAE,SAAS,IAAI,mBAAmB,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACxH,YAAY,EAAE,KAAK,IAAI,gBAAgB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/src/index.js

@@ -13,7 +13,12 @@
  */
 export * as Resolve from "./resolve.js";
 export * as Row from "./row.js";
+export * as QuerySql from "./query-sql.js";
+export * as Record from "./record.js";
+export * as Provenance from "./provenance.js";
 export * as Schema from "./schema.js";
+export * as Sensitivity from "./sensitivity.js";
+export { backup, restoreBackup, verifyBackup } from "./backup.js";
 export { open } from "./open.js";
 export { defaultDbPath } from "./store.js";
 //# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA"}

package/dist/src/node-adapter-entry.d.ts

@@ -0,0 +1,3 @@
+/** Node.js builtin implementation for explicit adapter composition. */
+export { nodeSqliteAdapter } from './node-adapter.ts';
+//# sourceMappingURL=node-adapter-entry.d.ts.map

package/dist/src/node-adapter-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter-entry.d.ts","sourceRoot":"","sources":["../../src/node-adapter-entry.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/src/node-adapter-entry.js

@@ -0,0 +1,3 @@
+/** Node.js builtin implementation for explicit adapter composition. */
+export { nodeSqliteAdapter } from "./node-adapter.js";
+//# sourceMappingURL=node-adapter-entry.js.map

package/dist/src/node-adapter-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter-entry.js","sourceRoot":"","sources":["../../src/node-adapter-entry.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/src/node-adapter.d.ts

@@ -0,0 +1,4 @@
+/** Node.js builtin SQLite implementation of the CAVE adapter contract. */
+import type { Adapter } from './adapter.ts';
+export declare const nodeSqliteAdapter: Adapter;
+//# sourceMappingURL=node-adapter.d.ts.map

package/dist/src/node-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter.d.ts","sourceRoot":"","sources":["../../src/node-adapter.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAG1E,OAAO,KAAK,EAAE,OAAO,EAAY,MAAM,cAAc,CAAA;AAIrD,eAAO,MAAM,iBAAiB,EAAE,OAe/B,CAAA"}

package/dist/src/node-adapter.js

@@ -0,0 +1,20 @@
+/** Node.js builtin SQLite implementation of the CAVE adapter contract. */
+import { DatabaseSync } from 'node:sqlite';
+const asNodeDatabase = (db) => db;
+export const nodeSqliteAdapter = {
+    name: 'node:sqlite',
+    capabilities: {
+        transactions: { immediate: true, savepoints: true },
+        fullText: 'fts5',
+        loadExtension: (db, path) => asNodeDatabase(db).loadExtension(path),
+        backup: {
+            location: db => asNodeDatabase(db).location(),
+            inTransaction: db => asNodeDatabase(db).isTransaction,
+            write: (db, destination) => {
+                db.prepare('VACUUM INTO ?').run(destination);
+            },
+        },
+    },
+    open: (path, options = {}) => new DatabaseSync(path, options),
+};
+//# sourceMappingURL=node-adapter.js.map

package/dist/src/node-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter.js","sourceRoot":"","sources":["../../src/node-adapter.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,MAAM,cAAc,GAAG,CAAC,EAAY,EAAgB,EAAE,CAAC,EAAkB,CAAA;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAY;IACxC,IAAI,EAAE,aAAa;IACnB,YAAY,EAAE;QACZ,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QACnD,QAAQ,EAAE,MAAM;QAChB,aAAa,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;QACnE,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC7C,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,aAAa;YACrD,KAAK,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE;gBACzB,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC9C,CAAC;SACF;KACF;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;CAC9D,CAAA"}