@chipmobilesdk/rn-local-db 0.3.0 → 0.5.0

package/lib/module/adapter/deletion.js

@@ -0,0 +1,280 @@
+"use strict";
+
+/**
+ * Deletion, and the ordering that makes an interrupted one visible.
+ *
+ * These are module-level functions rather than handle methods because they
+ * must work whether or not a handle is open on the target (FR-059) — a
+ * sign-out that already closed the handle still has to be able to delete, and
+ * an app recovering from a crash has no handle to call a method on.
+ *
+ * The order is: **mark `deleting` first, clear the catalog row last**
+ * (FR-061, FR-063). A crash at any point in between leaves the flag set, so
+ * the next open reports a scope mid-deletion rather than presenting it as
+ * complete. Clearing the row first would be the natural way to write this and
+ * would produce exactly the failure FR-063 exists to prevent: an
+ * interruption that looks like a success, leaving a user's data on disk after
+ * they asked for it to be gone.
+ *
+ * Nothing here ever runs on its own. No expiry, no sweep, no deletion on
+ * close or on app upgrade (FR-058) — the package deletes when asked, where
+ * asked, and not otherwise.
+ */
+
+import { fileSystem, removeIfPresent } from "../platform/fs.js";
+import { layoutFor } from "../platform/location.js";
+import { artifactsDirectory } from "../artifacts/paths.js";
+import { acquireKey } from "../crypto/key-provider.js";
+import { byteOrder } from "../query/compare.js";
+import { resolveScope } from "../scope/validate.js";
+import { clearScope, ensureCatalog, listEntries, markDeleting, readEntry } from "../sqlite/catalog.js";
+import { openConnection } from "../sqlite/connection.js";
+import { num, text } from "../sqlite/values.js";
+
+/**
+ * Scopes deleted beneath a handle that is still open.
+ *
+ * FR-059a wants the handle to report `SCOPE_DELETED` rather than keep
+ * answering from a database that no longer exists — and wants the deletion to
+ * proceed rather than wait for the handle to be closed. A shared set is the
+ * whole mechanism: the deleter records, the handle checks.
+ */
+const invalidated = new Set();
+function invalidationKey(name, scopeKey) {
+  return `${name}:${scopeKey}`;
+}
+export function markScopeInvalidated(name, scopeKey) {
+  invalidated.add(invalidationKey(name, scopeKey));
+}
+export function clearScopeInvalidation(name, scopeKey) {
+  invalidated.delete(invalidationKey(name, scopeKey));
+}
+export function isScopeInvalidated(name, scopeKey) {
+  return invalidated.has(invalidationKey(name, scopeKey));
+}
+export function clearAllInvalidations() {
+  invalidated.clear();
+  openHandles.clear();
+}
+
+/**
+ * Handles open on a scope, so a deletion can take their connection away
+ * (LDB-14). Marking alone left the native connection and its handle slot held
+ * until the app closed a handle it had been told was dead: eight sign-outs
+ * later every open failed, with the unlinked file still pinned by its
+ * descriptor.
+ */
+const openHandles = new Map();
+
+/** Returns the function that takes the handle out of the registry again. */
+export function registerOpenHandle(name, scopeKey, revoke) {
+  const key = invalidationKey(name, scopeKey);
+  const handles = openHandles.get(key) ?? new Set();
+  handles.add(revoke);
+  openHandles.set(key, handles);
+  return () => {
+    handles.delete(revoke);
+    if (handles.size === 0) {
+      openHandles.delete(key);
+    }
+  };
+}
+
+/** Every handle on the scope, or on any scope of the database when none is named. */
+async function revokeHandles(name, scopeKey) {
+  const prefix = `${name}:`;
+  for (const [key, handles] of [...openHandles]) {
+    const matches = scopeKey === undefined ? key.startsWith(prefix) : key === invalidationKey(name, scopeKey);
+    if (!matches) {
+      continue;
+    }
+    openHandles.delete(key);
+    for (const revoke of handles) {
+      // A connection that will not close does not get to stop a deletion.
+      await revoke().catch(() => undefined);
+    }
+  }
+}
+
+/** Deleting a scope that holds nothing is success, not an error (FR-062). */
+export function emptyOutcome(scope) {
+  return {
+    ...(scope ? {
+      scopeKey: scope.key
+    } : {}),
+    removedRecords: 0,
+    removedArtifacts: [],
+    orphanedReferences: [],
+    failedRemovals: []
+  };
+}
+
+/**
+ * How many records the scope held, best effort.
+ *
+ * Best effort because an encrypted scope whose caller supplied no key cannot
+ * be opened to be counted — and refusing to delete it on that basis would be
+ * the worst possible answer to a deletion request. The files come off disk
+ * either way; only the number in the report is unavailable.
+ */
+async function countRecords(layout, scopeKey, encryptionKey) {
+  let connection = null;
+  try {
+    connection = await openConnection({
+      path: layout.scopeDataPath(scopeKey),
+      ...(encryptionKey ? {
+        encryptionKey
+      } : {})
+    });
+    const tables = await connection.execute("SELECT name FROM sqlite_master WHERE type = 'table' AND name LIKE 'c!_%' ESCAPE '!'");
+    let total = 0;
+    for (const row of tables.rows) {
+      const table = text(row.name);
+      const counted = await connection.execute(`SELECT count(*) AS total FROM "${table}"`);
+      total += num(counted.rows[0]?.total ?? 0);
+    }
+    return total;
+  } catch {
+    // Unknown, not zero: a report that said "0 records" about a scope it
+    // could not open would understate what was deleted.
+    return undefined;
+  } finally {
+    await connection?.close();
+  }
+}
+async function artifactIdsOnDisk(layout, scopeKey) {
+  try {
+    return (await fileSystem().readdir(artifactsDirectory(layout, scopeKey))).sort(byteOrder);
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * The one implementation behind `deleteScopeData` and `resetScope`.
+ *
+ * They do the same thing to disk and mean entirely different things to the
+ * caller: one is a lifecycle operation an app performs on request, the other
+ * is an admission that a database is broken and is being discarded to recover
+ * from it (FR-057a). Keeping them as two exported names with two docstrings
+ * is what stops the destructive one from being reached by accident — there is
+ * no path from `openDatabase` to either.
+ */
+async function removeScope(config) {
+  const scope = resolveScope(config.scope);
+  const layout = layoutFor(config.name);
+  const catalog = await openConnection({
+    path: layout.catalogPath
+  });
+  try {
+    await ensureCatalog(catalog);
+    const entry = await readEntry(catalog, scope.key);
+
+    // Mark first. Everything after this point is recoverable-in-principle;
+    // this flag is what makes an interruption visible rather than silent.
+    if (entry) {
+      await markDeleting(catalog, scope.key);
+    }
+    markScopeInvalidated(config.name, scope.key);
+    // Before the files go: a connection still open on them pins them.
+    await revokeHandles(config.name, scope.key);
+    const removedArtifacts = await artifactIdsOnDisk(layout, scope.key);
+
+    // The key is needed to count what is being removed, not to remove it,
+    // so a key provider that fails — or a key already destroyed for this
+    // identity, which FR-104 encourages — costs the count, never the
+    // deletion. Until 0.2.0 it failed the whole call after the scope was
+    // already marked, leaving it stuck in `deleting`.
+    let keyHandle = null;
+    if (config.encryption?.enabled) {
+      try {
+        keyHandle = await acquireKey(config.encryption, scope);
+      } catch {
+        keyHandle = null;
+      }
+    }
+    let counted;
+    try {
+      counted = config.encryption?.enabled && keyHandle === null ? undefined : await countRecords(layout, scope.key, keyHandle?.value());
+    } finally {
+      keyHandle?.release();
+    }
+    const failedRemovals = [];
+    if (!(await removeIfPresent(layout.scopePath(scope.key))) && entry) {
+      // The directory was there and would not go. Reporting it is the
+      // point: an app that told the user "deleted" would be wrong.
+      const stillThere = await fileSystem().exists(layout.scopePath(scope.key)).catch(() => false);
+      if (stillThere) {
+        failedRemovals.push(scope.key);
+      }
+    }
+    if (failedRemovals.length === 0) {
+      // Cleared last, on purpose.
+      await clearScope(catalog, scope.key);
+    }
+    return {
+      scopeKey: scope.key,
+      removedRecords: counted ?? 0,
+      ...(counted === undefined ? {
+        recordCountUnavailable: true
+      } : {}),
+      removedArtifacts,
+      orphanedReferences: [],
+      failedRemovals
+    };
+  } finally {
+    await catalog.close();
+  }
+}
+
+/**
+ * Remove one scope's data. Every collection in that scope, and nothing
+ * outside it (FR-059, SC-012).
+ */
+export function deleteScopeData(config) {
+  return removeScope(config);
+}
+
+/**
+ * Discard one scope and leave it ready for a clean first-run migration
+ * (FR-057a).
+ *
+ * Destructive, separately named, and never reachable from `openDatabase`. An
+ * automatic fallback here would turn a bad migration shipped to production
+ * into silent data loss for every user who launched the app.
+ */
+export function resetScope(config) {
+  return removeScope(config);
+}
+
+/** Remove the whole database directory: catalog, every scope, every artifact. */
+export async function deleteDatabase(config) {
+  const layout = layoutFor(config.name);
+  let scopeKeys = [];
+  try {
+    const catalog = await openConnection({
+      path: layout.catalogPath
+    });
+    try {
+      await ensureCatalog(catalog);
+      scopeKeys = (await listEntries(catalog)).map(entry => entry.scopeKey);
+    } finally {
+      await catalog.close();
+    }
+  } catch {
+    // No catalog means nothing was ever registered here. The directory
+    // removal below is still the right thing to attempt.
+  }
+  for (const scopeKey of scopeKeys) {
+    markScopeInvalidated(config.name, scopeKey);
+  }
+  await revokeHandles(config.name);
+  const removed = await removeIfPresent(layout.root);
+  return {
+    removedRecords: 0,
+    removedArtifacts: [],
+    orphanedReferences: [],
+    failedRemovals: removed || scopeKeys.length === 0 ? [] : scopeKeys
+  };
+}
+//# sourceMappingURL=deletion.js.map

package/lib/module/adapter/deletion.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["fileSystem","removeIfPresent","layoutFor","artifactsDirectory","acquireKey","byteOrder","resolveScope","clearScope","ensureCatalog","listEntries","markDeleting","readEntry","openConnection","num","text","invalidated","Set","invalidationKey","name","scopeKey","markScopeInvalidated","add","clearScopeInvalidation","delete","isScopeInvalidated","has","clearAllInvalidations","clear","openHandles","Map","registerOpenHandle","revoke","key","handles","get","set","size","revokeHandles","prefix","matches","undefined","startsWith","catch","emptyOutcome","scope","removedRecords","removedArtifacts","orphanedReferences","failedRemovals","countRecords","layout","encryptionKey","connection","path","scopeDataPath","tables","execute","total","row","rows","table","counted","close","artifactIdsOnDisk","readdir","sort","removeScope","config","catalog","catalogPath","entry","keyHandle","encryption","enabled","value","release","scopePath","stillThere","exists","push","length","recordCountUnavailable","deleteScopeData","resetScope","deleteDatabase","scopeKeys","map","removed","root"],"sourceRoot":"../../../src","sources":["adapter/deletion.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,SAASA,UAAU,EAAEC,eAAe,QAAQ,mBAAgB;AAC5D,SAASC,SAAS,QAA4B,yBAAsB;AACpE,SAASC,kBAAkB,QAAQ,uBAAoB;AACvD,SAASC,UAAU,QAAQ,2BAAwB;AACnD,SAASC,SAAS,QAAQ,qBAAkB;AAC5C,SAASC,YAAY,QAAQ,sBAAmB;AAChD,SAASC,UAAU,EAAEC,aAAa,EAAEC,WAAW,EAAEC,YAAY,EAAEC,SAAS,QAAQ,sBAAmB;AACnG,SAASC,cAAc,QAAyB,yBAAsB;AACtE,SAASC,GAAG,EAAEC,IAAI,QAAQ,qBAAkB;;AAE5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,WAAW,GAAG,IAAIC,GAAG,CAAS,CAAC;AAErC,SAASC,eAAeA,CAACC,IAAY,EAAEC,QAAgB,EAAU;EAChE,OAAO,GAAGD,IAAI,IAAIC,QAAQ,EAAE;AAC7B;AAEA,OAAO,SAASC,oBAAoBA,CAACF,IAAY,EAAEC,QAAgB,EAAQ;EAC1EJ,WAAW,CAACM,GAAG,CAACJ,eAAe,CAACC,IAAI,EAAEC,QAAQ,CAAC,CAAC;AACjD;AAEA,OAAO,SAASG,sBAAsBA,CAACJ,IAAY,EAAEC,QAAgB,EAAQ;EAC5EJ,WAAW,CAACQ,MAAM,CAACN,eAAe,CAACC,IAAI,EAAEC,QAAQ,CAAC,CAAC;AACpD;AAEA,OAAO,SAASK,kBAAkBA,CAACN,IAAY,EAAEC,QAAgB,EAAW;EAC3E,OAAOJ,WAAW,CAACU,GAAG,CAACR,eAAe,CAACC,IAAI,EAAEC,QAAQ,CAAC,CAAC;AACxD;AAEA,OAAO,SAASO,qBAAqBA,CAAA,EAAS;EAC7CX,WAAW,CAACY,KAAK,CAAC,CAAC;EACnBC,WAAW,CAACD,KAAK,CAAC,CAAC;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,WAAW,GAAG,IAAIC,GAAG,CAAmC,CAAC;;AAE/D;AACA,OAAO,SAASC,kBAAkBA,CACjCZ,IAAY,EACZC,QAAgB,EAChBY,MAA2B,EACd;EACb,MAAMC,GAAG,GAAGf,eAAe,CAACC,IAAI,EAAEC,QAAQ,CAAC;EAC3C,MAAMc,OAAO,GAAGL,WAAW,CAACM,GAAG,CAACF,GAAG,CAAC,IAAI,IAAIhB,GAAG,CAAC,CAAC;EACjDiB,OAAO,CAACZ,GAAG,CAACU,MAAM,CAAC;EACnBH,WAAW,CAACO,GAAG,CAACH,GAAG,EAAEC,OAAO,CAAC;EAC7B,OAAO,MAAM;IACZA,OAAO,CAACV,MAAM,CAACQ,MAAM,CAAC;IACtB,IAAIE,OAAO,CAACG,IAAI,KAAK,CAAC,EAAE;MACvBR,WAAW,CAACL,MAAM,CAACS,GAAG,CAAC;IACxB;EACD,CAAC;AACF;;AAEA;AACA,eAAeK,aAAaA,CAACnB,IAAY,EAAEC,QAAiB,EAAiB;EAC5E,MAAMmB,MAAM,GAAG,GAAGpB,IAAI,GAAG;EACzB,KAAK,MAAM,CAACc,GAAG,EAAEC,OAAO,CAAC,IAAI,CAAC,GAAGL,WAAW,CAAC,EAAE;IAC9C,MAAMW,OAAO,GACZpB,QAAQ,KAAKqB,SAAS,GAAGR,GAAG,CAACS,UAAU,CAACH,MAAM,CAAC,GAAGN,GAAG,KAAKf,eAAe,CAACC,IAAI,EAAEC,QAAQ,CAAC;IAC1F,IAAI,CAACoB,OAAO,EAAE;MACb;IACD;IACAX,WAAW,CAACL,MAAM,CAACS,GAAG,CAAC;IACvB,KAAK,MAAMD,MAAM,IAAIE,OAAO,EAAE;MAC7B;MACA,MAAMF,MAAM,CAAC,CAAC,CAACW,KAAK,CAAC,MAAMF,SAAS,CAAC;IACtC;EACD;AACD;;AAEA;AACA,OAAO,SAASG,YAAYA,CAACC,KAAqB,EAAmB;EACpE,OAAO;IACN,IAAIA,KAAK,GAAG;MAAEzB,QAAQ,EAAEyB,KAAK,CAACZ;IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzCa,cAAc,EAAE,CAAC;IACjBC,gBAAgB,EAAE,EAAE;IACpBC,kBAAkB,EAAE,EAAE;IACtBC,cAAc,EAAE;EACjB,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeC,YAAYA,CAC1BC,MAAqB,EACrB/B,QAAgB,EAChBgC,aAAiC,EACH;EAC9B,IAAIC,UAA6B,GAAG,IAAI;EACxC,IAAI;IACHA,UAAU,GAAG,MAAMxC,cAAc,CAAC;MACjCyC,IAAI,EAAEH,MAAM,CAACI,aAAa,CAACnC,QAAQ,CAAC;MACpC,IAAIgC,aAAa,GAAG;QAAEA;MAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAMI,MAAM,GAAG,MAAMH,UAAU,CAACI,OAAO,CACtC,qFACD,CAAC;IACD,IAAIC,KAAK,GAAG,CAAC;IACb,KAAK,MAAMC,GAAG,IAAIH,MAAM,CAACI,IAAI,EAAE;MAC9B,MAAMC,KAAK,GAAG9C,IAAI,CAAC4C,GAAG,CAACxC,IAAI,CAAC;MAC5B,MAAM2C,OAAO,GAAG,MAAMT,UAAU,CAACI,OAAO,CAAC,kCAAkCI,KAAK,GAAG,CAAC;MACpFH,KAAK,IAAI5C,GAAG,CAACgD,OAAO,CAACF,IAAI,CAAC,CAAC,CAAC,EAAEF,KAAK,IAAI,CAAC,CAAC;IAC1C;IACA,OAAOA,KAAK;EACb,CAAC,CAAC,MAAM;IACP;IACA;IACA,OAAOjB,SAAS;EACjB,CAAC,SAAS;IACT,MAAMY,UAAU,EAAEU,KAAK,CAAC,CAAC;EAC1B;AACD;AAEA,eAAeC,iBAAiBA,CAACb,MAAqB,EAAE/B,QAAgB,EAAqB;EAC5F,IAAI;IACH,OAAO,CAAC,MAAMnB,UAAU,CAAC,CAAC,CAACgE,OAAO,CAAC7D,kBAAkB,CAAC+C,MAAM,EAAE/B,QAAQ,CAAC,CAAC,EAAE8C,IAAI,CAAC5D,SAAS,CAAC;EAC1F,CAAC,CAAC,MAAM;IACP,OAAO,EAAE;EACV;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe6D,WAAWA,CAACC,MAAyB,EAA4B;EAC/E,MAAMvB,KAAK,GAAGtC,YAAY,CAAC6D,MAAM,CAACvB,KAAK,CAAC;EACxC,MAAMM,MAAM,GAAGhD,SAAS,CAACiE,MAAM,CAACjD,IAAI,CAAC;EACrC,MAAMkD,OAAO,GAAG,MAAMxD,cAAc,CAAC;IAAEyC,IAAI,EAAEH,MAAM,CAACmB;EAAY,CAAC,CAAC;EAElE,IAAI;IACH,MAAM7D,aAAa,CAAC4D,OAAO,CAAC;IAC5B,MAAME,KAAK,GAAG,MAAM3D,SAAS,CAACyD,OAAO,EAAExB,KAAK,CAACZ,GAAG,CAAC;;IAEjD;IACA;IACA,IAAIsC,KAAK,EAAE;MACV,MAAM5D,YAAY,CAAC0D,OAAO,EAAExB,KAAK,CAACZ,GAAG,CAAC;IACvC;IACAZ,oBAAoB,CAAC+C,MAAM,CAACjD,IAAI,EAAE0B,KAAK,CAACZ,GAAG,CAAC;IAC5C;IACA,MAAMK,aAAa,CAAC8B,MAAM,CAACjD,IAAI,EAAE0B,KAAK,CAACZ,GAAG,CAAC;IAE3C,MAAMc,gBAAgB,GAAG,MAAMiB,iBAAiB,CAACb,MAAM,EAAEN,KAAK,CAACZ,GAAG,CAAC;;IAEnE;IACA;IACA;IACA;IACA;IACA,IAAIuC,SAAwD,GAAG,IAAI;IACnE,IAAIJ,MAAM,CAACK,UAAU,EAAEC,OAAO,EAAE;MAC/B,IAAI;QACHF,SAAS,GAAG,MAAMnE,UAAU,CAAC+D,MAAM,CAACK,UAAU,EAAE5B,KAAK,CAAC;MACvD,CAAC,CAAC,MAAM;QACP2B,SAAS,GAAG,IAAI;MACjB;IACD;IACA,IAAIV,OAA2B;IAC/B,IAAI;MACHA,OAAO,GACNM,MAAM,CAACK,UAAU,EAAEC,OAAO,IAAIF,SAAS,KAAK,IAAI,GAC7C/B,SAAS,GACT,MAAMS,YAAY,CAACC,MAAM,EAAEN,KAAK,CAACZ,GAAG,EAAEuC,SAAS,EAAEG,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,SAAS;MACTH,SAAS,EAAEI,OAAO,CAAC,CAAC;IACrB;IAEA,MAAM3B,cAAwB,GAAG,EAAE;IACnC,IAAI,EAAE,MAAM/C,eAAe,CAACiD,MAAM,CAAC0B,SAAS,CAAChC,KAAK,CAACZ,GAAG,CAAC,CAAC,CAAC,IAAIsC,KAAK,EAAE;MACnE;MACA;MACA,MAAMO,UAAU,GAAG,MAAM7E,UAAU,CAAC,CAAC,CACnC8E,MAAM,CAAC5B,MAAM,CAAC0B,SAAS,CAAChC,KAAK,CAACZ,GAAG,CAAC,CAAC,CACnCU,KAAK,CAAC,MAAM,KAAK,CAAC;MACpB,IAAImC,UAAU,EAAE;QACf7B,cAAc,CAAC+B,IAAI,CAACnC,KAAK,CAACZ,GAAG,CAAC;MAC/B;IACD;IAEA,IAAIgB,cAAc,CAACgC,MAAM,KAAK,CAAC,EAAE;MAChC;MACA,MAAMzE,UAAU,CAAC6D,OAAO,EAAExB,KAAK,CAACZ,GAAG,CAAC;IACrC;IAEA,OAAO;MACNb,QAAQ,EAAEyB,KAAK,CAACZ,GAAG;MACnBa,cAAc,EAAEgB,OAAO,IAAI,CAAC;MAC5B,IAAIA,OAAO,KAAKrB,SAAS,GAAG;QAAEyC,sBAAsB,EAAE;MAAK,CAAC,GAAG,CAAC,CAAC,CAAC;MAClEnC,gBAAgB;MAChBC,kBAAkB,EAAE,EAAE;MACtBC;IACD,CAAC;EACF,CAAC,SAAS;IACT,MAAMoB,OAAO,CAACN,KAAK,CAAC,CAAC;EACtB;AACD;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASoB,eAAeA,CAACf,MAAyB,EAA4B;EACpF,OAAOD,WAAW,CAACC,MAAM,CAAC;AAC3B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASgB,UAAUA,CAAChB,MAAyB,EAA4B;EAC/E,OAAOD,WAAW,CAACC,MAAM,CAAC;AAC3B;;AAEA;AACA,OAAO,eAAeiB,cAAcA,CAACjB,MAA4B,EAA4B;EAC5F,MAAMjB,MAAM,GAAGhD,SAAS,CAACiE,MAAM,CAACjD,IAAI,CAAC;EAErC,IAAImE,SAAmB,GAAG,EAAE;EAC5B,IAAI;IACH,MAAMjB,OAAO,GAAG,MAAMxD,cAAc,CAAC;MAAEyC,IAAI,EAAEH,MAAM,CAACmB;IAAY,CAAC,CAAC;IAClE,IAAI;MACH,MAAM7D,aAAa,CAAC4D,OAAO,CAAC;MAC5BiB,SAAS,GAAG,CAAC,MAAM5E,WAAW,CAAC2D,OAAO,CAAC,EAAEkB,GAAG,CAAChB,KAAK,IAAIA,KAAK,CAACnD,QAAQ,CAAC;IACtE,CAAC,SAAS;MACT,MAAMiD,OAAO,CAACN,KAAK,CAAC,CAAC;IACtB;EACD,CAAC,CAAC,MAAM;IACP;IACA;EAAA;EAGD,KAAK,MAAM3C,QAAQ,IAAIkE,SAAS,EAAE;IACjCjE,oBAAoB,CAAC+C,MAAM,CAACjD,IAAI,EAAEC,QAAQ,CAAC;EAC5C;EACA,MAAMkB,aAAa,CAAC8B,MAAM,CAACjD,IAAI,CAAC;EAEhC,MAAMqE,OAAO,GAAG,MAAMtF,eAAe,CAACiD,MAAM,CAACsC,IAAI,CAAC;EAClD,OAAO;IACN3C,cAAc,EAAE,CAAC;IACjBC,gBAAgB,EAAE,EAAE;IACpBC,kBAAkB,EAAE,EAAE;IACtBC,cAAc,EAAEuC,OAAO,IAAIF,SAAS,CAACL,MAAM,KAAK,CAAC,GAAG,EAAE,GAAGK;EAC1D,CAAC;AACF","ignoreList":[]}

package/lib/module/adapter/handle.js

@@ -0,0 +1,254 @@
+"use strict";
+
+/**
+ * The handle an open returns: collections, transactions, batches and
+ * attachments over one connection, bound to one scope.
+ *
+ * Scope is bound here and nowhere else. The handle carries its scope key and
+ * no operation on it accepts a scope argument, so there is no `switchScope`
+ * to misuse and no read that could address another scope (FR-008a, FR-015).
+ */
+
+import { DiagnosticCodes } from "../contract/errors.js";
+import { artifactAvailability } from "../artifacts/availability.js";
+import { cascadeForOwner, unlinkArtifact } from "../artifacts/cascade.js";
+import { reconcileArtifacts } from "../artifacts/reconcile.js";
+import { listReferencesFor, readArtifact, removeArtifact, writeArtifact } from "../artifacts/store.js";
+import { deriveArtifactKey } from "../crypto/derive.js";
+import { raise } from "../diagnostics/errors.js";
+import { instrument } from "../diagnostics/dev-log.js";
+import { throwIfFaulted } from "../diagnostics/faults.js";
+import { withStableTiebreaker } from "../query/sort.js";
+import { runBatch } from "../sqlite/batch.js";
+import { explainQuery } from "../sqlite/index-coverage.js";
+import { runInTransaction } from "../sqlite/transactions.js";
+import { releaseHandleSlot } from "./budgets.js";
+import { createSqlCollection } from "./collection.js";
+import { isScopeInvalidated, registerOpenHandle } from "./deletion.js";
+import { createTransaction } from "./transaction.js";
+export function schemaFor(schemas, name) {
+  const schema = schemas.get(name);
+  if (!schema) {
+    raise(DiagnosticCodes.CONFIG_INVALID, {
+      message: 'collection is not declared',
+      detail: {
+        collection: name
+      }
+    });
+  }
+  return schema;
+}
+export function buildHandle(context) {
+  const {
+    config,
+    connection,
+    layout,
+    scope,
+    schemas
+  } = context;
+  let closed = false;
+  // Set when a deletion took the connection away rather than the app closing it.
+  let revoked = false;
+  const releaseNative = async () => {
+    // The key goes first: a close that fails at the filesystem must not
+    // leave key material alive in a handle nobody can use (FR-098).
+    context.key?.release();
+    await connection.close();
+    releaseHandleSlot();
+  };
+  const unregister = registerOpenHandle(config.name, scope.key, async () => {
+    if (closed) {
+      return;
+    }
+    closed = true;
+    revoked = true;
+    await releaseNative();
+  });
+  const assertUsable = () => {
+    if (closed && !revoked) {
+      raise(DiagnosticCodes.CLOSED_HANDLE, {
+        message: 'handle is closed'
+      });
+    }
+    if (revoked || isScopeInvalidated(config.name, scope.key)) {
+      // The deletion did not wait for this handle, and this handle does
+      // not get to keep answering from data that is gone (FR-059a).
+      raise(DiagnosticCodes.SCOPE_DELETED, {
+        message: 'scope was deleted beneath this handle',
+        detail: {
+          scopeKey: scope.key
+        }
+      });
+    }
+  };
+
+  // Everything below is built against an explicit executor: the connection for
+  // the handle, the transaction's own executor inside `transaction`. Nothing
+  // infers which one from the connection's state, which is how a write from
+  // outside used to be swallowed by an in-flight transaction (LDB-01).
+  const artifactsOn = executor => ({
+    executor: () => executor,
+    layout,
+    scopeKey: scope.key,
+    artifactKey: attachmentId => context.key ? deriveArtifactKey(context.key.value(), scope.key, attachmentId) : null,
+    now: context.now
+  });
+  const rawCollection = (name, executor) => {
+    assertUsable();
+    return instrument(name, 'sqlite', createSqlCollection({
+      executor: () => executor,
+      schema: schemaFor(schemas, name),
+      now: context.now,
+      assertUsable
+    }));
+  };
+
+  /**
+   * Record deletion optionally takes its artifacts with it (FR-070).
+   *
+   * Off unless the app asks: a package that deleted a user's files as a side
+   * effect of a record delete would be making a decision that is not its to
+   * make. The outcome carries what was removed and what could not be.
+   */
+  const collectionOn = (name, executor, deferred) => {
+    const ops = rawCollection(name, executor);
+    if (config.cascadeAttachments !== true) {
+      return ops;
+    }
+    return {
+      ...ops,
+      async delete(id) {
+        const outcome = await ops.delete(id);
+        const cascade = await cascadeForOwner(artifactsOn(executor), executor, {
+          collection: name,
+          id
+        }, deferred);
+        return {
+          ...outcome,
+          cascade
+        };
+      }
+    };
+  };
+  const attachmentsOn = (executor, deferred) => {
+    const artifacts = artifactsOn(executor);
+    return {
+      write(input) {
+        assertUsable();
+        return writeArtifact(artifacts, input);
+      },
+      read(id, range) {
+        assertUsable();
+        return readArtifact(artifacts, id, range);
+      },
+      availability(id) {
+        assertUsable();
+        return artifactAvailability(artifacts, executor, id);
+      },
+      remove(id) {
+        assertUsable();
+        return removeArtifact(artifacts, id, deferred);
+      },
+      listFor(owner) {
+        assertUsable();
+        return listReferencesFor(executor, owner);
+      },
+      reconcile(options) {
+        assertUsable();
+        return reconcileArtifacts(artifacts, executor, options);
+      }
+    };
+  };
+  const collectionFor = name => collectionOn(name, connection);
+  const attachments = attachmentsOn(connection);
+  const handle = {
+    scopeKey: scope.key,
+    schemaVersion: context.schemaVersion,
+    backupPosture: context.posture,
+    isEncrypted: context.key !== null,
+    collection: collectionFor,
+    async transaction(fn) {
+      assertUsable();
+      const pendingUnlinks = [];
+      const deferred = {
+        add: path => pendingUnlinks.push(path)
+      };
+      let aborted = false;
+      const result = await runInTransaction(connection, async tx => {
+        const managed = createTransaction({
+          collection: name => collectionOn(name, tx, deferred),
+          attachments: () => attachmentsOn(tx, deferred),
+          rollback: async () => {
+            aborted = true;
+            await tx.rollback();
+          }
+        });
+        const value = await fn(managed.transaction);
+        if (!managed.isSettled()) {
+          throwIfFaulted('commit');
+        }
+        managed.settle();
+        return value;
+      });
+      // Committed (a thrown body never gets here). Only now are files whose
+      // references the transaction deleted safe to remove; one that cannot be
+      // removed stays on disk as an orphan reconciliation reports.
+      if (!aborted) {
+        for (const path of pendingUnlinks) {
+          await unlinkArtifact(path);
+        }
+      }
+      return result;
+    },
+    async batch(operations) {
+      assertUsable();
+      const outcome = await runBatch({
+        connection,
+        schemaFor: name => schemaFor(schemas, name),
+        now: context.now
+      }, operations);
+      if (config.cascadeAttachments !== true) {
+        return outcome;
+      }
+      // The batch has committed, so its hard deletes cascade exactly as a
+      // collection delete does. Skipping them left every attachment of a
+      // batch-deleted record behind as an orphan.
+      const artifacts = artifactsOn(connection);
+      const outcomes = [];
+      for (const [index, operation] of operations.entries()) {
+        const written = outcome.outcomes[index];
+        if (operation.type !== 'delete') {
+          outcomes.push(written);
+          continue;
+        }
+        const cascade = await cascadeForOwner(artifacts, connection, {
+          collection: operation.collection,
+          id: operation.id
+        });
+        outcomes.push({
+          ...written,
+          cascade
+        });
+      }
+      return {
+        ...outcome,
+        outcomes
+      };
+    },
+    attachments: () => attachments,
+    explain(collection, query) {
+      assertUsable();
+      return explainQuery(connection, schemaFor(schemas, collection), query, withStableTiebreaker(query?.sort));
+    },
+    async close() {
+      if (closed) {
+        return;
+      }
+      closed = true;
+      unregister();
+      await releaseNative();
+    }
+  };
+  return handle;
+}
+//# sourceMappingURL=handle.js.map

package/lib/module/adapter/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DiagnosticCodes","artifactAvailability","cascadeForOwner","unlinkArtifact","reconcileArtifacts","listReferencesFor","readArtifact","removeArtifact","writeArtifact","deriveArtifactKey","raise","instrument","throwIfFaulted","withStableTiebreaker","runBatch","explainQuery","runInTransaction","releaseHandleSlot","createSqlCollection","isScopeInvalidated","registerOpenHandle","createTransaction","schemaFor","schemas","name","schema","get","CONFIG_INVALID","message","detail","collection","buildHandle","context","config","connection","layout","scope","closed","revoked","releaseNative","key","release","close","unregister","assertUsable","CLOSED_HANDLE","SCOPE_DELETED","scopeKey","artifactsOn","executor","artifactKey","attachmentId","value","now","rawCollection","collectionOn","deferred","ops","cascadeAttachments","delete","id","outcome","cascade","attachmentsOn","artifacts","write","input","read","range","availability","remove","listFor","owner","reconcile","options","collectionFor","attachments","handle","schemaVersion","backupPosture","posture","isEncrypted","transaction","fn","pendingUnlinks","add","path","push","aborted","result","tx","managed","rollback","isSettled","settle","batch","operations","outcomes","index","operation","entries","written","type","explain","query","sort"],"sourceRoot":"../../../src","sources":["adapter/handle.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAYA,SAASA,eAAe,QAAQ,uBAAoB;AAWpD,SAASC,oBAAoB,QAAQ,8BAA2B;AAChE,SAASC,eAAe,EAAEC,cAAc,QAA8B,yBAAsB;AAC5F,SAASC,kBAAkB,QAAQ,2BAAwB;AAC3D,SACCC,iBAAiB,EACjBC,YAAY,EACZC,cAAc,EACdC,aAAa,QAEP,uBAAoB;AAC3B,SAASC,iBAAiB,QAAQ,qBAAkB;AAEpD,SAASC,KAAK,QAAQ,0BAAuB;AAC7C,SAASC,UAAU,QAAQ,2BAAwB;AACnD,SAASC,cAAc,QAAQ,0BAAuB;AAEtD,SAASC,oBAAoB,QAAQ,kBAAe;AACpD,SAASC,QAAQ,QAAQ,oBAAiB;AAE1C,SAASC,YAAY,QAAQ,6BAA0B;AACvD,SAASC,gBAAgB,QAAQ,2BAAwB;AACzD,SAASC,iBAAiB,QAAQ,cAAW;AAC7C,SAASC,mBAAmB,QAAQ,iBAAc;AAClD,SAASC,kBAAkB,EAAEC,kBAAkB,QAAQ,eAAY;AACnE,SAASC,iBAAiB,QAAQ,kBAAe;AAEjD,OAAO,SAASC,SAASA,CACxBC,OAA8C,EAC9CC,IAAY,EACO;EACnB,MAAMC,MAAM,GAAGF,OAAO,CAACG,GAAG,CAACF,IAAI,CAAC;EAChC,IAAI,CAACC,MAAM,EAAE;IACZf,KAAK,CAACV,eAAe,CAAC2B,cAAc,EAAE;MACrCC,OAAO,EAAE,4BAA4B;MACrCC,MAAM,EAAE;QAAEC,UAAU,EAAEN;MAAK;IAC5B,CAAC,CAAC;EACH;EACA,OAAOC,MAAM;AACd;AAcA,OAAO,SAASM,WAAWA,CAACC,OAAsB,EAAkB;EACnE,MAAM;IAAEC,MAAM;IAAEC,UAAU;IAAEC,MAAM;IAAEC,KAAK;IAAEb;EAAQ,CAAC,GAAGS,OAAO;EAC9D,IAAIK,MAAM,GAAG,KAAK;EAClB;EACA,IAAIC,OAAO,GAAG,KAAK;EAEnB,MAAMC,aAAa,GAAG,MAAAA,CAAA,KAA2B;IAChD;IACA;IACAP,OAAO,CAACQ,GAAG,EAAEC,OAAO,CAAC,CAAC;IACtB,MAAMP,UAAU,CAACQ,KAAK,CAAC,CAAC;IACxBzB,iBAAiB,CAAC,CAAC;EACpB,CAAC;EAED,MAAM0B,UAAU,GAAGvB,kBAAkB,CAACa,MAAM,CAACT,IAAI,EAAEY,KAAK,CAACI,GAAG,EAAE,YAAY;IACzE,IAAIH,MAAM,EAAE;MACX;IACD;IACAA,MAAM,GAAG,IAAI;IACbC,OAAO,GAAG,IAAI;IACd,MAAMC,aAAa,CAAC,CAAC;EACtB,CAAC,CAAC;EAEF,MAAMK,YAAY,GAAGA,CAAA,KAAY;IAChC,IAAIP,MAAM,IAAI,CAACC,OAAO,EAAE;MACvB5B,KAAK,CAACV,eAAe,CAAC6C,aAAa,EAAE;QAAEjB,OAAO,EAAE;MAAmB,CAAC,CAAC;IACtE;IACA,IAAIU,OAAO,IAAInB,kBAAkB,CAACc,MAAM,CAACT,IAAI,EAAEY,KAAK,CAACI,GAAG,CAAC,EAAE;MAC1D;MACA;MACA9B,KAAK,CAACV,eAAe,CAAC8C,aAAa,EAAE;QACpClB,OAAO,EAAE,uCAAuC;QAChDC,MAAM,EAAE;UAAEkB,QAAQ,EAAEX,KAAK,CAACI;QAAI;MAC/B,CAAC,CAAC;IACH;EACD,CAAC;;EAED;EACA;EACA;EACA;EACA,MAAMQ,WAAW,GAAIC,QAAkB,KAAuB;IAC7DA,QAAQ,EAAEA,CAAA,KAAMA,QAAQ;IACxBd,MAAM;IACNY,QAAQ,EAAEX,KAAK,CAACI,GAAG;IACnBU,WAAW,EAAEC,YAAY,IACxBnB,OAAO,CAACQ,GAAG,GAAG/B,iBAAiB,CAACuB,OAAO,CAACQ,GAAG,CAACY,KAAK,CAAC,CAAC,EAAEhB,KAAK,CAACI,GAAG,EAAEW,YAAY,CAAC,GAAG,IAAI;IACrFE,GAAG,EAAErB,OAAO,CAACqB;EACd,CAAC,CAAC;EAEF,MAAMC,aAAa,GAAGA,CACrB9B,IAAY,EACZyB,QAAkB,KACI;IACtBL,YAAY,CAAC,CAAC;IACd,OAAOjC,UAAU,CAChBa,IAAI,EACJ,QAAQ,EACRN,mBAAmB,CAAI;MACtB+B,QAAQ,EAAEA,CAAA,KAAMA,QAAQ;MACxBxB,MAAM,EAAEH,SAAS,CAACC,OAAO,EAAEC,IAAI,CAAC;MAChC6B,GAAG,EAAErB,OAAO,CAACqB,GAAG;MAChBT;IACD,CAAC,CACF,CAAC;EACF,CAAC;;EAED;AACD;AACA;AACA;AACA;AACA;AACA;EACC,MAAMW,YAAY,GAAGA,CACpB/B,IAAY,EACZyB,QAAkB,EAClBO,QAA0B,KACJ;IACtB,MAAMC,GAAG,GAAGH,aAAa,CAAI9B,IAAI,EAAEyB,QAAQ,CAAC;IAC5C,IAAIhB,MAAM,CAACyB,kBAAkB,KAAK,IAAI,EAAE;MACvC,OAAOD,GAAG;IACX;IACA,OAAO;MACN,GAAGA,GAAG;MACN,MAAME,MAAMA,CAACC,EAAU,EAAE;QACxB,MAAMC,OAAO,GAAG,MAAMJ,GAAG,CAACE,MAAM,CAACC,EAAE,CAAC;QACpC,MAAME,OAAO,GAAG,MAAM5D,eAAe,CACpC8C,WAAW,CAACC,QAAQ,CAAC,EACrBA,QAAQ,EACR;UAAEnB,UAAU,EAAEN,IAAI;UAAEoC;QAAG,CAAC,EACxBJ,QACD,CAAC;QACD,OAAO;UAAE,GAAGK,OAAO;UAAEC;QAAQ,CAAC;MAC/B;IACD,CAAC;EACF,CAAC;EAED,MAAMC,aAAa,GAAGA,CAACd,QAAkB,EAAEO,QAA0B,KAAkB;IACtF,MAAMQ,SAAS,GAAGhB,WAAW,CAACC,QAAQ,CAAC;IACvC,OAAO;MACNgB,KAAKA,CAACC,KAAsB,EAAE;QAC7BtB,YAAY,CAAC,CAAC;QACd,OAAOpC,aAAa,CAACwD,SAAS,EAAEE,KAAK,CAAC;MACvC,CAAC;MACDC,IAAIA,CAACP,EAAU,EAAEQ,KAAiB,EAAE;QACnCxB,YAAY,CAAC,CAAC;QACd,OAAOtC,YAAY,CAAC0D,SAAS,EAAEJ,EAAE,EAAEQ,KAAK,CAAC;MAC1C,CAAC;MACDC,YAAYA,CAACT,EAAU,EAAE;QACxBhB,YAAY,CAAC,CAAC;QACd,OAAO3C,oBAAoB,CAAC+D,SAAS,EAAEf,QAAQ,EAAEW,EAAE,CAAC;MACrD,CAAC;MACDU,MAAMA,CAACV,EAAU,EAA4B;QAC5ChB,YAAY,CAAC,CAAC;QACd,OAAOrC,cAAc,CAACyD,SAAS,EAAEJ,EAAE,EAAEJ,QAAQ,CAAC;MAC/C,CAAC;MACDe,OAAOA,CAACC,KAAsB,EAAE;QAC/B5B,YAAY,CAAC,CAAC;QACd,OAAOvC,iBAAiB,CAAC4C,QAAQ,EAAEuB,KAAK,CAAC;MAC1C,CAAC;MACDC,SAASA,CAACC,OAAO,EAAiC;QACjD9B,YAAY,CAAC,CAAC;QACd,OAAOxC,kBAAkB,CAAC4D,SAAS,EAAEf,QAAQ,EAAEyB,OAAO,CAAC;MACxD;IACD,CAAC;EACF,CAAC;EAED,MAAMC,aAAa,GAAkCnD,IAAY,IAChE+B,YAAY,CAAI/B,IAAI,EAAEU,UAAU,CAAC;EAClC,MAAM0C,WAAW,GAAGb,aAAa,CAAC7B,UAAU,CAAC;EAE7C,MAAM2C,MAAsB,GAAG;IAC9B9B,QAAQ,EAAEX,KAAK,CAACI,GAAG;IACnBsC,aAAa,EAAE9C,OAAO,CAAC8C,aAAa;IACpCC,aAAa,EAAE/C,OAAO,CAACgD,OAAO;IAC9BC,WAAW,EAAEjD,OAAO,CAACQ,GAAG,KAAK,IAAI;IAEjCV,UAAU,EAAE6C,aAAa;IAEzB,MAAMO,WAAWA,CAAIC,EAAmC,EAAc;MACrEvC,YAAY,CAAC,CAAC;MACd,MAAMwC,cAAwB,GAAG,EAAE;MACnC,MAAM5B,QAAyB,GAAG;QAAE6B,GAAG,EAAEC,IAAI,IAAIF,cAAc,CAACG,IAAI,CAACD,IAAI;MAAE,CAAC;MAC5E,IAAIE,OAAO,GAAG,KAAK;MACnB,MAAMC,MAAM,GAAG,MAAMzE,gBAAgB,CAACkB,UAAU,EAAE,MAAMwD,EAAE,IAAI;QAC7D,MAAMC,OAAO,GAAGtE,iBAAiB,CAAC;UACjCS,UAAU,EAAEN,IAAI,IAAI+B,YAAY,CAAC/B,IAAI,EAAEkE,EAAE,EAAElC,QAAQ,CAAC;UACpDoB,WAAW,EAAEA,CAAA,KAAMb,aAAa,CAAC2B,EAAE,EAAElC,QAAQ,CAAC;UAC9CoC,QAAQ,EAAE,MAAAA,CAAA,KAAY;YACrBJ,OAAO,GAAG,IAAI;YACd,MAAME,EAAE,CAACE,QAAQ,CAAC,CAAC;UACpB;QACD,CAAC,CAAC;QACF,MAAMxC,KAAK,GAAG,MAAM+B,EAAE,CAACQ,OAAO,CAACT,WAAW,CAAC;QAC3C,IAAI,CAACS,OAAO,CAACE,SAAS,CAAC,CAAC,EAAE;UACzBjF,cAAc,CAAC,QAAQ,CAAC;QACzB;QACA+E,OAAO,CAACG,MAAM,CAAC,CAAC;QAChB,OAAO1C,KAAK;MACb,CAAC,CAAC;MACF;MACA;MACA;MACA,IAAI,CAACoC,OAAO,EAAE;QACb,KAAK,MAAMF,IAAI,IAAIF,cAAc,EAAE;UAClC,MAAMjF,cAAc,CAACmF,IAAI,CAAC;QAC3B;MACD;MACA,OAAOG,MAAM;IACd,CAAC;IAED,MAAMM,KAAKA,CAACC,UAA4B,EAAyB;MAChEpD,YAAY,CAAC,CAAC;MACd,MAAMiB,OAAO,GAAG,MAAM/C,QAAQ,CAC7B;QACCoB,UAAU;QACVZ,SAAS,EAAEE,IAAI,IAAIF,SAAS,CAACC,OAAO,EAAEC,IAAI,CAAC;QAC3C6B,GAAG,EAAErB,OAAO,CAACqB;MACd,CAAC,EACD2C,UACD,CAAC;MACD,IAAI/D,MAAM,CAACyB,kBAAkB,KAAK,IAAI,EAAE;QACvC,OAAOG,OAAO;MACf;MACA;MACA;MACA;MACA,MAAMG,SAAS,GAAGhB,WAAW,CAACd,UAAU,CAAC;MACzC,MAAM+D,QAAQ,GAAG,EAAE;MACnB,KAAK,MAAM,CAACC,KAAK,EAAEC,SAAS,CAAC,IAAIH,UAAU,CAACI,OAAO,CAAC,CAAC,EAAE;QACtD,MAAMC,OAAO,GAAGxC,OAAO,CAACoC,QAAQ,CAACC,KAAK,CAAE;QACxC,IAAIC,SAAS,CAACG,IAAI,KAAK,QAAQ,EAAE;UAChCL,QAAQ,CAACV,IAAI,CAACc,OAAO,CAAC;UACtB;QACD;QACA,MAAMvC,OAAO,GAAG,MAAM5D,eAAe,CAAC8D,SAAS,EAAE9B,UAAU,EAAE;UAC5DJ,UAAU,EAAEqE,SAAS,CAACrE,UAAU;UAChC8B,EAAE,EAAEuC,SAAS,CAACvC;QACf,CAAC,CAAC;QACFqC,QAAQ,CAACV,IAAI,CAAC;UAAE,GAAGc,OAAO;UAAEvC;QAAQ,CAAC,CAAC;MACvC;MACA,OAAO;QAAE,GAAGD,OAAO;QAAEoC;MAAS,CAAC;IAChC,CAAC;IAEDrB,WAAW,EAAEA,CAAA,KAAMA,WAAW;IAE9B2B,OAAOA,CAACzE,UAAkB,EAAE0E,KAAa,EAAgC;MACxE5D,YAAY,CAAC,CAAC;MACd,OAAO7B,YAAY,CAClBmB,UAAU,EACVZ,SAAS,CAACC,OAAO,EAAEO,UAAU,CAAC,EAC9B0E,KAAK,EACL3F,oBAAoB,CAAC2F,KAAK,EAAEC,IAAI,CACjC,CAAC;IACF,CAAC;IAED,MAAM/D,KAAKA,CAAA,EAAkB;MAC5B,IAAIL,MAAM,EAAE;QACX;MACD;MACAA,MAAM,GAAG,IAAI;MACbM,UAAU,CAAC,CAAC;MACZ,MAAMJ,aAAa,CAAC,CAAC;IACtB;EACD,CAAC;EAED,OAAOsC,MAAM;AACd","ignoreList":[]}

package/lib/module/adapter/index.js

@@ -0,0 +1,59 @@
+"use strict";
+
+/**
+ * The public lifecycle functions.
+ *
+ * Scope deletion and reset are module-level rather than handle methods: they
+ * must work whether or not a handle is open on the target (FR-059), and
+ * `resetScope` in particular must never be reachable as a fallback from
+ * `openDatabase` (FR-057a).
+ *
+ * The active adapter is resolved lazily so a consuming app that only ever
+ * uses the in-memory adapter in tests never loads the native peers.
+ */
+
+let override = null;
+let cached = null;
+
+/**
+ * Swap the adapter. Intended for tests and for the demo app's in-memory
+ * mode; production code never calls this.
+ */
+export function setStorageAdapter(adapter) {
+  override = adapter;
+}
+function activeAdapter() {
+  if (override) {
+    return override;
+  }
+  if (!cached) {
+    // Lazy require, matching how rn-auth and rn-camera reach their native
+    // peers: importing at module scope would pull op-sqlite into every
+    // consumer, including ones that only run the in-memory adapter.
+    const {
+      createSqliteAdapter
+    } = require('../sqlite/adapter');
+    cached = createSqliteAdapter();
+  }
+  return cached;
+}
+export function openDatabase(config) {
+  return activeAdapter().open(config);
+}
+export function deleteScopeData(config) {
+  return activeAdapter().deleteScopeData(config);
+}
+export function deleteDatabase(config) {
+  return activeAdapter().deleteDatabase(config);
+}
+
+/**
+ * Destructive. Discards one scope's data and leaves it ready for a clean
+ * first-run migration. Named apart from `deleteScopeData` deliberately: one
+ * is a lifecycle operation, the other is an admission that a database is
+ * broken.
+ */
+export function resetScope(config) {
+  return activeAdapter().resetScope(config);
+}
+//# sourceMappingURL=index.js.map

package/lib/module/adapter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["override","cached","setStorageAdapter","adapter","activeAdapter","createSqliteAdapter","require","openDatabase","config","open","deleteScopeData","deleteDatabase","resetScope"],"sourceRoot":"../../../src","sources":["adapter/index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,IAAIA,QAA+B,GAAG,IAAI;AAC1C,IAAIC,MAA6B,GAAG,IAAI;;AAExC;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACC,OAA8B,EAAQ;EACvEH,QAAQ,GAAGG,OAAO;AACnB;AAEA,SAASC,aAAaA,CAAA,EAAmB;EACxC,IAAIJ,QAAQ,EAAE;IACb,OAAOA,QAAQ;EAChB;EACA,IAAI,CAACC,MAAM,EAAE;IACZ;IACA;IACA;IACA,MAAM;MAAEI;IAAoB,CAAC,GAAGC,OAAO,CAAC,mBAAmB,CAE1D;IACDL,MAAM,GAAGI,mBAAmB,CAAC,CAAC;EAC/B;EACA,OAAOJ,MAAM;AACd;AAEA,OAAO,SAASM,YAAYA,CAACC,MAAsB,EAA2B;EAC7E,OAAOJ,aAAa,CAAC,CAAC,CAACK,IAAI,CAACD,MAAM,CAAC;AACpC;AAEA,OAAO,SAASE,eAAeA,CAACF,MAAyB,EAA4B;EACpF,OAAOJ,aAAa,CAAC,CAAC,CAACM,eAAe,CAACF,MAAM,CAAC;AAC/C;AAEA,OAAO,SAASG,cAAcA,CAACH,MAA4B,EAA4B;EACtF,OAAOJ,aAAa,CAAC,CAAC,CAACO,cAAc,CAACH,MAAM,CAAC;AAC9C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,UAAUA,CAACJ,MAAyB,EAA4B;EAC/E,OAAOJ,aAAa,CAAC,CAAC,CAACQ,UAAU,CAACJ,MAAM,CAAC;AAC1C","ignoreList":[]}