@digitalpaws/starr 0.0.1

package/dist/content-types/registry.js

@@ -0,0 +1,171 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+/**
+ * Pure validation function. Returns null if valid, or an error message string.
+ *
+ * Checks in order:
+ * - id is truthy
+ * - name is truthy
+ * - identity is a non-empty array (DS2)
+ * - Each field: key, label, type are truthy
+ * - list fields must have itemType (FT2)
+ * - enum fields must have non-empty options (FT2)
+ */
+export function validateDescriptor(descriptor) {
+    // Check required fields (as unknown for runtime validation of TS-required fields).
+    const d = descriptor;
+    if (!d.id)
+        return "content-type id is required";
+    if (!d.name)
+        return "content-type name is required";
+    if (!Array.isArray(d.identity) || d.identity.length === 0) {
+        return "content-type identity must be a non-empty array";
+    }
+    const fields = d.fields;
+    if (Array.isArray(fields)) {
+        for (let i = 0; i < fields.length; i++) {
+            const f = fields[i];
+            if (!f.key)
+                return `field[${i}]: key is required`;
+            if (!f.label)
+                return `field[${i}]: label is required`;
+            if (!f.type)
+                return `field[${i}]: type is required`;
+            if (f.type === "list" && !f.itemType) {
+                return `field[${i}] (list): itemType is required`;
+            }
+            if (f.type === "enum") {
+                if (!Array.isArray(f.options) || f.options.length === 0) {
+                    return `field[${i}] (enum): non-empty options is required`;
+                }
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Full content-type registry implementation.
+ *
+ * Plugins call register() via ctx.contentTypes.register. The host internally
+ * uses get(), list(), and rollbackPlugin().
+ */
+export class ContentTypeRegistryImpl {
+    descriptors = new Map();
+    pluginToIds = new Map();
+    /**
+     * Register a descriptor. Optionally associates it with a pluginId for
+     * rollback support.
+     */
+    register(descriptor, pluginId) {
+        // 1. Validate
+        const err = validateDescriptor(descriptor);
+        if (err)
+            throw new Error(`Invalid content-type descriptor: ${err}`);
+        // 2. Duplicate check (CT5, RC2)
+        if (this.descriptors.has(descriptor.id)) {
+            throw new Error(`Duplicate content-type id: ${descriptor.id}`);
+        }
+        // 3. Store
+        this.descriptors.set(descriptor.id, descriptor);
+        if (pluginId) {
+            const ids = this.pluginToIds.get(pluginId) ?? [];
+            ids.push(descriptor.id);
+            this.pluginToIds.set(pluginId, ids);
+        }
+    }
+    /** Retrieve a descriptor by id. Returns undefined if not found. */
+    get(id) {
+        return this.descriptors.get(id);
+    }
+    /** List all registered descriptors. */
+    list() {
+        return [...this.descriptors.values()];
+    }
+    /**
+     * Roll back (remove) all descriptors registered by a given plugin.
+     * Safe to call for unknown pluginIds (no-op).
+     */
+    rollbackPlugin(pluginId) {
+        const ids = this.pluginToIds.get(pluginId);
+        if (ids) {
+            for (const id of ids)
+                this.descriptors.delete(id);
+            this.pluginToIds.delete(pluginId);
+        }
+    }
+}
+/**
+ * Build a sorted external ids string for fallback identity computation.
+ * Produces: "key1=val1|key2=val2|..." sorted alphabetically by key.
+ */
+function sortedExternalIdsString(externalIds) {
+    return Object.keys(externalIds)
+        .sort()
+        .map((k) => `${k}=${externalIds[k]}`)
+        .join("|");
+}
+/**
+ * Compute a deterministic content-identity string for an item.
+ *
+ * Algorithm:
+ * 1. Look up the descriptor for item.contentTypeId.
+ * 2. If descriptor exists: walk descriptor.identity in order. For each key,
+ *    if item.externalIds[key] is present and non-empty, return
+ *    "${contentTypeId}::${key}=${value}".
+ * 3. If no identity key is present in the item's externalIds (or descriptor
+ *    not found): return "${contentTypeId}::undecidable::${sortedExternalIds}"
+ *    where sortedExternalIds is all externalId pairs sorted by key.
+ */
+export function computeContentIdentity(item, registry) {
+    const descriptor = registry.get(item.contentTypeId);
+    if (descriptor) {
+        for (const key of descriptor.identity) {
+            const value = item.externalIds[key];
+            if (value && value.length > 0) {
+                return `${item.contentTypeId}::${key}=${value}`;
+            }
+        }
+    }
+    // Fallback: undecidable or unknown type
+    return `${item.contentTypeId}::undecidable::${sortedExternalIdsString(item.externalIds)}`;
+}
+/**
+ * Compare two content items for identity.
+ *
+ * Algorithm:
+ * 1. If contentTypeId differs → false (ID2).
+ * 2. Look up descriptor. If not found → false.
+ * 3. Walk descriptor.identity in order. For each key, if BOTH items have a
+ *    truthy value, return whether they are equal.
+ * 4. No mutually-present key → false (ID1 — undecidable).
+ */
+export function areSameItem(a, b, registry) {
+    if (a.contentTypeId !== b.contentTypeId)
+        return false; // ID2
+    const descriptor = registry.get(a.contentTypeId);
+    if (!descriptor)
+        return false; // Unknown type → conservative
+    for (const key of descriptor.identity) {
+        const aVal = a.externalIds[key];
+        const bVal = b.externalIds[key];
+        if (aVal && aVal.length > 0 && bVal && bVal.length > 0) {
+            return aVal === bVal;
+        }
+    }
+    return false; // ID1 — no mutually-present key
+}
+/** Default naming: "{Title}/{Title}.{ext}" */
+function defaultNamingRule() {
+    return {
+        directory: [[{ type: "field", value: "Title" }]],
+        filename: [[{ type: "field", value: "Title" }]],
+    };
+}
+/**
+ * Get the naming rule for a content type, falling back to a safe default.
+ */
+export function getNamingRule(contentTypeId, registry) {
+    const descriptor = registry.get(contentTypeId);
+    return descriptor?.naming ?? defaultNamingRule();
+}
+//# sourceMappingURL=registry.js.map

package/dist/content-types/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/content-types/registry.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAI5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAiC;IAClE,mFAAmF;IACnF,MAAM,CAAC,GAAG,UAAgD,CAAC;IAE3D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,6BAA6B,CAAC;IAChD,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,+BAA+B,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,QAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAoD,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,oBAAoB,CAAC;YAClD,IAAI,CAAC,CAAC,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC,sBAAsB,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACrC,OAAO,SAAS,CAAC,gCAAgC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC,OAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvE,OAAO,SAAS,CAAC,yCAAyC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IAC1B,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAElD;;;OAGG;IACH,QAAQ,CAAC,UAAiC,EAAE,QAAiB;QAC3D,cAAc;QACd,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QAEpE,gCAAgC;QAChC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,WAAW;QACX,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,uCAAuC;IACvC,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,QAAgB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,WAAmC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SAC5B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAoE,EACpE,QAAiC;IAEjC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC,aAAa,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,OAAO,GAAG,IAAI,CAAC,aAAa,kBAAkB,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,CAAiE,EACjE,CAAiE,EACjE,QAAiC;IAEjC,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM;IAE7D,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC,CAAC,8BAA8B;IAE7D,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,KAAK,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,gCAAgC;AAChD,CAAC;AAED,8CAA8C;AAC9C,SAAS,iBAAiB;IACxB,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,aAAqB,EACrB,QAAiC;IAEjC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,UAAU,EAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;AACnD,CAAC"}

package/dist/datastore/db.d.ts

@@ -0,0 +1,9 @@
+import Database from "better-sqlite3";
+import type { Logger } from "../types/plugin.js";
+export interface Datastore {
+    readonly db: Database.Database;
+    readonly dbPath: string;
+    close(): void;
+}
+export declare function openDatastore(dataDir: string, logger: Logger): Datastore;
+//# sourceMappingURL=db.d.ts.map

package/dist/datastore/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/datastore/db.ts"],"names":[],"mappings":"AAGA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAQjD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAiBxE"}

package/dist/datastore/db.js

@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import Database from "better-sqlite3";
+import { mkdirSync, existsSync } from "node:fs";
+import path from "node:path";
+function ensureDir(dir) {
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+}
+export function openDatastore(dataDir, logger) {
+    ensureDir(dataDir);
+    const dbPath = path.join(dataDir, "starr.db");
+    logger.info("opening datastore", { dbPath });
+    const db = new Database(dbPath);
+    db.pragma("journal_mode = WAL");
+    db.pragma("foreign_keys = ON");
+    return {
+        db,
+        dbPath,
+        close() {
+            logger.info("closing datastore");
+            db.close();
+        },
+    };
+}
+//# sourceMappingURL=db.js.map

package/dist/datastore/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/datastore/db.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAE5D,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc;IAC3D,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE/B,OAAO;QACL,EAAE;QACF,MAAM;QACN,KAAK;YACH,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACjC,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/datastore/encrypt.d.ts

@@ -0,0 +1,9 @@
+import type { Logger } from "../types/plugin.js";
+export declare function loadEncryptionKey(dataDir: string, logger: Logger): Buffer;
+/**
+ * Reset the cached encryption key. For testing only.
+ */
+export declare function resetEncryptionKey(): void;
+export declare function encrypt(plaintext: string): string;
+export declare function decrypt(blob: string): string;
+//# sourceMappingURL=encrypt.d.ts.map

package/dist/datastore/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/datastore/encrypt.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AASjD,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,MAAM,CA0CR;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAcjD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiB5C"}

package/dist/datastore/encrypt.js

@@ -0,0 +1,84 @@
+// SPDX-License-Identifier: 0BSD
+// SPDX-FileCopyrightText: 2025 Digi <digitalpaws@proton.me>
+import { createCipheriv, createDecipheriv, randomBytes, } from "node:crypto";
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+import path from "node:path";
+const ALGORITHM = "aes-256-gcm";
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+const KEY_LENGTH = 32; // bytes
+let _key = null;
+export function loadEncryptionKey(dataDir, logger) {
+    if (_key)
+        return _key;
+    // 1. Env var
+    const envKey = process.env.STARR_ENCRYPTION_KEY;
+    if (envKey) {
+        const buf = Buffer.from(envKey, "base64");
+        if (buf.length !== KEY_LENGTH) {
+            throw new Error(`STARR_ENCRYPTION_KEY must decode to ${KEY_LENGTH} bytes, got ${buf.length}`);
+        }
+        _key = buf;
+        logger.info("encryption key loaded from STARR_ENCRYPTION_KEY");
+        return _key;
+    }
+    // 2. Key file
+    const keyPath = path.join(dataDir, "starr.key");
+    if (existsSync(keyPath)) {
+        const fileContent = readFileSync(keyPath, "utf8").trim();
+        const buf = Buffer.from(fileContent, "base64");
+        if (buf.length !== KEY_LENGTH) {
+            throw new Error(`Key file ${keyPath} must decode to ${KEY_LENGTH} bytes, got ${buf.length}`);
+        }
+        _key = buf;
+        logger.info("encryption key loaded from file", { keyPath });
+        return _key;
+    }
+    // 3. Auto-generate
+    const newKey = randomBytes(KEY_LENGTH);
+    const encoded = newKey.toString("base64");
+    writeFileSync(keyPath, encoded + "\n", { mode: 0o600 });
+    _key = newKey;
+    logger.info("auto-generated encryption key (no STARR_ENCRYPTION_KEY set)", { keyPath });
+    return _key;
+}
+/**
+ * Reset the cached encryption key. For testing only.
+ */
+export function resetEncryptionKey() {
+    _key = null;
+}
+export function encrypt(plaintext) {
+    if (!_key)
+        throw new Error("encryption key not loaded");
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, _key, iv, {
+        authTagLength: AUTH_TAG_LENGTH,
+    });
+    const encrypted = Buffer.concat([
+        cipher.update(plaintext, "utf8"),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    // Pack: iv (12) + authTag (16) + ciphertext (variable)
+    const blob = Buffer.concat([iv, authTag, encrypted]);
+    return blob.toString("base64");
+}
+export function decrypt(blob) {
+    if (!_key)
+        throw new Error("encryption key not loaded");
+    const buf = Buffer.from(blob, "base64");
+    if (buf.length < IV_LENGTH + AUTH_TAG_LENGTH) {
+        throw new Error("invalid encrypted blob: too short");
+    }
+    const iv = buf.subarray(0, IV_LENGTH);
+    const authTag = buf.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+    const ciphertext = buf.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+    const decipher = createDecipheriv(ALGORITHM, _key, iv, {
+        authTagLength: AUTH_TAG_LENGTH,
+    });
+    decipher.setAuthTag(authTag);
+    return (decipher.update(ciphertext, undefined, "utf8") +
+        decipher.final("utf8"));
+}
+//# sourceMappingURL=encrypt.js.map

package/dist/datastore/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../src/datastore/encrypt.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,4DAA4D;AAE5D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,QAAQ;AAE/B,IAAI,IAAI,GAAkB,IAAI,CAAC;AAE/B,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,MAAc;IAEd,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,aAAa;IACb,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,eAAe,GAAG,CAAC,MAAM,EAAE,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc;IACd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,mBAAmB,UAAU,eAAe,GAAG,CAAC,MAAM,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,MAAM,CAAC;IACd,MAAM,CAAC,IAAI,CACT,6DAA6D,EAC7D,EAAE,OAAO,EAAE,CACZ,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QACjD,aAAa,EAAE,eAAe;KAC/B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,uDAAuD;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QACrD,aAAa,EAAE,eAAe;KAC/B,CAAC,CAAC;IACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;QAC9C,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CACvB,CAAC;AACJ,CAAC"}

package/dist/datastore/migrations.d.ts

@@ -0,0 +1,10 @@
+import type Database from "better-sqlite3";
+import type { Logger } from "../types/plugin.js";
+export interface Migration {
+    id: number;
+    name: string;
+    up: string;
+}
+export declare function runMigrations(db: Database.Database, migrations: Migration[], logger: Logger): void;
+export declare const CORE_MIGRATIONS: Migration[];
+//# sourceMappingURL=migrations.d.ts.map

package/dist/datastore/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/datastore/migrations.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAUD,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,UAAU,EAAE,SAAS,EAAE,EACvB,MAAM,EAAE,MAAM,GACb,IAAI,CAmCN;AAID,eAAO,MAAM,eAAe,EAAE,SAAS,EA+StC,CAAC"}