@fivepixels-js/lite-api 0.2.1

package/dist/db/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/db/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAW3C,SAAS,SAAS;IAChB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAmB,QAAQ;IAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAwB,EACxB,WAAmB;IAEnB,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC5D,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,IAAI,aAAa,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAClD,cAAc,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAmC,CAAC;QACxF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,MAAM,gBAAgB,GAAG,WAAW,CAAC,eAAe,CAAC;SAClD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAClE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CACrB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1E,CAAC,CAAC;IAEL,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/db/connection.d.ts

@@ -0,0 +1,15 @@
+import BetterSqlite3 from 'better-sqlite3';
+export type SqliteDatabase = BetterSqlite3.Database;
+export declare class DatabaseConfigurationError extends Error {
+    constructor(message: string);
+}
+export interface OpenDatabaseOptions {
+    fileMustExist?: boolean;
+    readonly?: boolean;
+}
+export declare function openDatabase(dbPath: string, options?: OpenDatabaseOptions): SqliteDatabase;
+export declare function applyAndVerifyPragmas(database: SqliteDatabase): void;
+export declare function getSqliteVersion(database: SqliteDatabase): string;
+export declare function isWalResetSafeVersion(version: string): boolean;
+export declare function assertSafeSqliteVersion(version: string): void;
+//# sourceMappingURL=connection.d.ts.map

package/dist/db/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAGA,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;AAEpD,qBAAa,0BAA2B,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAInC;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,cAAc,CAsBhB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAsBpE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAGjE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAa9D;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAM7D"}

package/dist/db/connection.js

@@ -0,0 +1,82 @@
+import { chmodSync, existsSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import BetterSqlite3 from 'better-sqlite3';
+export class DatabaseConfigurationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'DatabaseConfigurationError';
+    }
+}
+export function openDatabase(dbPath, options = {}) {
+    const existed = existsSync(dbPath);
+    if (!options.readonly) {
+        mkdirSync(dirname(dbPath), { mode: 0o700, recursive: true });
+    }
+    const database = new BetterSqlite3(dbPath, {
+        fileMustExist: options.fileMustExist ?? false,
+        readonly: options.readonly ?? false,
+    });
+    try {
+        if (!options.readonly) {
+            applyAndVerifyPragmas(database);
+            if (!existed)
+                chmodSync(dbPath, 0o600);
+        }
+        assertSafeSqliteVersion(getSqliteVersion(database));
+        return database;
+    }
+    catch (error) {
+        database.close();
+        throw error;
+    }
+}
+export function applyAndVerifyPragmas(database) {
+    const journalMode = String(database.pragma('journal_mode = WAL', { simple: true })).toLowerCase();
+    database.pragma('foreign_keys = ON');
+    database.pragma('busy_timeout = 5000');
+    database.pragma('synchronous = NORMAL');
+    const foreignKeys = Number(database.pragma('foreign_keys', { simple: true }));
+    const busyTimeout = Number(database.pragma('busy_timeout', { simple: true }));
+    const synchronous = Number(database.pragma('synchronous', { simple: true }));
+    if (journalMode !== 'wal') {
+        throw new DatabaseConfigurationError('SQLite WAL mode could not be enabled.');
+    }
+    if (foreignKeys !== 1) {
+        throw new DatabaseConfigurationError('SQLite foreign key enforcement could not be enabled.');
+    }
+    if (busyTimeout !== 5000) {
+        throw new DatabaseConfigurationError('SQLite busy timeout could not be configured.');
+    }
+    if (synchronous !== 1) {
+        throw new DatabaseConfigurationError('SQLite synchronous mode could not be set to NORMAL.');
+    }
+}
+export function getSqliteVersion(database) {
+    const row = database.prepare('SELECT sqlite_version() AS version').get();
+    return row.version;
+}
+export function isWalResetSafeVersion(version) {
+    const parts = version.split('.').map((value) => Number(value));
+    const major = parts[0] ?? 0;
+    const minor = parts[1] ?? 0;
+    const patch = parts[2] ?? 0;
+    if (major > 3)
+        return true;
+    if (major !== 3)
+        return false;
+    if (minor > 51)
+        return true;
+    if (minor === 51)
+        return patch >= 3;
+    if (minor === 50)
+        return patch >= 7;
+    if (minor === 44)
+        return patch >= 6;
+    return false;
+}
+export function assertSafeSqliteVersion(version) {
+    if (!isWalResetSafeVersion(version)) {
+        throw new DatabaseConfigurationError(`SQLite ${version} does not contain the required WAL-reset safety fix.`);
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/db/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAI3C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAOD,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE;QACzC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;QAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO;gBAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAExC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,0BAA0B,CAAC,sDAAsD,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,8CAA8C,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,0BAA0B,CAAC,qDAAqD,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAAyB,CAAC;IAChG,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE5B,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,0BAA0B,CAClC,UAAU,OAAO,sDAAsD,CACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/db/guid-order.d.ts

@@ -0,0 +1,2 @@
+export declare function sqlGuidOrder(column: string): string;
+//# sourceMappingURL=guid-order.d.ts.map

package/dist/db/guid-order.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guid-order.d.ts","sourceRoot":"","sources":["../../src/db/guid-order.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAInD"}

package/dist/db/guid-order.js

@@ -0,0 +1,9 @@
+// SqlGuid compares Guid.ToByteArray() in order 10..15, 8,9, 6,7, 4,5, 0..3.
+// SQL expressions use only repository-owned identifiers, never request values.
+export function sqlGuidOrder(column) {
+    if (!/^(?:[a-z_]+\.)?[a-z_]+$/.test(column))
+        throw new Error('invalid-guid-column');
+    return '(' + [[25, 12], [20, 4], [17, 2], [15, 2], [12, 2], [10, 2], [7, 2], [5, 2], [3, 2], [1, 2]]
+        .map(([start, length]) => `substr(${column}, ${start}, ${length})`).join(' || ') + ')';
+}
+//# sourceMappingURL=guid-order.js.map

package/dist/db/guid-order.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guid-order.js","sourceRoot":"","sources":["../../src/db/guid-order.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpF,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACjG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,UAAU,MAAM,KAAK,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;AAC3F,CAAC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,37 @@
+import type { SqliteDatabase } from './connection.js';
+export interface MigrationFile {
+    checksum: string;
+    name: string;
+    path: string;
+    sql: string;
+    version: number;
+}
+export interface AppliedMigration {
+    appliedAt: string;
+    checksum: string;
+    name: string;
+    version: number;
+}
+export interface MigrationStatus {
+    applied: AppliedMigration[];
+    currentVersion: number;
+    pending: MigrationFile[];
+}
+export interface MigrationResult {
+    appliedVersions: number[];
+    backupPath?: string;
+    currentVersion: number;
+    removedBackups: string[];
+}
+export interface MigrationOptions {
+    automaticBackupRetention?: number;
+    dbPath: string;
+    migrationsDirectory?: string;
+}
+export declare class MigrationError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare function loadMigrations(directory?: string): MigrationFile[];
+export declare function getMigrationStatus(database: SqliteDatabase, migrationsDirectory?: string): MigrationStatus;
+export declare function migrateDatabase(database: SqliteDatabase, options: MigrationOptions): Promise<MigrationResult>;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAMtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,cAAe,SAAQ,KAAK;gBACpB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAI3D;AAMD,wBAAgB,cAAc,CAAC,SAAS,SAA+B,GAAG,aAAa,EAAE,CAgCxF;AA4BD,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,mBAAmB,SAA+B,GACjD,eAAe,CAyBjB;AAOD,wBAAsB,eAAe,CACnC,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CAyD1B"}

package/dist/db/migrate.js

@@ -0,0 +1,145 @@
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createBackup, pruneAutomaticBackups } from './backup.js';
+import { prepareStorageMigration } from './storage-migration.js';
+const DEFAULT_MIGRATIONS_DIRECTORY = fileURLToPath(new URL('./migrations/', import.meta.url));
+const MIGRATION_FILE_PATTERN = /^(\d+)_([a-z0-9_]+)\.sql$/;
+export class MigrationError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'MigrationError';
+    }
+}
+function checksum(sql) {
+    return createHash('sha256').update(sql).digest('hex');
+}
+export function loadMigrations(directory = DEFAULT_MIGRATIONS_DIRECTORY) {
+    const migrations = readdirSync(directory)
+        .filter((fileName) => fileName.endsWith('.sql'))
+        .map((fileName) => {
+        const match = MIGRATION_FILE_PATTERN.exec(fileName);
+        if (match === null) {
+            throw new MigrationError(`Invalid migration file name: ${fileName}`);
+        }
+        const version = Number(match[1]);
+        const name = match[2];
+        if (!Number.isSafeInteger(version) || version < 1 || name === undefined) {
+            throw new MigrationError(`Invalid migration file name: ${fileName}`);
+        }
+        const path = join(directory, fileName);
+        const sql = readFileSync(path, 'utf8');
+        return { checksum: checksum(sql), name, path, sql, version };
+    })
+        .sort((left, right) => left.version - right.version);
+    migrations.forEach((migration, index) => {
+        if (index > 0 && migrations[index - 1]?.version === migration.version) {
+            throw new MigrationError(`Duplicate migration version: ${migration.version}`);
+        }
+        const expectedVersion = index + 1;
+        if (migration.version !== expectedVersion) {
+            throw new MigrationError(`Migration sequence must be contiguous. Expected ${expectedVersion}, found ${migration.version}.`);
+        }
+    });
+    return migrations;
+}
+function migrationTableExists(database) {
+    const row = database.prepare("SELECT 1 AS found FROM sqlite_master WHERE type = 'table' AND name = ?").get('schema_migrations');
+    return row?.found === 1;
+}
+function databaseHasUserSchema(database) {
+    const row = database.prepare(`
+    SELECT 1 AS found
+    FROM sqlite_master
+    WHERE type = 'table'
+      AND name NOT LIKE 'sqlite_%'
+    LIMIT 1
+  `).get();
+    return row?.found === 1;
+}
+function readAppliedMigrations(database) {
+    if (!migrationTableExists(database))
+        return [];
+    const rows = database.prepare('SELECT version, name, checksum, applied_at AS appliedAt FROM schema_migrations ORDER BY version').all();
+    return rows;
+}
+export function getMigrationStatus(database, migrationsDirectory = DEFAULT_MIGRATIONS_DIRECTORY) {
+    const available = loadMigrations(migrationsDirectory);
+    const applied = readAppliedMigrations(database);
+    const availableByVersion = new Map(available.map((migration) => [migration.version, migration]));
+    for (const [index, appliedMigration] of applied.entries()) {
+        if (appliedMigration.version !== index + 1) {
+            throw new MigrationError('Applied migration history is not contiguous.');
+        }
+        const migration = availableByVersion.get(appliedMigration.version);
+        if (migration === undefined) {
+            throw new MigrationError(`Applied migration ${appliedMigration.version} is missing from the package.`);
+        }
+        if (migration.name !== appliedMigration.name || migration.checksum !== appliedMigration.checksum) {
+            throw new MigrationError(`Applied migration ${appliedMigration.version} has been modified.`);
+        }
+    }
+    const appliedVersions = new Set(applied.map((migration) => migration.version));
+    const pending = available.filter((migration) => !appliedVersions.has(migration.version));
+    return {
+        applied,
+        currentVersion: applied.at(-1)?.version ?? 0,
+        pending,
+    };
+}
+function automaticBackupPath(dbPath, fromVersion, toVersion) {
+    const now = new Date().toISOString().replace(/[:.]/g, '-');
+    return join(dirname(dbPath), 'backups', `auto-v${fromVersion}-to-v${toVersion}-${now}.db`);
+}
+export async function migrateDatabase(database, options) {
+    const status = getMigrationStatus(database, options.migrationsDirectory);
+    if (status.pending.length === 0) {
+        return {
+            appliedVersions: [],
+            currentVersion: status.currentVersion,
+            removedBackups: [],
+        };
+    }
+    let backupPath;
+    if (existsSync(options.dbPath) && databaseHasUserSchema(database)) {
+        const targetVersion = status.pending.at(-1)?.version ?? status.currentVersion;
+        const backup = await createBackup(database, automaticBackupPath(options.dbPath, status.currentVersion, targetVersion));
+        backupPath = backup.path;
+    }
+    const appliedVersions = [];
+    const available = loadMigrations(options.migrationsDirectory);
+    for (const migration of status.pending) {
+        try {
+            database.transaction(() => {
+                const isStorageAlignment = (migration.version === 6 && migration.name === 'align_credentials')
+                    || (migration.version === 7 && migration.name === 'align_storage_values');
+                const verify = isStorageAlignment
+                    ? prepareStorageMigration(database, available, migration.version) : undefined;
+                database.exec(migration.sql);
+                verify?.();
+                database.prepare('INSERT INTO schema_migrations (version, name, checksum, applied_at) VALUES (?, ?, ?, ?)').run(migration.version, migration.name, migration.checksum, new Date().toISOString());
+            }).immediate();
+            appliedVersions.push(migration.version);
+        }
+        catch (error) {
+            const safeReasons = new Set([
+                'unsupported-custom-schema', 'inconsistent-credential-keys', 'invalid-storage-timestamp',
+                'invalid-storage-pathname', 'foreign-keys-required', 'foreign-key-check-failed',
+                'integrity-check-failed', 'migration-row-count-mismatch',
+            ]);
+            const reason = error instanceof Error && safeReasons.has(error.message) ? ` (${error.message})` : '';
+            throw new MigrationError(`Migration ${basename(migration.path)} failed${reason}.`, { cause: error });
+        }
+    }
+    const removedBackups = backupPath === undefined
+        ? []
+        : pruneAutomaticBackups(options.dbPath, options.automaticBackupRetention ?? 3);
+    return {
+        ...(backupPath === undefined ? {} : { backupPath }),
+        appliedVersions,
+        currentVersion: appliedVersions.at(-1) ?? status.currentVersion,
+        removedBackups,
+    };
+}
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,4BAA4B,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9F,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAoC3D,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAmB,OAAe,EAAE,OAAsB;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAS,GAAG,4BAA4B;IACrE,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC;SACtC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,cAAc,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvD,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,KAAK,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YACtE,MAAM,IAAI,cAAc,CAAC,gCAAgC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,cAAc,CACtB,mDAAmD,eAAe,WAAW,SAAS,CAAC,OAAO,GAAG,CAClG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAC1B,wEAAwE,CACzE,CAAC,GAAG,CAAC,mBAAmB,CAAkC,CAAC;IAC5D,OAAO,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;;GAM5B,CAAC,CAAC,GAAG,EAAmC,CAAC;IAC1C,OAAO,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB;IACrD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAC3B,iGAAiG,CAClG,CAAC,GAAG,EAAwB,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAwB,EACxB,mBAAmB,GAAG,4BAA4B;IAElD,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAEjG,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,IAAI,gBAAgB,CAAC,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,cAAc,CAAC,qBAAqB,gBAAgB,CAAC,OAAO,+BAA+B,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,KAAK,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACjG,MAAM,IAAI,cAAc,CAAC,qBAAqB,gBAAgB,CAAC,OAAO,qBAAqB,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC;QAC5C,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,WAAmB,EAAE,SAAiB;IACjF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,WAAW,QAAQ,SAAS,IAAI,GAAG,KAAK,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAwB,EACxB,OAAyB;IAEzB,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,QAAQ,EACR,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAC1E,CAAC;QACF,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;gBACxB,MAAM,kBAAkB,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC;uBACzF,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;gBAC5E,MAAM,MAAM,GAAG,kBAAkB;oBAC/B,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChF,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,EAAE,EAAE,CAAC;gBACX,QAAQ,CAAC,OAAO,CACd,yFAAyF,CAC1F,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACf,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;gBAC1B,2BAA2B,EAAE,8BAA8B,EAAE,2BAA2B;gBACxF,0BAA0B,EAAE,uBAAuB,EAAE,0BAA0B;gBAC/E,wBAAwB,EAAE,8BAA8B;aACzD,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,cAAc,CAAC,aAAa,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,KAAK,SAAS;QAC7C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,wBAAwB,IAAI,CAAC,CAAC,CAAC;IAEjF,OAAO;QACL,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,eAAe;QACf,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc;QAC/D,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/db/migrations/001_schema_migrations.sql

@@ -0,0 +1,6 @@
+CREATE TABLE schema_migrations (
+    version     INTEGER PRIMARY KEY CHECK (version > 0),
+    name        TEXT NOT NULL UNIQUE,
+    checksum    TEXT NOT NULL CHECK (length(checksum) = 64),
+    applied_at  TEXT NOT NULL
+) STRICT;

package/dist/db/migrations/002_identity.sql

@@ -0,0 +1,95 @@
+CREATE TABLE users (
+    user_id            TEXT PRIMARY KEY
+,   status_code        INTEGER NOT NULL DEFAULT 1
+,   user_name          TEXT NOT NULL
+,   profile_image_url  TEXT
+,   created_at         TEXT NOT NULL
+,   updated_at         TEXT NOT NULL
+,   CHECK (
+        length(user_id) = 36
+        AND user_id = lower(user_id)
+        AND substr(user_id, 9, 1) = '-'
+        AND substr(user_id, 14, 1) = '-'
+        AND substr(user_id, 19, 1) = '-'
+        AND substr(user_id, 24, 1) = '-'
+        AND length(replace(user_id, '-', '')) = 32
+        AND replace(user_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+,   CHECK (status_code IN (1, 2, 3))
+,   CHECK (user_name = trim(user_name) AND length(user_name) BETWEEN 1 AND 100)
+,   CHECK (
+        profile_image_url IS NULL
+        OR (profile_image_url = trim(profile_image_url) AND length(profile_image_url) BETWEEN 1 AND 2048)
+    )
+) STRICT;
+
+CREATE TABLE local_credentials (
+    user_id                TEXT PRIMARY KEY
+,   login_id               TEXT NOT NULL
+,   normalized_login_id    TEXT NOT NULL
+,   email                  TEXT NOT NULL
+,   normalized_email       TEXT NOT NULL
+,   password_hash          TEXT NOT NULL
+,   failed_login_count     INTEGER NOT NULL DEFAULT 0
+,   locked_until           TEXT
+,   email_verified_at      TEXT
+,   password_changed_at    TEXT NOT NULL
+,   last_login_at          TEXT
+,   lock_version           INTEGER NOT NULL DEFAULT 0
+,   created_at             TEXT NOT NULL
+,   updated_at             TEXT NOT NULL
+,   CONSTRAINT fk_local_credentials_user FOREIGN KEY (user_id)
+        REFERENCES users (user_id) ON DELETE RESTRICT
+,   CHECK (login_id = trim(login_id) AND length(login_id) BETWEEN 4 AND 50)
+,   CHECK (substr(login_id, 1, 1) GLOB '[A-Za-z0-9]')
+,   CHECK (login_id NOT GLOB '*[^A-Za-z0-9._-]*')
+,   CHECK (normalized_login_id = lower(login_id))
+,   CHECK (email = trim(email) AND length(email) BETWEEN 3 AND 320)
+,   CHECK (normalized_email = trim(normalized_email) AND length(normalized_email) BETWEEN 3 AND 320)
+,   CHECK (password_hash = trim(password_hash) AND length(password_hash) BETWEEN 20 AND 512)
+,   CHECK (failed_login_count >= 0)
+,   CHECK (lock_version >= 0)
+) STRICT;
+
+CREATE UNIQUE INDEX uq_local_credentials_normalized_login_id
+    ON local_credentials (normalized_login_id);
+
+CREATE UNIQUE INDEX uq_local_credentials_normalized_email
+    ON local_credentials (normalized_email);
+
+CREATE TABLE auth_refresh_tokens (
+    refresh_token_id       TEXT PRIMARY KEY
+,   user_id                TEXT NOT NULL
+,   token_hash             BLOB NOT NULL UNIQUE
+,   expires_at             TEXT NOT NULL
+,   last_used_at           TEXT
+,   revoked_at             TEXT
+,   replaced_by_token_id   TEXT
+,   lock_version           INTEGER NOT NULL DEFAULT 0
+,   created_at             TEXT NOT NULL
+,   CONSTRAINT fk_auth_refresh_tokens_user FOREIGN KEY (user_id)
+        REFERENCES users (user_id) ON DELETE RESTRICT
+,   CONSTRAINT fk_auth_refresh_tokens_replacement FOREIGN KEY (replaced_by_token_id)
+        REFERENCES auth_refresh_tokens (refresh_token_id) ON DELETE RESTRICT
+,   CHECK (
+        length(refresh_token_id) = 36
+        AND refresh_token_id = lower(refresh_token_id)
+        AND substr(refresh_token_id, 9, 1) = '-'
+        AND substr(refresh_token_id, 14, 1) = '-'
+        AND substr(refresh_token_id, 19, 1) = '-'
+        AND substr(refresh_token_id, 24, 1) = '-'
+        AND length(replace(refresh_token_id, '-', '')) = 32
+        AND replace(refresh_token_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+,   CHECK (length(token_hash) = 32)
+,   CHECK (expires_at > created_at)
+,   CHECK (
+        replaced_by_token_id IS NULL
+        OR (replaced_by_token_id <> refresh_token_id AND revoked_at IS NOT NULL)
+    )
+,   CHECK (lock_version >= 0)
+) STRICT;
+
+CREATE INDEX ix_auth_refresh_tokens_user_active
+    ON auth_refresh_tokens (user_id, expires_at, refresh_token_id)
+    WHERE revoked_at IS NULL;

package/dist/db/migrations/003_projects.sql

@@ -0,0 +1,62 @@
+CREATE TABLE projects (
+    project_id TEXT PRIMARY KEY
+        CHECK (
+            length(project_id) = 36
+            AND substr(project_id, 9, 1) = '-'
+            AND substr(project_id, 14, 1) = '-'
+            AND substr(project_id, 19, 1) = '-'
+            AND substr(project_id, 24, 1) = '-'
+            AND project_id = lower(project_id)
+            AND length(replace(project_id, '-', '')) = 32
+            AND replace(project_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+        ),
+    creator_id TEXT NOT NULL,
+    status_code INTEGER NOT NULL DEFAULT 1
+        CHECK (status_code IN (1, 2)),
+    project_name TEXT NOT NULL
+        CHECK (
+            length(project_name) BETWEEN 1 AND 100
+            AND project_name = trim(project_name)
+        ),
+    lock_version INTEGER NOT NULL DEFAULT 0
+        CHECK (lock_version >= 0),
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    CONSTRAINT fk_projects_creator
+        FOREIGN KEY (creator_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT
+) STRICT;
+
+CREATE INDEX ix_projects_status_created_at
+    ON projects (status_code, created_at DESC, project_id DESC);
+
+CREATE INDEX ix_projects_creator_created_at
+    ON projects (creator_id, created_at DESC, project_id DESC);
+
+CREATE TABLE project_members (
+    project_id TEXT NOT NULL,
+    user_id TEXT NOT NULL,
+    role_code INTEGER NOT NULL
+        CHECK (role_code IN (1, 2)),
+    added_by TEXT NOT NULL,
+    lock_version INTEGER NOT NULL DEFAULT 0
+        CHECK (lock_version >= 0),
+    joined_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    CONSTRAINT pk_project_members PRIMARY KEY (project_id, user_id),
+    CONSTRAINT fk_project_members_project
+        FOREIGN KEY (project_id) REFERENCES projects(project_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_project_members_user
+        FOREIGN KEY (user_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_project_members_added_by
+        FOREIGN KEY (added_by) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT
+) STRICT;
+
+CREATE INDEX ix_project_members_user_joined_at
+    ON project_members (user_id, joined_at DESC, project_id DESC);
+
+CREATE INDEX ix_project_members_project_role
+    ON project_members (project_id, role_code, user_id);