@krantho/persistence-sqlite 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Descoped
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/auth-adapter.d.ts

@@ -0,0 +1,23 @@
+import type { CreateUserData, IAuthAdapter, RefreshTokenRecord, Role, UpdateUserData, UserPermission, UserRecord } from '@krantho/persistence';
+import type Database from 'better-sqlite3';
+/** SQLite implementation of the auth adapter */
+export declare class SqliteAuthAdapter implements IAuthAdapter {
+    private readonly db;
+    constructor(db: Database.Database);
+    createUser(data: CreateUserData): Promise<UserRecord>;
+    getUser(id: string): Promise<UserRecord | null>;
+    getUserByEmail(email: string): Promise<UserRecord | null>;
+    getUserByOidc(issuer: string, subject: string): Promise<UserRecord | null>;
+    listUsers(): Promise<UserRecord[]>;
+    updateUser(id: string, data: UpdateUserData): Promise<UserRecord | null>;
+    deleteUser(id: string): Promise<boolean>;
+    createRefreshToken(userId: string, tokenHash: string, expiresAt: string): Promise<string>;
+    getRefreshTokenByHash(tokenHash: string): Promise<RefreshTokenRecord | null>;
+    deleteRefreshToken(id: string): Promise<void>;
+    deleteUserRefreshTokens(userId: string): Promise<void>;
+    deleteExpiredRefreshTokens(): Promise<number>;
+    getUserPermissions(userId: string): Promise<UserPermission[]>;
+    setUserPermission(userId: string, collection: string, role: Role): Promise<void>;
+    deleteUserPermission(userId: string, collection: string): Promise<boolean>;
+}
+//# sourceMappingURL=auth-adapter.d.ts.map

package/dist/auth-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.d.ts","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,IAAI,EACJ,cAAc,EACd,cAAc,EACd,UAAU,EACX,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAE1C,gDAAgD;AAChD,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAmB;gBAE1B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAM3B,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAkCrD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAO/C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAOzD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAO1E,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAOlC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAyCxE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUzF,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAe5E,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAS7C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAY7D,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAShF,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAMjF"}

package/dist/auth-adapter.js

@@ -0,0 +1,159 @@
+import { randomUUID } from 'node:crypto';
+/** SQLite implementation of the auth adapter */
+export class SqliteAuthAdapter {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    // --- Users ---
+    async createUser(data) {
+        const id = randomUUID();
+        const now = new Date().toISOString();
+        const roles = JSON.stringify(data.roles);
+        this.db
+            .prepare(`INSERT INTO users (id, email, name, roles, oidc_subject, oidc_issuer, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(id, data.email, data.name, roles, data.oidcSubject ?? null, data.oidcIssuer ?? null, now, now);
+        return {
+            id,
+            email: data.email,
+            name: data.name,
+            roles: data.roles,
+            oidcSubject: data.oidcSubject ?? null,
+            oidcIssuer: data.oidcIssuer ?? null,
+            isActive: true,
+            createdAt: now,
+            updatedAt: now,
+        };
+    }
+    async getUser(id) {
+        const row = this.db.prepare('SELECT * FROM users WHERE id = ?').get(id);
+        return row ? rowToUser(row) : null;
+    }
+    async getUserByEmail(email) {
+        const row = this.db.prepare('SELECT * FROM users WHERE email = ?').get(email);
+        return row ? rowToUser(row) : null;
+    }
+    async getUserByOidc(issuer, subject) {
+        const row = this.db
+            .prepare('SELECT * FROM users WHERE oidc_issuer = ? AND oidc_subject = ?')
+            .get(issuer, subject);
+        return row ? rowToUser(row) : null;
+    }
+    async listUsers() {
+        const rows = this.db
+            .prepare('SELECT * FROM users ORDER BY created_at DESC')
+            .all();
+        return rows.map(rowToUser);
+    }
+    async updateUser(id, data) {
+        const existing = this.db.prepare('SELECT * FROM users WHERE id = ?').get(id);
+        if (!existing)
+            return null;
+        const now = new Date().toISOString();
+        const updates = ['updated_at = ?'];
+        const params = [now];
+        if (data.email !== undefined) {
+            updates.push('email = ?');
+            params.push(data.email);
+        }
+        if (data.name !== undefined) {
+            updates.push('name = ?');
+            params.push(data.name);
+        }
+        if (data.roles !== undefined) {
+            updates.push('roles = ?');
+            params.push(JSON.stringify(data.roles));
+        }
+        if (data.isActive !== undefined) {
+            updates.push('is_active = ?');
+            params.push(data.isActive ? 1 : 0);
+        }
+        if (data.oidcSubject !== undefined) {
+            updates.push('oidc_subject = ?');
+            params.push(data.oidcSubject);
+        }
+        if (data.oidcIssuer !== undefined) {
+            updates.push('oidc_issuer = ?');
+            params.push(data.oidcIssuer);
+        }
+        params.push(id);
+        this.db.prepare(`UPDATE users SET ${updates.join(', ')} WHERE id = ?`).run(...params);
+        return this.getUser(id);
+    }
+    async deleteUser(id) {
+        const result = this.db.prepare('DELETE FROM users WHERE id = ?').run(id);
+        return result.changes > 0;
+    }
+    // --- Refresh Tokens ---
+    async createRefreshToken(userId, tokenHash, expiresAt) {
+        const id = randomUUID();
+        this.db
+            .prepare('INSERT INTO refresh_tokens (id, user_id, token_hash, expires_at) VALUES (?, ?, ?, ?)')
+            .run(id, userId, tokenHash, expiresAt);
+        return id;
+    }
+    async getRefreshTokenByHash(tokenHash) {
+        const row = this.db
+            .prepare('SELECT * FROM refresh_tokens WHERE token_hash = ?')
+            .get(tokenHash);
+        if (!row)
+            return null;
+        return {
+            id: row.id,
+            userId: row.user_id,
+            tokenHash: row.token_hash,
+            expiresAt: row.expires_at,
+            createdAt: row.created_at,
+        };
+    }
+    async deleteRefreshToken(id) {
+        this.db.prepare('DELETE FROM refresh_tokens WHERE id = ?').run(id);
+    }
+    async deleteUserRefreshTokens(userId) {
+        this.db.prepare('DELETE FROM refresh_tokens WHERE user_id = ?').run(userId);
+    }
+    async deleteExpiredRefreshTokens() {
+        const result = this.db
+            .prepare('DELETE FROM refresh_tokens WHERE expires_at < ?')
+            .run(new Date().toISOString());
+        return result.changes;
+    }
+    // --- Per-Collection Permissions ---
+    async getUserPermissions(userId) {
+        const rows = this.db
+            .prepare('SELECT user_id, collection, role FROM user_permissions WHERE user_id = ?')
+            .all(userId);
+        return rows.map((r) => ({
+            userId: r.user_id,
+            collection: r.collection,
+            role: r.role,
+        }));
+    }
+    async setUserPermission(userId, collection, role) {
+        this.db
+            .prepare(`INSERT INTO user_permissions (user_id, collection, role) VALUES (?, ?, ?)
+         ON CONFLICT (user_id, collection) DO UPDATE SET role = excluded.role`)
+            .run(userId, collection, role);
+    }
+    async deleteUserPermission(userId, collection) {
+        const result = this.db
+            .prepare('DELETE FROM user_permissions WHERE user_id = ? AND collection = ?')
+            .run(userId, collection);
+        return result.changes > 0;
+    }
+}
+function rowToUser(row) {
+    return {
+        id: row.id,
+        email: row.email,
+        name: row.name,
+        roles: JSON.parse(row.roles),
+        oidcSubject: row.oidc_subject,
+        oidcIssuer: row.oidc_issuer,
+        isActive: row.is_active === 1,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+//# sourceMappingURL=auth-adapter.js.map

package/dist/auth-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-adapter.js","sourceRoot":"","sources":["../src/auth-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAYxC,gDAAgD;AAChD,MAAM,OAAO,iBAAiB;IACX,EAAE,CAAmB;IAEtC,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,gBAAgB;IAEhB,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAExC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;yCACiC,CAClC;aACA,GAAG,CACF,EAAE,EACF,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,IAAI,EACT,KAAK,EACL,IAAI,CAAC,WAAW,IAAI,IAAI,EACxB,IAAI,CAAC,UAAU,IAAI,IAAI,EACvB,GAAG,EACH,GAAG,CACJ,CAAA;QAEH,OAAO;YACL,EAAE;YACF,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAA;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAEzD,CAAA;QACb,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,KAAK,CAE/D,CAAA;QACb,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,OAAe;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,gEAAgE,CAAC;aACzE,GAAG,CAAC,MAAM,EAAE,OAAO,CAA8B,CAAA;QACpD,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,EAAqB,CAAA;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,IAAoB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAE9D,CAAA;QACb,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAE1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,OAAO,GAAa,CAAC,gBAAgB,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAc,CAAC,GAAG,CAAC,CAAA;QAE/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAA;QAErF,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,SAAiB,EAAE,SAAiB;QAC3E,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,sFAAsF,CACvF;aACA,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACxC,OAAO,EAAE,CAAA;IACX,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,mDAAmD,CAAC;aAC5D,GAAG,CAAC,SAAS,CAAiC,CAAA;QAEjD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAc;QAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,0BAA0B;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QAChC,OAAO,MAAM,CAAC,OAAO,CAAA;IACvB,CAAC;IAED,qCAAqC;IAErC,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,0EAA0E,CAAC;aACnF,GAAG,CAAC,MAAM,CAAiE,CAAA;QAE9E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,CAAC,CAAC,IAAY;SACrB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,UAAkB,EAAE,IAAU;QACpE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;8EACsE,CACvE;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,UAAkB;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAC1B,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IAC3B,CAAC;CACF;AAwBD,SAAS,SAAS,CAAC,GAAkB;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAW;QACtC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS,KAAK,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC"}

package/dist/checkpoints.d.ts

@@ -0,0 +1,20 @@
+import type { CheckpointInfo, CheckpointTrigger, ICheckpointAdapter } from '@krantho/persistence';
+import type Database from 'better-sqlite3';
+/**
+ * SQLite checkpoint adapter.
+ *
+ * Checkpoints are lightweight timestamp markers. Creating a checkpoint
+ * records the current timestamp. Restoring a checkpoint rewinds all
+ * versioned tables to their state at that timestamp by flipping
+ * `is_current` flags.
+ */
+export declare class SqliteCheckpointAdapter implements ICheckpointAdapter {
+    private readonly db;
+    constructor(db: Database.Database);
+    createCheckpoint(name?: string, trigger?: CheckpointTrigger): Promise<CheckpointInfo>;
+    listCheckpoints(): Promise<CheckpointInfo[]>;
+    getCheckpoint(version: number): Promise<CheckpointInfo | null>;
+    restoreCheckpoint(version: number): Promise<CheckpointInfo>;
+    deleteCheckpoint(version: number): Promise<boolean>;
+}
+//# sourceMappingURL=checkpoints.d.ts.map

package/dist/checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.d.ts","sourceRoot":"","sources":["../src/checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACjG,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAoB1C;;;;;;;GAOG;AACH,qBAAa,uBAAwB,YAAW,kBAAkB;IAChE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAmB;gBAE1B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAI3B,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BrF,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAO5C,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAO9D,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAsE3D,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI1D"}

package/dist/checkpoints.js

@@ -0,0 +1,119 @@
+function rowToCheckpointInfo(row) {
+    return {
+        id: row.id,
+        version: row.version,
+        name: row.name,
+        trigger: row.trigger,
+        createdAt: row.created_at,
+    };
+}
+/**
+ * SQLite checkpoint adapter.
+ *
+ * Checkpoints are lightweight timestamp markers. Creating a checkpoint
+ * records the current timestamp. Restoring a checkpoint rewinds all
+ * versioned tables to their state at that timestamp by flipping
+ * `is_current` flags.
+ */
+export class SqliteCheckpointAdapter {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async createCheckpoint(name, trigger) {
+        const now = new Date().toISOString();
+        const triggerValue = trigger ?? 'manual';
+        const row = this.db.transaction(() => {
+            // Allocate next version number
+            const versionRow = this.db
+                .prepare('UPDATE checkpoint_counter SET next = next + 1 RETURNING next - 1 as version')
+                .get();
+            const insertRow = this.db
+                .prepare('INSERT INTO checkpoints (version, name, trigger, created_at) VALUES (?, ?, ?, ?) RETURNING id')
+                .get(versionRow.version, name ?? null, triggerValue, now);
+            return {
+                id: insertRow.id,
+                version: versionRow.version,
+            };
+        })();
+        return {
+            id: row.id,
+            version: row.version,
+            name: name ?? null,
+            trigger: triggerValue,
+            createdAt: now,
+        };
+    }
+    async listCheckpoints() {
+        const rows = this.db
+            .prepare('SELECT * FROM checkpoints ORDER BY version DESC')
+            .all();
+        return rows.map(rowToCheckpointInfo);
+    }
+    async getCheckpoint(version) {
+        const row = this.db.prepare('SELECT * FROM checkpoints WHERE version = ?').get(version);
+        return row ? rowToCheckpointInfo(row) : null;
+    }
+    async restoreCheckpoint(version) {
+        const checkpoint = await this.getCheckpoint(version);
+        if (!checkpoint) {
+            throw new Error(`Checkpoint version ${version} not found`);
+        }
+        // Create pre-restore checkpoint first
+        await this.createCheckpoint(`pre-restore-v${version}`, 'pre-restore');
+        const timestamp = checkpoint.createdAt;
+        // Restore all versioned tables to their state at checkpoint time
+        this.db.transaction(() => {
+            // --- Content ---
+            // Clear all current flags
+            this.db.exec('UPDATE content SET is_current = 0 WHERE is_current = 1');
+            // Re-activate the latest version of each entity that existed at checkpoint time
+            this.db
+                .prepare(`UPDATE content SET is_current = 1
+           WHERE id IN (
+             SELECT id FROM (
+               SELECT id, collection, slug, locale, created_at,
+                 ROW_NUMBER() OVER (PARTITION BY collection, slug, locale ORDER BY version DESC) as rn
+               FROM content
+               WHERE created_at <= ?
+                 AND (deleted_at IS NULL OR deleted_at > ?)
+             ) WHERE rn = 1
+           )`)
+                .run(timestamp, timestamp);
+            // --- Collection schemas ---
+            this.db.exec('UPDATE collection_schemas SET is_current = 0 WHERE is_current = 1');
+            this.db
+                .prepare(`UPDATE collection_schemas SET is_current = 1
+           WHERE row_id IN (
+             SELECT row_id FROM (
+               SELECT row_id, collection,
+                 ROW_NUMBER() OVER (PARTITION BY collection ORDER BY version DESC) as rn
+               FROM collection_schemas
+               WHERE created_at <= ?
+                 AND (deleted_at IS NULL OR deleted_at > ?)
+             ) WHERE rn = 1
+           )`)
+                .run(timestamp, timestamp);
+            // --- Media ---
+            this.db.exec('UPDATE media SET is_current = 0 WHERE is_current = 1');
+            this.db
+                .prepare(`UPDATE media SET is_current = 1
+           WHERE row_id IN (
+             SELECT row_id FROM (
+               SELECT row_id, id,
+                 ROW_NUMBER() OVER (PARTITION BY id ORDER BY version DESC) as rn
+               FROM media
+               WHERE created_at <= ?
+                 AND (deleted_at IS NULL OR deleted_at > ?)
+             ) WHERE rn = 1
+           )`)
+                .run(timestamp, timestamp);
+        })();
+        return checkpoint;
+    }
+    async deleteCheckpoint(version) {
+        const result = this.db.prepare('DELETE FROM checkpoints WHERE version = ?').run(version);
+        return result.changes > 0;
+    }
+}
+//# sourceMappingURL=checkpoints.js.map

package/dist/checkpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoints.js","sourceRoot":"","sources":["../src/checkpoints.ts"],"names":[],"mappings":"AAWA,SAAS,mBAAmB,CAAC,GAAkB;IAC7C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAA4B;QACzC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,EAAE,CAAmB;IAEtC,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAa,EAAE,OAA2B;QAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,YAAY,GAAG,OAAO,IAAI,QAAQ,CAAA;QAExC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACnC,+BAA+B;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;iBACvB,OAAO,CAAC,6EAA6E,CAAC;iBACtF,GAAG,EAAyB,CAAA;YAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE;iBACtB,OAAO,CACN,+FAA+F,CAChG;iBACA,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,YAAY,EAAE,GAAG,CAAmB,CAAA;YAE7E,OAAO;gBACL,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;aAC5B,CAAA;QACH,CAAC,CAAC,EAAE,CAAA;QAEJ,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,IAAI,IAAI,IAAI;YAClB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,GAAG;SACf,CAAA;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,EAAqB,CAAA;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,OAAO,CAEzE,CAAA;QACb,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,YAAY,CAAC,CAAA;QAC5D,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,OAAO,EAAE,EAAE,aAAa,CAAC,CAAA;QAErE,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAA;QAEtC,iEAAiE;QACjE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,kBAAkB;YAClB,0BAA0B;YAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;YACtE,gFAAgF;YAChF,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;;;;;;;;aASG,CACJ;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAE5B,6BAA6B;YAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAA;YACjF,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;;;;;;;;aASG,CACJ;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAE5B,gBAAgB;YAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAA;YACpE,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;;;;;;;;aASG,CACJ;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAC9B,CAAC,CAAC,EAAE,CAAA;QAEJ,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACxF,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IAC3B,CAAC;CACF"}

package/dist/connection.d.ts

@@ -0,0 +1,29 @@
+import Database from 'better-sqlite3';
+/** Connection tuning applied by {@link openDatabase} */
+export interface SqliteConnectionOptions {
+    /** How long a statement waits for another connection's write lock before failing */
+    busyTimeoutMs: number;
+    /** Attempts to switch a brand-new database file into WAL mode */
+    walRetries: number;
+    /** Pause between WAL switch attempts */
+    walRetryDelayMs: number;
+}
+/**
+ * Tuning used when a caller supplies none.
+ *
+ * A deployment sets these through `persistence.sqlite` in the krantho
+ * configuration tree; the server passes the resolved values down. These
+ * literals are the standalone-library fallback and mirror that tree's
+ * defaults.
+ */
+export declare const DEFAULT_SQLITE_CONNECTION_OPTIONS: SqliteConnectionOptions;
+/**
+ * Open a connection to a SQLite database file.
+ *
+ * Several processes hold the same file open in normal operation: a server, a CLI,
+ * a framework that spawns one build worker per core. Opening is therefore written
+ * to tolerate a concurrent opener — the busy timeout is set before anything else
+ * so later statements wait for a writer rather than failing outright.
+ */
+export declare function openDatabase(dbPath: string, options?: Partial<SqliteConnectionOptions>): Database.Database;
+//# sourceMappingURL=connection.d.ts.map

package/dist/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,aAAa,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAA;IAClB,wCAAwC;IACxC,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAE,uBAI/C,CAAA;AAkDD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC7C,QAAQ,CAAC,QAAQ,CAWnB"}

package/dist/connection.js

@@ -0,0 +1,77 @@
+import Database from 'better-sqlite3';
+/**
+ * Tuning used when a caller supplies none.
+ *
+ * A deployment sets these through `persistence.sqlite` in the krantho
+ * configuration tree; the server passes the resolved values down. These
+ * literals are the standalone-library fallback and mirror that tree's
+ * defaults.
+ */
+export const DEFAULT_SQLITE_CONNECTION_OPTIONS = {
+    busyTimeoutMs: 10000,
+    walRetries: 10,
+    walRetryDelayMs: 50,
+};
+function isBusyError(err) {
+    return (typeof err === 'object' && err !== null && err.code === 'SQLITE_BUSY');
+}
+/** Block the thread. better-sqlite3 is synchronous, so there is nothing to await. */
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+/**
+ * Put the connection into WAL mode.
+ *
+ * Changing the journal mode needs an exclusive lock, and SQLite does not run the
+ * busy handler for it — a `busy_timeout` does not make this particular statement
+ * wait. Read the mode first so that only a connection finding a brand-new file
+ * attempts the write at all; every connection opened after the file is already in
+ * WAL skips it. The retry covers the remaining case of several connections opening
+ * the same new file at the same moment.
+ */
+function enableWalMode(db, retries, retryDelayMs) {
+    for (let attempt = 1; attempt <= retries; attempt++) {
+        if (db.pragma('journal_mode', { simple: true }) === 'wal')
+            return;
+        try {
+            db.pragma('journal_mode = WAL');
+            return;
+        }
+        catch (err) {
+            if (!isBusyError(err) || attempt === retries)
+                throw err;
+            sleepSync(retryDelayMs);
+        }
+    }
+}
+/**
+ * Register `kr_lower`, the case fold content queries match with.
+ *
+ * SQLite's `lower()` folds ASCII only. Folding with JavaScript's `toLowerCase`, as the
+ * query's needle is folded, makes "ørret" find "Ørret". Functions belong to a connection,
+ * so every connection the adapter opens registers it here.
+ */
+function registerFold(db) {
+    db.function('kr_lower', { deterministic: true }, (text) => typeof text === 'string' ? text.toLowerCase() : text);
+}
+/**
+ * Open a connection to a SQLite database file.
+ *
+ * Several processes hold the same file open in normal operation: a server, a CLI,
+ * a framework that spawns one build worker per core. Opening is therefore written
+ * to tolerate a concurrent opener — the busy timeout is set before anything else
+ * so later statements wait for a writer rather than failing outright.
+ */
+export function openDatabase(dbPath, options = {}) {
+    const { busyTimeoutMs, walRetries, walRetryDelayMs } = {
+        ...DEFAULT_SQLITE_CONNECTION_OPTIONS,
+        ...options,
+    };
+    const db = new Database(dbPath);
+    db.pragma(`busy_timeout = ${busyTimeoutMs}`);
+    enableWalMode(db, walRetries, walRetryDelayMs);
+    db.pragma('foreign_keys = ON');
+    registerFold(db);
+    return db;
+}
+//# sourceMappingURL=connection.js.map

package/dist/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAYrC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4B;IACxE,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,EAAE;CACpB,CAAA;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAAyB,CAAC,IAAI,KAAK,aAAa,CAC7F,CAAA;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,EAAqB,EAAE,OAAe,EAAE,YAAoB;IACjF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK;YAAE,OAAM;QAEjE,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;YAC/B,OAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,OAAO;gBAAE,MAAM,GAAG,CAAA;YACvD,SAAS,CAAC,YAAY,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,EAAqB;IACzC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CACxD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CACrD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,UAA4C,EAAE;IAE9C,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG;QACrD,GAAG,iCAAiC;QACpC,GAAG,OAAO;KACX,CAAA;IACD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,EAAE,CAAC,MAAM,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAA;IAC5C,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;IAC9C,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IAC9B,YAAY,CAAC,EAAE,CAAC,CAAA;IAChB,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/content-migration.d.ts

@@ -0,0 +1,18 @@
+import type { ConflictResolution, ContentConflict, ContentManifestRecord, IContentMigrationAdapter } from '@krantho/persistence';
+import type Database from 'better-sqlite3';
+/** SQLite content migration adapter */
+export declare class SqliteContentMigrationAdapter implements IContentMigrationAdapter {
+    private readonly db;
+    constructor(db: Database.Database);
+    getContentManifestVersion(): Promise<number | null>;
+    getContentManifest(): Promise<ContentManifestRecord | null>;
+    saveContentManifest(manifest: ContentManifestRecord): Promise<void>;
+    listConflicts(): Promise<ContentConflict[]>;
+    resolveConflict(conflictId: number, resolution: ConflictResolution): Promise<boolean>;
+    recordConflict(conflict: Omit<ContentConflict, 'id' | 'resolved' | 'resolvedAt' | 'resolution'>): Promise<void>;
+}
+/** Compute SHA-256 checksum of content string */
+export declare function computeContentChecksum(content: string): string;
+export type { MigrationDecision } from '@krantho/persistence';
+export { decideMigration } from '@krantho/persistence';
+//# sourceMappingURL=content-migration.d.ts.map

package/dist/content-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-migration.d.ts","sourceRoot":"","sources":["../src/content-migration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAE1C,uCAAuC;AACvC,qBAAa,6BAA8B,YAAW,wBAAwB;IAC5E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAmB;gBAE1B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAI3B,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQnD,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IA0B3D,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAanE,aAAa,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAgC3C,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUrF,cAAc,CAClB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GAC/E,OAAO,CAAC,IAAI,CAAC;CAcjB;AAED,iDAAiD;AACjD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/content-migration.js

@@ -0,0 +1,68 @@
+import { createHash } from 'node:crypto';
+/** SQLite content migration adapter */
+export class SqliteContentMigrationAdapter {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getContentManifestVersion() {
+        const row = this.db
+            .prepare('SELECT MAX(repo_version) as max_version FROM content_manifest')
+            .get();
+        return row?.max_version ?? null;
+    }
+    async getContentManifest() {
+        const row = this.db
+            .prepare('SELECT id, repo_version, repo_commit, imported_at, file_checksums FROM content_manifest ORDER BY id DESC LIMIT 1')
+            .get();
+        if (!row)
+            return null;
+        return {
+            id: row.id,
+            repoVersion: row.repo_version,
+            repoCommit: row.repo_commit,
+            importedAt: row.imported_at,
+            fileChecksums: JSON.parse(row.file_checksums),
+        };
+    }
+    async saveContentManifest(manifest) {
+        this.db
+            .prepare('INSERT INTO content_manifest (repo_version, repo_commit, imported_at, file_checksums) VALUES (?, ?, ?, ?)')
+            .run(manifest.repoVersion, manifest.repoCommit, manifest.importedAt, JSON.stringify(manifest.fileChecksums));
+    }
+    async listConflicts() {
+        const rows = this.db
+            .prepare('SELECT id, migration_id, collection, slug, locale, repo_checksum, db_checksum, resolved, resolved_at, resolution FROM content_migration_conflicts WHERE resolved = 0 ORDER BY id DESC')
+            .all();
+        return rows.map((r) => ({
+            id: r.id,
+            migrationId: r.migration_id,
+            collection: r.collection,
+            slug: r.slug,
+            locale: r.locale,
+            repoChecksum: r.repo_checksum,
+            dbChecksum: r.db_checksum,
+            resolved: r.resolved === 1,
+            resolvedAt: r.resolved_at,
+            resolution: r.resolution,
+        }));
+    }
+    async resolveConflict(conflictId, resolution) {
+        const result = this.db
+            .prepare('UPDATE content_migration_conflicts SET resolved = 1, resolved_at = ?, resolution = ? WHERE id = ? AND resolved = 0')
+            .run(new Date().toISOString(), resolution, conflictId);
+        return result.changes > 0;
+    }
+    async recordConflict(conflict) {
+        this.db
+            .prepare('INSERT INTO content_migration_conflicts (migration_id, collection, slug, locale, repo_checksum, db_checksum) VALUES (?, ?, ?, ?, ?, ?)')
+            .run(conflict.migrationId, conflict.collection, conflict.slug, conflict.locale, conflict.repoChecksum, conflict.dbChecksum);
+    }
+}
+/** Compute SHA-256 checksum of content string */
+export function computeContentChecksum(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+// Re-export shared content migration utilities for backward compatibility
+export { decideMigration } from '@krantho/persistence';
+//# sourceMappingURL=content-migration.js.map

package/dist/content-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-migration.js","sourceRoot":"","sources":["../src/content-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AASxC,uCAAuC;AACvC,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAmB;IAEtC,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,yBAAyB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,EAAgD,CAAA;QAEtD,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,kHAAkH,CACnH;aACA,GAAG,EAQO,CAAA;QAEb,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QAErB,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAA2B;SACxE,CAAA;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAA+B;QACvD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,2GAA2G,CAC5G;aACA,GAAG,CACF,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,EACnB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CACvC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,uLAAuL,CACxL;aACA,GAAG,EAWJ,CAAA;QAEF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,UAAU,EAAE,CAAC,CAAC,UAAuC;SACtD,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,UAA8B;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN,oHAAoH,CACrH;aACA,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAExD,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAgF;QAEhF,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,wIAAwI,CACzI;aACA,GAAG,CACF,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,UAAU,CACpB,CAAA;IACL,CAAC;CACF;AAED,iDAAiD;AACjD,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC;AAGD,0EAA0E;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/content-query.d.ts

@@ -0,0 +1,16 @@
+import type { ContentQuery, QueryPage, QueryProjection } from '@krantho/persistence';
+import type Database from 'better-sqlite3';
+/**
+ * Build the one statement a content query runs: the projection's columns, the rows of
+ * its state, the text match, the order and a page of `limit + 1` rows.
+ *
+ * Every name in the SQL is a whitelisted column; collections, locale, match text and
+ * paging are parameters.
+ */
+export declare function buildContentQuery(spec: ContentQuery): {
+    sql: string;
+    params: unknown[];
+};
+/** Run a content query: one statement, one page */
+export declare function runContentQuery<P extends QueryProjection>(db: Database.Database, spec: ContentQuery<P>): QueryPage<P>;
+//# sourceMappingURL=content-query.d.ts.map

package/dist/content-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-query.d.ts","sourceRoot":"","sources":["../src/content-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAGZ,SAAS,EACT,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAmG1C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CA+BxF;AAaD,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,CAAC,SAAS,eAAe,EACvD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GACpB,SAAS,CAAC,CAAC,CAAC,CAWd"}