@lemoncat7/dsh-partner 1.16.2 → 2.0.0

package/lib/storage/migrations/registry.js

@@ -0,0 +1,40 @@
+export function migrationPath(steps, from, to) {
+    if (![from, to].every(version => Number.isSafeInteger(version) && version >= 0))
+        throw Error('迁移版本必须是非负整数');
+    if (from > to)
+        throw Error('不支持自动降级数据目录');
+    const bySource = new Map();
+    const ids = new Set();
+    for (const step of steps) {
+        if (!step.id || ids.has(step.id) || bySource.has(step.from))
+            throw Error('迁移版本注册重复');
+        if (!Number.isSafeInteger(step.from) || step.from < 0 || step.to !== step.from + 1)
+            throw Error('迁移必须逐版本递增');
+        ids.add(step.id);
+        bySource.set(step.from, step);
+    }
+    const result = [];
+    for (let version = from; version < to; version++) {
+        const step = bySource.get(version);
+        if (!step)
+            throw Error(`缺少 v${version} → v${version + 1} 迁移脚本`);
+        result.push(step);
+    }
+    return result;
+}
+/** The caller must hold its runtime write gate throughout. On any error stop:
+ * reopen the persisted version/journal before retrying (including commit errors).
+ * This runner does not guess whether a failed commit reached durable storage.
+ */
+export async function runMigrationPath(steps, from, to, context, commitVersion) {
+    const path = migrationPath(steps, from, to);
+    // Refuse incomplete chains before touching even the first step.
+    if (path.some(step => !step.execute || !step.verify))
+        throw Error('迁移链尚未全部实现，拒绝执行');
+    for (const step of path) {
+        await step.execute(context);
+        await step.verify(context);
+        await commitVersion(step.from, step.to, step.id);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/lib/storage/migrations/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/storage/migrations/registry.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,aAAa,CAAU,KAA2C,EAAE,IAAY,EAAE,EAAU;IAC1G,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3G,IAAI,IAAI,GAAG,EAAE;QAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAA;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;QAC5G,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,MAAM,GAAgC,EAAE,CAAA;IAC9C,KAAK,IAAI,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,OAAO,OAAO,OAAO,OAAO,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAU,KAA2C,EAAE,IAAY,EAAE,EAAU,EAAE,OAAgB,EAAE,aAAqF;IAC5N,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC3C,gEAAgE;IAChE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,OAAQ,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,IAAI,CAAC,MAAO,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAClD,CAAC;AACH,CAAC"}

package/lib/storage/migrations/v0-to-v1.d.ts

@@ -0,0 +1,5 @@
+import type { StorageMigration } from './registry.js';
+import { type LayoutMigrationContext } from '../migrate-layout.js';
+/** Owns only the v0 -> v1 transition. Later layouts get separate modules. */
+export declare const v0ToV1: StorageMigration<LayoutMigrationContext>;
+//# sourceMappingURL=v0-to-v1.d.ts.map

package/lib/storage/migrations/v0-to-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v0-to-v1.d.ts","sourceRoot":"","sources":["../../../src/storage/migrations/v0-to-v1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAwC,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAExG,6EAA6E;AAC7E,eAAO,MAAM,MAAM,EAAE,gBAAgB,CAAC,sBAAsB,CAO3D,CAAA"}

package/lib/storage/migrations/v0-to-v1.js

@@ -0,0 +1,11 @@
+import { migrateLayout, verifyInstalledLayout } from '../migrate-layout.js';
+/** Owns only the v0 -> v1 transition. Later layouts get separate modules. */
+export const v0ToV1 = {
+    id: 'v0-to-v1-private-public-layout',
+    from: 0,
+    to: 1,
+    title: '公共数据归档与伙伴 .partner 私有目录',
+    execute: async (context) => { context.result = await migrateLayout(context.statePath, context.root, context.state); },
+    verify: verifyInstalledLayout,
+};
+//# sourceMappingURL=v0-to-v1.js.map

package/lib/storage/migrations/v0-to-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v0-to-v1.js","sourceRoot":"","sources":["../../../src/storage/migrations/v0-to-v1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAA+B,MAAM,sBAAsB,CAAA;AAExG,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAA6C;IAC9D,EAAE,EAAE,gCAAgC;IACpC,IAAI,EAAE,CAAC;IACP,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE,GAAG,OAAO,CAAC,MAAM,GAAC,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;IAC9G,MAAM,EAAE,qBAAqB;CAC9B,CAAA"}

package/lib/storage/notice.d.ts

@@ -0,0 +1,4 @@
+import type { PartnerInboxStore } from '../notifications/store.js';
+/** Startup-only, local system notice. No model, channel delivery or directory scan. */
+export declare function syncStorageNotice(inbox: PartnerInboxStore, current: number, target: number): void;
+//# sourceMappingURL=notice.d.ts.map

package/lib/storage/notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../src/storage/notice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAElE,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CASjG"}

package/lib/storage/notice.js

@@ -0,0 +1,13 @@
+/** Startup-only, local system notice. No model, channel delivery or directory scan. */
+export function syncStorageNotice(inbox, current, target) {
+    const id = `system:storage-migration:${target}`;
+    const pending = current < target;
+    const previous = inbox.snapshot().items.filter(item => item.kind === 'system' && item.action === 'storage-migration');
+    inbox.remove(previous.filter(item => !pending || item.id !== id).map(item => item.id));
+    if (!pending)
+        return;
+    inbox.append({ id, kind: 'system', action: 'storage-migration', companionId: '', companionName: '伙伴插件',
+        title: '需要升级数据目录',
+        summary: `当前存储版本 **${current}**，可升级到 **${target}**。\n\n升级会整理公共数据及各伙伴的私有目录。请先备份，再进入「设置 → 基本设置 → 升级迁移」检查并确认。\n\n**不会自动迁移**，点击下方「前往升级迁移」打开设置。`, createdAt: Date.now() });
+}
+//# sourceMappingURL=notice.js.map

package/lib/storage/notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.js","sourceRoot":"","sources":["../../src/storage/notice.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,OAAe,EAAE,MAAc;IACzF,MAAM,EAAE,GAAG,4BAA4B,MAAM,EAAE,CAAA;IAC/C,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAA;IACrH,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACtF,IAAI,CAAC,OAAO;QAAE,OAAM;IACpB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM;QACpG,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,YAAY,OAAO,aAAa,MAAM,4FAA4F,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACzK,CAAC"}

package/lib/storage/preflight.d.ts

@@ -0,0 +1,40 @@
+import type { PartnerState } from '../domain.js';
+export interface StorageCheckItem {
+    label: string;
+    source: string;
+    target: string;
+    files: number;
+    bytes: number;
+    exists: boolean;
+}
+export interface StorageInspection {
+    currentVersion: number;
+    targetVersion: number;
+    migrationAvailable: boolean;
+    consistentSnapshot: false;
+    items: StorageCheckItem[];
+    blockers: string[];
+    notices: string[];
+    checkedAt: number;
+    steps: {
+        id: string;
+        from: number;
+        to: number;
+        title: string;
+        available: boolean;
+    }[];
+}
+/** Read-only inventory. Never opens SQLite or reads config/credential payloads.
+ * Live sizes are estimates; the eventual migration must recheck under a gate.
+ */
+export declare class StoragePreflight {
+    private readonly statePath;
+    private readonly root;
+    private readonly version;
+    private readonly snapshot;
+    private pending;
+    constructor(statePath: string, root: string, version: number, snapshot: () => PartnerState);
+    inspect(): Promise<StorageInspection>;
+    private scan;
+}
+//# sourceMappingURL=preflight.d.ts.map

package/lib/storage/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/storage/preflight.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAKhD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;CAChB;AACD,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,kBAAkB,EAAE,KAAK,CAAA;IACzB,KAAK,EAAE,gBAAgB,EAAE,CAAA;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACrF;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAEf,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAU,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAU,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAD1I,OAAO,CAAC,OAAO,CAAwC;gBAC1B,SAAS,EAAE,MAAM,EAAmB,IAAI,EAAE,MAAM,EAAmB,OAAO,EAAE,MAAM,EAAmB,QAAQ,EAAE,MAAM,YAAY;IAE9J,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;YAOvB,IAAI;CAmFnB"}

package/lib/storage/preflight.js

@@ -0,0 +1,208 @@
+import { access, lstat, readdir, readFile, statfs } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { storageLayout, storageVersion, TARGET_STORAGE_VERSION } from './layout.js';
+import { migrationPath, storageMigrations } from './migrations/index.js';
+import { legacyMemoryBackups } from './legacy-backups.js';
+/** Read-only inventory. Never opens SQLite or reads config/credential payloads.
+ * Live sizes are estimates; the eventual migration must recheck under a gate.
+ */
+export class StoragePreflight {
+    statePath;
+    root;
+    version;
+    snapshot;
+    pending;
+    constructor(statePath, root, version, snapshot) {
+        this.statePath = statePath;
+        this.root = root;
+        this.version = version;
+        this.snapshot = snapshot;
+    }
+    inspect() {
+        if (this.pending)
+            return this.pending;
+        const work = this.scan().finally(() => { if (this.pending === work)
+            this.pending = undefined; });
+        this.pending = work;
+        return work;
+    }
+    async scan() {
+        const state = this.snapshot();
+        const layout = storageLayout(resolve(this.statePath), resolve(this.root));
+        const result = {
+            currentVersion: storageVersion(this.version), targetVersion: TARGET_STORAGE_VERSION,
+            migrationAvailable: this.version < TARGET_STORAGE_VERSION, consistentSnapshot: false, items: [], blockers: [],
+            steps: migrationPath(storageMigrations, this.version, TARGET_STORAGE_VERSION).map(step => ({ id: step.id, from: step.from, to: step.to, title: step.title, available: !!step.execute && !!step.verify })),
+            notices: ['检查不会修改配置或数据库；运行中的文件数量与大小仅作预估。', '版本由迁移流程维护，请勿手动修改；公共和私有数据全部校验后才提交版本。', '凭据、宿主会话与知识库正文不搬动；工作文件和记录文档保持原位。'], checkedAt: Date.now(),
+        };
+        if (this.version === TARGET_STORAGE_VERSION) {
+            result.notices.push(`已使用新版公共目录：${layout.publicRoot}`);
+            return result;
+        }
+        let recoveryId;
+        try {
+            const journal = JSON.parse(await readFile(join(layout.legacyPublic, 'storage-migration.json'), 'utf8'));
+            if (typeof journal.id === 'string')
+                recoveryId = journal.id;
+        }
+        catch (error) {
+            if (!missing(error))
+                result.blockers.push('迁移恢复记录无法读取');
+        }
+        let budget = 50_000;
+        const inspectTree = async (path, device) => {
+            if (--budget < 0)
+                throw Error('文件数量超过检查上限，请先核对目录范围');
+            let entry;
+            try {
+                entry = await lstat(path);
+            }
+            catch (error) {
+                if (missing(error))
+                    return { exists: false, files: 0, bytes: 0 };
+                throw error;
+            }
+            if (entry.isSymbolicLink())
+                throw Error('包含符号链接，需人工确认');
+            if (device !== undefined && entry.dev !== device)
+                throw Error('跨文件系统目录，需人工确认');
+            if (entry.isFile()) {
+                await access(path, constants.R_OK);
+                return { exists: true, files: 1, bytes: entry.size };
+            }
+            if (!entry.isDirectory())
+                throw Error('包含特殊文件，需人工确认');
+            let files = 0, bytes = 0;
+            for (const child of await readdir(path)) {
+                const value = await inspectTree(join(path, child), entry.dev);
+                files += value.files;
+                bytes += value.bytes;
+            }
+            return { exists: true, files, bytes };
+        };
+        const inspect = async (label, source, target) => {
+            try {
+                await assertAncestors(source);
+                const value = await inspectTree(source);
+                result.items.push({ label, source, target, ...value });
+            }
+            catch (error) {
+                result.blockers.push(`${label}：${safeError(error)}`);
+            }
+        };
+        const targets = [layout.publicRoot];
+        await inspect('公共配置（待拆分私有字段）', resolve(this.statePath), join(layout.publicRoot, 'state'));
+        await inspect('Skill 安装库', layout.legacySkills, join(layout.publicRoot, 'skills'));
+        await inspect('消息索引（待按伙伴拆分）', join(layout.legacyPublic, 'partner-inbox.sqlite'), join(layout.publicRoot, 'indexes'));
+        await inspect('附件交付（待按伙伴拆分）', join(layout.legacyPublic, 'attachment-deliveries'), join(layout.publicRoot, 'indexes'));
+        const seen = new Set();
+        for (const companion of state.companions) {
+            if (seen.has(companion.id)) {
+                result.blockers.push('伙伴 ID 重复，不能迁移');
+                continue;
+            }
+            seen.add(companion.id);
+            let source, target;
+            try {
+                source = layout.legacyCompanion(companion.id);
+                target = layout.privateRoot(companion.id);
+            }
+            catch {
+                result.blockers.push('伙伴 ID 无效，不能迁移');
+                continue;
+            }
+            targets.push(target);
+            await inspect(`${companion.name} · 记忆`, join(source, 'memory'), join(target, 'memory'));
+            await inspect(`${companion.name} · 关注`, join(source, 'concerns'), join(target, 'concerns'));
+            try {
+                for (const name of await legacyMemoryBackups(source)) {
+                    await inspect(`${companion.name} · ${name}`, join(source, name), join(target, 'backups', 'legacy-memory', name));
+                    result.notices.push(`${companion.name} · ${name} 原样归档，不合并到当前记忆`);
+                }
+            }
+            catch (error) {
+                if (!missing(error))
+                    result.blockers.push(`${companion.name} · 备份检查：${safeError(error)}`);
+            }
+        }
+        const total = result.items.reduce((sum, item) => sum + item.bytes, 0);
+        for (const target of targets) {
+            try {
+                await assertAncestors(target);
+                let ancestor = target;
+                try {
+                    await lstat(target);
+                    let owned = false;
+                    if (recoveryId)
+                        try {
+                            const marker = JSON.parse(await readFile(join(target, 'migration-owner.json'), 'utf8'));
+                            owned = marker.transactionId === recoveryId;
+                        }
+                        catch { }
+                    if (!owned)
+                        result.blockers.push(`目标目录已存在，不允许覆盖：${target}`);
+                    else
+                        result.notices.push(`发现未提交的迁移，可安全重试：${target}`);
+                }
+                catch (error) {
+                    if (!missing(error))
+                        throw error;
+                }
+                while (true) {
+                    try {
+                        await lstat(ancestor);
+                        break;
+                    }
+                    catch (error) {
+                        if (!missing(error))
+                            throw error;
+                        ancestor = dirname(ancestor);
+                    }
+                }
+                await access(ancestor, constants.W_OK | constants.X_OK);
+                const fs = await statfs(ancestor);
+                // Deliberately conservative until an exact per-volume copy plan exists.
+                if (fs.bavail * fs.bsize < total * 3)
+                    result.blockers.push(`目标磁盘可用空间不足（含完整备份）：${target}`);
+            }
+            catch (error) {
+                result.blockers.push(`目标目录 ${target}：${safeError(error)}`);
+            }
+        }
+        result.notices.push(`已识别 ${state.companions.length} 位伙伴；私有配置还需从公共 state.json 按归属拆分，不是整份复制到每个伙伴。`);
+        result.migrationAvailable = result.blockers.length === 0;
+        return result;
+    }
+}
+async function assertAncestors(path) {
+    const paths = [];
+    for (let current = resolve(path);;) {
+        paths.push(current);
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    for (const current of paths.reverse()) {
+        try {
+            if ((await lstat(current)).isSymbolicLink())
+                throw Error('路径含符号链接，需人工确认');
+        }
+        catch (error) {
+            if (missing(error))
+                return;
+            throw error;
+        }
+    }
+}
+function missing(error) { return error?.code === 'ENOENT'; }
+function safeError(error) {
+    const code = error?.code;
+    if (code === 'EACCES' || code === 'EPERM')
+        return '目录读写权限不足';
+    if (code)
+        return `文件检查失败（${code}）`;
+    return error instanceof Error ? error.message : '检查失败';
+}
+//# sourceMappingURL=preflight.js.map

package/lib/storage/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/storage/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACnF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAsBzD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAEE;IAAoC;IAA+B;IAAkC;IAD1H,OAAO,CAAwC;IACvD,YAA6B,SAAiB,EAAmB,IAAY,EAAmB,OAAe,EAAmB,QAA4B;QAAjI,cAAS,GAAT,SAAS,CAAQ;QAAmB,SAAI,GAAJ,IAAI,CAAQ;QAAmB,YAAO,GAAP,OAAO,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAoB;IAAG,CAAC;IAElK,OAAO;QACL,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA,CAAC,CAAC,CAAC,CAAA;QAC/F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACzE,MAAM,MAAM,GAAsB;YAChC,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,sBAAsB;YACnF,kBAAkB,EAAE,IAAI,CAAC,OAAO,GAAC,sBAAsB,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;YAC3G,KAAK,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzM,OAAO,EAAE,CAAC,+BAA+B,EAAE,qCAAqC,EAAE,iCAAiC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SAC5I,CAAA;QACD,IAAG,IAAI,CAAC,OAAO,KAAG,sBAAsB,EAAC,CAAC;YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAAA,OAAO,MAAM,CAAA;QAAA,CAAC;QAC9G,IAAI,UAA2B,CAAA;QAC/B,IAAI,CAAC;YAAA,MAAM,OAAO,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAC,wBAAwB,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;YAAA,IAAG,OAAO,OAAO,CAAC,EAAE,KAAG,QAAQ;gBAAC,UAAU,GAAC,OAAO,CAAC,EAAE,CAAA;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAAA,CAAC;QAClO,IAAI,MAAM,GAAG,MAAM,CAAA;QACnB,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,MAAe,EAA8D,EAAE;YACtH,IAAI,EAAE,MAAM,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAA;YACpD,IAAI,KAAK,CAAA;YACT,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;YACjI,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAA;YACvD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC,eAAe,CAAC,CAAA;YAC9E,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;YAAC,CAAC;YAChH,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAA;YACrD,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAA;YACxB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC7D,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;gBAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAA;YAC5C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACvC,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;gBAC7B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;gBACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QAC1E,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACnC,MAAM,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QACzF,MAAM,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;QAClF,MAAM,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACpH,MAAM,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACrH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YACtB,IAAI,MAAc,EAAE,MAAc,CAAA;YAClC,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;YAChG,MAAM,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACpB,MAAM,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;YACvF,MAAM,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;YAC3F,IAAI,CAAC;gBACH,KAAI,MAAM,IAAI,IAAI,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpD,MAAM,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,MAAM,IAAI,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,EAAC,IAAI,CAAC,MAAM,EAAC,SAAS,EAAC,eAAe,EAAC,IAAI,CAAC,CAAC,CAAA;oBAC1G,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,MAAM,IAAI,gBAAgB,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,WAAW,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QAC/G,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACrE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;gBAC7B,IAAI,QAAQ,GAAG,MAAM,CAAA;gBACrB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;oBACnB,IAAI,KAAK,GAAC,KAAK,CAAA;oBACf,IAAG,UAAU;wBAAC,IAAG,CAAC;4BAAA,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAC,sBAAsB,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;4BAAA,KAAK,GAAC,MAAM,CAAC,aAAa,KAAG,UAAU,CAAA;wBAAA,CAAC;wBAAA,MAAK,CAAC,CAAA,CAAC;oBACrJ,IAAG,CAAC,KAAK;wBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAA;;wBACpD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAA;gBACtD,CAAC;gBACD,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAA;gBAAC,CAAC;gBAClD,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,CAAC;wBAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAAC,MAAK;oBAAC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAC;wBAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;oBAAC,CAAC;gBACvH,CAAC;gBACD,MAAM,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;gBACvD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACjC,wEAAwE;gBACxE,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC;oBAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAA;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QAChF,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,8CAA8C,CAAC,CAAA;QACjG,MAAM,CAAC,kBAAkB,GAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAG,CAAC,CAAA;QACpD,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAAC,OAAO,GAAG,MAAM,CAAA;IAAC,CAAC;IAC7I,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,KAAK,CAAC,eAAe,CAAC,CAAA;QAAC,CAAC;QACjF,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,IAAa,OAAQ,KAA+B,EAAE,IAAI,KAAK,QAAQ,CAAA,CAAC,CAAC;AACxG,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAI,KAA+B,EAAE,IAAI,CAAA;IACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,UAAU,CAAA;IAC5D,IAAI,IAAI;QAAE,OAAO,UAAU,IAAI,GAAG,CAAA;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AACxD,CAAC"}

package/lib/storage/safe-files.d.ts

@@ -0,0 +1,6 @@
+export declare function exists(path: string): Promise<boolean>;
+export declare function safeTree(path: string): Promise<string[]>;
+export declare function fileHash(path: string): Promise<string>;
+export declare function copyVerified(source: string, target: string): Promise<void>;
+export declare function verifyDatabases(root: string): Promise<void>;
+//# sourceMappingURL=safe-files.d.ts.map

package/lib/storage/safe-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-files.d.ts","sourceRoot":"","sources":["../../src/storage/safe-files.ts"],"names":[],"mappings":"AAOA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3D;AACD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyB9D;AACD,wBAAsB,QAAQ,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAG1D;AACD,wBAAsB,YAAY,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,CAkB5E;AACD,wBAAsB,eAAe,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,CAU/D"}

package/lib/storage/safe-files.js

@@ -0,0 +1,125 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, readdir, readFile, copyFile } from 'node:fs/promises';
+import { dirname, join, resolve, sep } from 'node:path';
+import { createHash } from 'node:crypto';
+import { DatabaseSync } from 'node:sqlite';
+import { syncDirectory } from './atomic.js';
+export async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return false;
+        throw e;
+    }
+}
+export async function safeTree(path) {
+    const absolute = resolve(path), ancestors = [];
+    for (let p = absolute;;) {
+        ancestors.push(p);
+        const parent = dirname(p);
+        if (p === parent)
+            break;
+        p = parent;
+    }
+    for (const p of ancestors.reverse()) {
+        if (!await exists(p))
+            break;
+        if ((await lstat(p)).isSymbolicLink())
+            throw Error('迁移路径不允许符号链接');
+    }
+    if (!await exists(absolute))
+        return [];
+    if (process.platform === 'linux') {
+        const mounts = await readFile('/proc/self/mountinfo', 'utf8');
+        for (const line of mounts.split('\n')) {
+            const mount = line.split(' ')[4]?.replace(/\\([0-7]{3})/g, (_, n) => String.fromCharCode(parseInt(n, 8)));
+            if (mount === absolute || mount?.startsWith(absolute + sep))
+                throw Error('迁移目录包含挂载点，需人工处理');
+        }
+    }
+    const files = [], pending = [absolute];
+    let count = 0;
+    while (pending.length) {
+        if (++count > 100_000)
+            throw Error('迁移目录文件过多');
+        const p = pending.pop(), stat = await lstat(p);
+        if (stat.isSymbolicLink())
+            throw Error('迁移目录包含符号链接');
+        if (stat.isDirectory())
+            for (const child of await readdir(p))
+                pending.push(join(p, child));
+        else if (stat.isFile())
+            files.push(p);
+        else
+            throw Error('迁移目录包含特殊文件');
+    }
+    return files.sort();
+}
+export async function fileHash(path) {
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const hash = createHash('sha256');
+        for await (const chunk of file.createReadStream({ autoClose: false }))
+            hash.update(chunk);
+        return hash.digest('hex');
+    }
+    finally {
+        await file.close();
+    }
+}
+export async function copyVerified(source, target) {
+    const files = await safeTree(source);
+    if (!await exists(source))
+        return;
+    const directory = (await lstat(source)).isDirectory();
+    if (directory) {
+        const directories = [source];
+        while (directories.length) {
+            const current = directories.pop();
+            await mkdir(join(target, current.slice(source.length)), { recursive: true, mode: 0o700 });
+            for (const item of await readdir(current, { withFileTypes: true }))
+                if (item.isDirectory())
+                    directories.push(join(current, item.name));
+        }
+    }
+    for (const file of files) {
+        const destination = directory ? join(target, file.slice(source.length + 1)) : target;
+        await mkdir(dirname(destination), { recursive: true, mode: 0o700 });
+        await copyFile(file, destination, constants.COPYFILE_EXCL);
+        const output = await open(destination, 'r+');
+        try {
+            await output.chmod(0o600);
+            await output.sync();
+        }
+        finally {
+            await output.close();
+        }
+        if (await fileHash(file) !== await fileHash(destination))
+            throw Error('文件复制校验失败');
+        await syncDirectory(dirname(destination));
+    }
+    if (directory)
+        await syncDirectory(target);
+    await syncDirectory(dirname(target));
+}
+export async function verifyDatabases(root) {
+    for (const path of await safeTree(root))
+        if (path.endsWith('.sqlite')) {
+            const db = new DatabaseSync(path);
+            try {
+                const rows = db.prepare('PRAGMA integrity_check').all();
+                if (rows.length !== 1 || Object.values(rows[0])[0] !== 'ok')
+                    throw Error('SQLite 完整性检查失败');
+                const checkpoint = db.prepare('PRAGMA wal_checkpoint(TRUNCATE)').get();
+                if (checkpoint && Number(checkpoint.busy) !== 0)
+                    throw Error('SQLite 仍在使用中');
+            }
+            finally {
+                db.close();
+            }
+        }
+}
+//# sourceMappingURL=safe-files.js.map

package/lib/storage/safe-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-files.js","sourceRoot":"","sources":["../../src/storage/safe-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,IAAI,CAA2B,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO,KAAK,CAAC;QAAA,MAAM,CAAC,CAAA;IAAC,CAAC;AAC3H,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,QAAQ,GAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,GAAU,EAAE,CAAA;IACnD,KAAI,IAAI,CAAC,GAAC,QAAQ,IAAG,CAAC;QAAA,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,MAAM,MAAM,GAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,KAAG,MAAM;YAAC,MAAM;QAAA,CAAC,GAAC,MAAM,CAAA;IAAA,CAAC;IAC7F,KAAI,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACnC,IAAG,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC;YAAC,MAAK;QACzB,IAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;YAAC,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;IACjE,CAAC;IACD,IAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC;QAAC,OAAO,EAAE,CAAA;IACpC,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAC,MAAM,QAAQ,CAAC,sBAAsB,EAAC,MAAM,CAAC,CAAA;QAC1D,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,EAAC,CAAC,CAAC,EAAC,CAAQ,EAAC,EAAE,CAAA,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACzG,IAAG,KAAK,KAAG,QAAQ,IAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,GAAC,GAAG,CAAC;gBAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAU,EAAE,EAAC,OAAO,GAAC,CAAC,QAAQ,CAAC,CAAC;IAAA,IAAI,KAAK,GAAC,CAAC,CAAA;IACtD,OAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACrB,IAAG,EAAE,KAAK,GAAC,OAAO;YAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAC,OAAO,CAAC,GAAG,EAAG,EAAC,IAAI,GAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAA;QAC1C,IAAG,IAAI,CAAC,cAAc,EAAE;YAAC,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;QAClD,IAAG,IAAI,CAAC,WAAW,EAAE;YAAC,KAAI,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,CAAA;aAChF,IAAG,IAAI,CAAC,MAAM,EAAE;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;;YAC9B,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAW;IACxC,MAAM,IAAI,GAAC,MAAM,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACnE,IAAI,CAAC;QAAA,MAAM,IAAI,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAA,IAAI,KAAK,EAAC,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAA,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAAA,CAAC;AACjL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAa,EAAC,MAAa;IAC5D,MAAM,KAAK,GAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClC,IAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC;QAAC,OAAM;IAC/B,MAAM,SAAS,GAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACnD,IAAG,SAAS,EAAC,CAAC;QACZ,MAAM,WAAW,GAAC,CAAC,MAAM,CAAC,CAAA;QAC1B,OAAM,WAAW,CAAC,MAAM,EAAC,CAAC;YAAA,MAAM,OAAO,GAAC,WAAW,CAAC,GAAG,EAAG,CAAC;YAAA,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAAA,KAAI,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,OAAO,EAAC,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC;gBAAC,IAAG,IAAI,CAAC,WAAW,EAAE;oBAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAAA,CAAC;IAC9Q,CAAC;IACD,KAAI,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,WAAW,GAAC,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA;QAC3E,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAA;QAC7D,MAAM,QAAQ,CAAC,IAAI,EAAC,WAAW,EAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QACxD,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,WAAW,EAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAAA,CAAC;gBAAO,CAAC;YAAA,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAAA,CAAC;QACzH,IAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAG,MAAM,QAAQ,CAAC,WAAW,CAAC;YAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QAC7E,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,IAAG,SAAS;QAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;AACtC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAW;IAC/C,KAAI,MAAM,IAAI,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,MAAM,EAAE,GAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAE,CAAA;gBACrD,IAAG,IAAI,CAAC,MAAM,KAAG,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,KAAG,IAAI;oBAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBACnF,MAAM,UAAU,GAAC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAA;gBACpE,IAAG,UAAU,IAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAG,CAAC;oBAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAA;YACxE,CAAC;oBAAO,CAAC;gBAAA,EAAE,CAAC,KAAK,EAAE,CAAA;YAAA,CAAC;QACtB,CAAC;AACH,CAAC"}

package/lib/storage/source-archive.d.ts

@@ -0,0 +1,14 @@
+export interface CleanupResult {
+    pending: number;
+    removed: number;
+    warnings: string[];
+}
+export declare function archiveRoot(statePath: string, id: string): string;
+/** Called under the migration write gate. Complete backups precede activation. */
+export declare function prepareSourceArchive(statePath: string, root: string, id: string, owners: string[]): Promise<void>;
+/** No source is removed until both the active version and its backup verify.
+ * A changed source or incomplete backup is left intact and reported, not guessed.
+ * Only called while services are stopped, never as an automatic startup sweep.
+ */
+export declare function cleanupArchivedSources(statePath: string, root: string, id: string): Promise<CleanupResult>;
+//# sourceMappingURL=source-archive.d.ts.map

package/lib/storage/source-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-archive.d.ts","sourceRoot":"","sources":["../../src/storage/source-archive.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AAyBvF,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAGjE;AACD,kFAAkF;AAClF,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBvH;AACD;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBhH"}

package/lib/storage/source-archive.js

@@ -0,0 +1,98 @@
+import { readFile, rm, lstat, readdir } from 'node:fs/promises';
+import { dirname, join, relative, resolve } from 'node:path';
+import { createHash } from 'node:crypto';
+import { atomicJson } from './atomic.js';
+import { copyVerified, exists, fileHash, safeTree } from './safe-files.js';
+import { storageLayout } from './layout.js';
+import { isLegacyMemoryBackup, legacyMemoryBackups } from './legacy-backups.js';
+import { SplitStatePersistence } from './split-state.js';
+const validId = (id) => { if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(id))
+    throw Error('备份事务标识无效'); };
+function sourcePath(statePath, root, source) {
+    const layout = storageLayout(resolve(statePath), resolve(root));
+    switch (source.kind) {
+        case 'state': return resolve(statePath);
+        case 'inbox': return join(layout.legacyPublic, 'partner-inbox.sqlite');
+        case 'inbox-wal': return join(layout.legacyPublic, 'partner-inbox.sqlite-wal');
+        case 'inbox-shm': return join(layout.legacyPublic, 'partner-inbox.sqlite-shm');
+        case 'deliveries': return join(layout.legacyPublic, 'attachment-deliveries');
+        case 'skills': return layout.legacySkills;
+        case 'private':
+            if (!['memory', 'concerns'].includes(source.name) && !isLegacyMemoryBackup(source.name))
+                throw Error('非迁移范围目录，拒绝清理');
+            return join(layout.legacyCompanion(source.owner), source.name);
+        default: throw Error('未知迁移源，拒绝清理');
+    }
+}
+async function digest(path) {
+    const hash = createHash('sha256');
+    const dirs = async (p) => { const entry = await lstat(p); hash.update(JSON.stringify([relative(path, p), entry.isDirectory() ? 'directory' : 'file'])); if (entry.isDirectory())
+        for (const name of (await readdir(p)).sort())
+            await dirs(join(p, name)); };
+    await safeTree(path);
+    await dirs(path);
+    for (const file of await safeTree(path))
+        hash.update(JSON.stringify([relative(path, file), await fileHash(file)]));
+    return hash.digest('hex');
+}
+export function archiveRoot(statePath, id) {
+    validId(id);
+    return join(dirname(resolve(statePath)), 'migration-backups', id);
+}
+/** Called under the migration write gate. Complete backups precede activation. */
+export async function prepareSourceArchive(statePath, root, id, owners) {
+    const backup = archiveRoot(statePath, id);
+    const sources = [{ kind: 'state' }, { kind: 'inbox' }, { kind: 'inbox-wal' }, { kind: 'inbox-shm' }, { kind: 'deliveries' }, { kind: 'skills' }];
+    const layout = storageLayout(resolve(statePath), resolve(root));
+    for (const owner of owners)
+        for (const name of ['memory', 'concerns', ...await legacyMemoryBackups(layout.legacyCompanion(owner))])
+            sources.push({ kind: 'private', owner, name });
+    const entries = [];
+    for (const source of sources) {
+        const path = sourcePath(statePath, root, source);
+        if (!await exists(path))
+            continue;
+        const target = join(backup, 'originals', String(entries.length));
+        await copyVerified(path, target);
+        const fingerprint = await digest(path);
+        if (fingerprint !== await digest(target))
+            throw Error('完整备份校验失败');
+        entries.push({ source, digest: fingerprint });
+    }
+    await atomicJson(join(backup, 'archive.json'), { version: 1, transactionId: id, entries });
+}
+/** No source is removed until both the active version and its backup verify.
+ * A changed source or incomplete backup is left intact and reported, not guessed.
+ * Only called while services are stopped, never as an automatic startup sweep.
+ */
+export async function cleanupArchivedSources(statePath, root, id) {
+    const backup = archiveRoot(statePath, id);
+    const config = JSON.parse(await readFile(join(storageLayout(resolve(statePath), resolve(root)).legacyPublic, 'storage-config.json'), 'utf8'));
+    if (config.storageVersion !== 1 || config.transactionId !== id || config.workspaceRoot !== resolve(root))
+        throw Error('迁移版本未提交，禁止清理原文件');
+    const layout = storageLayout(resolve(statePath), resolve(root));
+    await new SplitStatePersistence(layout.publicRoot, layout.privateRoot).read();
+    const archive = JSON.parse(await readFile(join(backup, 'archive.json'), 'utf8'));
+    if (archive.version !== 1 || archive.transactionId !== id || !Array.isArray(archive.entries))
+        throw Error('备份清单无效');
+    const result = { pending: 0, removed: 0, warnings: [] };
+    for (const [index, entry] of archive.entries.entries()) {
+        try {
+            const path = sourcePath(statePath, root, entry.source);
+            if (!await exists(path))
+                continue;
+            const saved = join(backup, 'originals', String(index));
+            if (!await exists(saved) || await digest(saved) !== entry.digest || await digest(path) !== entry.digest)
+                throw Error('源文件或备份已变化');
+            await rm(path, { recursive: true, force: false });
+            result.removed++;
+        }
+        catch {
+            result.pending++;
+            result.warnings.push(`第 ${index + 1} 项原路径未清理，已保留，请核查备份或文件占用。`);
+        }
+    }
+    await atomicJson(join(backup, 'cleanup.json'), result);
+    return result;
+}
+//# sourceMappingURL=source-archive.js.map