@lossless.org/nosqldb 8.0.0

package/dist_ts/ts_nosqldb/service-types.d.ts

@@ -0,0 +1,341 @@
+export interface INoSqlDbHealth {
+    running: boolean;
+    storage?: 'memory' | 'file';
+    fileStorageEngine?: 'mvcc';
+    storagePurpose?: 'production' | 'rehearsal';
+    storageRehearsalId?: string | null;
+    storagePath?: string;
+    resourceFencingVersion?: 1;
+    resourceFencingSupported?: boolean;
+    resourceFencingRequiresDrain?: true;
+    allocationFencingVersion?: 1;
+    allocationFencingSupported?: boolean;
+    allocationFencingRequiresDrain?: true;
+    databaseAllocationReadAccessGrantVersion?: 1;
+    databaseAllocationReadAccessGrantSupported?: true;
+    publicationHoldVersion: 1;
+    publicationHoldSupported: boolean;
+    publicationHoldRequiresExternalDrain: boolean;
+    authEnabled?: boolean;
+    authUsers?: number;
+    usersPathConfigured?: boolean;
+    databaseCount: number;
+    collectionCount: number;
+    uptimeSeconds?: number;
+}
+/** Per-operation admission bounds for read-only stopped native storage inspection. */
+export interface ILocalNoSqlDbOfflineInspectionLimits {
+    maximumEntries: number;
+    maximumTotalFileBytes: number;
+    maximumRecords: number;
+    maximumRecordBytes: number;
+    maximumResultBytes: number;
+}
+export interface ILocalNoSqlDbOfflineStringValueInspection {
+    folderPath: string;
+    databaseName: string;
+    collectionName: string;
+    match: {
+        field: string;
+        value: string;
+    };
+    valueField: string;
+    limits: ILocalNoSqlDbOfflineInspectionLimits;
+}
+export type TLocalNoSqlDbOfflineStringValueInspectionResult = {
+    status: 'not-found';
+} | {
+    status: 'found';
+    value: string;
+};
+export interface ILocalNoSqlDbOfflinePhysicalNamespaceInspectionLimits {
+    maximumEntries: number;
+    maximumDatabases: number;
+    maximumCollections: number;
+    maximumIndexes: number;
+    maximumTotalFileBytes: number;
+    maximumRecordsPerCollection: number;
+    maximumRecordBytes: number;
+    maximumResultBytes: number;
+}
+export interface ILocalNoSqlDbOfflinePhysicalNamespaceInspection {
+    folderPath: string;
+    limits: ILocalNoSqlDbOfflinePhysicalNamespaceInspectionLimits;
+}
+export interface ILocalNoSqlDbOfflinePhysicalNamespaceInspectionResult {
+    schemaVersion: 1;
+    databases: Array<{
+        name: string;
+        collections: string[];
+    }>;
+}
+export declare const noSqlDbResourceFenceErrorCodes: readonly ["EFENCE_REQUIRED", "EFENCE_STALE", "EFENCE_SCOPE_MISMATCH", "EFENCE_UNSUPPORTED", "EFENCE_MUTATION_MISMATCH", "EFENCE_OWNERSHIP_MISMATCH", "EFENCE_STATE_CORRUPT", "EFENCE_RECEIPT_LIMIT", "EFENCE_BUSY", "EFENCE_PUBLICATION_HELD", "EFENCE_CAPABILITY_MISMATCH", "EFENCE_NOT_HELD", "EALLOCATION_EXPECTED_ABSENT_CONFLICT", "EALLOCATION_REQUIRED", "EALLOCATION_MISMATCH", "EALLOCATION_GENERATION_EXHAUSTED", "EALLOCATION_DEPROVISIONED"];
+export type TNoSqlDbResourceFenceErrorCode = (typeof noSqlDbResourceFenceErrorCodes)[number];
+export interface INoSqlDbResourceFence {
+    version: 1;
+    scopeId: string;
+    token: number;
+    mutationId: string;
+    payloadSha256: string;
+}
+export interface INoSqlDbResourceFenceReceipt extends INoSqlDbResourceFence {
+    kind: 'smartdb.database.replace.v1' | 'smartdb.database.delete.v1' | 'smartdb.database.ensure.v1' | 'smartdb.database.allocate.v1';
+    /** Digest of the canonical payload interpretation derived by NoSQLDB. */
+    effectivePayloadSha256: string;
+    provider?: 'smartdb';
+    resourceIdSha256?: string;
+    holdPublication?: true;
+    publicationState?: 'held' | 'released';
+    bindingSha256?: string;
+    resultSha256?: string;
+    receiptSha256?: string;
+    publicationCapabilitySha256?: string;
+    /** Present only while publication is held; never returned after release. */
+    publicationCapability?: string;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbDatabaseAllocationIdentity {
+    version: 1;
+    provider: 'smartdb';
+    state: 'active';
+    databaseName: string;
+    username: string;
+    allocationId: string;
+    generation: number;
+    principalId: string;
+    resourceIdSha256: string;
+    bindingSha256: string;
+    receiptSha256: string;
+}
+export interface INoSqlDbDatabaseAllocationLifecycle {
+    version: 1;
+    provider: 'smartdb';
+    state: 'allocating' | 'active' | 'deprovisioning' | 'deprovisioned';
+    databaseName: string;
+    username: string;
+    allocationId: string;
+    generation: number;
+    principalId: string;
+    resourceIdSha256: string;
+    bindingSha256: string;
+    receiptSha256: string;
+}
+export interface INoSqlDbDatabaseAllocationReadAccessGrantIdentity {
+    version: 1;
+    grantId: string;
+    principalId: string;
+    generation: number;
+}
+export interface INoSqlDbIssueDatabaseAllocationReadAccessGrantInput {
+    databaseName: string;
+    grantId: string;
+    username: string;
+    password: string;
+    allocation: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbIssueDatabaseAllocationReadAccessGrantResult {
+    databaseName: string;
+    username: string;
+    roles: ['read'];
+    authSource: string;
+    mongodbUri?: string;
+    allocation: INoSqlDbDatabaseAllocationIdentity;
+    grant: INoSqlDbDatabaseAllocationReadAccessGrantIdentity;
+    issuedAt: number;
+    expiresAt: number;
+}
+export interface INoSqlDbRevokeDatabaseAllocationReadAccessGrantInput {
+    databaseName: string;
+    grantId: string;
+    allocation: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbRevokeDatabaseAllocationReadAccessGrantResult {
+    databaseName: string;
+    grantId: string;
+    allocation: INoSqlDbDatabaseAllocationIdentity;
+    revoked: true;
+}
+export declare const noSqlDbAllocationReadAccessGrantErrorCodes: readonly ["EGRANT_INVALID_REQUEST", "EGRANT_CREDENTIAL_MISMATCH", "EGRANT_CONFLICT", "EGRANT_REPLAY_CAPACITY", "EGRANT_STATE_UNAVAILABLE"];
+export type TNoSqlDbAllocationReadAccessGrantErrorCode = (typeof noSqlDbAllocationReadAccessGrantErrorCodes)[number];
+export declare class NoSqlDbAllocationReadAccessGrantError extends Error {
+    readonly code: TNoSqlDbAllocationReadAccessGrantErrorCode;
+    constructor(codeArg: TNoSqlDbAllocationReadAccessGrantErrorCode, messageArg: string, causeArg?: unknown);
+}
+export declare const normalizeNoSqlDbAllocationReadAccessGrantError: (errorArg: unknown, codeArg?: unknown) => Error;
+export interface INoSqlDbHeldPublicationReceipt extends INoSqlDbResourceFenceReceipt {
+    provider: 'smartdb';
+    resourceIdSha256: string;
+    holdPublication: true;
+    publicationState: 'held';
+    bindingSha256: string;
+    resultSha256: string;
+    receiptSha256: string;
+    publicationCapabilitySha256: string;
+    publicationCapability: string;
+}
+export interface INoSqlDbCommitDatabasePublicationInput {
+    databaseName: string;
+    resourceFence: INoSqlDbHeldPublicationReceipt;
+}
+/**
+ * Cancellation and deadline ownership for one durable database-management
+ * operation. Aborting or timing out is fail-stop: NoSQLDB terminates the Rust
+ * engine so the operation cannot continue after the caller has released it.
+ */
+export interface INoSqlDbManagementOperationOptions {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface INoSqlDbDatabaseResourceFenceState {
+    version: 1;
+    databaseName: string;
+    resourceIdSha256: string;
+    scopeId: string;
+    highestToken: number;
+    publicationState: 'requested' | 'publishing' | 'held' | 'released';
+    allocation?: INoSqlDbDatabaseAllocationLifecycle;
+}
+export declare class NoSqlDbResourceFenceError extends Error {
+    readonly code: TNoSqlDbResourceFenceErrorCode;
+    constructor(codeArg: TNoSqlDbResourceFenceErrorCode, messageArg: string, causeArg?: unknown);
+}
+export declare const normalizeNoSqlDbResourceFenceError: (errorArg: unknown) => Error;
+export interface INoSqlDbDatabaseTenantInput {
+    databaseName: string;
+    username: string;
+    password: string;
+    roles?: string[];
+}
+export interface INoSqlDbEnsureDatabaseTenantInput extends INoSqlDbDatabaseTenantInput {
+    fence: INoSqlDbResourceFence;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbAttestDatabaseTenantInput {
+    databaseName: string;
+    username: string;
+    roles: string[];
+    password: string;
+}
+export interface INoSqlDbAttestDatabaseTenantResult {
+    matches: boolean;
+}
+export interface INoSqlDbAllocateDatabaseTenantInput extends INoSqlDbDatabaseTenantInput {
+    expectedAbsent: true;
+    fence: INoSqlDbResourceFence;
+}
+export interface INoSqlDbDeleteDatabaseTenantInput {
+    databaseName: string;
+    /**
+     * Exact tenant user to revoke. For a fenced deletion this identity is
+     * included in the durable mutation and is removed idempotently after the
+     * database deletion is durable. Omitting it from a fenced deletion
+     * preserves auth users; an unfenced omission retains the legacy behavior
+     * of deleting every user for the database. If the database exists, a
+     * fenced deletion fails closed unless this exact user currently owns it.
+     */
+    username?: string;
+    fence?: INoSqlDbResourceFence;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+    /** Keep the database data plane closed until commitDatabasePublication. */
+    holdPublication?: boolean;
+}
+export interface INoSqlDbRotateDatabaseTenantPasswordInput {
+    username: string;
+    password: string;
+}
+export interface INoSqlDbDatabaseTenantDescriptor {
+    databaseName: string;
+    username: string;
+    roles: string[];
+    authSource: string;
+    mongodbUri?: string;
+    resourceFence?: INoSqlDbResourceFenceReceipt;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbEnsureDatabaseTenantResult extends INoSqlDbDatabaseTenantDescriptor {
+    resourceFence: INoSqlDbResourceFenceReceipt;
+}
+export interface INoSqlDbAllocateDatabaseTenantResult extends INoSqlDbDatabaseTenantDescriptor {
+    resourceFence: INoSqlDbResourceFenceReceipt;
+    allocation: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbDeleteDatabaseTenantResult {
+    databaseName: string;
+    /**
+     * Users removed during the completing attempt. This can be zero after
+     * crash recovery when the exact user was durably removed by the prior
+     * attempt.
+     */
+    deletedUsers: number;
+    databaseDropped: boolean;
+    /**
+     * Present for fenced calls. False means the bound exact username is now
+     * absent; true means no username was supplied and auth users were preserved.
+     */
+    usersPreserved?: boolean;
+    resourceFence?: INoSqlDbResourceFenceReceipt;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+}
+export interface INoSqlDbDatabaseExportCollection {
+    name: string;
+    documents: Record<string, any>[];
+    indexes: Record<string, any>[];
+}
+export interface INoSqlDbDatabaseExportLimits {
+    maxEncodedBytes?: number;
+    maxCollections?: number;
+    maxDocuments?: number;
+    maxIndexes?: number;
+}
+export interface INoSqlDbExportDatabaseInput {
+    databaseName: string;
+    limits?: INoSqlDbDatabaseExportLimits;
+}
+export interface INoSqlDbDatabaseContentDigestLimits {
+    maxScannedBsonBytes?: number;
+    maxCollections?: number;
+    maxDocuments?: number;
+    maxIndexes?: number;
+}
+export interface INoSqlDbGetDatabaseContentDigestInput {
+    databaseName: string;
+    limits?: INoSqlDbDatabaseContentDigestLimits;
+}
+export interface INoSqlDbDatabaseContentDigest {
+    format: 'smartdb.database.content-digest.v1';
+    algorithm: 'sha256';
+    databaseName: string;
+    sha256: string;
+    scannedBsonBytes: number;
+    collections: number;
+    documents: number;
+    indexes: number;
+}
+export interface INoSqlDbDatabaseExport {
+    format: 'smartdb.database.export.v1';
+    databaseName: string;
+    exportedAtMs: number;
+    collections: INoSqlDbDatabaseExportCollection[];
+}
+export interface INoSqlDbImportDatabaseInput {
+    databaseName: string;
+    source: INoSqlDbDatabaseExport;
+    /**
+     * Exact exclusive tenant owner required for this replacement. When used
+     * with a fence, the username is included in the provider-derived mutation
+     * identity. Omission preserves the original version 1 replacement profile.
+     */
+    username?: string;
+    fence?: INoSqlDbResourceFence;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+    /** Keep the database data plane closed until commitDatabasePublication. */
+    holdPublication?: boolean;
+}
+export interface INoSqlDbImportDatabaseResult {
+    databaseName: string;
+    collections: number;
+    documents: number;
+    resourceFence?: INoSqlDbResourceFenceReceipt;
+    allocation?: INoSqlDbDatabaseAllocationIdentity;
+}
+export type TNoSqlDbCommitDatabasePublicationResult = INoSqlDbImportDatabaseResult | INoSqlDbDeleteDatabaseTenantResult;

package/dist_ts/ts_nosqldb/service-types.js

@@ -0,0 +1,62 @@
+export const noSqlDbResourceFenceErrorCodes = [
+    'EFENCE_REQUIRED',
+    'EFENCE_STALE',
+    'EFENCE_SCOPE_MISMATCH',
+    'EFENCE_UNSUPPORTED',
+    'EFENCE_MUTATION_MISMATCH',
+    'EFENCE_OWNERSHIP_MISMATCH',
+    'EFENCE_STATE_CORRUPT',
+    'EFENCE_RECEIPT_LIMIT',
+    'EFENCE_BUSY',
+    'EFENCE_PUBLICATION_HELD',
+    'EFENCE_CAPABILITY_MISMATCH',
+    'EFENCE_NOT_HELD',
+    'EALLOCATION_EXPECTED_ABSENT_CONFLICT',
+    'EALLOCATION_REQUIRED',
+    'EALLOCATION_MISMATCH',
+    'EALLOCATION_GENERATION_EXHAUSTED',
+    'EALLOCATION_DEPROVISIONED',
+];
+export const noSqlDbAllocationReadAccessGrantErrorCodes = [
+    'EGRANT_INVALID_REQUEST',
+    'EGRANT_CREDENTIAL_MISMATCH',
+    'EGRANT_CONFLICT',
+    'EGRANT_REPLAY_CAPACITY',
+    'EGRANT_STATE_UNAVAILABLE',
+];
+export class NoSqlDbAllocationReadAccessGrantError extends Error {
+    constructor(codeArg, messageArg, causeArg) {
+        super(`${codeArg}: ${messageArg}`, { cause: causeArg });
+        this.name = 'NoSqlDbAllocationReadAccessGrantError';
+        this.code = codeArg;
+    }
+}
+export const normalizeNoSqlDbAllocationReadAccessGrantError = (errorArg, codeArg) => {
+    const error = errorArg instanceof Error
+        ? errorArg
+        : new Error(String(errorArg));
+    if (typeof codeArg !== 'string'
+        || !noSqlDbAllocationReadAccessGrantErrorCodes.includes(codeArg)) {
+        return error;
+    }
+    return new NoSqlDbAllocationReadAccessGrantError(codeArg, error.message, error);
+};
+export class NoSqlDbResourceFenceError extends Error {
+    constructor(codeArg, messageArg, causeArg) {
+        super(`${codeArg}: ${messageArg}`, { cause: causeArg });
+        this.name = 'NoSqlDbResourceFenceError';
+        this.code = codeArg;
+    }
+}
+export const normalizeNoSqlDbResourceFenceError = (errorArg) => {
+    const error = errorArg instanceof Error
+        ? errorArg
+        : new Error(String(errorArg));
+    const match = /^((?:EFENCE|EALLOCATION)_[A-Z_]+):\s*(.*)$/s.exec(error.message);
+    if (!match ||
+        !noSqlDbResourceFenceErrorCodes.includes(match[1])) {
+        return error;
+    }
+    return new NoSqlDbResourceFenceError(match[1], match[2], error);
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/ts_nosqldb/storage-rehearsal.d.ts

@@ -0,0 +1,103 @@
+import type { INoSqlDbServerOptions } from './server/classes.nosqldbserver.js';
+export declare const noSqlDbStorageRehearsalErrorCodes: readonly ["INVALID_REQUEST", "UNSUPPORTED", "BUSY", "NOT_FOUND", "DESTINATION_CONFLICT", "IDENTITY_MISMATCH", "STATE_CORRUPT", "SOURCE_CHANGED", "CAPACITY", "CANCELLED", "IO", "RECOVERY_REQUIRED", "BINARY_UNAVAILABLE"];
+export type TNoSqlDbStorageRehearsalErrorCode = typeof noSqlDbStorageRehearsalErrorCodes[number];
+/** Errors deliberately contain neither persisted values nor nested engine errors. */
+export declare class NoSqlDbStorageRehearsalError extends Error {
+    readonly code: TNoSqlDbStorageRehearsalErrorCode;
+    constructor(code: TNoSqlDbStorageRehearsalErrorCode);
+}
+export interface INoSqlDbStorageRehearsalOptions {
+    /** Exact executable, with SmartRust's exclusive non-mutating selection contract. */
+    binaryPath?: string;
+}
+export interface INoSqlDbStorageRehearsalInput {
+    /** Absolute canonical path of an already initialized, stopped source. */
+    sourceFolderPath: string;
+    /** Absent destination; its existing parent must be private and on the source filesystem. */
+    destinationFolderPath: string;
+    /** Optional previously attested provider identity. The engine always verifies source ownership and bindings. */
+    expectedSourceProviderRootId?: string;
+    /** Stable caller operation ID. Every retry must retain the same request. */
+    operationId: string;
+    limits?: {
+        /** Source files plus directories, including the root. Default/maximum: 100,000. */
+        maximumEntries: number;
+        /** Total source file bytes. Default/maximum: 1 TiB. */
+        maximumBytes: number;
+    };
+}
+/** Counts include retained historical records separately from live contents. */
+export interface INoSqlDbStorageRehearsalPreservation {
+    files: number;
+    bytes: number;
+    databases: number;
+    collections: number;
+    documents: number;
+    indexes: number;
+    indexAliases: number;
+    users: number;
+    principalIdentities: number;
+    retiredDatabases: number;
+    retiredCollections: number;
+    retiredDocuments: number;
+    retiredIndexes: number;
+    retiredPrincipals: number;
+    allocationReplays: number;
+    resources: number;
+    receipts: number;
+    maximumFencingToken: string;
+    publicationHolds: number;
+    activeAllocations: number;
+    retiredAllocations: number;
+    sessions: number;
+    retiringSessions: number;
+    retryOutcomes: number;
+    transactionOutcomes: number;
+    obsoleteOutcomes: number;
+    records: number;
+    encodedRecordBytes: number;
+}
+/** Immutable creation evidence. Completed retries replay this receipt even after isolated writes. */
+export interface INoSqlDbStorageRehearsalReceipt {
+    format: 'smartdb.storage-rehearsal.receipt.v2';
+    operationId: string;
+    requestSha256: string;
+    storageProfile: 'native-mvcc-authenticated-v1';
+    sourceFolderPath: string;
+    destinationFolderPath: string;
+    sourceProviderRootId: string;
+    destinationProviderRootId: string;
+    sourceStorageRootSha256: string;
+    sourceSnapshotSha256: string;
+    destinationDevice: string;
+    destinationInode: string;
+    groupId: string;
+    timelineId: string;
+    sourceLsn: string;
+    destinationLsn: string;
+    sourceRecordsSha256: string;
+    preservedRecordsSha256: string;
+    scramIterations: number;
+    preservation: INoSqlDbStorageRehearsalPreservation;
+    sourceUnchanged: true;
+    contentsAndIndexesPreserved: true;
+    namespacesPreserved: true;
+    authenticationPreserved: true;
+    historicalFencingPreserved: true;
+    outcomesPreserved: true;
+    filesystemBindingsVerified: true;
+    productionAuthority: false;
+    promotionSupported: false;
+    receiptSha256: string;
+}
+export type TNormalizedNoSqlDbStorageRehearsalInput = INoSqlDbStorageRehearsalInput & {
+    limits: NonNullable<INoSqlDbStorageRehearsalInput['limits']>;
+};
+export declare const normalizeNoSqlDbStorageRehearsalOptions: (value: unknown) => INoSqlDbStorageRehearsalOptions;
+export declare const normalizeNoSqlDbStorageRehearsalOperationOptions: (value: unknown) => {
+    timeoutMs: number;
+    signal?: AbortSignal;
+};
+export declare const normalizeNoSqlDbStorageRehearsalInput: (value: unknown) => TNormalizedNoSqlDbStorageRehearsalInput;
+export declare const normalizeNoSqlDbStorageRehearsalReceipt: (value: unknown, input: TNormalizedNoSqlDbStorageRehearsalInput) => INoSqlDbStorageRehearsalReceipt;
+export declare const validateNoSqlDbStorageRehearsalStartup: (options: INoSqlDbServerOptions) => void;

package/dist_ts/ts_nosqldb/storage-rehearsal.js

@@ -0,0 +1,131 @@
+import * as plugins from './plugins.js';
+export const noSqlDbStorageRehearsalErrorCodes = [
+    'INVALID_REQUEST', 'UNSUPPORTED', 'BUSY', 'NOT_FOUND', 'DESTINATION_CONFLICT',
+    'IDENTITY_MISMATCH', 'STATE_CORRUPT', 'SOURCE_CHANGED', 'CAPACITY', 'CANCELLED',
+    'IO', 'RECOVERY_REQUIRED', 'BINARY_UNAVAILABLE',
+];
+/** Errors deliberately contain neither persisted values nor nested engine errors. */
+export class NoSqlDbStorageRehearsalError extends Error {
+    constructor(code) {
+        super(`NoSQLDB storage rehearsal failed with code ${code}`);
+        this.code = code;
+        this.name = 'NoSqlDbStorageRehearsalError';
+    }
+}
+const fail = (code = 'INVALID_REQUEST') => {
+    throw new NoSqlDbStorageRehearsalError(code);
+};
+const object = (value) => {
+    try {
+        if (value === null || typeof value !== 'object' || Array.isArray(value)
+            || ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+            return false;
+        return Reflect.ownKeys(value).every((key) => {
+            const property = Object.getOwnPropertyDescriptor(value, key);
+            return typeof key === 'string' && property?.enumerable === true && Object.hasOwn(property, 'value');
+        });
+    }
+    catch {
+        return false;
+    }
+};
+const digest = (value) => typeof value === 'string' && /^[0-9a-f]{64}$/.test(value);
+const identifier = (value) => typeof value === 'string'
+    && /^[A-Za-z0-9][A-Za-z0-9._:@-]{0,127}$/.test(value);
+const canonicalPath = (value) => typeof value === 'string'
+    && value.startsWith('/') && value !== '/' && plugins.buffer.Buffer.byteLength(value) <= 4095
+    && !/[\p{Cc}\p{Cs}]/u.test(value) && !value.endsWith('/') && !value.includes('//')
+    && value.split('/').every((part) => part !== '.' && part !== '..' && !part.startsWith('.smartdb-rehearsal-'));
+const integer = (value, minimum, maximum) => typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum && value <= maximum;
+const exactKeys = (value, required, optional = []) => required.every((key) => Object.hasOwn(value, key)) && Object.keys(value).every((key) => required.includes(key) || optional.includes(key));
+const sha256 = (domain, value) => plugins.crypto.createHash('sha256').update(domain).update(JSON.stringify(value)).digest('hex');
+export const normalizeNoSqlDbStorageRehearsalOptions = (value) => {
+    try {
+        if (!object(value) || !exactKeys(value, [], ['binaryPath'])
+            || (value.binaryPath !== undefined && (typeof value.binaryPath !== 'string' || value.binaryPath.length === 0)))
+            return fail();
+        return { binaryPath: value.binaryPath };
+    }
+    catch {
+        return fail();
+    }
+};
+export const normalizeNoSqlDbStorageRehearsalOperationOptions = (value) => {
+    try {
+        if (value === undefined)
+            return { timeoutMs: 3_600_000 };
+        if (!object(value) || !exactKeys(value, [], ['timeoutMs', 'signal'])
+            || (value.timeoutMs !== undefined && !integer(value.timeoutMs, 1, 86_400_000))
+            || (value.signal !== undefined && !(value.signal instanceof AbortSignal)))
+            return fail();
+        return { timeoutMs: value.timeoutMs ?? 3_600_000, signal: value.signal };
+    }
+    catch {
+        return fail();
+    }
+};
+export const normalizeNoSqlDbStorageRehearsalInput = (value) => {
+    if (!object(value) || !exactKeys(value, ['sourceFolderPath', 'destinationFolderPath', 'operationId'], ['expectedSourceProviderRootId', 'limits'])
+        || !canonicalPath(value.sourceFolderPath) || !canonicalPath(value.destinationFolderPath)
+        || value.sourceFolderPath === value.destinationFolderPath
+        || value.sourceFolderPath.startsWith(`${value.destinationFolderPath}/`)
+        || value.destinationFolderPath.startsWith(`${value.sourceFolderPath}/`)
+        || (value.expectedSourceProviderRootId !== undefined && !digest(value.expectedSourceProviderRootId))
+        || !identifier(value.operationId))
+        return fail();
+    const limits = value.limits === undefined ? { maximumEntries: 100_000, maximumBytes: 1024 ** 4 } : value.limits;
+    if (!object(limits) || !exactKeys(limits, ['maximumEntries', 'maximumBytes'])
+        || !integer(limits.maximumEntries, 1, 100_000) || !integer(limits.maximumBytes, 1, 1024 ** 4))
+        return fail();
+    return {
+        sourceFolderPath: value.sourceFolderPath,
+        destinationFolderPath: value.destinationFolderPath,
+        ...(value.expectedSourceProviderRootId === undefined ? {} : { expectedSourceProviderRootId: value.expectedSourceProviderRootId }),
+        operationId: value.operationId,
+        limits: { maximumEntries: limits.maximumEntries, maximumBytes: limits.maximumBytes },
+    };
+};
+const preservationKeys = ['files', 'bytes', 'databases', 'collections', 'documents', 'indexes', 'indexAliases', 'users', 'principalIdentities', 'retiredDatabases', 'retiredCollections', 'retiredDocuments', 'retiredIndexes', 'retiredPrincipals', 'allocationReplays', 'resources', 'receipts', 'maximumFencingToken', 'publicationHolds', 'activeAllocations', 'retiredAllocations', 'sessions', 'retiringSessions', 'retryOutcomes', 'transactionOutcomes', 'obsoleteOutcomes', 'records', 'encodedRecordBytes'];
+const receiptKeys = ['format', 'operationId', 'requestSha256', 'storageProfile', 'sourceFolderPath', 'destinationFolderPath', 'sourceProviderRootId', 'destinationProviderRootId', 'sourceStorageRootSha256', 'sourceSnapshotSha256', 'destinationDevice', 'destinationInode', 'groupId', 'timelineId', 'sourceLsn', 'destinationLsn', 'sourceRecordsSha256', 'preservedRecordsSha256', 'scramIterations', 'preservation', 'sourceUnchanged', 'contentsAndIndexesPreserved', 'namespacesPreserved', 'authenticationPreserved', 'historicalFencingPreserved', 'outcomesPreserved', 'filesystemBindingsVerified', 'productionAuthority', 'promotionSupported', 'receiptSha256'];
+const unsigned = (value) => typeof value === 'string'
+    && /^(0|[1-9][0-9]{0,19})$/.test(value) && BigInt(value) <= 0xffffffffffffffffn;
+export const normalizeNoSqlDbStorageRehearsalReceipt = (value, input) => {
+    if (!object(value) || !exactKeys(value, receiptKeys) || !object(value.preservation)
+        || !exactKeys(value.preservation, preservationKeys)
+        || !preservationKeys.every((key) => key === 'maximumFencingToken'
+            ? unsigned(value.preservation[key])
+            : integer(value.preservation[key], 0, Number.MAX_SAFE_INTEGER))
+        || value.format !== 'smartdb.storage-rehearsal.receipt.v2' || value.storageProfile !== 'native-mvcc-authenticated-v1'
+        || value.operationId !== input.operationId || value.sourceFolderPath !== input.sourceFolderPath
+        || value.destinationFolderPath !== input.destinationFolderPath
+        || (input.expectedSourceProviderRootId !== undefined && value.sourceProviderRootId !== input.expectedSourceProviderRootId)
+        || !['sourceProviderRootId', 'destinationProviderRootId', 'sourceSnapshotSha256', 'sourceRecordsSha256', 'preservedRecordsSha256', 'receiptSha256'].every((key) => digest(value[key]))
+        || value.sourceProviderRootId === value.destinationProviderRootId
+        || value.sourceStorageRootSha256 !== plugins.crypto.createHash('sha256').update(`${input.sourceFolderPath}/.__rustdb_mvcc/data`).digest('hex')
+        || value.requestSha256 !== sha256('smartdb.storage-rehearsal.request.v2\0', input)
+        || !integer(value.scramIterations, 4096, 0xffff_ffff)
+        || ![value.destinationDevice, value.destinationInode, value.sourceLsn, value.destinationLsn].every(unsigned)
+        || BigInt(value.sourceLsn) < 1n || BigInt(value.sourceLsn) + 1n !== BigInt(value.destinationLsn)
+        || !identifier(value.groupId) || !identifier(value.timelineId)
+        || !['sourceUnchanged', 'contentsAndIndexesPreserved', 'namespacesPreserved', 'authenticationPreserved', 'historicalFencingPreserved', 'outcomesPreserved', 'filesystemBindingsVerified'].every((key) => value[key] === true)
+        || value.productionAuthority !== false || value.promotionSupported !== false)
+        return fail('STATE_CORRUPT');
+    const preservation = Object.fromEntries(preservationKeys.map((key) => [key, value.preservation[key]]));
+    const normalized = Object.fromEntries(receiptKeys.map((key) => [key,
+        key === 'preservation' ? preservation : key === 'receiptSha256' ? '' : value[key]]));
+    if (sha256('smartdb.storage-rehearsal.receipt.v2\0', normalized) !== value.receiptSha256)
+        return fail('STATE_CORRUPT');
+    normalized.receiptSha256 = value.receiptSha256;
+    return normalized;
+};
+export const validateNoSqlDbStorageRehearsalStartup = (options) => {
+    if (options.storageRehearsalId === undefined)
+        return;
+    if (!identifier(options.storageRehearsalId) || options.storage !== 'file'
+        || (options.fileStorageStartup !== undefined && options.fileStorageStartup !== 'current-format-only') || !canonicalPath(options.storagePath)
+        || !canonicalPath(options.socketPath) || options.socketPath.startsWith(`${options.storagePath}/`)
+        || options.auth?.enabled !== true || (options.auth.users?.length ?? 0) !== 0
+        || !integer(options.auth.scramIterations, 4096, 0xffff_ffff))
+        return fail();
+};
+//# sourceMappingURL=data:application/json;base64,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