@optimystic/db-p2p-storage-fs 0.14.0 → 0.16.2

package/dist/src/file-storage.js

@@ -1,7 +1,10 @@
 import { promises as fs } from 'fs';
 import * as path from 'path';
+import { KvRawStorage } from "@optimystic/db-p2p";
 import { createLogger } from './logger.js';
+import { atomicWriteFile } from './atomic-write.js';
 const log = createLogger('storage:file');
+const decoder = new TextDecoder();
 // Colons are illegal in Windows filenames; encode them so action ids like
 // `tx:<hash>` and `stamp:<hash>` round-trip safely on all platforms.
 function encodeActionIdForFilename(actionId) {
@@ -10,83 +13,240 @@ function encodeActionIdForFilename(actionId) {
 function decodeFilenameToActionId(filename) {
     return filename.replace(/%3A/g, ':');
 }
-export class FileRawStorage {
+// A torn write leaves valid-prefix JSON cut off mid-token — JSON.parse throws
+// SyntaxError. Used as the "corrupt content → treat as missing" guard so a
+// crash-truncated file reads as absent (letting recover() make progress) instead
+// of surfacing a parse error forever. Only the JSON-valued stores use this; the
+// revisions store holds a bare ActionId string (not JSON) and is never guarded.
+// NOTE: every guarded read parses the JSON here (validate, discard) and the kernel's
+// decodeJson parses the same bytes AGAIN to build the value — 2× parse per get. The
+// guard is intrinsic to the driver's "corrupt→missing" contract (the kernel can't
+// express it), so it can't simply be dropped. Fine at current read volumes; if a read
+// path ever shows up hot, parse once and thread the parsed value through the driver.
+function isParseableJson(bytes) {
+    try {
+        JSON.parse(decoder.decode(bytes));
+        return true;
+    }
+    catch (err) {
+        if (err instanceof SyntaxError)
+            return false;
+        throw err;
+    }
+}
+/**
+ * Filesystem {@link RawStoreDriver}: the five logical block-storage stores mapped
+ * to five subdirectories under `basePath/<blockId>/`
+ * (`{meta.json,revs/,pend/,actions/,blocks/}`). The directory tree is a
+ * deliberate, human-inspectable/debuggable layout — it is NOT flattened into
+ * encoded-filename KV keys.
+ *
+ * `KvRawStorage` now owns all JSON serialization, so this driver reads/writes raw
+ * `Uint8Array` bytes and never does `JSON.stringify/parse` on values. Everything
+ * else fs-specific lives here: atomic (temp-file + rename) writes, the
+ * corrupt-content-as-missing read guard, colon-encoded action-id filenames with
+ * the legacy raw-colon read fallback + win32 guards, and rename-based promote.
+ */
+export class FileStoreDriver {
     basePath;
     constructor(basePath) {
         this.basePath = basePath;
         // TODO: use https://www.npmjs.com/package/proper-lockfile to take a lock on the basePath, also introduce explicit dispose pattern
     }
+    // --- metadata ---
     async getMetadata(blockId) {
-        return this.readIfExists(this.getMetadataPath(blockId));
+        return this.readBytesIfExists(this.getMetadataPath(blockId), true);
     }
-    async saveMetadata(blockId, metadata) {
-        await this.ensureAndWriteFile(this.getMetadataPath(blockId), JSON.stringify(metadata));
+    async putMetadata(blockId, value) {
+        await atomicWriteFile(this.getMetadataPath(blockId), value);
     }
+    // --- revisions ---
+    // The revisions store value is a bare ActionId string (kernel `encodeActionId`,
+    // NOT JSON), so it is read WITHOUT the JSON guard — any bytes are a valid string
+    // and `decodeActionId` never throws.
+    // NOTE: because there is no guard here, a *torn* revision file reads back as a wrong
+    // (truncated) ActionId rather than as missing — unlike the JSON stores, which torn-read
+    // as undefined. Atomic writes (temp+rename) make a new torn revision impossible; only a
+    // legacy pre-atomic-write torn rev could hit this, and recover() re-derives revisions
+    // from the actions store anyway. If revisions ever move to a non-atomic writer, add a
+    // checksum/length guard here.
     async getRevision(blockId, rev) {
-        return this.readIfExists(this.getRevisionPath(blockId, rev));
+        return this.readBytesIfExists(this.getRevisionPath(blockId, rev), false);
+    }
+    async putRevision(blockId, rev, value) {
+        await atomicWriteFile(this.getRevisionPath(blockId, rev), value);
     }
-    async saveRevision(blockId, rev, actionId) {
-        await this.ensureAndWriteFile(this.getRevisionPath(blockId, rev), JSON.stringify(actionId));
+    async *rangeRevisions(blockId, lo, hi, reverse) {
+        // The fs backend has no cursor: walk the bounded [lo, hi] range rev-by-rev,
+        // reading each present rev. The range is caller-bounded, so this avoids
+        // listing an unbounded revs/ directory. Drain into an array BEFORE yielding
+        // (drain-before-yield contract) — matches the memory/native drivers and keeps
+        // the consumer's interleaved awaits from straddling any in-flight read.
+        const results = [];
+        for (let rev = lo; rev <= hi; rev++) {
+            const value = await this.readBytesIfExists(this.getRevisionPath(blockId, rev), false);
+            if (value !== undefined) {
+                results.push([rev, value]);
+            }
+        }
+        if (reverse) {
+            results.reverse();
+        }
+        for (const result of results) {
+            yield result;
+        }
     }
-    async getPendingTransaction(blockId, actionId) {
-        return this.readIfExists(this.getPendingActionPath(blockId, actionId));
+    // --- pending ---
+    async getPending(blockId, actionId) {
+        return this.readActionScopedBytes(this.getPendingActionPath(blockId, actionId), this.getPendingActionPath(blockId, actionId, false));
     }
-    async savePendingTransaction(blockId, actionId, transform) {
-        await this.ensureAndWriteFile(this.getPendingActionPath(blockId, actionId), JSON.stringify(transform));
+    async putPending(blockId, actionId, value) {
+        await atomicWriteFile(this.getPendingActionPath(blockId, actionId), value);
     }
-    async deletePendingTransaction(blockId, actionId) {
+    async deletePending(blockId, actionId) {
         const pendingPath = this.getPendingActionPath(blockId, actionId);
         await fs.unlink(pendingPath)
             .catch((err) => {
             if (err?.code !== 'ENOENT')
-                log('deletePendingTransaction unlink failed for %s/%s - %o', blockId, actionId, err);
+                log('deletePending unlink failed for %s/%s - %o', blockId, actionId, err);
         });
+        await this.unlinkRawColon(pendingPath, this.getPendingActionPath(blockId, actionId, false));
     }
-    async *listPendingTransactions(blockId) {
+    async *listPendingActionIds(blockId) {
         const pendingPath = path.join(this.getBlockPath(blockId), 'pend');
-        const files = await fs.readdir(pendingPath).catch((err) => { log('listPendingTransactions readdir failed for %s - %o', blockId, err); return []; });
+        // Only a genuinely-absent directory (ENOENT) maps to "no pendings". Any other error
+        // (EACCES, EIO, ENOTDIR, ...) must surface — swallowing it here would make
+        // listPendingActionIds silently report an empty directory, so pend's conflict
+        // detection would be skipped. Mirrors directoryByteSize's ENOENT-vs-other discrimination.
+        const files = await fs.readdir(pendingPath).catch((err) => {
+            if (err?.code === 'ENOENT')
+                return [];
+            log('listPendingActionIds readdir failed for %s - %o', blockId, err);
+            throw err;
+        });
+        // Drain into an array before yielding (drain-before-yield): readdir has already
+        // resolved the full listing, so this just decodes/filters up front.
+        const ids = [];
         for (const file of files) {
             if (!file.endsWith('.json'))
                 continue;
             const actionId = decodeFilenameToActionId(file.slice(0, -5));
-            // Accept legacy UUID format and consensus tx:/stamp: format. The
-            // consensus hash is base64url-encoded SHA-256 (see db-core hashString),
-            // so its alphabet is [A-Za-z0-9_-] — NOT lowercase hex.
-            if (!/^(?:[\w\d]+-[\w\d]+-[\w\d]+-[\w\d]+-[\w\d]+|(?:tx|stamp):[A-Za-z0-9_-]+)$/.test(actionId))
+            // Accept every realistic action id: legacy UUIDs (`[0-9a-f-]`), consensus
+            // tx:/stamp: ids (base64url-encoded SHA-256, alphabet `[A-Za-z0-9_-]` — see
+            // db-core hashString, NOT lowercase hex), AND the bare-alphanumeric ids the
+            // cross-backend conformance suite uses (`a1`, `b1`, ...). This is deliberately
+            // broad-but-not-total: an id is any `[A-Za-z0-9_-]` string, optionally prefixed
+            // with `tx:`/`stamp:`. It is NOT a total accept — a file whose decoded name
+            // carries other punctuation (a dot, a space) is genuine junk in pend/ and is
+            // logged-and-skipped rather than surfaced as a phantom pending. The memory/db
+            // reference drivers key on the raw id and never see a filesystem name, so this
+            // filter is fs-only; it must not drop an id those backends would list, hence the
+            // widened class (an earlier hex-only class silently dropped real consensus ids —
+            // see `optimystic-filestorage-colon-actionid-windows`).
+            if (!/^(?:tx:|stamp:)?[A-Za-z0-9_-]+$/.test(actionId)) {
+                // Leave a breadcrumb rather than silently dropping: the .json + decode guard
+                // already excludes *.tmp orphans, so anything reaching here is an unexpected
+                // filename a maintainer should see.
+                log('listPendingActionIds skipping unrecognized action-id file %s for %s', file, blockId);
                 continue;
-            yield actionId;
+            }
+            ids.push(actionId);
+        }
+        for (const id of ids) {
+            yield id;
         }
     }
+    // --- transactions ---
     async getTransaction(blockId, actionId) {
-        return this.readIfExists(this.getActionPath(blockId, actionId));
+        return this.readActionScopedBytes(this.getActionPath(blockId, actionId), this.getActionPath(blockId, actionId, false));
     }
-    async *listRevisions(blockId, startRev, endRev) {
-        for (let rev = startRev; startRev <= endRev ? rev <= endRev : rev >= endRev; startRev <= endRev ? ++rev : --rev) {
-            const actionId = await this.getRevision(blockId, rev);
-            if (actionId) {
-                yield { actionId, rev };
-            }
-        }
+    async putTransaction(blockId, actionId, value) {
+        await atomicWriteFile(this.getActionPath(blockId, actionId), value);
     }
-    async saveTransaction(blockId, actionId, transform) {
-        await this.ensureAndWriteFile(this.getActionPath(blockId, actionId), JSON.stringify(transform));
+    // --- materialized ---
+    async getMaterialized(blockId, actionId) {
+        return this.readActionScopedBytes(this.getMaterializedPath(blockId, actionId), this.getMaterializedPath(blockId, actionId, false));
     }
-    async getMaterializedBlock(blockId, actionId) {
-        return this.readIfExists(this.getMaterializedPath(blockId, actionId));
+    async putMaterialized(blockId, actionId, value) {
+        await atomicWriteFile(this.getMaterializedPath(blockId, actionId), value);
     }
-    async saveMaterializedBlock(blockId, actionId, block) {
-        if (block) {
-            await this.ensureAndWriteFile(this.getMaterializedPath(blockId, actionId), JSON.stringify(block));
-        }
-        else {
-            await fs.unlink(this.getMaterializedPath(blockId, actionId))
+    // The kernel owns the put-or-delete branch of `saveMaterializedBlock`, so the
+    // driver exposes delete as a separate op.
+    async deleteMaterialized(blockId, actionId) {
+        const matPath = this.getMaterializedPath(blockId, actionId);
+        await fs.unlink(matPath)
+            .catch((err) => {
+            if (err?.code !== 'ENOENT')
+                log('deleteMaterialized unlink failed for %s/%s - %o', blockId, actionId, err);
+        });
+        await this.unlinkRawColon(matPath, this.getMaterializedPath(blockId, actionId, false));
+    }
+    // --- promote (the only cross-key atomic op) ---
+    async promote(blockId, actionId) {
+        const pendingPath = this.getPendingActionPath(blockId, actionId);
+        const actionPath = this.getActionPath(blockId, actionId);
+        await fs.mkdir(path.dirname(actionPath), { recursive: true });
+        // This single rename IS the atomic move — it is why fs honors the kernel's
+        // promote contract without a WAL. A crash leaves either the pending or the
+        // committed file, never both/neither. Do NOT replace with read-write-delete.
+        return fs.rename(pendingPath, actionPath)
+            .catch(err => {
+            if (err.code === 'ENOENT') {
+                throw new Error(`Pending action ${actionId} not found for block ${blockId}`);
+            }
+            log('promote rename failed for %s/%s - %o', blockId, actionId, err);
+            throw err;
+        });
+    }
+    // --- optional passthroughs ---
+    async *listBlockIds() {
+        // The block layout is `basePath/<blockId>/{meta.json,revs/,pend/,actions/,blocks/}`
+        // (see getBlockPath), so the direct children of basePath are the per-block directories
+        // and each directory NAME is the blockId (used raw, no encoding). Filter to directories
+        // so a stray file can't be mistaken for a block; `*.tmp` atomic-write orphans live inside
+        // block subdirs, never at basePath root, so the root is clean.
+        //
+        // A directory alone is NOT sufficient to call a block "durable owned": a block that was
+        // only PENDED (never committed) still creates `<blockId>/pend/` — hence a root directory
+        // entry — via atomicWriteFile's recursive mkdir, but has no meta.json. So we gate on
+        // meta.json existence: `meta.json` IS this backend's metadata store, and enumerating it
+        // yields exactly the blocks with a committed revision / persisted replica (the same
+        // "owned" population the live change feed tracks, and the same one the metadata-keyed
+        // backends — sqlite/leveldb/indexeddb — enumerate for free). Existence (fs.access), not
+        // parse, matches key-existence semantics: a torn/corrupt meta.json still counts as a key,
+        // exactly as a corrupt value would in the other backends.
+        //
+        // ENOENT (basePath not created yet, or a dir without meta.json) maps to "not owned" —
+        // same discrimination as directoryByteSize. Any OTHER readdir/access error must surface:
+        // swallowing it would make the seed falsely report an empty store and under-protect data
+        // already on disk.
+        // NOTE: reads the whole root listing up front + one meta.json stat per block dir; if a
+        // store ever grows to millions of block subdirs and this becomes a startup-latency
+        // problem, page it (e.g. opendir cursor) — fine at current scale.
+        const entries = await fs.readdir(this.basePath, { withFileTypes: true })
+            .catch((err) => {
+            if (err?.code === 'ENOENT')
+                return [];
+            log('listBlockIds readdir failed for %s - %o', this.basePath, err);
+            throw err;
+        });
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const blockId = entry.name;
+            const hasMeta = await fs.access(this.getMetadataPath(blockId))
+                .then(() => true)
                 .catch((err) => {
-                if (err?.code !== 'ENOENT')
-                    log('saveMaterializedBlock unlink failed for %s/%s - %o', blockId, actionId, err);
+                if (err?.code === 'ENOENT')
+                    return false;
+                log('listBlockIds access failed for %s - %o', blockId, err);
+                throw err;
             });
+            if (hasMeta)
+                yield blockId;
         }
     }
-    async getApproximateBytesUsed() {
+    async approximateBytesUsed() {
         return this.directoryByteSize(this.basePath);
     }
     async directoryByteSize(dir) {
@@ -117,19 +277,7 @@ export class FileRawStorage {
         }
         return total;
     }
-    async promotePendingTransaction(blockId, actionId) {
-        const pendingPath = this.getPendingActionPath(blockId, actionId);
-        const actionPath = this.getActionPath(blockId, actionId);
-        await fs.mkdir(path.dirname(actionPath), { recursive: true });
-        return fs.rename(pendingPath, actionPath)
-            .catch(err => {
-            if (err.code === 'ENOENT') {
-                throw new Error(`Pending action ${actionId} not found for block ${blockId}`);
-            }
-            log('promotePendingTransaction rename failed for %s/%s - %o', blockId, actionId, err);
-            throw err;
-        });
-    }
+    // --- paths ---
     getBlockPath(blockId) {
         return path.join(this.basePath, blockId);
     }
@@ -139,27 +287,95 @@ export class FileRawStorage {
     getRevisionPath(blockId, rev) {
         return path.join(this.getBlockPath(blockId), 'revs', `${rev}.json`);
     }
-    getPendingActionPath(blockId, actionId) {
-        return path.join(this.getBlockPath(blockId), 'pend', `${encodeActionIdForFilename(actionId)}.json`);
+    // `encoded` controls colon handling: writes and canonical reads use the
+    // percent-encoded filename (encoded = true); the legacy raw-colon fallback
+    // (see readActionScopedBytes) passes encoded = false to reach pre-encode
+    // POSIX files like `actions/tx:<hash>.json`.
+    getPendingActionPath(blockId, actionId, encoded = true) {
+        const filename = encoded ? encodeActionIdForFilename(actionId) : actionId;
+        return path.join(this.getBlockPath(blockId), 'pend', `${filename}.json`);
     }
-    getActionPath(blockId, actionId) {
-        return path.join(this.getBlockPath(blockId), 'actions', `${encodeActionIdForFilename(actionId)}.json`);
+    getActionPath(blockId, actionId, encoded = true) {
+        const filename = encoded ? encodeActionIdForFilename(actionId) : actionId;
+        return path.join(this.getBlockPath(blockId), 'actions', `${filename}.json`);
     }
-    getMaterializedPath(blockId, actionId) {
-        return path.join(this.getBlockPath(blockId), 'blocks', `${encodeActionIdForFilename(actionId)}.json`);
+    getMaterializedPath(blockId, actionId, encoded = true) {
+        const filename = encoded ? encodeActionIdForFilename(actionId) : actionId;
+        return path.join(this.getBlockPath(blockId), 'blocks', `${filename}.json`);
     }
-    async readIfExists(filePath) {
-        return fs.readFile(filePath, 'utf-8')
-            .then(content => JSON.parse(content))
-            .catch(err => {
-            if (err.code === 'ENOENT')
+    // Best-effort removal of a pre-encode raw-colon file after the encoded delete,
+    // so a deleted item cannot resurface via the read fallback in readActionScopedBytes.
+    // Skipped on win32 (raw-colon files cannot exist there) and when paths are identical
+    // (action id contains no colon — only one syscall needed). ENOENT is silently ignored.
+    async unlinkRawColon(encodedPath, rawPath) {
+        if (process.platform === 'win32' || rawPath === encodedPath)
+            return;
+        await fs.unlink(rawPath).catch((err) => {
+            if (err?.code !== 'ENOENT')
+                log('unlinkRawColon failed for %s - %o', rawPath, err);
+        });
+    }
+    // Reads an action-id-keyed file (JSON-valued) by its canonical (percent-encoded)
+    // path, falling back on a miss to the legacy raw-colon path written by pre-encode
+    // nodes (e.g. POSIX files literally named `actions/tx:<hash>.json`).
+    //
+    // Tradeoff: this reads legacy files in place and never renames them, so a
+    // store upgraded from a pre-encode node keeps mixed naming on disk. That is
+    // acceptable pre-1.0; a future migration sweep can normalize if desired. We
+    // deliberately do NOT migrate-on-read here — reads stay side-effect-free.
+    //
+    // win32 guard: a raw-colon path is not a benign miss on Windows — the colon
+    // is parsed as an NTFS alternate-data-stream separator and a read there can
+    // throw a non-ENOENT error rather than cleanly missing. Raw-colon files
+    // cannot have been written on win32 anyway, so we skip the fallback there
+    // (losing nothing) and swallow ALL fallback errors elsewhere, guaranteeing
+    // the fallback never surfaces a new throw to callers.
+    async readActionScopedBytes(encodedPath, rawPath) {
+        const hit = await this.readBytesIfExists(encodedPath, true);
+        if (hit !== undefined)
+            return hit;
+        if (process.platform === 'win32' || rawPath === encodedPath)
+            return undefined;
+        return fs.readFile(rawPath)
+            .then(bytes => (isParseableJson(bytes) ? bytes : undefined))
+            .catch(() => undefined);
+    }
+    // Reads a file's raw bytes. ENOENT → undefined. When `jsonGuard` is set, a
+    // present-but-corrupt file (JSON.parse fails — most likely a torn write from a
+    // crash before atomic writes existed) is treated as "missing" so recover() and
+    // normal reads make progress instead of rethrowing forever. A real I/O error
+    // (permissions, EIO, EISDIR, ...) still throws — it must not be masked.
+    async readBytesIfExists(filePath, jsonGuard) {
+        let bytes;
+        try {
+            bytes = await fs.readFile(filePath);
+        }
+        catch (err) {
+            if (err?.code === 'ENOENT')
                 return undefined;
             throw err;
-        });
+        }
+        if (jsonGuard && !isParseableJson(bytes)) {
+            log('readBytesIfExists: corrupt JSON at %s, treating as missing', filePath);
+            return undefined;
+        }
+        return bytes;
     }
-    async ensureAndWriteFile(filePath, content) {
-        await fs.mkdir(path.dirname(filePath), { recursive: true });
-        await fs.writeFile(filePath, content);
+}
+/**
+ * Filesystem-backed {@link IRawStorage}, now a thin shell over the shared
+ * {@link KvRawStorage} kernel driven by a {@link FileStoreDriver}. The public
+ * name/constructor (`new FileRawStorage(basePath)`) is unchanged so existing
+ * imports keep resolving; the kernel supplies the `IRawStorage` surface and the
+ * driver supplies fs behavior.
+ *
+ * `listBlockIds`/`getApproximateBytesUsed` are re-declared here as always-present
+ * (the fs driver always implements them, so the kernel constructor always wires
+ * them) — the base declares them optional, but every fs consumer relies on them.
+ */
+export class FileRawStorage extends KvRawStorage {
+    constructor(basePath) {
+        super(new FileStoreDriver(basePath));
     }
 }
 //# sourceMappingURL=file-storage.js.map

package/dist/src/file-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage.js","sourceRoot":"","sources":["../../src/file-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAEzC,0EAA0E;AAC1E,qEAAqE;AACrE,SAAS,yBAAyB,CAAC,QAAkB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAa,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,cAAc;IACG;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAC5C,kIAAkI;IACnI,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,OAAO,IAAI,CAAC,YAAY,CAAgB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAuB;QAC3D,MAAM,IAAI,CAAC,kBAAkB,CAC5B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,OAAO,IAAI,CAAC,YAAY,CAAW,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,GAAW,EAAE,QAAkB;QACnE,MAAM,IAAI,CAAC,kBAAkB,CAC5B,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB;QAC/D,OAAO,IAAI,CAAC,YAAY,CAAY,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QACtF,MAAM,IAAI,CAAC,kBAAkB,CAC5B,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC5C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAgB,EAAE,QAAkB;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,uDAAuD,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAgB;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAElE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,oDAAoD,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAChK,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,iEAAiE;YACjE,wEAAwE;YACxE,wDAAwD;YACxD,IAAI,CAAC,2EAA2E,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC1G,MAAM,QAAQ,CAAC;QAChB,CAAC;IACF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,OAAO,IAAI,CAAC,YAAY,CAAY,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAgB,EAAE,MAAc;QACtE,KAAK,IAAI,GAAG,GAAG,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACjH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtD,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YACzB,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,SAAoB;QAC/E,MAAM,IAAI,CAAC,kBAAkB,CAC5B,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAgB,EAAE,QAAkB;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAS,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAc;QAC/E,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,kBAAkB,CAC5B,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;iBAC1D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;oBAAE,GAAG,CAAC,oDAAoD,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1I,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAW;QAC1C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC5D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACjE,GAAG,CAAC,8CAA8C,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QAEJ,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,KAAK,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;qBACnC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC;qBACnB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;wBAAE,OAAO,CAAC,CAAC;oBAChE,GAAG,CAAC,2CAA2C,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;oBACjE,OAAO,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC;gBACJ,KAAK,IAAI,IAAI,CAAC;YACf,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,OAAgB,EAAE,QAAkB;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9D,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;aACvC,KAAK,CAAC,GAAG,CAAC,EAAE;YACZ,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,wBAAwB,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,GAAG,CAAC,wDAAwD,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACtF,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,OAAgB;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEO,eAAe,CAAC,OAAgB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAEO,eAAe,CAAC,OAAgB,EAAE,GAAW;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACrE,CAAC;IAEO,oBAAoB,CAAC,OAAgB,EAAE,QAAkB;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;IAEO,aAAa,CAAC,OAAgB,EAAE,QAAkB;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxG,CAAC;IAEO,mBAAmB,CAAC,OAAgB,EAAE,QAAkB;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,YAAY,CAAI,QAAgB;QAC7C,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;aACnC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;aACzC,KAAK,CAAC,GAAG,CAAC,EAAE;YACZ,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,OAAe;QACjE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACD"}
+{"version":3,"file":"file-storage.js","sourceRoot":"","sources":["../../src/file-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAuB,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,0EAA0E;AAC1E,qEAAqE;AACrE,SAAS,yBAAyB,CAAC,QAAkB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAa,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,qFAAqF;AACrF,oFAAoF;AACpF,kFAAkF;AAClF,sFAAsF;AACtF,qFAAqF;AACrF,SAAS,eAAe,CAAC,KAAiB;IACzC,IAAI,CAAC;QACJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,WAAW;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,eAAe;IACE;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;QAC5C,kIAAkI;IACnI,CAAC;IAED,mBAAmB;IAEnB,KAAK,CAAC,WAAW,CAAC,OAAgB;QACjC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,KAAiB;QACpD,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,oBAAoB;IAEpB,gFAAgF;IAChF,iFAAiF;IACjF,qCAAqC;IACrC,qFAAqF;IACrF,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,sFAAsF;IACtF,8BAA8B;IAC9B,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW;QAC9C,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAW,EAAE,KAAiB;QACjE,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,CAAC,cAAc,CAAC,OAAgB,EAAE,EAAU,EAAE,EAAU,EAAE,OAAgB;QAC/E,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,8EAA8E;QAC9E,wEAAwE;QACxE,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,IAAI,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACtF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC;QACd,CAAC;IACF,CAAC;IAED,kBAAkB;IAElB,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB;QACpD,OAAO,IAAI,CAAC,qBAAqB,CAChC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC5C,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QACvE,MAAM,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,QAAkB;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,4CAA4C,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClI,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,CAAC,oBAAoB,CAAC,OAAgB;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAElE,oFAAoF;QACpF,2EAA2E;QAC3E,8EAA8E;QAC9E,0FAA0F;QAC1F,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACzD,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAc,CAAC;YAC7E,GAAG,CAAC,iDAAiD,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;QACH,gFAAgF;QAChF,oEAAoE;QACpE,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,0EAA0E;YAC1E,4EAA4E;YAC5E,4EAA4E;YAC5E,+EAA+E;YAC/E,gFAAgF;YAChF,4EAA4E;YAC5E,6EAA6E;YAC7E,8EAA8E;YAC9E,+EAA+E;YAC/E,iFAAiF;YACjF,iFAAiF;YACjF,wDAAwD;YACxD,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,6EAA6E;gBAC7E,6EAA6E;gBAC7E,oCAAoC;gBACpC,GAAG,CAAC,qEAAqE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1F,SAAS;YACV,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB;QACxD,OAAO,IAAI,CAAC,qBAAqB,CAChC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EACrC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC3E,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,uBAAuB;IAEvB,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB;QACzD,OAAO,IAAI,CAAC,qBAAqB,CAChC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC3C,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB,EAAE,QAAkB,EAAE,KAAiB;QAC5E,MAAM,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,0CAA0C;IAC1C,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,QAAkB;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;aACtB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,iDAAiD,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvI,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,iDAAiD;IAEjD,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,QAAkB;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9D,2EAA2E;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;aACvC,KAAK,CAAC,GAAG,CAAC,EAAE;YACZ,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,wBAAwB,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,GAAG,CAAC,sCAAsC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAEhC,KAAK,CAAC,CAAC,YAAY;QAClB,oFAAoF;QACpF,uFAAuF;QACvF,wFAAwF;QACxF,0FAA0F;QAC1F,+DAA+D;QAC/D,EAAE;QACF,wFAAwF;QACxF,yFAAyF;QACzF,qFAAqF;QACrF,wFAAwF;QACxF,oFAAoF;QACpF,sFAAsF;QACtF,wFAAwF;QACxF,0FAA0F;QAC1F,0DAA0D;QAC1D,EAAE;QACF,sFAAsF;QACtF,yFAAyF;QACzF,yFAAyF;QACzF,mBAAmB;QACnB,uFAAuF;QACvF,mFAAmF;QACnF,kEAAkE;QAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACtE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACjE,GAAG,CAAC,yCAAyC,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnE,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAe,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;iBAC5D,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;iBAChB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACpE,GAAG,CAAC,wCAAwC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC5D,MAAM,GAAG,CAAC;YACX,CAAC,CAAC,CAAC;YACJ,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC;QAC5B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAW;QAC1C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC5D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACjE,GAAG,CAAC,8CAA8C,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QAEJ,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,KAAK,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;qBACnC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC;qBACnB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;wBAAE,OAAO,CAAC,CAAC;oBAChE,GAAG,CAAC,2CAA2C,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;oBACjE,OAAO,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC;gBACJ,KAAK,IAAI,IAAI,CAAC;YACf,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,gBAAgB;IAER,YAAY,CAAC,OAAgB;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEO,eAAe,CAAC,OAAgB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAEO,eAAe,CAAC,OAAgB,EAAE,GAAW;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,6CAA6C;IACrC,oBAAoB,CAAC,OAAgB,EAAE,QAAkB,EAAE,OAAO,GAAG,IAAI;QAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC1E,CAAC;IAEO,aAAa,CAAC,OAAgB,EAAE,QAAkB,EAAE,OAAO,GAAG,IAAI;QACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC7E,CAAC;IAEO,mBAAmB,CAAC,OAAgB,EAAE,QAAkB,EAAE,OAAO,GAAG,IAAI;QAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,+EAA+E;IAC/E,qFAAqF;IACrF,qFAAqF;IACrF,uFAAuF;IAC/E,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,OAAe;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO;QACpE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACtC,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,mCAAmC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/G,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,kFAAkF;IAClF,qEAAqE;IACrE,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,sDAAsD;IAC9C,KAAK,CAAC,qBAAqB,CAAC,WAAmB,EAAE,OAAe;QACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QAC9E,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;aACzB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aAC3D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,wEAAwE;IAChE,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,SAAkB;QACnE,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACxE,MAAM,GAAG,CAAC;QACX,CAAC;QACD,IAAI,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,4DAA4D,EAAE,QAAQ,CAAC,CAAC;YAC5E,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IAI/C,YAAY,QAAgB;QAC3B,KAAK,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,CAAC;CACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optimystic/db-p2p-storage-fs",
-  "version": "0.14.0",
+  "version": "0.16.2",
   "type": "module",
   "description": "Node.js filesystem storage backend for @optimystic/db-p2p",
   "main": "dist/src/index.js",
@@ -34,18 +34,22 @@
   ],
   "scripts": {
     "clean": "rimraf dist",
-    "build": "tsc"
+    "build": "tsc",
+    "test": "node --import ./register.mjs node_modules/mocha/bin/mocha.js \"test/**/*.spec.ts\" --colors --reporter min",
+    "test:verbose": "node --import ./register.mjs node_modules/mocha/bin/mocha.js \"test/**/*.spec.ts\" --colors --reporter spec"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
     "@types/mocha": "^10.0.10",
     "@types/node": "^25.1.0",
+    "mocha": "^11.7.5",
     "rimraf": "^6.1.2",
+    "ts-node": "^10.9.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@optimystic/db-core": "^0.14.0",
-    "@optimystic/db-p2p": "^0.14.0",
+    "@optimystic/db-core": "^0.16.2",
+    "@optimystic/db-p2p": "^0.16.2",
     "debug": "^4.4.3"
   }
 }

package/src/atomic-write.ts

@@ -0,0 +1,82 @@
+import { promises as fs } from 'fs';
+import * as path from 'path';
+
+// Per-process monotonic counter for unique temp names. Combined with the pid it
+// makes each temp path unique across concurrent writers to the same logical
+// target — even two FileRawStorage/FileKVStore instances in one process, which
+// do not lock (see the proper-lockfile TODO in file-storage.ts). Deterministic
+// and collision-safe, unlike Math.random()/Date.now().
+let tempCounter = 0;
+
+/**
+ * Atomically write `content` to `filePath`.
+ *
+ * Writes to a unique `*.tmp` sibling, fsyncs the data, then renames it into
+ * place. `rename` over an existing file is atomic on POSIX and NTFS, so a
+ * concurrent reader only ever sees the complete old file or the complete new
+ * file — never a torn/half-written one. After the rename we best-effort fsync
+ * the containing directory so the rename itself survives power loss on POSIX;
+ * that directory fsync is unsupported on win32 and its error is swallowed.
+ *
+ * On any failure the temp file is removed (best-effort) so a crashed write does
+ * not leave the canonical path damaged. A crash *between* the temp write and the
+ * rename leaves only an inert `*.tmp` sibling — never read (reads target
+ * canonical paths) and skipped by `.json` directory scans.
+ *
+ * `content` is `string | Uint8Array`: `FileKVStore` writes strings, while the
+ * `KvRawStorage`-backed `FileStoreDriver` writes the kernel's raw value bytes.
+ * `FileHandle.writeFile` writes either losslessly — a `Uint8Array` is written
+ * byte-for-byte, so non-ASCII JSON round-trips exactly.
+ */
+export async function atomicWriteFile(filePath: string, content: string | Uint8Array): Promise<void> {
+	const dir = path.dirname(filePath);
+	await fs.mkdir(dir, { recursive: true });
+
+	// Suffix ends in `.tmp` (not `.json`) so listPendingTransactions / FileKVStore.list,
+	// which filter on `.json`, never surface an in-flight temp file.
+	// NOTE: a crash between open and rename leaves an inert `*.tmp` orphan (never read,
+	// skipped by `.json` scans). No cleanup sweep exists; if a crash-looping writer ever
+	// accumulates many, add a startup sweep of stale `*.tmp` siblings.
+	const tmpPath = path.join(dir, `${path.basename(filePath)}.${process.pid}.${tempCounter++}.tmp`);
+
+	let handle: fs.FileHandle | undefined;
+	try {
+		handle = await fs.open(tmpPath, 'w');
+		await handle.writeFile(content);
+		await handle.sync();
+		await handle.close();
+		handle = undefined;
+		// NOTE: on win32, rename-over-existing can throw EPERM/EACCES/EBUSY if a
+		// concurrent reader holds the target open without FILE_SHARE_DELETE (Node
+		// readIfExists/get open→read→close in a tiny window, so it's rare). Modern
+		// libuv retries some cases; if this ever surfaces as spurious write failures
+		// under concurrent read+write on Windows, add a bounded retry loop here (the
+		// write-file-atomic package does exactly this). Conditional — the adapter is
+		// already last-writer-wins with no cross-process lock (proper-lockfile TODO
+		// in file-storage.ts), so it is not reachable under current single-writer use.
+		await fs.rename(tmpPath, filePath);
+	} catch (err) {
+		if (handle) await handle.close().catch(() => { /* best-effort */ });
+		await fs.unlink(tmpPath).catch(() => { /* best-effort: temp may not exist */ });
+		throw err;
+	}
+
+	await fsyncDir(dir);
+}
+
+/**
+ * Best-effort fsync of a directory so a completed rename is durable. POSIX needs
+ * this; win32 (and platforms that reject opening a directory for fsync) throw,
+ * and we ignore that rather than failing the write.
+ */
+async function fsyncDir(dir: string): Promise<void> {
+	let handle: fs.FileHandle | undefined;
+	try {
+		handle = await fs.open(dir, 'r');
+		await handle.sync();
+	} catch {
+		// Directory fsync unsupported here (e.g. win32) — nothing to do.
+	} finally {
+		if (handle) await handle.close().catch(() => { /* best-effort */ });
+	}
+}

package/src/file-kv-store.ts

@@ -1,6 +1,7 @@
 import { promises as fs } from 'fs';
 import * as path from 'path';
 import type { IKVStore } from '@optimystic/db-p2p';
+import { atomicWriteFile } from './atomic-write.js';
 
 /** Filesystem-backed IKVStore. Keys may contain `/` separators which become subdirectories. */
 export class FileKVStore implements IKVStore {
@@ -16,9 +17,7 @@ export class FileKVStore implements IKVStore {
 	}
 
 	async set(key: string, value: string): Promise<void> {
-		const filePath = this.keyToPath(key);
-		await fs.mkdir(path.dirname(filePath), { recursive: true });
-		await fs.writeFile(filePath, value);
+		await atomicWriteFile(this.keyToPath(key), value);
 	}
 
 	async delete(key: string): Promise<void> {
@@ -57,6 +56,10 @@ export class FileKVStore implements IKVStore {
 	}
 
 	private keyToPath(key: string): string {
+		// NOTE: `/`-separated keys become nested dirs, so a key's first segment shares
+		// the top-level namespace with FileRawStorage's <blockId>/ dirs. Safe today
+		// because block ids are content hashes; if a KV key's first segment could ever
+		// equal a block id, give the two stores separate basePaths (see README Usage).
 		return path.join(this.basePath, ...key.split('/')) + '.json';
 	}
 }