@pcircle/evidencemcp-server 0.1.0 → 0.2.0

package/dist/lib/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/crypto/types.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB;IACrD,MAAM,EAAE,KAAK,EAAO,QAAQ;IAC5B,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,EAAE;CACd,CAAC"}

package/dist/lib/storage/database.d.ts

@@ -0,0 +1,66 @@
+import type { Evidence } from './types.js';
+/**
+ * Evidence database with CRUD operations
+ * Manages encrypted evidence storage with SQLite backend
+ */
+export declare class EvidenceDatabase {
+    private db;
+    /**
+     * Creates or opens an evidence database
+     * @param dbPath - Path to SQLite database file
+     */
+    constructor(dbPath: string);
+    /**
+     * Creates a new evidence record
+     * @param evidence - Evidence data without id, createdAt, updatedAt
+     * @returns UUID of created evidence
+     */
+    create(evidence: Omit<Evidence, 'id' | 'createdAt' | 'updatedAt'>): string;
+    /**
+     * Finds evidence by ID
+     * @param id - Evidence UUID
+     * @returns Evidence or null if not found
+     */
+    findById(id: string): Evidence | null;
+    /**
+     * Finds all evidences for a conversation
+     * @param conversationId - Conversation identifier
+     * @returns Array of evidences (empty if none found)
+     */
+    findByConversationId(conversationId: string): Evidence[];
+    /**
+     * Lists evidences with pagination
+     * @param options - Pagination options (limit, offset)
+     * @returns Array of evidences
+     */
+    list(options?: {
+        limit?: number;
+        offset?: number;
+    }): Evidence[];
+    /**
+     * Updates git commit information for an evidence
+     * @param id - Evidence UUID
+     * @param gitCommitHash - Git commit hash
+     * @param gitTimestamp - Git commit timestamp (ISO 8601)
+     */
+    updateGitInfo(id: string, gitCommitHash: string, gitTimestamp: string): void;
+    /**
+     * Adds tags to an evidence (appends to existing tags)
+     * @param id - Evidence UUID
+     * @param tags - Array of tags to add
+     */
+    addTags(id: string, tags: string[]): void;
+    /**
+     * Closes the database connection
+     * Should be called when done with the database
+     */
+    close(): void;
+    /**
+     * Converts database row to Evidence object
+     * Handles BLOB to Uint8Array conversion
+     * @param row - Raw database row
+     * @returns Evidence object
+     */
+    private rowToEvidence;
+}
+//# sourceMappingURL=database.d.ts.map

package/dist/lib/storage/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/database.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAqB3C;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,EAAE,CAAoB;IAE9B;;;OAGG;gBACS,MAAM,EAAE,MAAM;IAK1B;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG,MAAM;IAmC1E;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAkBrC;;;;OAIG;IACH,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,EAAE;IAiBxD;;;;OAIG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,EAAE;IA4B/D;;;;;OAKG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAoB5E;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI;IA4BzC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAIb;;;;;OAKG;IACH,OAAO,CAAC,aAAa;CAiBtB"}

package/dist/lib/storage/database.js

@@ -0,0 +1,195 @@
+import Database from 'better-sqlite3';
+import { createSchema } from './schema.js';
+/**
+ * Evidence database with CRUD operations
+ * Manages encrypted evidence storage with SQLite backend
+ */
+export class EvidenceDatabase {
+    db;
+    /**
+     * Creates or opens an evidence database
+     * @param dbPath - Path to SQLite database file
+     */
+    constructor(dbPath) {
+        this.db = new Database(dbPath);
+        createSchema(this.db);
+    }
+    /**
+     * Creates a new evidence record
+     * @param evidence - Evidence data without id, createdAt, updatedAt
+     * @returns UUID of created evidence
+     */
+    create(evidence) {
+        const id = crypto.randomUUID();
+        const now = new Date().toISOString();
+        try {
+            const stmt = this.db.prepare(`
+        INSERT INTO evidences (
+          id, timestamp, conversationId, llmProvider,
+          encryptedContent, nonce, contentHash, messageCount,
+          gitCommitHash, gitTimestamp, tags, createdAt, updatedAt
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `);
+            stmt.run(id, evidence.timestamp, evidence.conversationId, evidence.llmProvider, Buffer.from(evidence.encryptedContent), Buffer.from(evidence.nonce), evidence.contentHash, evidence.messageCount, evidence.gitCommitHash, evidence.gitTimestamp, evidence.tags, now, now);
+            return id;
+        }
+        catch (error) {
+            throw new Error(`Failed to create evidence: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Finds evidence by ID
+     * @param id - Evidence UUID
+     * @returns Evidence or null if not found
+     */
+    findById(id) {
+        try {
+            const stmt = this.db.prepare(`
+        SELECT * FROM evidences WHERE id = ?
+      `);
+            const row = stmt.get(id);
+            if (!row) {
+                return null;
+            }
+            return this.rowToEvidence(row);
+        }
+        catch (error) {
+            // Don't swallow database errors - re-throw with context
+            throw new Error(`Failed to find evidence by ID: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Finds all evidences for a conversation
+     * @param conversationId - Conversation identifier
+     * @returns Array of evidences (empty if none found)
+     */
+    findByConversationId(conversationId) {
+        try {
+            const stmt = this.db.prepare(`
+        SELECT * FROM evidences
+        WHERE conversationId = ?
+        ORDER BY timestamp ASC
+      `);
+            const rows = stmt.all(conversationId);
+            return rows.map((row) => this.rowToEvidence(row));
+        }
+        catch (error) {
+            throw new Error(`Failed to find evidences by conversationId: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Lists evidences with pagination
+     * @param options - Pagination options (limit, offset)
+     * @returns Array of evidences
+     */
+    list(options) {
+        try {
+            const limit = options?.limit;
+            const offset = options?.offset ?? 0;
+            let query = 'SELECT * FROM evidences ORDER BY timestamp DESC';
+            const params = [];
+            if (limit !== undefined) {
+                query += ' LIMIT ?';
+                params.push(limit);
+                if (offset > 0) {
+                    query += ' OFFSET ?';
+                    params.push(offset);
+                }
+            }
+            else if (offset > 0) {
+                query += ' LIMIT -1 OFFSET ?';
+                params.push(offset);
+            }
+            const stmt = this.db.prepare(query);
+            const rows = stmt.all(...params);
+            return rows.map((row) => this.rowToEvidence(row));
+        }
+        catch (error) {
+            throw new Error(`Failed to list evidences: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Updates git commit information for an evidence
+     * @param id - Evidence UUID
+     * @param gitCommitHash - Git commit hash
+     * @param gitTimestamp - Git commit timestamp (ISO 8601)
+     */
+    updateGitInfo(id, gitCommitHash, gitTimestamp) {
+        try {
+            const stmt = this.db.prepare(`
+        UPDATE evidences
+        SET gitCommitHash = ?,
+            gitTimestamp = ?,
+            updatedAt = ?
+        WHERE id = ?
+      `);
+            const result = stmt.run(gitCommitHash, gitTimestamp, new Date().toISOString(), id);
+            if (result.changes === 0) {
+                throw new Error(`Evidence with id ${id} not found`);
+            }
+        }
+        catch (error) {
+            throw new Error(`Failed to update git info: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Adds tags to an evidence (appends to existing tags)
+     * @param id - Evidence UUID
+     * @param tags - Array of tags to add
+     */
+    addTags(id, tags) {
+        try {
+            // First, get existing tags
+            const evidence = this.findById(id);
+            if (!evidence) {
+                throw new Error(`Evidence with id ${id} not found`);
+            }
+            // Parse existing tags or create empty array
+            const existingTags = evidence.tags ? JSON.parse(evidence.tags) : [];
+            // Merge tags
+            const mergedTags = [...existingTags, ...tags];
+            // Update database
+            const stmt = this.db.prepare(`
+        UPDATE evidences
+        SET tags = ?,
+            updatedAt = ?
+        WHERE id = ?
+      `);
+            stmt.run(JSON.stringify(mergedTags), new Date().toISOString(), id);
+        }
+        catch (error) {
+            throw new Error(`Failed to add tags: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Closes the database connection
+     * Should be called when done with the database
+     */
+    close() {
+        this.db.close();
+    }
+    /**
+     * Converts database row to Evidence object
+     * Handles BLOB to Uint8Array conversion
+     * @param row - Raw database row
+     * @returns Evidence object
+     */
+    rowToEvidence(row) {
+        return {
+            id: row.id,
+            timestamp: row.timestamp,
+            conversationId: row.conversationId,
+            llmProvider: row.llmProvider,
+            encryptedContent: new Uint8Array(row.encryptedContent),
+            nonce: new Uint8Array(row.nonce),
+            contentHash: row.contentHash,
+            messageCount: row.messageCount,
+            gitCommitHash: row.gitCommitHash,
+            gitTimestamp: row.gitTimestamp,
+            tags: row.tags,
+            createdAt: row.createdAt,
+            updatedAt: row.updatedAt
+        };
+    }
+}
+//# sourceMappingURL=database.js.map

package/dist/lib/storage/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/lib/storage/database.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsB3C;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,EAAE,CAAoB;IAE9B;;;OAGG;IACH,YAAY,MAAc;QACxB,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAA0D;QAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;OAM5B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CACN,EAAE,EACF,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,WAAW,EACpB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC3B,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,IAAI,EACb,GAAG,EACH,GAAG,CACJ,CAAC;YAEF,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,EAAU;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;OAE5B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAA4B,CAAC;YACpD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wDAAwD;YACxD,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,cAAsB;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;OAI5B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAkB,CAAC;YACvD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,OAA6C;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;YAEpC,IAAI,KAAK,GAAG,iDAAiD,CAAC;YAC9D,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,IAAI,UAAU,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACf,KAAK,IAAI,WAAW,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,IAAI,oBAAoB,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAkB,CAAC;YAClD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,EAAU,EAAE,aAAqB,EAAE,YAAoB;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;OAM5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAEnF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,EAAU,EAAE,IAAc;QAChC,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;YACtD,CAAC;YAED,4CAA4C;YAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpE,aAAa;YACb,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;YAE9C,kBAAkB;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;OAK5B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,aAAa,CAAC,GAAgB;QACpC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,gBAAgB,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACtD,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;CACF"}

package/dist/lib/storage/export.d.ts

@@ -0,0 +1,26 @@
+import type { EvidenceDatabase } from './database.js';
+export interface ExportOptions {
+    evidenceIds?: string[];
+    includeGitInfo?: boolean;
+    password?: string;
+}
+export interface ExportResult {
+    filename: string;
+    zipData: Uint8Array;
+    checksum: string;
+    evidenceCount: number;
+}
+/**
+ * Export evidences to a ZIP archive with encrypted data and metadata.
+ *
+ * ⚠️ **Memory Warning**: Entire ZIP is generated in-memory. For large exports
+ * (>1000 evidences or >100MB encrypted data), consider exporting in batches
+ * to avoid memory exhaustion.
+ *
+ * @param db - EvidenceDatabase instance
+ * @param options - Export options
+ * @returns Export result with ZIP data and metadata
+ * @throws Error if database operations fail, IDs not found, or ZIP generation fails
+ */
+export declare function exportEvidences(db: EvidenceDatabase, options?: ExportOptions): Promise<ExportResult>;
+//# sourceMappingURL=export.d.ts.map

package/dist/lib/storage/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/export.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAYD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,gBAAgB,EACpB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAiHvB"}

package/dist/lib/storage/export.js

@@ -0,0 +1,113 @@
+import JSZip from 'jszip';
+import { createHash } from 'node:crypto';
+// Export format version constant
+const EXPORT_FORMAT_VERSION = '1.0.0';
+/**
+ * Export evidences to a ZIP archive with encrypted data and metadata.
+ *
+ * ⚠️ **Memory Warning**: Entire ZIP is generated in-memory. For large exports
+ * (>1000 evidences or >100MB encrypted data), consider exporting in batches
+ * to avoid memory exhaustion.
+ *
+ * @param db - EvidenceDatabase instance
+ * @param options - Export options
+ * @returns Export result with ZIP data and metadata
+ * @throws Error if database operations fail, IDs not found, or ZIP generation fails
+ */
+export async function exportEvidences(db, options = {}) {
+    try {
+        const { evidenceIds, includeGitInfo = false } = options;
+        // Get evidences to export - validate IDs if specified
+        let evidences;
+        if (evidenceIds) {
+            // Validate all IDs exist first
+            const notFound = evidenceIds.filter(id => !db.findById(id));
+            if (notFound.length > 0) {
+                throw new Error(`Evidence IDs not found: ${notFound.join(', ')}`);
+            }
+            evidences = evidenceIds.map(id => db.findById(id));
+        }
+        else {
+            evidences = db.list();
+        }
+        // Create ZIP archive
+        const zip = new JSZip();
+        // Add manifest.json
+        const manifest = {
+            version: EXPORT_FORMAT_VERSION,
+            exportDate: new Date().toISOString(),
+            evidenceCount: evidences.length,
+            includeGitInfo,
+        };
+        zip.file('manifest.json', JSON.stringify(manifest, null, 2));
+        // Add each evidence
+        const checksumEntries = [];
+        for (const evidence of evidences) {
+            const evidenceFolder = `evidences/${evidence.id}`;
+            // Add encrypted-data
+            zip.file(`${evidenceFolder}/encrypted-data`, evidence.encryptedContent);
+            // Calculate checksum for encrypted data
+            const dataChecksum = createHash('sha256')
+                .update(evidence.encryptedContent)
+                .digest('hex');
+            checksumEntries.push(`${dataChecksum}  ${evidenceFolder}/encrypted-data`);
+            // Add metadata.json
+            const metadata = {
+                id: evidence.id,
+                timestamp: evidence.timestamp,
+                conversationId: evidence.conversationId,
+                llmProvider: evidence.llmProvider,
+                contentHash: evidence.contentHash,
+                messageCount: evidence.messageCount,
+                tags: evidence.tags,
+                nonce: Array.from(evidence.nonce), // Convert Uint8Array to array for JSON
+            };
+            const metadataJson = JSON.stringify(metadata, null, 2);
+            zip.file(`${evidenceFolder}/metadata.json`, metadataJson);
+            const metadataChecksum = createHash('sha256')
+                .update(metadataJson)
+                .digest('hex');
+            checksumEntries.push(`${metadataChecksum}  ${evidenceFolder}/metadata.json`);
+            // Add git-info.json if requested and available
+            if (includeGitInfo && evidence.gitCommitHash && evidence.gitTimestamp) {
+                const gitInfo = {
+                    gitCommitHash: evidence.gitCommitHash,
+                    gitTimestamp: evidence.gitTimestamp,
+                };
+                const gitInfoJson = JSON.stringify(gitInfo, null, 2);
+                zip.file(`${evidenceFolder}/git-info.json`, gitInfoJson);
+                const gitChecksum = createHash('sha256').update(gitInfoJson).digest('hex');
+                checksumEntries.push(`${gitChecksum}  ${evidenceFolder}/git-info.json`);
+            }
+        }
+        // Add checksum.txt
+        const checksumContent = [
+            'SHA-256 Checksums',
+            '=================',
+            '',
+            ...checksumEntries,
+        ].join('\n');
+        zip.file('checksum.txt', checksumContent);
+        // Generate ZIP data
+        const zipData = await zip.generateAsync({
+            type: 'uint8array',
+            compression: 'DEFLATE',
+            compressionOptions: { level: 9 },
+        });
+        // Calculate ZIP checksum
+        const zipChecksum = createHash('sha256').update(zipData).digest('hex');
+        // Generate filename
+        const timestamp = new Date().toISOString().split('T')[0]; // YYYY-MM-DD
+        const filename = `evidence-export-${timestamp}.zip`;
+        return {
+            filename,
+            zipData,
+            checksum: zipChecksum,
+            evidenceCount: evidences.length,
+        };
+    }
+    catch (error) {
+        throw new Error(`Failed to export evidences: ${error instanceof Error ? error.message : 'Unknown error'}`);
+    }
+}
+//# sourceMappingURL=export.js.map

package/dist/lib/storage/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/lib/storage/export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAuBzC,iCAAiC;AACjC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAoB,EACpB,UAAyB,EAAE;IAE3B,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;QAExD,sDAAsD;QACtD,IAAI,SAAS,CAAC;QACd,IAAI,WAAW,EAAE,CAAC;YAChB,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QAExB,oBAAoB;QACpB,MAAM,QAAQ,GAAiB;YAC7B,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,aAAa,EAAE,SAAS,CAAC,MAAM;YAC/B,cAAc;SACf,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE7D,oBAAoB;QACpB,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,aAAa,QAAQ,CAAC,EAAE,EAAE,CAAC;YAElD,qBAAqB;YACrB,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,iBAAiB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAExE,wCAAwC;YACxC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACtC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;iBACjC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,cAAc,iBAAiB,CAAC,CAAC;YAE1E,oBAAoB;YACpB,MAAM,QAAQ,GAAG;gBACf,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,uCAAuC;aAC3E,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,gBAAgB,EAAE,YAAY,CAAC,CAAC;YAE1D,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAC1C,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,eAAe,CAAC,IAAI,CAClB,GAAG,gBAAgB,KAAK,cAAc,gBAAgB,CACvD,CAAC;YAEF,+CAA+C;YAC/C,IAAI,cAAc,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACtE,MAAM,OAAO,GAAG;oBACd,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;iBACpC,CAAC;gBACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrD,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,gBAAgB,EAAE,WAAW,CAAC,CAAC;gBAEzD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3E,eAAe,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,cAAc,gBAAgB,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,eAAe,GAAG;YACtB,mBAAmB;YACnB,mBAAmB;YACnB,EAAE;YACF,GAAG,eAAe;SACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAE1C,oBAAoB;QACpB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC;YACtC,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;SACjC,CAAC,CAAC;QAEH,yBAAyB;QACzB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEvE,oBAAoB;QACpB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;QACvE,MAAM,QAAQ,GAAG,mBAAmB,SAAS,MAAM,CAAC;QAEpD,OAAO;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,WAAW;YACrB,aAAa,EAAE,SAAS,CAAC,MAAM;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/storage/git.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Git commit information
+ */
+export interface GitInfo {
+    commitHash: string;
+    timestamp: string;
+    message?: string;
+    author?: string;
+}
+/**
+ * Get current Git commit information
+ * @param dir - Directory path (defaults to process.cwd())
+ * @returns GitInfo or null if not a git repository
+ */
+export declare function getCurrentCommit(dir?: string): Promise<GitInfo | null>;
+//# sourceMappingURL=git.d.ts.map

package/dist/lib/storage/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/git.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAsBD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA+BzB"}

package/dist/lib/storage/git.js

@@ -0,0 +1,55 @@
+import git from 'isomorphic-git';
+import fs from 'fs';
+import path from 'path';
+/**
+ * Find git root directory by walking up the directory tree
+ * @param startDir - Starting directory
+ * @returns Git root directory or null if not found
+ */
+async function findGitRoot(startDir) {
+    let currentDir = path.resolve(startDir);
+    const root = path.parse(currentDir).root;
+    while (currentDir !== root) {
+        const gitDir = path.join(currentDir, '.git');
+        if (fs.existsSync(gitDir)) {
+            return currentDir;
+        }
+        currentDir = path.dirname(currentDir);
+    }
+    return null;
+}
+/**
+ * Get current Git commit information
+ * @param dir - Directory path (defaults to process.cwd())
+ * @returns GitInfo or null if not a git repository
+ */
+export async function getCurrentCommit(dir = process.cwd()) {
+    try {
+        // Find git root directory
+        const gitRoot = await findGitRoot(dir);
+        if (!gitRoot) {
+            return null;
+        }
+        // Get current commit SHA
+        const commits = await git.log({
+            fs,
+            dir: gitRoot,
+            depth: 1,
+        });
+        if (commits.length === 0) {
+            return null;
+        }
+        const commit = commits[0];
+        return {
+            commitHash: commit.oid,
+            timestamp: new Date(commit.commit.committer.timestamp * 1000).toISOString(),
+            message: commit.commit.message,
+            author: commit.commit.author.name,
+        };
+    }
+    catch (error) {
+        // Not a git repository or other git error
+        return null;
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/lib/storage/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/lib/storage/git.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,gBAAgB,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAYxB;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAEzC,OAAO,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC;YAC5B,EAAE;YACF,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YAC3E,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;YAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;SAClC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/storage/index.d.ts

@@ -0,0 +1,6 @@
+export { createSchema, verifySchema } from './schema.js';
+export { EvidenceDatabase } from './database.js';
+export type { Evidence, Metadata } from './types.js';
+export { getCurrentCommit, type GitInfo } from './git.js';
+export { exportEvidences, type ExportOptions, type ExportResult } from './export.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/lib/storage/index.js

@@ -0,0 +1,5 @@
+export { createSchema, verifySchema } from './schema.js';
+export { EvidenceDatabase } from './database.js';
+export { getCurrentCommit } from './git.js';
+export { exportEvidences } from './export.js';
+//# sourceMappingURL=index.js.map

package/dist/lib/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAgB,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAyC,MAAM,aAAa,CAAC"}

package/dist/lib/storage/schema.d.ts

@@ -0,0 +1,17 @@
+import type Database from 'better-sqlite3';
+/**
+ * Creates the database schema (tables and indexes)
+ * This function is idempotent - safe to run multiple times
+ *
+ * @param db - SQLite database instance
+ */
+export declare function createSchema(db: Database.Database): void;
+/**
+ * Verifies that the database schema is valid
+ * Checks for existence of required tables
+ *
+ * @param db - SQLite database instance
+ * @returns true if schema is valid, false otherwise
+ */
+export declare function verifySchema(db: Database.Database): boolean;
+//# sourceMappingURL=schema.d.ts.map

package/dist/lib/storage/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/lib/storage/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAO3C;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAqDxD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAqC3D"}

package/dist/lib/storage/schema.js

@@ -0,0 +1,103 @@
+/**
+ * Current schema version
+ */
+const SCHEMA_VERSION = '1';
+/**
+ * Creates the database schema (tables and indexes)
+ * This function is idempotent - safe to run multiple times
+ *
+ * @param db - SQLite database instance
+ */
+export function createSchema(db) {
+    try {
+        // Create evidences table
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS evidences (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        conversationId TEXT NOT NULL,
+        llmProvider TEXT NOT NULL,
+        encryptedContent BLOB NOT NULL,
+        nonce BLOB NOT NULL,
+        contentHash TEXT NOT NULL,
+        messageCount INTEGER NOT NULL DEFAULT 0,
+        gitCommitHash TEXT,
+        gitTimestamp TEXT,
+        tags TEXT,
+        createdAt TEXT NOT NULL DEFAULT (datetime('now')),
+        updatedAt TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+    `);
+        // Create metadata table for schema versioning
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS metadata (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL
+      );
+    `);
+        // Create indexes for common queries
+        db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_timestamp ON evidences(timestamp);
+    `);
+        db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_conversation_id ON evidences(conversationId);
+    `);
+        db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_content_hash ON evidences(contentHash);
+    `);
+        // Set schema version (use INSERT OR IGNORE to make it idempotent)
+        const stmt = db.prepare(`
+      INSERT OR IGNORE INTO metadata (key, value)
+      VALUES ('schema_version', ?)
+    `);
+        stmt.run(SCHEMA_VERSION);
+    }
+    catch (error) {
+        // Clean up database connection on failure to prevent resource leaks
+        db.close();
+        throw error;
+    }
+}
+/**
+ * Verifies that the database schema is valid
+ * Checks for existence of required tables
+ *
+ * @param db - SQLite database instance
+ * @returns true if schema is valid, false otherwise
+ */
+export function verifySchema(db) {
+    try {
+        // Check if evidences table exists
+        const evidencesTableInfo = db.pragma('table_info(evidences)');
+        if (!evidencesTableInfo || evidencesTableInfo.length === 0) {
+            return false;
+        }
+        // Check if metadata table exists
+        const metadataTableInfo = db.pragma('table_info(metadata)');
+        if (!metadataTableInfo || metadataTableInfo.length === 0) {
+            return false;
+        }
+        // Verify required columns exist in evidences table
+        const evidencesColumns = evidencesTableInfo.map((col) => col.name);
+        const requiredColumns = [
+            'id',
+            'timestamp',
+            'encryptedContent',
+            'nonce',
+            'contentHash',
+            'messageCount',
+            'createdAt',
+            'updatedAt'
+        ];
+        for (const col of requiredColumns) {
+            if (!evidencesColumns.includes(col)) {
+                return false;
+            }
+        }
+        return true;
+    }
+    catch (error) {
+        return false;
+    }
+}
+//# sourceMappingURL=schema.js.map