@saihm/shm 0.0.0-stage → 0.38.1

package/dist/store/body_store.js

@@ -0,0 +1,252 @@
+import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
+import { chmod, readdir, readFile, rm, stat } from "node:fs/promises";
+import { statSync } from "node:fs";
+import { TEMP_NAME_OVERHEAD_MAX, writeFileAtomic } from "./atomic_write.js";
+import { requireDir } from "./require_dir.js";
+import { assertStateDir, ensureStateDir } from "./state_dir.js";
+import { join } from "node:path";
+const MAGIC = Buffer.from("SHMB", "ascii");
+const IV_LEN = 12;
+const TAG_LEN = 16;
+const KEY_LEN = 32;
+const MAX_HEADER_LEN = 64 * 1024;
+export function normalizeEpoch(v) {
+    return typeof v === "number" && Number.isFinite(v) ? v + 0 : 0;
+}
+export function normalizeTier(v) {
+    return typeof v === "string" ? v : "unknown";
+}
+const CELL_ID_RE = /^[0-9a-f]{1,128}$/i;
+const SUFFIX = ".body.enc";
+const ENCODED_PREFIX = "x-";
+const ENCODED_STEM_RE = /^x-((?:[0-9a-f]{2})+)$/;
+const NAME_MAX = 255;
+const MAX_NAME_LEN = NAME_MAX - TEMP_NAME_OVERHEAD_MAX;
+function nameFor(cellId) {
+    if (CELL_ID_RE.test(cellId))
+        return `${cellId}${SUFFIX}`;
+    if (cellId === "")
+        return undefined;
+    const bytes = Buffer.from(cellId, "utf8");
+    if (bytes.toString("utf8") !== cellId)
+        return undefined;
+    const name = `${ENCODED_PREFIX}${bytes.toString("hex")}${SUFFIX}`;
+    return name.length <= MAX_NAME_LEN ? name : undefined;
+}
+function idOfName(name) {
+    if (!name.endsWith(SUFFIX))
+        return undefined;
+    const stem = name.slice(0, -SUFFIX.length);
+    if (CELL_ID_RE.test(stem))
+        return stem;
+    const m = ENCODED_STEM_RE.exec(stem);
+    if (m === null)
+        return undefined;
+    const id = Buffer.from(m[1], "hex").toString("utf8");
+    return nameFor(id) === name ? id : undefined;
+}
+function presenceOfError(e) {
+    const code = e?.code;
+    return code === "ENOENT" || code === "ENOTDIR" ? "absent" : "unknown";
+}
+export class EncryptedBodyStore {
+    tenantId;
+    dir;
+    injectedKey;
+    cachedKey;
+    constructor(cfg) {
+        this.dir = requireDir("EncryptedBodyStore", cfg.dir);
+        assertStateDir("EncryptedBodyStore", this.dir);
+        this.tenantId = cfg.tenantId ?? "local";
+        if (cfg.keyBytes !== undefined) {
+            if (cfg.keyBytes.length !== KEY_LEN) {
+                throw new Error(`keyBytes must be ${KEY_LEN} bytes, got ${cfg.keyBytes.length}`);
+            }
+            this.injectedKey = Buffer.from(cfg.keyBytes);
+        }
+    }
+    get keyPath() {
+        return join(this.dir, "body.key");
+    }
+    accepts(cellId) {
+        return this.filePathFor(cellId) !== undefined;
+    }
+    filePathFor(cellId) {
+        const name = nameFor(cellId);
+        return name === undefined ? undefined : join(this.dir, name);
+    }
+    async get(cellId) {
+        assertStateDir("EncryptedBodyStore", this.dir);
+        const path = this.filePathFor(cellId);
+        if (path === undefined)
+            return undefined;
+        let file;
+        try {
+            file = await readFile(path);
+        }
+        catch (e) {
+            if (e?.code === "ENOENT")
+                return undefined;
+            return undefined;
+        }
+        if (file.length < MAGIC.length + 4)
+            return undefined;
+        if (!file.subarray(0, MAGIC.length).equals(MAGIC))
+            return undefined;
+        const headerLen = file.readUInt32LE(MAGIC.length);
+        if (headerLen === 0 || headerLen > MAX_HEADER_LEN)
+            return undefined;
+        const headerStart = MAGIC.length + 4;
+        const ivStart = headerStart + headerLen;
+        const ctStart = ivStart + IV_LEN + TAG_LEN;
+        if (file.length < ctStart)
+            return undefined;
+        const headerBytes = file.subarray(headerStart, ivStart);
+        const iv = file.subarray(ivStart, ivStart + IV_LEN);
+        const tag = file.subarray(ivStart + IV_LEN, ctStart);
+        const ciphertext = file.subarray(ctStart);
+        let header;
+        try {
+            header = JSON.parse(headerBytes.toString("utf8"));
+        }
+        catch {
+            return undefined;
+        }
+        if (header.formatVersion !== 1)
+            return undefined;
+        if (header.tenantId !== this.tenantId)
+            return undefined;
+        if (header.cellId !== cellId)
+            return undefined;
+        const key = await this.getKey();
+        let plaintextBuf;
+        try {
+            const d = createDecipheriv("aes-256-gcm", key, iv);
+            d.setAAD(headerBytes);
+            d.setAuthTag(tag);
+            plaintextBuf = Buffer.concat([d.update(ciphertext), d.final()]);
+        }
+        catch {
+            return undefined;
+        }
+        return {
+            cellId,
+            plaintext: plaintextBuf.toString("utf8"),
+            epoch: normalizeEpoch(header.epoch),
+            tier: normalizeTier(header.tier),
+        };
+    }
+    async put(body) {
+        const path = this.filePathFor(body.cellId);
+        if (path === undefined) {
+            throw new Error(`refusing to persist body: this store cannot hold cellId ${JSON.stringify(body.cellId)} (see accepts)`);
+        }
+        const key = await this.getKey();
+        const header = {
+            formatVersion: 1,
+            tenantId: this.tenantId,
+            cellId: body.cellId,
+            epoch: normalizeEpoch(body.epoch),
+            tier: normalizeTier(body.tier),
+        };
+        const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+        if (headerBytes.length > MAX_HEADER_LEN) {
+            throw new Error(`refusing to persist body for ${body.cellId}: header is ${headerBytes.length} B, over the ${MAX_HEADER_LEN} B this store can read back`);
+        }
+        const iv = randomBytes(IV_LEN);
+        const c = createCipheriv("aes-256-gcm", key, iv);
+        c.setAAD(headerBytes);
+        const ciphertext = Buffer.concat([c.update(Buffer.from(body.plaintext, "utf8")), c.final()]);
+        const tag = c.getAuthTag();
+        const lenBuf = Buffer.alloc(4);
+        lenBuf.writeUInt32LE(headerBytes.length, 0);
+        const out = Buffer.concat([MAGIC, lenBuf, headerBytes, iv, tag, ciphertext]);
+        await this.atomicWrite(path, out);
+    }
+    async delete(cellId) {
+        const path = this.filePathFor(cellId);
+        if (path === undefined)
+            return;
+        await rm(path, { force: true });
+    }
+    async list() {
+        let names;
+        try {
+            names = await readdir(this.dir);
+        }
+        catch (e) {
+            if (e?.code === "ENOENT")
+                return [];
+            throw e;
+        }
+        const out = [];
+        for (const n of names) {
+            const id = idOfName(n);
+            if (id !== undefined)
+                out.push(id);
+        }
+        return out;
+    }
+    async presence(cellId) {
+        const path = this.filePathFor(cellId);
+        if (path === undefined)
+            return "absent";
+        try {
+            await stat(path);
+            return "present";
+        }
+        catch (e) {
+            return presenceOfError(e);
+        }
+    }
+    presenceSync(cellId) {
+        const path = this.filePathFor(cellId);
+        if (path === undefined)
+            return "absent";
+        try {
+            statSync(path);
+            return "present";
+        }
+        catch (e) {
+            return presenceOfError(e);
+        }
+    }
+    async has(cellId) {
+        return (await this.presence(cellId)) === "present";
+    }
+    hasSync(cellId) {
+        return this.presenceSync(cellId) === "present";
+    }
+    async getKey() {
+        if (this.injectedKey)
+            return this.injectedKey;
+        if (this.cachedKey)
+            return this.cachedKey;
+        assertStateDir("EncryptedBodyStore", this.dir);
+        try {
+            const raw = await readFile(this.keyPath);
+            if (raw.length !== KEY_LEN) {
+                throw new Error(`corrupt body-store key ${this.keyPath} (${raw.length} bytes, want ${KEY_LEN}). ` +
+                    `The store is a rebuildable cache: delete ${this.dir} to reset.`);
+            }
+            const st = await stat(this.keyPath);
+            if ((st.mode & 0o077) !== 0)
+                await chmod(this.keyPath, 0o600);
+            this.cachedKey = raw;
+            return raw;
+        }
+        catch (e) {
+            if (e?.code !== "ENOENT")
+                throw e;
+        }
+        const fresh = randomBytes(KEY_LEN);
+        await this.atomicWrite(this.keyPath, fresh);
+        this.cachedKey = fresh;
+        return fresh;
+    }
+    async atomicWrite(path, data) {
+        await ensureStateDir("EncryptedBodyStore", this.dir);
+        await writeFileAtomic(path, data);
+    }
+}
+//# sourceMappingURL=body_store.js.map

package/dist/store/body_store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body_store.js","sourceRoot":"","sources":["../../src/store/body_store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AACD,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACxC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,YAAY,GAAG,QAAQ,GAAG,sBAAsB,CAAC;AAEvD,SAAS,OAAO,CAAC,MAAc;IAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACzD,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAiCD,SAAS,eAAe,CAAC,CAAU;IACjC,MAAM,IAAI,GAAI,CAAuC,EAAE,IAAI,CAAC;IAC5D,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,OAAO,kBAAkB;IACpB,QAAQ,CAAS;IACT,GAAG,CAAS;IACZ,WAAW,CAAqB;IACzC,SAAS,CAAqB;IAEtC,YAAY,GAA6B;QACvC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,oBAAoB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC;QACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,eAAe,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;IAChD,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAEzC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,GAAG,cAAc;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAE/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,MAAM;YACN,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxC,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;YACnC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAgB;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAe;YACzB,aAAa,EAAE,CAAC;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACjC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/B,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,MAAM,eAAe,WAAW,CAAC,MAAM,gBAAgB,cAAc,6BAA6B,CACxI,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAC/D,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,YAAY,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QACxC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACtB,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,gBAAgB,OAAO,KAAK;oBAC/E,4CAA4C,IAAI,CAAC,GAAG,YAAY,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY;QAClD,MAAM,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/store/encrypted_store.d.ts

@@ -0,0 +1,21 @@
+import type { ExpectedSpace, LoadResult, PersistedRow } from "./types.js";
+export interface EncryptedIndexStoreConfig {
+    readonly dir: string;
+    readonly tenantId?: string;
+    readonly keyBytes?: Uint8Array;
+}
+export declare class EncryptedIndexStore {
+    readonly tenantId: string;
+    readonly dir: string;
+    private readonly injectedKey;
+    private cachedKey;
+    constructor(cfg: EncryptedIndexStoreConfig);
+    get filePath(): string;
+    get keyPath(): string;
+    load(expect: ExpectedSpace): Promise<LoadResult>;
+    save(rows: readonly PersistedRow[], space: ExpectedSpace): Promise<void>;
+    clear(): Promise<void>;
+    private getKey;
+    private atomicWrite;
+}
+//# sourceMappingURL=encrypted_store.d.ts.map

package/dist/store/encrypted_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted_store.d.ts","sourceRoot":"","sources":["../../src/store/encrypted_store.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAe,MAAM,YAAY,CAAC;AAQvF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,SAAS,CAAqB;gBAE1B,GAAG,EAAE,yBAAyB;IAY1C,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAEK,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;IAkEhD,IAAI,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BxE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAId,MAAM;YAyBN,WAAW;CAI1B"}

package/dist/store/encrypted_store.js

@@ -0,0 +1,266 @@
+import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
+import { chmod, readFile, rm, stat } from "node:fs/promises";
+import { writeFileAtomic } from "./atomic_write.js";
+import { requireDir } from "./require_dir.js";
+import { assertStateDir, ensureStateDir } from "./state_dir.js";
+import { join } from "node:path";
+const MAGIC = Buffer.from("SHM1", "ascii");
+const IV_LEN = 12;
+const TAG_LEN = 16;
+const KEY_LEN = 32;
+const MAX_HEADER_LEN = 64 * 1024;
+export class EncryptedIndexStore {
+    tenantId;
+    dir;
+    injectedKey;
+    cachedKey;
+    constructor(cfg) {
+        this.dir = requireDir("EncryptedIndexStore", cfg.dir);
+        assertStateDir("EncryptedIndexStore", this.dir);
+        this.tenantId = cfg.tenantId ?? "local";
+        if (cfg.keyBytes !== undefined) {
+            if (cfg.keyBytes.length !== KEY_LEN) {
+                throw new Error(`keyBytes must be ${KEY_LEN} bytes, got ${cfg.keyBytes.length}`);
+            }
+            this.injectedKey = Buffer.from(cfg.keyBytes);
+        }
+    }
+    get filePath() {
+        return join(this.dir, "index.v1.enc");
+    }
+    get keyPath() {
+        return join(this.dir, "index.key");
+    }
+    async load(expect) {
+        assertStateDir("EncryptedIndexStore", this.dir);
+        let file;
+        try {
+            file = await readFile(this.filePath);
+        }
+        catch (e) {
+            if (e?.code === "ENOENT")
+                return { state: "absent" };
+            return { state: "invalid", reason: `unreadable: ${String(e)}` };
+        }
+        if (file.length < MAGIC.length + 4)
+            return { state: "invalid", reason: "truncated envelope" };
+        if (!file.subarray(0, MAGIC.length).equals(MAGIC))
+            return { state: "invalid", reason: "bad magic" };
+        const headerLen = file.readUInt32LE(MAGIC.length);
+        if (headerLen === 0 || headerLen > MAX_HEADER_LEN) {
+            return { state: "invalid", reason: `implausible header length ${headerLen}` };
+        }
+        const headerStart = MAGIC.length + 4;
+        const ivStart = headerStart + headerLen;
+        const ctStart = ivStart + IV_LEN + TAG_LEN;
+        if (file.length < ctStart)
+            return { state: "invalid", reason: "truncated header/iv/tag" };
+        const headerBytes = file.subarray(headerStart, ivStart);
+        const iv = file.subarray(ivStart, ivStart + IV_LEN);
+        const tag = file.subarray(ivStart + IV_LEN, ctStart);
+        const ciphertext = file.subarray(ctStart);
+        let header;
+        try {
+            header = JSON.parse(headerBytes.toString("utf8"));
+        }
+        catch {
+            return { state: "invalid", reason: "header not JSON" };
+        }
+        if (header.formatVersion !== 1) {
+            return { state: "invalid", reason: `unsupported formatVersion ${String(header.formatVersion)}` };
+        }
+        if (header.tenantId !== this.tenantId) {
+            return { state: "invalid", reason: `tenant mismatch: file "${header.tenantId}" vs store "${this.tenantId}"` };
+        }
+        if (header.modelId !== expect.modelId || header.dim !== expect.dim) {
+            return {
+                state: "invalid",
+                reason: `model space mismatch: file ${header.modelId}/${header.dim} vs live ${expect.modelId}/${expect.dim}`,
+            };
+        }
+        if (!Number.isInteger(header.count) || header.count < 0) {
+            return { state: "invalid", reason: "bad header count" };
+        }
+        const key = await this.getKey();
+        let payload;
+        try {
+            const d = createDecipheriv("aes-256-gcm", key, iv);
+            d.setAAD(headerBytes);
+            d.setAuthTag(tag);
+            payload = Buffer.concat([d.update(ciphertext), d.final()]);
+        }
+        catch {
+            return { state: "invalid", reason: "decryption/authentication failed (wrong key or tampered file)" };
+        }
+        const parsed = decodeRows(payload, header.dim);
+        if (typeof parsed === "string")
+            return { state: "invalid", reason: parsed };
+        if (parsed.length !== header.count) {
+            return { state: "invalid", reason: `row count ${parsed.length} != header count ${header.count}` };
+        }
+        return { state: "loaded", header, rows: parsed };
+    }
+    async save(rows, space) {
+        const key = await this.getKey();
+        const header = {
+            formatVersion: 1,
+            modelId: space.modelId,
+            dim: space.dim,
+            count: rows.length,
+            tenantId: this.tenantId,
+            builtEpoch: Math.floor(Date.now() / 3_600_000),
+        };
+        const headerBytes = Buffer.from(JSON.stringify(header), "utf8");
+        if (headerBytes.length > MAX_HEADER_LEN) {
+            throw new Error(`refusing to persist index: header is ${headerBytes.length} B, over the ${MAX_HEADER_LEN} B this store can read back`);
+        }
+        const payload = encodeRows(rows, space.dim);
+        const iv = randomBytes(IV_LEN);
+        const c = createCipheriv("aes-256-gcm", key, iv);
+        c.setAAD(headerBytes);
+        const ciphertext = Buffer.concat([c.update(payload), c.final()]);
+        const tag = c.getAuthTag();
+        const lenBuf = Buffer.alloc(4);
+        lenBuf.writeUInt32LE(headerBytes.length, 0);
+        const out = Buffer.concat([MAGIC, lenBuf, headerBytes, iv, tag, ciphertext]);
+        await this.atomicWrite(this.filePath, out);
+    }
+    async clear() {
+        await rm(this.filePath, { force: true });
+    }
+    async getKey() {
+        if (this.injectedKey)
+            return this.injectedKey;
+        if (this.cachedKey)
+            return this.cachedKey;
+        assertStateDir("EncryptedIndexStore", this.dir);
+        try {
+            const raw = await readFile(this.keyPath);
+            if (raw.length !== KEY_LEN) {
+                throw new Error(`corrupt key file ${this.keyPath} (${raw.length} bytes, want ${KEY_LEN}). ` +
+                    `The store is a rebuildable cache: delete ${this.dir} to reset.`);
+            }
+            const st = await stat(this.keyPath);
+            if ((st.mode & 0o077) !== 0)
+                await chmod(this.keyPath, 0o600);
+            this.cachedKey = raw;
+            return raw;
+        }
+        catch (e) {
+            if (e?.code !== "ENOENT")
+                throw e;
+        }
+        const fresh = randomBytes(KEY_LEN);
+        await this.atomicWrite(this.keyPath, fresh);
+        this.cachedKey = fresh;
+        return fresh;
+    }
+    async atomicWrite(path, data) {
+        await ensureStateDir("EncryptedIndexStore", this.dir);
+        await writeFileAtomic(path, data);
+    }
+}
+function encodeRows(rows, dim) {
+    const enc = new TextEncoder();
+    const parts = [];
+    const countBuf = Buffer.alloc(4);
+    countBuf.writeUInt32LE(rows.length, 0);
+    parts.push(countBuf);
+    for (const r of rows) {
+        if (r.vec.length !== dim) {
+            throw new Error(`row ${r.cellId}: vec dim ${r.vec.length} != ${dim} (fail-closed)`);
+        }
+        const idBytes = enc.encode(r.cellId);
+        if (idBytes.length === 0 || idBytes.length > 0xffff) {
+            throw new Error(`row cellId length ${idBytes.length} out of range`);
+        }
+        if (!/^[0-9a-f]{64}$/.test(r.sourceHashHex)) {
+            throw new Error(`row ${r.cellId}: sourceHashHex is not a sha256 hex digest`);
+        }
+        if (!Number.isFinite(r.epoch)) {
+            throw new Error(`row ${r.cellId}: epoch ${String(r.epoch)} is not finite`);
+        }
+        const nsBytes = enc.encode(r.namespace);
+        if (nsBytes.length > 0xffff)
+            throw new Error(`row ${r.cellId}: namespace too long`);
+        if (!Number.isInteger(r.flags) || r.flags < 0 || r.flags > 0xff) {
+            throw new Error(`row ${r.cellId}: flags ${r.flags} out of u8 range`);
+        }
+        const buf = Buffer.alloc(2 + idBytes.length + 32 + 8 + 2 + nsBytes.length + 1 + dim * 4);
+        let o = 0;
+        buf.writeUInt16LE(idBytes.length, o);
+        o += 2;
+        buf.set(idBytes, o);
+        o += idBytes.length;
+        buf.set(Buffer.from(r.sourceHashHex, "hex"), o);
+        o += 32;
+        buf.writeDoubleLE(r.epoch, o);
+        o += 8;
+        buf.writeUInt16LE(nsBytes.length, o);
+        o += 2;
+        buf.set(nsBytes, o);
+        o += nsBytes.length;
+        buf.writeUInt8(r.flags, o);
+        o += 1;
+        for (let i = 0; i < dim; i++) {
+            buf.writeFloatLE(r.vec[i], o);
+            o += 4;
+        }
+        parts.push(buf);
+    }
+    return Buffer.concat(parts);
+}
+function decodeRows(payload, dim) {
+    if (payload.length < 4)
+        return "payload truncated (no row count)";
+    const count = payload.readUInt32LE(0);
+    let o = 4;
+    const rows = [];
+    const dec = new TextDecoder("utf-8", { fatal: true });
+    for (let i = 0; i < count; i++) {
+        if (o + 2 > payload.length)
+            return `row ${i}: truncated at cellIdLen`;
+        const idLen = payload.readUInt16LE(o);
+        o += 2;
+        if (idLen === 0)
+            return `row ${i}: empty cellId`;
+        if (o + idLen + 32 + 8 + 2 > payload.length)
+            return `row ${i}: truncated at cellId/hash/epoch`;
+        let cellId;
+        try {
+            cellId = dec.decode(payload.subarray(o, o + idLen));
+        }
+        catch {
+            return `row ${i}: cellId not UTF-8`;
+        }
+        o += idLen;
+        const sourceHashHex = payload.subarray(o, o + 32).toString("hex");
+        o += 32;
+        const epoch = payload.readDoubleLE(o);
+        o += 8;
+        const nsLen = payload.readUInt16LE(o);
+        o += 2;
+        if (o + nsLen + 1 + dim * 4 > payload.length)
+            return `row ${i}: truncated at namespace/vec`;
+        let namespace;
+        try {
+            namespace = dec.decode(payload.subarray(o, o + nsLen));
+        }
+        catch {
+            return `row ${i}: namespace not UTF-8`;
+        }
+        o += nsLen;
+        const flags = payload.readUInt8(o);
+        o += 1;
+        const vec = new Float32Array(dim);
+        for (let j = 0; j < dim; j++) {
+            vec[j] = payload.readFloatLE(o);
+            o += 4;
+        }
+        rows.push({ cellId, sourceHashHex, epoch, namespace, flags, vec });
+    }
+    if (o !== payload.length)
+        return `trailing ${payload.length - o} bytes after last row`;
+    return rows;
+}
+//# sourceMappingURL=encrypted_store.js.map

package/dist/store/encrypted_store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted_store.js","sourceRoot":"","sources":["../../src/store/encrypted_store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAQjC,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAAS;IACjB,GAAG,CAAS;IACJ,WAAW,CAAqB;IACzC,SAAS,CAAqB;IAEtC,YAAY,GAA8B;QACxC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,qBAAqB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC;QACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,eAAe,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB;QAC9B,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAChF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC9F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACpG,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,SAAS,EAAE,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAgB,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,MAAM,CAAC,QAAQ,eAAe,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACnE,OAAO;gBACL,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,8BAA8B,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,YAAY,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE;aAC7G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;QACvG,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,MAAM,CAAC,MAAM,oBAAoB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACpG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA6B,EAAE,KAAoB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAgB;YAC1B,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;SAC/C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wCAAwC,WAAW,CAAC,MAAM,gBAAgB,cAAc,6BAA6B,CACtH,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,gBAAgB,OAAO,KAAK;oBACzE,4CAA4C,IAAI,CAAC,GAAG,YAAY,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY;QAClD,MAAM,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,IAA6B,EAAE,GAAW;IAC5D,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,GAAG,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,4CAA4C,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,WAAW,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,sBAAsB,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,IAAI,CAAC,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC,IAAI,CAAC,CAAC;QACP,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,IAAI,CAAC,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC,IAAI,CAAC,CAAC;QACP,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,kCAAkC,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,kCAAkC,CAAC;QAC/F,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,oBAAoB,CAAC;QACtC,CAAC;QACD,CAAC,IAAI,KAAK,CAAC;QACX,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC,IAAI,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,IAAI,CAAC,CAAC;QACP,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,8BAA8B,CAAC;QAC5F,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,uBAAuB,CAAC;QACzC,CAAC;QACD,CAAC,IAAI,KAAK,CAAC;QACX,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,IAAI,CAAC,CAAC;QACP,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,YAAY,OAAO,CAAC,MAAM,GAAG,CAAC,uBAAuB,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/store/index.d.ts

@@ -0,0 +1,21 @@
+export { FLAG_SALIENCE_FLOOR, FLAG_DECAY_EXEMPT, FLAG_QUARANTINED, FLAG_SUPERSEDED_HINT, recordFlags, } from "./types.js";
+export type { PersistedRow, StoreHeader, ExpectedSpace, LoadResult } from "./types.js";
+export { EncryptedIndexStore } from "./encrypted_store.js";
+export type { EncryptedIndexStoreConfig } from "./encrypted_store.js";
+export { EncryptedBodyStore } from "./body_store.js";
+export type { EncryptedBodyStoreConfig, BodyStore, BodyRecord, AtRestPresence } from "./body_store.js";
+export { buildWarmIndex, WarmIndex, verifyWarmIndex } from "./warm_index.js";
+export type { WarmBuildOpts, WarmBuildStats, WarmVerifyOpts, WarmVerifyStats, WarmVerifyMismatch, } from "./warm_index.js";
+export { acquireWriterLock, StoreLockedError, WRITER_LOCK_FILENAME, pidIsAlive } from "./writer_lock.js";
+export type { WriterLock, WriterLockHolder, WriterLockOptions, WriterLockRefusal } from "./writer_lock.js";
+export { StateDirExposedError, inspectStateDir, stateDirExposure } from "./state_dir.js";
+export type { StateDirExposure } from "./state_dir.js";
+export { encodeSnapshot, decodeSnapshot, partNameProblem, SnapshotFormatError, SNAPSHOT_MAGIC, SNAPSHOT_FORMAT_VERSION, SNAPSHOT_MAX_HEADER_BYTES } from "./snapshot_format.js";
+export type { SnapshotPart, SnapshotManifest, SnapshotManifestPart, EncodeSnapshotInput, DecodedSnapshot } from "./snapshot_format.js";
+export { restoreOrCold, takeSnapshot, deleteAllBut, errorCode } from "./warm_start.js";
+export type { WarmStart, RestoreOutcome, TakeOutcome } from "./warm_start.js";
+export { encodeIndexPart, decodeIndexPart, IndexPartError, INDEX_PART_NAME } from "./index_snapshot.js";
+export type { DecodedIndexPart } from "./index_snapshot.js";
+export { McpWarmStart, McpWarmStartError, codeFromToolText, readToolAnswer, warmDirProblem, latestFileProblem, LOCAL_CODES, DEFAULT_MAX_LATEST_BYTES, WARM_START_DIRNAME, CALL_TOKEN, putFileName, latestFileName, newCallToken, } from "./mcp_warm_start.js";
+export type { McpWarmStartConfig, LocalCode, ToolAnswer, EntryStat } from "./mcp_warm_start.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/store/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,YAAY,EAAE,wBAAwB,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7E,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzG,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACzF,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAChL,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvI,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvF,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxG,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EACjH,wBAAwB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,GACpG,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/store/index.js

@@ -0,0 +1,11 @@
+export { FLAG_SALIENCE_FLOOR, FLAG_DECAY_EXEMPT, FLAG_QUARANTINED, FLAG_SUPERSEDED_HINT, recordFlags, } from "./types.js";
+export { EncryptedIndexStore } from "./encrypted_store.js";
+export { EncryptedBodyStore } from "./body_store.js";
+export { buildWarmIndex, WarmIndex, verifyWarmIndex } from "./warm_index.js";
+export { acquireWriterLock, StoreLockedError, WRITER_LOCK_FILENAME, pidIsAlive } from "./writer_lock.js";
+export { StateDirExposedError, inspectStateDir, stateDirExposure } from "./state_dir.js";
+export { encodeSnapshot, decodeSnapshot, partNameProblem, SnapshotFormatError, SNAPSHOT_MAGIC, SNAPSHOT_FORMAT_VERSION, SNAPSHOT_MAX_HEADER_BYTES } from "./snapshot_format.js";
+export { restoreOrCold, takeSnapshot, deleteAllBut, errorCode } from "./warm_start.js";
+export { encodeIndexPart, decodeIndexPart, IndexPartError, INDEX_PART_NAME } from "./index_snapshot.js";
+export { McpWarmStart, McpWarmStartError, codeFromToolText, readToolAnswer, warmDirProblem, latestFileProblem, LOCAL_CODES, DEFAULT_MAX_LATEST_BYTES, WARM_START_DIRNAME, CALL_TOKEN, putFileName, latestFileName, newCallToken, } from "./mcp_warm_start.js";
+//# sourceMappingURL=index.js.map

package/dist/store/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAQ7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEzG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEhL,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEvF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAExG,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EACjH,wBAAwB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,GACpG,MAAM,qBAAqB,CAAC"}

package/dist/store/index_snapshot.d.ts

@@ -0,0 +1,15 @@
+import type { ExpectedSpace, PersistedRow } from "./types.js";
+export declare const INDEX_PART_NAME = "index.rows";
+export declare class IndexPartError extends Error {
+    constructor(message: string);
+}
+export declare function encodeIndexPart(rows: readonly PersistedRow[], space: ExpectedSpace): Uint8Array;
+export type DecodedIndexPart = {
+    readonly ok: true;
+    readonly rows: readonly PersistedRow[];
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export declare function decodeIndexPart(bytes: Uint8Array, expect: ExpectedSpace): DecodedIndexPart;
+//# sourceMappingURL=index_snapshot.d.ts.map

package/dist/store/index_snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index_snapshot.d.ts","sourceRoot":"","sources":["../../src/store/index_snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,eAAO,MAAM,eAAe,eAAe,CAAC;AAO5C,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,UAAU,CA8B/F;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/I,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAqD1F"}