@shapio/local 0.5.6 → 0.5.8

package/dist/{advisoryLocks-COlJQc1r.js → advisoryLocks-ajVNBhfa.js}

@@ -3,6 +3,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { EventEmitter } from "node:events";
 import { resolve } from "node:path";
+import { closeSync, openSync } from "node:fs";
 import { DatabaseSync } from "node:sqlite";
 //#region ../../apps/api/src/helpers/appError.ts
 /**
@@ -3486,6 +3487,18 @@ const registerFunctions = (database, hooks) => {
 //#region ../../apps/api/src/db/sqlite/connection.ts
 const STATEMENT_CACHE_SIZE = 500;
 /**
+* Creates a new database file readable by its owner only (it holds password hashes and, without
+* SESSION_SECRET, the generated signing secret). `node:sqlite` takes no file mode, so the empty file is made
+* first; SQLite gives its `-wal` and `-shm` files the same permissions. An existing file is left as it is.
+*/
+const createPrivateFile = (path) => {
+	try {
+		closeSync(openSync(path, "wx", 384));
+	} catch (error) {
+		if (error.code !== "EEXIST") throw error;
+	}
+};
+/**
 * One `node:sqlite` connection. The writer runs every write transaction; readers run read-only
 * transactions and autocommit reads (WAL lets them read while the writer works). Calls are synchronous:
 * a statement blocks the event loop while it runs.
@@ -3501,6 +3514,7 @@ var SqliteConnection = class {
 	constructor(options) {
 		this.#options = options;
 		this.role = options.role;
+		if (options.location !== ":memory:") createPrivateFile(options.location);
 		this.#database = new DatabaseSync(options.location, { enableForeignKeyConstraints: true });
 		this.#database.exec(`pragma busy_timeout = ${options.busyTimeoutMs}`);
 		if (options.location !== ":memory:") {
@@ -4178,4 +4192,4 @@ const lockKeyFromId = (id) => createHash("sha256").update(id).digest().readInt32
 //#endregion
 export { mysqlDriverOf as a, assertNotNested as c, toDatetimeText as d, AppError as f, createMysqlDb as i, withConnectionScope as l, createSqliteDb as n, DEFAULT_POOL_ACQUIRE_TIMEOUT_MS as o, sqliteDriverOf as r, pgAcquireError as s, lockKeyFromId as t, toStoredTimestamp as u };
 
-//# sourceMappingURL=advisoryLocks-COlJQc1r.js.map
+//# sourceMappingURL=advisoryLocks-ajVNBhfa.js.map