@starci/hfs 4.8.0 → 4.9.1

package/runtime/engine/canonical-json.mjs

@@ -1,14 +0,0 @@
-// canonical-json.mjs — the one canonical JSON the runtime digests structured values with: object keys
-// sorted, arrays in order, so two equal values always serialize to the same bytes. A leaf beside digest.mjs.
-import {byCodeUnit} from './by-code-unit.mjs';
-import {isPlainObject} from './plain-object.mjs';
-
-/** The canonical JSON text of `value`: keys sorted at every depth. */
-export function canonicalJSON(value) {
-  if (Array.isArray(value)) return `[${value.map(canonicalJSON).join(',')}]`;
-  if (isPlainObject(value)) {
-    const members = Object.keys(value).sort(byCodeUnit).map(k => `${JSON.stringify(k)}:${canonicalJSON(value[k])}`);
-    return `{${members.join(',')}}`;
-  }
-  return JSON.stringify(value);
-}

package/runtime/engine/db/ledger-open.mjs

@@ -1,38 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { createRequire } from 'node:module';
-import { installRefResolver } from './ref-value.mjs';
-
-// engine/db/ledger-open.mjs — how a ledger file is opened: bounded retry on a transient CANTOPEN, a reference-resolving handle.
-const require=createRequire(import.meta.url);
-export const need=(ok,message,code)=>{if(!ok)throw Object.assign(new Error(message),code?{code}:{});};
-export const applyPragmas=(db,pragmas)=>db.exec(Object.entries(pragmas).map(([k,v])=>`PRAGMA ${k}=${v};`).join(' '));
-const openSleep=ms=>Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,ms);
-// SQLITE_CANTOPEN is transient on Windows while a concurrent process closes the WAL files: a short bounded retry.
-const OPEN_RETRY_DELAYS_MS=[0,300,900];
-const cantOpen=error=>/unable to open/i.test(String(error?.message??''));
-export function openDb({file,busyTimeoutMs,journalMode='WAL',autoVacuum=false,label,pragmas}){
-  const {DatabaseSync}=require('node:sqlite');
-  need(typeof file==='string'&&file.trim(),`${label} needs a file`);
-  fs.mkdirSync(path.dirname(path.resolve(file)),{recursive:true});
-  let lastError;
-  for(const delay of OPEN_RETRY_DELAYS_MS){
-    if(delay)openSleep(delay);
-    let db;
-    try{
-      db=installRefResolver(new DatabaseSync(file,{timeout:busyTimeoutMs}));
-      // page_size/auto_vacuum only take on an empty database, before WAL and before the first table.
-      if(autoVacuum&&Number(db.prepare('PRAGMA page_count').get().page_count)===0)db.exec('PRAGMA page_size=4096; PRAGMA auto_vacuum=INCREMENTAL;');
-      const sqliteVersion=db.prepare('select sqlite_version() AS version').get().version;
-      const actual=String(db.prepare(`PRAGMA journal_mode=${journalMode}`).get().journal_mode).toUpperCase();
-      need(actual===String(journalMode).toUpperCase(),`${label}: SQLite selected journal mode ${actual}, expected ${journalMode} (a network or UNC path cannot hold WAL)`,'STARCI_LEDGER_NOT_WAL');
-      applyPragmas(db,pragmas);
-      return {db,sqliteVersion,journalMode:actual};
-    }catch(error){
-      try{db?.close();}catch{}
-      if(!cantOpen(error))throw error;
-      lastError=error;
-    }
-  }
-  throw lastError;
-}

package/runtime/engine/db/ledger-paths.mjs

@@ -1,87 +0,0 @@
-// Ledger path identity and ownership resolution; connection policy and caches remain in ledger.mjs.
-import fs from 'node:fs';
-import path from 'node:path';
-import {sha256} from '../digest.mjs';
-import {isUnderTempDir,localProjectsRoot,readMachine} from './machine.mjs';
-import {isSpecRun} from '../../scripts/lib/env.mjs';
-import {pathKey} from '../../scripts/lib/path-key.mjs';
-import {byCodeUnit} from '../by-code-unit.mjs';
-import {tempRoot} from '../temp-root.mjs';
-/** Overrides the projects root (the directory holding <ledger_id>/runtime.sqlite) for this process tree; narrower than machine-db.mjs LOCAL_ROOT_ENV, which this still honors through starciLocalRoot when unset. */
-export const PROJECTS_ROOT_ENV='STARCI_PROJECTS_ROOT';
-const normDir=file=>pathKey(file);
-/** <runtime root>/.runtime/projects (starciLocalRoot, itself overridable by STARCI_LOCAL_ROOT; a node --test process tree gets one under the OS temp directory). */
-export const projectsRootFor=(env=process.env)=>{
-  if(env[PROJECTS_ROOT_ENV])return path.resolve(env[PROJECTS_ROOT_ENV]);
-  const root=localProjectsRoot(env);
-  if(isSpecRun(env)&&!isUnderTempDir(root,{env}))return path.join(tempRoot({env}),'starci-test-projects');
-  return root;
-};
-/** Repository identity: resolved/realpath, forward slashes, case-folded only on Windows. */
-export const repoRootKey=repoRoot=>{let root=path.resolve(repoRoot);try{root=fs.realpathSync.native(root);}catch{}return normDir(root);};
-/**
- * The ledger id of a repository root until the machine registry (a3-2 machine.ledgers) resolves it: a name-based
- * UUID of the normalized root, so the same root always names the same ledger and no side registry is needed.
- */
-const ledgerIdFromKey=key=>{
-  const h=sha256(`starci-ledger:${key}`);
-  return `${h.slice(0,8)}-${h.slice(8,12)}-5${h.slice(13,16)}-${(8|(Number.parseInt(h[16],16)&3)).toString(16)}${h.slice(17,20)}-${h.slice(20,32)}`;
-};
-export const ledgerIdForRepo=repoRoot=>ledgerIdFromKey(repoRootKey(repoRoot));
-/** The registered runtime.sqlite of `repoRoot` in machine.ledgers (a3-2 resolveLedger), or null. */
-function registeredLedgerFile(root,env,openReader){
-  let row;try{row=readMachine(m=>m.resolveLedger({repoRoot:root}),null,{env});}catch{return null;}
-  const file=row?.file&&row.state!=='retired'?path.resolve(row.file):null;
-  if(file&&fs.existsSync(file))assertLedgerRoot(file,root,openReader);
-  return file;
-}
-function assertLedgerRoot(file,root,openReader){
-  const db=openReader(file);let own;try{own=db.prepare("SELECT value FROM meta WHERE key='repo_root'").get()?.value;}finally{db.close();}
-  if(!own||repoRootKey(own)!==repoRootKey(root))throw Object.assign(new Error(`ledger-root-mismatch: ${file} belongs to another or unverified repository; preserve the database and resolve the owner binding with the owner`),{code:'STARCI_LEDGER_ROOT_MISMATCH'});
-}
-function unregisteredLedgerFile(root,env,openReader){
-  const base=projectsRootFor(env),current=path.join(base,ledgerIdForRepo(root),'runtime.sqlite');
-  if(fs.existsSync(current)){assertLedgerRoot(current,root,openReader);return current;}
-  return current;
-}
-/** Resolve the registry or exact owned store; the ledger owner supplies its verified read-only opener. */
-export function resolveLedgerFile(root,{env,openReader}){
-  return registeredLedgerFile(root,env,openReader)??unregisteredLedgerFile(root,env,openReader);
-}
-
-const SYNTHETIC_LEDGER_ID=/^00000000-0000-4000-8000-[0-9a-f]{12}$/;
-const fixtureRefused=message=>{throw new TypeError(`ledger-fixture-refused: ${message}`);};
-const assertFixtureIdentity=fixture=>{
-  if(fixture.sqliteVersion!==undefined&&(typeof fixture.sqliteVersion!=='string'||!/^\d+\.\d+\.\d+(?:\.\d+)?$/.test(fixture.sqliteVersion)))fixtureRefused('sqliteVersion must be a dotted numeric version');
-  if(typeof fixture.ledgerId!=='string'||!SYNTHETIC_LEDGER_ID.test(fixture.ledgerId))fixtureRefused('ledgerId must be a synthetic UUID');
-  if(!Number.isSafeInteger(fixture.createdAt)||fixture.createdAt<=0||!Number.isFinite(new Date(fixture.createdAt).getTime()))fixtureRefused('createdAt must be a positive safe epoch millisecond');
-  const root=fixture.blobRoot;
-  if(typeof root!=='string'||!root||root.includes('\\')||root.trim()!==root||/[<>:"|?*\x00-\x1f]/.test(root)
-    ||path.posix.isAbsolute(root)||root.split('/').some(p=>!p||p==='.'||p==='..'))fixtureRefused('blobRoot must be a portable relative path');
-};
-const assertFixtureFile=file=>{
-  if(typeof file!=='string'||!path.isAbsolute(file)||path.basename(file)!=='runtime.sqlite')fixtureRefused('file must be an explicit absolute runtime.sqlite');
-  for(const suffix of ['','-wal','-shm'])if(fs.lstatSync(file+suffix,{throwIfNoEntry:false}))fixtureRefused('file and WAL/SHM must be absent');
-  const parent=path.dirname(file),stat=fs.lstatSync(parent,{throwIfNoEntry:false});
-  if(!stat?.isDirectory()||stat.isSymbolicLink()||fs.realpathSync.native(parent)!==path.resolve(parent))fixtureRefused('sample parent must be an existing physical directory');
-};
-/** Validate a fresh, initialization-only sample identity. Samples carry portable metadata,
- * never a repository/machine binding; the ordinary project resolver is not bypassed. */
-export function ledgerFixtureInit(fixture,{file,repoRoot,product,machine,mapped,checkpointer,now}){
-  if(fixture===null){
-    if(typeof file==='string'&&SYNTHETIC_LEDGER_ID.test(path.basename(path.dirname(path.resolve(file)))))fixtureRefused('synthetic identity is reserved for a sample');
-    return null;
-  }
-  if(!fixture||typeof fixture!=='object'||Array.isArray(fixture)
-    ||![Object.prototype,null].includes(Object.getPrototypeOf(fixture))
-    ||!['blobRoot,createdAt,ledgerId','blobRoot,createdAt,ledgerId,sqliteVersion'].includes(Object.keys(fixture).sort(byCodeUnit).join(',')))fixtureRefused('needs ledgerId, createdAt and blobRoot, and may state sqliteVersion');
-  assertFixtureIdentity(fixture);
-  if(repoRoot!==null||product!==null||machine!==null||mapped)fixtureRefused('a sample cannot bind a repository, product, machine or cached project path');
-  if(!checkpointer||now!==Date.now)fixtureRefused('initialization owns its frozen clock and requires a checkpointer');
-  assertFixtureFile(file);
-  return Object.freeze({...fixture,marker:'starci/basic-runtime-fixture@1'});
-}
-/** Refuse sample bytes as an operational ledger before opening a writer or beginning a transaction. */
-export function assertOperationalLedger(meta){
-  if(meta.fixture||SYNTHETIC_LEDGER_ID.test(meta.ledger_id??''))throw new Error('ledger-fixture-read-only: preserve the sample; initialize a new live project store');
-}