@tangle-network/braid 0.1.0

package/dist/adapters/storage/memory-retention.js

@@ -0,0 +1,148 @@
+import { canonicalDigest } from '../../domain/canonical.js';
+import { credentialRef } from '../../ports/credentials.js';
+import { payloadChecksum, tombstone } from './sqlite-crypto.js';
+import { StorageError } from './sqlite-errors.js';
+import { assertOperationRequestDigest } from './storage-validation.js';
+import { missing, projectionOf } from './memory-base.js';
+import { MemoryMaintenanceStorage } from './memory-maintenance.js';
+export class MemoryRetentionStorage extends MemoryMaintenanceStorage {
+    async applyRetention(input) {
+        this.assertOpen();
+        assertOperationRequestDigest(input.operation, {
+            before: input.before,
+            ...(input.conversationId === undefined ? {} : { conversationId: input.conversationId }),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        let redactedEvents = 0;
+        for (let index = 0; index < this.eventStore.length; index += 1) {
+            const event = this.eventStore[index];
+            if (event &&
+                !event.redacted &&
+                event.receivedAt < input.before &&
+                (input.conversationId === undefined || event.conversationId === input.conversationId) &&
+                this.cursorStore.get(event.runId)?.terminal) {
+                this.eventStore[index] = {
+                    ...event,
+                    payload: tombstone('retention'),
+                    payloadChecksum: payloadChecksum(tombstone('retention')),
+                    payloadState: 'redacted',
+                    redacted: true,
+                };
+                redactedEvents += 1;
+            }
+        }
+        this.projectionState = projectionOf(this.eventStore, [...this.cursorStore.values()]);
+        const result = { redactedEvents, deletedConversations: [] };
+        await this.completeMutation(input.operation, 'terminal', result);
+        return result;
+    }
+    async redact(input) {
+        this.assertOpen();
+        assertOperationRequestDigest(input.operation, {
+            conversationId: input.conversationId,
+            eventId: input.eventId,
+            reasonDigest: canonicalDigest(input.reason),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        let rewrittenEvents = 0;
+        const target = this.eventStore.find((event) => event.conversationId === input.conversationId && event.eventId === input.eventId);
+        if (target === undefined) {
+            const error = new StorageError('EVENT_NOT_FOUND', `Event ${input.eventId} was not found`);
+            await this.completeMutationFailure(input.operation, error);
+            throw error;
+        }
+        for (let index = 0; index < this.eventStore.length; index += 1) {
+            const event = this.eventStore[index];
+            if (event?.conversationId !== input.conversationId)
+                continue;
+            const redacted = event.eventId === input.eventId;
+            this.eventStore[index] = {
+                ...event,
+                ...(redacted
+                    ? {
+                        payload: tombstone(input.reason),
+                        payloadChecksum: payloadChecksum(tombstone(input.reason)),
+                    }
+                    : {}),
+                ...(redacted ? { payloadState: 'redacted', redacted: true } : {}),
+            };
+            rewrittenEvents += 1;
+        }
+        this.projectionState = projectionOf(this.eventStore, [...this.cursorStore.values()]);
+        const result = {
+            conversationId: input.conversationId,
+            redactedEventId: input.eventId,
+            rewrittenEvents,
+            newContentKeyRef: credentialRef(`cred:v1:memory-redacted-${input.conversationId}`),
+        };
+        await this.completeMutation(input.operation, 'terminal', result);
+        return result;
+    }
+    async destroyConversation(input) {
+        this.assertOpen();
+        assertOperationRequestDigest(input.operation, {
+            conversationId: input.conversationId,
+            reasonDigest: canonicalDigest(input.reason),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        const hasEvents = this.eventStore.some((event) => event.conversationId === input.conversationId);
+        if (!hasEvents) {
+            await this.completeMutation(input.operation, 'failed', { code: 'CONVERSATION_NOT_FOUND' });
+            throw new StorageError('CONVERSATION_NOT_FOUND', `Conversation ${input.conversationId} was not found`);
+        }
+        for (let index = 0; index < this.eventStore.length; index += 1) {
+            const event = this.eventStore[index];
+            if (event?.conversationId === input.conversationId) {
+                this.eventStore[index] = {
+                    ...event,
+                    payload: tombstone(input.reason),
+                    payloadChecksum: payloadChecksum(tombstone(input.reason)),
+                    payloadState: 'deleted',
+                    redacted: true,
+                    tombstoneReason: canonicalDigest(input.reason),
+                };
+            }
+        }
+        this.projectionState = projectionOf(this.eventStore, [...this.cursorStore.values()]);
+        const result = {
+            conversationId: input.conversationId,
+            destroyed: true,
+            retainedCiphertext: true,
+        };
+        await this.completeMutation(input.operation, 'terminal', result);
+        return result;
+    }
+    async compact(operation) {
+        this.assertOpen();
+        assertOperationRequestDigest(operation, {});
+        const replay = await this.reuseMutation(operation);
+        if (replay !== undefined)
+            return;
+        await this.completeMutation(operation, 'terminal', { completed: true });
+    }
+    artifacts() {
+        return { database: ':memory:', wal: ':memory:-wal', sharedMemory: ':memory:-shm', backups: [] };
+    }
+    async reconcileNonTerminalRuns() {
+        this.assertOpen();
+        return [...this.cursorStore.values()]
+            .filter((cursor) => !cursor.terminal)
+            .map((cursor) => ({
+            runId: cursor.runId,
+            conversationId: cursor.conversationId,
+            lastSequence: cursor.lastSequence,
+            lastCursor: cursor.lastCursor,
+            missingHistory: missing(cursor),
+        }));
+    }
+    async close() {
+        this.isClosed = true;
+    }
+}
+//# sourceMappingURL=memory-retention.js.map

package/dist/adapters/storage/memory-retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-retention.js","sourceRoot":"","sources":["../../../src/adapters/storage/memory-retention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAW1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAElE,MAAM,OAAO,sBAAuB,SAAQ,wBAAwB;IAClE,KAAK,CAAC,cAAc,CAAC,KAIpB;QACC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SACxF,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAkB,KAAK,CAAC,SAAS,CAAC,CAAA;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,cAAc,GAAG,CAAC,CAAA;QACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACpC,IACE,KAAK;gBACL,CAAC,KAAK,CAAC,QAAQ;gBACf,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM;gBAC/B,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC;gBACrF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAC3C,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;oBACvB,GAAG,KAAK;oBACR,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC;oBAC/B,eAAe,EAAE,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBACxD,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,IAAI;iBACf,CAAA;gBACD,cAAc,IAAI,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,oBAAoB,EAAE,EAAsB,EAAE,CAAA;QAC/E,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QAChE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAKZ;QACC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAkB,KAAK,CAAC,SAAS,CAAC,CAAA;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,eAAe,GAAG,CAAC,CAAA;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC5F,CAAA;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,iBAAiB,EAAE,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;YACzF,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC1D,MAAM,KAAK,CAAA;QACb,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,KAAK,EAAE,cAAc,KAAK,KAAK,CAAC,cAAc;gBAAE,SAAQ;YAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAA;YAChD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBACvB,GAAG,KAAK;gBACR,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;wBAChC,eAAe,EAAE,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;qBAC1D;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAA;YACD,eAAe,IAAI,CAAC,CAAA;QACtB,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,OAAO;YAC9B,eAAe;YACf,gBAAgB,EAAE,aAAa,CAAC,2BAA2B,KAAK,CAAC,cAAc,EAAE,CAAC;SACnF,CAAA;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QAChE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAIzB;QACC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAoB,KAAK,CAAC,SAAS,CAAC,CAAA;QAC3E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC,CAAA;QAChG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAA;YAC1F,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,gBAAgB,KAAK,CAAC,cAAc,gBAAgB,CACrD,CAAA;QACH,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,KAAK,EAAE,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;gBACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;oBACvB,GAAG,KAAK;oBACR,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;oBAChC,eAAe,EAAE,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACzD,YAAY,EAAE,SAAS;oBACvB,QAAQ,EAAE,IAAI;oBACd,eAAe,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;iBAC/C,CAAA;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,IAAI;YACf,kBAAkB,EAAE,IAAI;SACzB,CAAA;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QAChE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAA0B;QACtC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,4BAA4B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAA+B,SAAS,CAAC,CAAA;QAChF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAM;QAChC,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,SAAS;QACP,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IACjG,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;aACpC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC;SAChC,CAAC,CAAC,CAAA;IACP,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;IACtB,CAAC;CACF"}

package/dist/adapters/storage/memory.d.ts

@@ -0,0 +1,5 @@
+import { MemoryEffectsStorage } from './memory-effects.js';
+import type { StoragePort } from '../../ports/storage.js';
+export declare class MemoryStorage extends MemoryEffectsStorage implements StoragePort {
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/adapters/storage/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/adapters/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAEzD,qBAAa,aAAc,SAAQ,oBAAqB,YAAW,WAAW;CAAG"}

package/dist/adapters/storage/memory.js

@@ -0,0 +1,4 @@
+import { MemoryEffectsStorage } from './memory-effects.js';
+export class MemoryStorage extends MemoryEffectsStorage {
+}
+//# sourceMappingURL=memory.js.map

package/dist/adapters/storage/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/adapters/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAG1D,MAAM,OAAO,aAAc,SAAQ,oBAAoB;CAA0B"}

package/dist/adapters/storage/sqlite-base.d.ts

@@ -0,0 +1,47 @@
+import type { CredentialPort, CredentialRef } from '../../ports/credentials.js';
+import type { IntegrityReport, StorageArtifacts } from '../../ports/storage.js';
+import type { SqliteDatabase, SqliteDatabaseFactory } from './sqlite-driver.js';
+import { BoundedWriteQueue } from './sqlite-queue.js';
+import type { DurableBoundaryHook, MigrationHooks, SqliteStartupStage, SqliteStorageInput } from './sqlite-types.js';
+export declare abstract class SqliteStorageBase {
+    protected readonly path: string;
+    protected readonly stateSnapshotScope: string;
+    protected readonly workspaceRoot: string | undefined;
+    protected readonly credentials: CredentialPort;
+    protected readonly databaseKeyRef: CredentialRef;
+    protected readonly databaseFactory: SqliteDatabaseFactory;
+    protected readonly busyTimeoutMs: number;
+    protected readonly maxEvents: number;
+    protected readonly maxPayloadBytes: number;
+    protected readonly backupDirectory: string;
+    protected readonly migrationHooks: MigrationHooks | undefined;
+    protected readonly durableBoundaryHook: DurableBoundaryHook | undefined;
+    protected readonly startupObserver: ((stage: SqliteStartupStage) => void) | undefined;
+    protected readonly writes: BoundedWriteQueue;
+    protected database: SqliteDatabase;
+    protected databaseFileDescriptor: number | undefined;
+    protected exclusiveLock: {
+        readonly release: () => Promise<void>;
+    } | undefined;
+    protected databaseKey: Buffer;
+    protected latestBackupPath: string | undefined;
+    protected closed: boolean;
+    protected constructor(input: SqliteStorageInput);
+    fingerprint(input: {
+        readonly effectKind: string;
+        readonly request: unknown;
+    }): string;
+    snapshotScopeId(): string;
+    artifacts(): StorageArtifacts;
+    integrity(): Promise<IntegrityReport>;
+    close(): Promise<void>;
+    integrityReportFor(database: SqliteDatabase): IntegrityReport;
+    integrityReport(): IntegrityReport;
+    begin(): void;
+    commit(boundary: string): void;
+    rollback(): void;
+    assertOpen(): void;
+    protected observeStartup(name: SqliteStartupStage['name'], startedAt: number): void;
+    withExclusiveLock<T>(operation: () => Promise<T>): Promise<T>;
+}
+//# sourceMappingURL=sqlite-base.d.ts.map

package/dist/adapters/storage/sqlite-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-base.d.ts","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-base.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAG/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAGrD,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAE1B,8BAAsB,iBAAiB;IACrC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAC/B,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IAC7C,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACpD,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAA;IAC9C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAA;IAChD,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAA;IACzD,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IACxC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IACpC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAC1C,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAC1C,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAA;IAC7D,SAAS,CAAC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAA;IACvE,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;IACrF,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAC5C,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAA;IAClC,SAAS,CAAC,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAA;IACpD,SAAS,CAAC,aAAa,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,SAAS,CAAA;IAC9E,SAAS,CAAC,WAAW,EAAE,MAAM,CAAA;IAC7B,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9C,SAAS,CAAC,MAAM,UAAQ;IAExB,SAAS,aAAa,KAAK,EAAE,kBAAkB,EAmB9C;IAED,WAAW,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAOrF;IAED,eAAe,IAAI,MAAM,CAExB;IAED,SAAS,IAAI,gBAAgB,CAO5B;IAEK,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,CAG1C;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAyB3B;IAED,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,eAAe,CAiE5D;IAED,eAAe,IAAI,eAAe,CAEjC;IAED,KAAK,IAAI,IAAI,CAOZ;IAED,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAc7B;IAED,QAAQ,IAAI,IAAI,CAMf;IAED,UAAU,IAAI,IAAI,CAGjB;IAED,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAMlF;IAEK,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAUlE;CACF"}

package/dist/adapters/storage/sqlite-base.js

@@ -0,0 +1,230 @@
+import { createHash, createHmac } from 'node:crypto';
+import { closeSync } from 'node:fs';
+import { performance } from 'node:perf_hooks';
+import { canonicalJson } from '../../domain/canonical.js';
+import { StorageError } from './sqlite-errors.js';
+import { classifySqliteError } from './sqlite-paths.js';
+import { BoundedWriteQueue } from './sqlite-queue.js';
+import { acquireExclusiveLock } from './sqlite-recovery.js';
+import { pragmaNumber, pragmaString } from './sqlite-schema.js';
+export class SqliteStorageBase {
+    path;
+    stateSnapshotScope;
+    workspaceRoot;
+    credentials;
+    databaseKeyRef;
+    databaseFactory;
+    busyTimeoutMs;
+    maxEvents;
+    maxPayloadBytes;
+    backupDirectory;
+    migrationHooks;
+    durableBoundaryHook;
+    startupObserver;
+    writes;
+    database;
+    databaseFileDescriptor;
+    exclusiveLock;
+    databaseKey;
+    latestBackupPath;
+    closed = false;
+    constructor(input) {
+        this.path = input.path;
+        this.stateSnapshotScope = `storage-${createHash('sha256').update(input.path).digest('hex').slice(0, 32)}`;
+        this.workspaceRoot = input.workspaceRoot;
+        this.credentials = input.credentials;
+        this.databaseKeyRef = input.databaseKeyRef;
+        this.databaseKey = Buffer.from(input.databaseKey);
+        this.databaseFactory = input.databaseFactory;
+        this.busyTimeoutMs = input.busyTimeoutMs;
+        this.maxEvents = input.maxEvents;
+        this.maxPayloadBytes = input.maxPayloadBytes;
+        this.backupDirectory = input.backupDirectory;
+        this.migrationHooks = input.migrationHooks;
+        this.durableBoundaryHook = input.durableBoundaryHook;
+        this.startupObserver = input.startupObserver;
+        this.writes = new BoundedWriteQueue(input.maxQueuedTransactions);
+        this.database = input.database;
+        this.databaseFileDescriptor = input.databaseFileDescriptor;
+        this.exclusiveLock = input.exclusiveLock;
+    }
+    fingerprint(input) {
+        return createHmac('sha256', this.databaseKey)
+            .update('braid-operation-fingerprint:v1\u0000')
+            .update(input.effectKind)
+            .update('\u0000')
+            .update(canonicalJson(input.request))
+            .digest('hex');
+    }
+    snapshotScopeId() {
+        return this.stateSnapshotScope;
+    }
+    artifacts() {
+        return {
+            database: this.path,
+            wal: `${this.path}-wal`,
+            sharedMemory: `${this.path}-shm`,
+            backups: this.latestBackupPath ? [this.latestBackupPath] : [],
+        };
+    }
+    async integrity() {
+        this.assertOpen();
+        return this.integrityReport();
+    }
+    async close() {
+        if (this.closed)
+            return;
+        let failure;
+        try {
+            await this.writes.drain();
+        }
+        catch (error) {
+            failure = error;
+        }
+        this.closed = true;
+        try {
+            this.database.close();
+        }
+        finally {
+            try {
+                if (this.databaseFileDescriptor !== undefined) {
+                    closeSync(this.databaseFileDescriptor);
+                    this.databaseFileDescriptor = undefined;
+                }
+                this.databaseKey.fill(0);
+            }
+            finally {
+                const lock = this.exclusiveLock;
+                this.exclusiveLock = undefined;
+                await lock?.release();
+            }
+        }
+        if (failure !== undefined)
+            throw failure;
+    }
+    integrityReportFor(database) {
+        const errors = [];
+        let quickCheck = false;
+        let fullCheck = false;
+        try {
+            const quick = database.prepare('PRAGMA quick_check').all();
+            quickCheck =
+                quick.length > 0 && quick.every((row) => Object.values(row).some((value) => value === 'ok'));
+        }
+        catch (error) {
+            errors.push(`quick_check failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        try {
+            const full = database.prepare('PRAGMA integrity_check').all();
+            fullCheck =
+                full.length > 0 && full.every((row) => Object.values(row).some((value) => value === 'ok'));
+        }
+        catch (error) {
+            errors.push(`integrity_check failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        let foreignKeys = false;
+        try {
+            foreignKeys = pragmaNumber(database, 'foreign_keys') === 1;
+        }
+        catch {
+            errors.push('foreign_keys pragma is unavailable');
+        }
+        let wal = false;
+        try {
+            wal = pragmaString(database, 'journal_mode')?.toLowerCase() === 'wal';
+        }
+        catch {
+            errors.push('journal_mode pragma is unavailable');
+        }
+        let encryption = 'verified';
+        try {
+            const cipher = pragmaString(database, 'cipher');
+            if (cipher?.toLowerCase() !== 'sqlcipher') {
+                encryption = 'unavailable';
+                errors.push('SQLCipher mode is not active');
+            }
+        }
+        catch {
+            encryption = 'unavailable';
+            errors.push('cipher pragma is unavailable');
+        }
+        return {
+            ok: errors.length === 0 &&
+                quickCheck &&
+                fullCheck &&
+                foreignKeys &&
+                wal &&
+                encryption === 'verified',
+            encryption,
+            quickCheck,
+            fullCheck,
+            foreignKeys,
+            wal,
+            schemaVersion: pragmaNumber(database, 'user_version'),
+            errors,
+        };
+    }
+    integrityReport() {
+        return this.integrityReportFor(this.database);
+    }
+    begin() {
+        this.assertOpen();
+        try {
+            this.database.exec('BEGIN IMMEDIATE');
+        }
+        catch (error) {
+            throw classifySqliteError(error);
+        }
+    }
+    commit(boundary) {
+        this.durableBoundaryHook?.(`before:${boundary}`);
+        try {
+            this.database.exec('COMMIT');
+        }
+        catch (error) {
+            throw classifySqliteError(error);
+        }
+        // The transaction is already durable. A crash injector may terminate here,
+        // but an observer error must not make callers roll back a committed write.
+        try {
+            this.durableBoundaryHook?.(`after:${boundary}`);
+        }
+        catch {
+            // Boundary hooks are test-only observers and cannot alter commit status.
+        }
+    }
+    rollback() {
+        try {
+            this.database.exec('ROLLBACK');
+        }
+        catch {
+            // Preserve the original commit or transaction error.
+        }
+    }
+    assertOpen() {
+        if (this.closed || !this.database.open)
+            throw new StorageError('STORAGE_CLOSED', 'SQLite storage is closed');
+    }
+    observeStartup(name, startedAt) {
+        try {
+            this.startupObserver?.({ name, durationMs: performance.now() - startedAt });
+        }
+        catch {
+            // Diagnostics cannot change storage startup.
+        }
+    }
+    async withExclusiveLock(operation) {
+        // The storage lifetime lock already excludes every other process. Reusing
+        // it avoids a same-process self-deadlock during backup and restore.
+        if (this.exclusiveLock !== undefined)
+            return operation();
+        const lock = await acquireExclusiveLock(`${this.path}.exclusive.lock`);
+        try {
+            return await operation();
+        }
+        finally {
+            await lock.release();
+        }
+    }
+}
+//# sourceMappingURL=sqlite-base.js.map

package/dist/adapters/storage/sqlite-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-base.js","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAIzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAQ/D,MAAM,OAAgB,iBAAiB;IAClB,IAAI,CAAQ;IACZ,kBAAkB,CAAQ;IAC1B,aAAa,CAAoB;IACjC,WAAW,CAAgB;IAC3B,cAAc,CAAe;IAC7B,eAAe,CAAuB;IACtC,aAAa,CAAQ;IACrB,SAAS,CAAQ;IACjB,eAAe,CAAQ;IACvB,eAAe,CAAQ;IACvB,cAAc,CAA4B;IAC1C,mBAAmB,CAAiC;IACpD,eAAe,CAAmD;IAClE,MAAM,CAAmB;IAClC,QAAQ,CAAgB;IACxB,sBAAsB,CAAoB;IAC1C,aAAa,CAAuD;IACpE,WAAW,CAAQ;IACnB,gBAAgB,CAAoB;IACpC,MAAM,GAAG,KAAK,CAAA;IAExB,YAAsB,KAAyB;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,kBAAkB,GAAG,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;QACzG,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;QACxC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;QACpC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACjD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;QAC5C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;QACxC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QAChC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;QAC5C,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;QAC5C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;QAChE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9B,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;QAC1D,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IAC1C,CAAC;IAED,WAAW,CAAC,KAAiE;QAC3E,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;aAC1C,MAAM,CAAC,sCAAsC,CAAC;aAC9C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aACpC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,kBAAkB,CAAA;IAChC,CAAC;IAED,SAAS;QACP,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM;YACvB,YAAY,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM;YAChC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;SAC9D,CAAA;IACH,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,OAAO,IAAI,CAAC,eAAe,EAAE,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,KAAK,CAAA;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;oBAC9C,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;oBACtC,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAA;gBACzC,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAA;gBAC/B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;gBAC9B,MAAM,IAAI,EAAE,OAAO,EAAE,CAAA;YACvB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,OAAO,CAAA;IAC1C,CAAC;IAED,kBAAkB,CAAC,QAAwB;QACzC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAGrD,CAAA;YACH,UAAU;gBACR,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAA;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAGxD,CAAA;YACH,SAAS;gBACP,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAA;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAA;QACH,CAAC;QACD,IAAI,WAAW,GAAG,KAAK,CAAA;QACvB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,CAAA;QACf,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,KAAK,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACnD,CAAC;QACD,IAAI,UAAU,GAAkC,UAAU,CAAA;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC/C,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC1C,UAAU,GAAG,aAAa,CAAA;gBAC1B,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,aAAa,CAAA;YAC1B,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO;YACL,EAAE,EACA,MAAM,CAAC,MAAM,KAAK,CAAC;gBACnB,UAAU;gBACV,SAAS;gBACT,WAAW;gBACX,GAAG;gBACH,UAAU,KAAK,UAAU;YAC3B,UAAU;YACV,UAAU;YACV,SAAS;YACT,WAAW;YACX,GAAG;YACH,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC;YACrD,MAAM;SACP,CAAA;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,mBAAmB,EAAE,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;QACD,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,QAAQ;QACN,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;YACpC,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAA;IACxE,CAAC;IAES,cAAc,CAAC,IAAgC,EAAE,SAAiB;QAC1E,IAAI,CAAC;YACH,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAI,SAA2B;QACpD,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,SAAS,EAAE,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAA;QACtE,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAA;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/storage/sqlite-bound-open.d.ts

@@ -0,0 +1,17 @@
+import type { SqliteDatabase, SqliteDatabaseFactory } from './sqlite-driver.js';
+export interface BoundSqliteDatabase {
+    readonly database: SqliteDatabase;
+    readonly fileDescriptor: number;
+    readonly newDatabase: boolean;
+}
+/**
+ * Opens SQLite through an inode-bound descriptor path.
+ *
+ * The native driver only accepts a filename, so the filename must refer to a
+ * descriptor we already opened with O_NOFOLLOW. The descriptor remains open
+ * until the owning storage closes the database.
+ */
+export declare function openBoundSqliteDatabase(path: string, factory: SqliteDatabaseFactory, timeout: number): BoundSqliteDatabase;
+export declare function closeBoundSqliteDatabase(bound: BoundSqliteDatabase): void;
+export declare function bindDescriptorLifetime(database: SqliteDatabase, fileDescriptor: number): SqliteDatabase;
+//# sourceMappingURL=sqlite-bound-open.d.ts.map

package/dist/adapters/storage/sqlite-bound-open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-bound-open.d.ts","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-bound-open.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAG/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B;AA6ED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,MAAM,GACd,mBAAmB,CAsErB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAMzE;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB,cAAc,CAahB"}

package/dist/adapters/storage/sqlite-bound-open.js

@@ -0,0 +1,165 @@
+import { constants, closeSync, fchmodSync, fstatSync, openSync, unlinkSync } from 'node:fs';
+import { basename, dirname, resolve } from 'node:path';
+import { StorageError } from './sqlite-errors.js';
+const REQUIRED_PARENT_FLAGS = constants.O_DIRECTORY | (constants.O_NOFOLLOW ?? 0);
+const REQUIRED_FILE_FLAGS = constants.O_RDWR | (constants.O_NOFOLLOW ?? 0);
+function unsupported(message) {
+    return new StorageError('STORAGE_PATH_RACE_UNSUPPORTED', message);
+}
+function descriptorPath(fileDescriptor) {
+    if (process.platform === 'linux')
+        return `/proc/self/fd/${fileDescriptor}`;
+    if (process.platform === 'darwin' || process.platform === 'freebsd') {
+        return `/dev/fd/${fileDescriptor}`;
+    }
+    throw unsupported('This platform has no inode-bound SQLite descriptor path');
+}
+function sameInode(left, right) {
+    return left.dev === right.dev && left.ino === right.ino;
+}
+function assertOwnedDirectory(metadata, path) {
+    if (!metadata.isDirectory())
+        throw new StorageError('STORAGE_PATH', `Not a directory: ${path}`);
+    if (typeof process.getuid === 'function' && metadata.uid !== process.getuid()) {
+        throw new StorageError('STORAGE_OWNERSHIP', `Storage directory is not owned by this process: ${path}`);
+    }
+    if ((Number(metadata.mode) & 0o077) !== 0)
+        throw new StorageError('STORAGE_PERMISSIONS', `Storage directory is too permissive: ${path}`);
+}
+function assertOwnedDatabase(metadata, path) {
+    if (!metadata.isFile() || metadata.nlink !== 1) {
+        throw new StorageError('STORAGE_INPUT_IDENTITY', `SQLite path must be a single-linked regular file: ${path}`);
+    }
+    if (typeof process.getuid === 'function' && metadata.uid !== process.getuid()) {
+        throw new StorageError('STORAGE_OWNERSHIP', `SQLite path is not owned by this process: ${path}`);
+    }
+}
+function openDirectoryChain(path) {
+    let descriptor = openSync('/', REQUIRED_PARENT_FLAGS);
+    try {
+        for (const component of resolve(path).split('/').filter(Boolean)) {
+            const next = openSync(`${descriptorPath(descriptor)}/${component}`, REQUIRED_PARENT_FLAGS);
+            closeSync(descriptor);
+            descriptor = next;
+        }
+        return descriptor;
+    }
+    catch (error) {
+        closeSync(descriptor);
+        throw error;
+    }
+}
+function openDatabaseFile(parentDescriptor, path) {
+    const boundPath = `${descriptorPath(parentDescriptor)}/${basename(path)}`;
+    const createFlags = REQUIRED_FILE_FLAGS | constants.O_CREAT | constants.O_EXCL;
+    try {
+        return { fileDescriptor: openSync(boundPath, createFlags, 0o600), newDatabase: true };
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        return { fileDescriptor: openSync(boundPath, REQUIRED_FILE_FLAGS), newDatabase: false };
+    }
+}
+/**
+ * Opens SQLite through an inode-bound descriptor path.
+ *
+ * The native driver only accepts a filename, so the filename must refer to a
+ * descriptor we already opened with O_NOFOLLOW. The descriptor remains open
+ * until the owning storage closes the database.
+ */
+export function openBoundSqliteDatabase(path, factory, timeout) {
+    if (process.platform === 'win32' ||
+        constants.O_NOFOLLOW === undefined ||
+        constants.O_DIRECTORY === undefined) {
+        throw unsupported('This platform cannot provide no-follow inode-bound SQLite opening');
+    }
+    if ((REQUIRED_PARENT_FLAGS & constants.O_NOFOLLOW) === 0) {
+        throw unsupported('The platform did not expose O_NOFOLLOW');
+    }
+    const normalizedPath = resolve(path);
+    const parentDescriptor = openDirectoryChain(dirname(normalizedPath));
+    let fileDescriptor;
+    let database;
+    let created = false;
+    let openedMetadata;
+    try {
+        const parentBefore = fstatSync(parentDescriptor);
+        assertOwnedDirectory(parentBefore, dirname(normalizedPath));
+        const opened = openDatabaseFile(parentDescriptor, normalizedPath);
+        fileDescriptor = opened.fileDescriptor;
+        created = opened.newDatabase;
+        const parentAfter = fstatSync(parentDescriptor);
+        if (!sameInode(parentBefore, parentAfter)) {
+            throw new StorageError('STORAGE_PATH_RACE', 'SQLite parent directory changed during open');
+        }
+        const metadata = fstatSync(fileDescriptor);
+        openedMetadata = metadata;
+        assertOwnedDatabase(metadata, normalizedPath);
+        if (!opened.newDatabase && metadata.size === 0) {
+            throw new StorageError('STORAGE_CORRUPT_EMPTY', `Existing SQLite path is empty: ${normalizedPath}`);
+        }
+        fchmodSync(fileDescriptor, 0o600);
+        database = factory(descriptorPath(fileDescriptor), { timeout });
+        return { database, fileDescriptor, newDatabase: opened.newDatabase };
+    }
+    catch (error) {
+        try {
+            database?.close();
+        }
+        catch {
+            // Preserve the original open error.
+        }
+        if (fileDescriptor !== undefined)
+            closeSync(fileDescriptor);
+        if (created) {
+            try {
+                const currentDescriptor = openSync(`${descriptorPath(parentDescriptor)}/${basename(normalizedPath)}`, REQUIRED_FILE_FLAGS);
+                try {
+                    const current = fstatSync(currentDescriptor);
+                    if (openedMetadata !== undefined && sameInode(openedMetadata, current))
+                        unlinkSync(`${descriptorPath(parentDescriptor)}/${basename(normalizedPath)}`);
+                }
+                finally {
+                    closeSync(currentDescriptor);
+                }
+            }
+            catch {
+                // The path may have been replaced; never remove an unverified inode.
+            }
+        }
+        if (error instanceof StorageError)
+            throw error;
+        throw new StorageError('STORAGE_PATH', `Cannot open SQLite path: ${normalizedPath}`, {
+            cause: error,
+        });
+    }
+    finally {
+        closeSync(parentDescriptor);
+    }
+}
+export function closeBoundSqliteDatabase(bound) {
+    try {
+        bound.database.close();
+    }
+    finally {
+        closeSync(bound.fileDescriptor);
+    }
+}
+export function bindDescriptorLifetime(database, fileDescriptor) {
+    const close = database.close.bind(database);
+    let closed = false;
+    database.close = () => {
+        if (closed)
+            return;
+        closed = true;
+        try {
+            close();
+        }
+        finally {
+            closeSync(fileDescriptor);
+        }
+    };
+    return database;
+}
+//# sourceMappingURL=sqlite-bound-open.js.map