@tangle-network/braid 0.1.0

package/dist/adapters/storage/sqlite-journal.js

@@ -0,0 +1,285 @@
+import { canonicalJson } from '../../domain/canonical.js';
+import { CredentialError } from '../../ports/credentials.js';
+import { assertPersistablePayload, encryptPayload, payloadChecksum } from './sqlite-crypto.js';
+import { StorageError } from './sqlite-errors.js';
+import { SqliteLifecycleStorage } from './sqlite-lifecycle.js';
+import { classifySqliteError } from './sqlite-paths.js';
+import { asNumber, asString, missingFromCursor, now } from './sqlite-rows.js';
+import { assertJournalEventInput, canAppendAfterTerminal } from './storage-validation.js';
+export class SqliteJournalStorage extends SqliteLifecycleStorage {
+    async append(events) {
+        this.validateAppend(events);
+        return this.writes.run(async () => this.appendUnsafe(events));
+    }
+    async appendWithSnapshot(input) {
+        this.validateAppend(input.events);
+        return this.writes.run(async () => this.appendUnsafe(input.events, input.snapshot));
+    }
+    validateAppend(events) {
+        if (events.length === 0) {
+            return;
+        }
+        if (events.length > this.maxEvents) {
+            throw new StorageError('STORAGE_TRANSACTION_BOUNDS', `A transaction may contain at most ${this.maxEvents} events`);
+        }
+        let payloadBytes = 0;
+        for (const event of events) {
+            assertJournalEventInput(event);
+            assertPersistablePayload(event.payload);
+            payloadBytes += Buffer.byteLength(canonicalJson(event.payload));
+        }
+        if (payloadBytes > this.maxPayloadBytes) {
+            throw new StorageError('STORAGE_TRANSACTION_BOUNDS', 'The event batch exceeds the transaction byte bound');
+        }
+    }
+    async appendUnsafe(events, snapshot) {
+        this.assertOpen();
+        const contentKeys = new Map();
+        const contentRefs = new Map();
+        const contentWorkspaces = new Map();
+        const createdKeys = [];
+        const createdSnapshotKeys = [];
+        let preparedSnapshot;
+        try {
+            for (const event of events) {
+                if (!contentKeys.has(event.conversationId)) {
+                    const material = await this.ensureContentKey(event.conversationId, createdKeys);
+                    contentKeys.set(event.conversationId, material.key);
+                    contentRefs.set(event.conversationId, material.ref);
+                    contentWorkspaces.set(event.conversationId, event.workspaceId);
+                }
+                else if (contentWorkspaces.get(event.conversationId) !== event.workspaceId) {
+                    throw new StorageError('CONVERSATION_WORKSPACE_CONFLICT', `Conversation ${event.conversationId} was used with multiple workspaces`);
+                }
+            }
+            if (snapshot !== undefined) {
+                preparedSnapshot = await this.stateSnapshots.prepare(snapshot, createdSnapshotKeys);
+            }
+            this.begin();
+            const acceptedEventIds = [];
+            const duplicateEventIds = [];
+            const gapRuns = new Set();
+            let snapshotStorageId;
+            let committed = false;
+            try {
+                for (const [conversationId] of contentKeys) {
+                    const workspaceId = contentWorkspaces.get(conversationId);
+                    const ref = contentRefs.get(conversationId);
+                    if (!workspaceId || !ref)
+                        throw new StorageError('CONTENT_KEY_UNAVAILABLE', 'Conversation key material is incomplete');
+                    const conversation = this.database
+                        .prepare('SELECT workspace_id FROM braid_conversations WHERE conversation_id = ?')
+                        .get(conversationId);
+                    if (conversation && asString(conversation.workspace_id, 'workspace_id') !== workspaceId) {
+                        throw new StorageError('CONVERSATION_WORKSPACE_CONFLICT', `Conversation ${conversationId} belongs to another workspace`);
+                    }
+                    if (!conversation) {
+                        this.database
+                            .prepare('INSERT INTO braid_conversations(conversation_id, workspace_id, created_at) VALUES (?, ?, ?)')
+                            .run(conversationId, workspaceId, now());
+                    }
+                    const keyRow = this.database
+                        .prepare('SELECT credential_ref, destroyed FROM braid_conversation_keys WHERE conversation_id = ?')
+                        .get(conversationId);
+                    if (keyRow && Number(keyRow.destroyed) === 1) {
+                        throw new StorageError('CONTENT_KEY_DESTROYED', `Conversation ${conversationId} content key was destroyed`);
+                    }
+                    if (keyRow && asString(keyRow.credential_ref, 'credential_ref') !== ref) {
+                        throw new StorageError('CONTENT_KEY_RACE', `Conversation ${conversationId} content key was created concurrently`);
+                    }
+                    if (!keyRow) {
+                        this.database
+                            .prepare('INSERT INTO braid_conversation_keys(conversation_id, credential_ref, destroyed) VALUES (?, ?, 0)')
+                            .run(conversationId, ref);
+                    }
+                }
+                for (const event of events) {
+                    const existing = this.database
+                        .prepare(`SELECT workspace_id, conversation_id, run_id, event_id, run_sequence, kind,
+                    cursor, provider_event_id, operation_id, payload_checksum, occurred_at, received_at, terminal
+             FROM braid_journal_events WHERE run_id = ? AND event_id = ?`)
+                        .get(event.runId, event.eventId);
+                    const checksum = payloadChecksum(event.payload);
+                    if (existing) {
+                        const sameImmutableInput = existing.workspace_id === event.workspaceId &&
+                            existing.conversation_id === event.conversationId &&
+                            existing.run_id === event.runId &&
+                            existing.event_id === event.eventId &&
+                            Number(existing.run_sequence) === event.sequence &&
+                            existing.kind === event.kind &&
+                            (existing.cursor ?? null) === (event.cursor ?? null) &&
+                            (existing.provider_event_id ?? null) === (event.providerEventId ?? null) &&
+                            (existing.operation_id ?? null) === (event.operationId ?? null) &&
+                            existing.payload_checksum === checksum &&
+                            existing.occurred_at === event.occurredAt &&
+                            (event.receivedAt === undefined || existing.received_at === event.receivedAt) &&
+                            Number(existing.terminal) === (event.terminal === true ? 1 : 0);
+                        if (!sameImmutableInput) {
+                            throw new StorageError('EVENT_ID_CONFLICT', `Event ${event.eventId} changed its durable input on retry`);
+                        }
+                        duplicateEventIds.push(event.eventId);
+                        continue;
+                    }
+                    const sequenceExisting = this.database
+                        .prepare('SELECT event_id FROM braid_journal_events WHERE run_id = ? AND run_sequence = ?')
+                        .get(event.runId, event.sequence);
+                    if (sequenceExisting && sequenceExisting.event_id !== event.eventId) {
+                        throw new StorageError('SEQUENCE_CONFLICT', `Sequence ${event.sequence} is already assigned for run ${event.runId}`);
+                    }
+                    const cursor = this.database
+                        .prepare('SELECT run_id, conversation_id, last_sequence, last_cursor, missing_from, missing_to, terminal FROM braid_run_cursors WHERE run_id = ?')
+                        .get(event.runId);
+                    if (cursor && cursor.conversation_id !== event.conversationId) {
+                        throw new StorageError('RUN_CONVERSATION_CONFLICT', `Run ${event.runId} belongs to another conversation`);
+                    }
+                    const isMissingSequence = cursor?.missing_from !== null &&
+                        cursor?.missing_from !== undefined &&
+                        cursor?.missing_to !== null &&
+                        cursor?.missing_to !== undefined &&
+                        event.sequence >= cursor.missing_from &&
+                        event.sequence <= cursor.missing_to;
+                    if (cursor?.terminal === 1 && !isMissingSequence && !canAppendAfterTerminal(event)) {
+                        throw new StorageError('TERMINAL_RUN_MUTATION', `Run ${event.runId} is already terminal`);
+                    }
+                    const key = contentKeys.get(event.conversationId);
+                    if (!key)
+                        throw new StorageError('CONTENT_KEY_UNAVAILABLE', 'Conversation content key is unavailable');
+                    const encoded = encryptPayload(event.payload, key);
+                    this.database
+                        .prepare(`INSERT INTO braid_conversations(conversation_id, workspace_id, created_at)
+             VALUES (?, ?, ?)
+             ON CONFLICT(conversation_id) DO UPDATE SET workspace_id = excluded.workspace_id`)
+                        .run(event.conversationId, event.workspaceId, event.occurredAt);
+                    const inserted = this.database
+                        .prepare(`INSERT INTO braid_journal_events(
+              workspace_id, conversation_id, run_id, event_id, provider_event_id, run_sequence, kind, cursor,
+              operation_id, payload, payload_checksum, occurred_at, received_at, terminal, redacted
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0)`)
+                        .run(event.workspaceId, event.conversationId, event.runId, event.eventId, event.providerEventId ?? null, event.sequence, event.kind, event.cursor ?? null, event.operationId ?? null, encoded, checksum, event.occurredAt, event.receivedAt ?? now(), event.terminal === true ? 1 : 0);
+                    const storageId = asNumber(inserted.lastInsertRowid, 'storage_id');
+                    encoded.fill(0);
+                    if (snapshot?.eventId === event.eventId)
+                        snapshotStorageId = storageId;
+                    const refreshed = this.refreshCursor({
+                        runId: event.runId,
+                        conversationId: event.conversationId,
+                        sequence: event.sequence,
+                        terminal: cursor?.terminal === 1 || event.terminal === true,
+                    });
+                    if (refreshed.missingFrom !== null)
+                        gapRuns.add(event.runId);
+                    acceptedEventIds.push(event.eventId);
+                }
+                this.advanceIncrementalProjection(acceptedEventIds);
+                if (snapshot !== undefined && acceptedEventIds.includes(snapshot.eventId)) {
+                    if (preparedSnapshot === undefined) {
+                        throw new StorageError('STATE_SNAPSHOT_INVALID', 'Snapshot key preparation was lost');
+                    }
+                    if (snapshotStorageId === undefined)
+                        throw new StorageError('STATE_SNAPSHOT_UNBOUND', 'Snapshot event is not stored');
+                    this.stateSnapshots.writeUnsafe(snapshot, snapshotStorageId, preparedSnapshot);
+                }
+                this.commit('append');
+                committed = true;
+                createdKeys.length = 0;
+                if (snapshot !== undefined && acceptedEventIds.includes(snapshot.eventId)) {
+                    createdSnapshotKeys.length = 0;
+                    await this.stateSnapshots.pruneAfterCommitUnsafe();
+                }
+                else if (createdSnapshotKeys.length > 0) {
+                    await this.stateSnapshots.discardCredentials(createdSnapshotKeys);
+                    createdSnapshotKeys.length = 0;
+                }
+                const missingHistory = [...gapRuns].flatMap((runId) => {
+                    const row = this.database
+                        .prepare('SELECT * FROM braid_run_cursors WHERE run_id = ?')
+                        .get(runId);
+                    const missing = missingFromCursor(row);
+                    return missing ? [missing] : [];
+                });
+                return {
+                    acceptedEventIds,
+                    duplicateEventIds,
+                    missingHistory,
+                    projectionChecksum: this.storedProjectionChecksum(),
+                };
+            }
+            catch (error) {
+                if (!committed)
+                    this.rollback();
+                throw classifySqliteError(error);
+            }
+        }
+        catch (error) {
+            for (const ref of createdKeys)
+                await this.credentials.remove(ref).catch(() => undefined);
+            await this.stateSnapshots.discardCredentials(createdSnapshotKeys);
+            if (error instanceof StorageError && error.code === 'CONTENT_KEY_RACE') {
+                return this.appendUnsafe(events, snapshot);
+            }
+            throw error instanceof StorageError || error instanceof CredentialError
+                ? error
+                : classifySqliteError(error);
+        }
+        finally {
+            for (const key of contentKeys.values())
+                key.fill(0);
+        }
+    }
+    async events(input = {}) {
+        this.assertOpen();
+        const clauses = [];
+        const parameters = [];
+        if (input.workspaceId !== undefined) {
+            clauses.push('workspace_id = ?');
+            parameters.push(input.workspaceId);
+        }
+        if (input.conversationId !== undefined) {
+            clauses.push('conversation_id = ?');
+            parameters.push(input.conversationId);
+        }
+        if (input.runId !== undefined) {
+            clauses.push('run_id = ?');
+            parameters.push(input.runId);
+        }
+        if (input.afterStorageId !== undefined) {
+            clauses.push('storage_id > ?');
+            parameters.push(input.afterStorageId);
+        }
+        const where = clauses.length === 0 ? '' : ` WHERE ${clauses.join(' AND ')}`;
+        const rows = this.database
+            .prepare(`SELECT * FROM braid_journal_events${where} ORDER BY storage_id`)
+            .all(...parameters);
+        return this.storedEvents(rows);
+    }
+    async replay(input) {
+        this.assertOpen();
+        const after = input.afterSequence ?? 0;
+        const cursor = this.database
+            .prepare('SELECT * FROM braid_run_cursors WHERE run_id = ?')
+            .get(input.runId);
+        const rows = this.database
+            .prepare('SELECT * FROM braid_journal_events WHERE run_id = ? AND run_sequence > ? ORDER BY run_sequence')
+            .all(input.runId, after);
+        const events = await this.storedEvents(rows);
+        const missing = cursor ? missingFromCursor(cursor) : null;
+        return {
+            events,
+            complete: missing === null,
+            missingHistory: missing ? [missing] : [],
+            lastSequence: cursor?.last_sequence ?? 0,
+            ...(cursor?.last_cursor === null || cursor?.last_cursor === undefined
+                ? {}
+                : { lastCursor: cursor.last_cursor }),
+        };
+    }
+    async projection() {
+        this.assertOpen();
+        return structuredClone(this.currentProjection());
+    }
+    async projectionChecksum() {
+        this.assertOpen();
+        return this.storedProjectionChecksum();
+    }
+}
+//# sourceMappingURL=sqlite-journal.js.map

package/dist/adapters/storage/sqlite-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-journal.js","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAa5D,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAE9F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAG7E,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEzF,MAAM,OAAgB,oBAAqB,SAAQ,sBAAsB;IACvE,KAAK,CAAC,MAAM,CAAC,MAA+B;QAC1C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAGxB;QACC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrF,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAM;QACR,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CACpB,4BAA4B,EAC5B,qCAAqC,IAAI,CAAC,SAAS,SAAS,CAC7D,CAAA;QACH,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAC9B,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACvC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CACpB,4BAA4B,EAC5B,oDAAoD,CACrD,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAA+B,EAC/B,QAAwB;QAExB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAA;QACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAA;QAC5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAA;QAChE,MAAM,WAAW,GAAoB,EAAE,CAAA;QACvC,MAAM,mBAAmB,GAAoB,EAAE,CAAA;QAC/C,IAAI,gBAAmD,CAAA;QACvD,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;oBAC/E,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;oBACnD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;oBACnD,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;gBAChE,CAAC;qBAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;oBAC7E,MAAM,IAAI,YAAY,CACpB,iCAAiC,EACjC,gBAAgB,KAAK,CAAC,cAAc,oCAAoC,CACzE,CAAA;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAA;YACrF,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAA;YACZ,MAAM,gBAAgB,GAAc,EAAE,CAAA;YACtC,MAAM,iBAAiB,GAAc,EAAE,CAAA;YACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAS,CAAA;YAChC,IAAI,iBAAqC,CAAA;YACzC,IAAI,SAAS,GAAG,KAAK,CAAA;YACrB,IAAI,CAAC;gBACH,KAAK,MAAM,CAAC,cAAc,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;oBACzD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;oBAC3C,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG;wBACtB,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,yCAAyC,CAC1C,CAAA;oBACH,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ;yBAC/B,OAAO,CAAC,wEAAwE,CAAC;yBACjF,GAAG,CAAC,cAAc,CAAoD,CAAA;oBACzE,IAAI,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC,KAAK,WAAW,EAAE,CAAC;wBACxF,MAAM,IAAI,YAAY,CACpB,iCAAiC,EACjC,gBAAgB,cAAc,+BAA+B,CAC9D,CAAA;oBACH,CAAC;oBACD,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN,6FAA6F,CAC9F;6BACA,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;oBAC5C,CAAC;oBACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;yBACzB,OAAO,CACN,yFAAyF,CAC1F;yBACA,GAAG,CAAC,cAAc,CAER,CAAA;oBACb,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7C,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,gBAAgB,cAAc,4BAA4B,CAC3D,CAAA;oBACH,CAAC;oBACD,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;wBACxE,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,gBAAgB,cAAc,uCAAuC,CACtE,CAAA;oBACH,CAAC;oBACD,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN,kGAAkG,CACnG;6BACA,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;oBAC7B,CAAC;gBACH,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;yBAC3B,OAAO,CACN;;yEAE2D,CAC5D;yBACA,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAgBpB,CAAA;oBACb,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;oBAC/C,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,kBAAkB,GACtB,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,WAAW;4BAC3C,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;4BACjD,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK;4BAC/B,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO;4BACnC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,QAAQ;4BAChD,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;4BAC5B,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;4BACpD,CAAC,QAAQ,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC;4BACxE,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;4BAC/D,QAAQ,CAAC,gBAAgB,KAAK,QAAQ;4BACtC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU;4BACzC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU,CAAC;4BAC7E,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;wBACjE,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACxB,MAAM,IAAI,YAAY,CACpB,mBAAmB,EACnB,SAAS,KAAK,CAAC,OAAO,qCAAqC,CAC5D,CAAA;wBACH,CAAC;wBACD,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;wBACrC,SAAQ;oBACV,CAAC;oBACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ;yBACnC,OAAO,CACN,iFAAiF,CAClF;yBACA,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAgD,CAAA;oBAClF,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;wBACpE,MAAM,IAAI,YAAY,CACpB,mBAAmB,EACnB,YAAY,KAAK,CAAC,QAAQ,gCAAgC,KAAK,CAAC,KAAK,EAAE,CACxE,CAAA;oBACH,CAAC;oBACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;yBACzB,OAAO,CACN,wIAAwI,CACzI;yBACA,GAAG,CAAC,KAAK,CAAC,KAAK,CAA0B,CAAA;oBAC5C,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;wBAC9D,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,OAAO,KAAK,CAAC,KAAK,kCAAkC,CACrD,CAAA;oBACH,CAAC;oBACD,MAAM,iBAAiB,GACrB,MAAM,EAAE,YAAY,KAAK,IAAI;wBAC7B,MAAM,EAAE,YAAY,KAAK,SAAS;wBAClC,MAAM,EAAE,UAAU,KAAK,IAAI;wBAC3B,MAAM,EAAE,UAAU,KAAK,SAAS;wBAChC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY;wBACrC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAA;oBACrC,IAAI,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnF,MAAM,IAAI,YAAY,CACpB,uBAAuB,EACvB,OAAO,KAAK,CAAC,KAAK,sBAAsB,CACzC,CAAA;oBACH,CAAC;oBACD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;oBACjD,IAAI,CAAC,GAAG;wBACN,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,yCAAyC,CAC1C,CAAA;oBACH,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;oBAClD,IAAI,CAAC,QAAQ;yBACV,OAAO,CACN;;6FAE+E,CAChF;yBACA,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;oBACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;yBAC3B,OAAO,CACN;;;mEAGqD,CACtD;yBACA,GAAG,CACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,eAAe,IAAI,IAAI,EAC7B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,OAAO,EACP,QAAQ,EACR,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,EACzB,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChC,CAAA;oBACH,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAA;oBAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACf,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO;wBAAE,iBAAiB,GAAG,SAAS,CAAA;oBACtE,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;wBACnC,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,QAAQ,EAAE,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;qBAC5D,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBAC5D,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACtC,CAAC;gBACD,IAAI,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,CAAA;gBACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAA;oBACvF,CAAC;oBACD,IAAI,iBAAiB,KAAK,SAAS;wBACjC,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,8BAA8B,CAAC,CAAA;oBAClF,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;gBAChF,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrB,SAAS,GAAG,IAAI,CAAA;gBAChB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAA;gBACtB,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1E,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAA;oBAC9B,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAA;gBACpD,CAAC;qBAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;oBACjE,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAA;gBAChC,CAAC;gBACD,MAAM,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ;yBACtB,OAAO,CAAC,kDAAkD,CAAC;yBAC3D,GAAG,CAAC,KAAK,CAAc,CAAA;oBAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;oBACtC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBACjC,CAAC,CAAC,CAAA;gBACF,OAAO;oBACL,gBAAgB;oBAChB,iBAAiB;oBACjB,cAAc;oBACd,kBAAkB,EAAE,IAAI,CAAC,wBAAwB,EAAE;iBACpD,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS;oBAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;gBAC/B,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,WAAW;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACxF,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;YACjE,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,eAAe;gBACrE,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAK,GAKD,EAAE;QAEN,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,MAAM,UAAU,GAAkB,EAAE,CAAA;QACpC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAChC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YACnC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC9B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QACvC,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;aACvB,OAAO,CAAC,qCAAqC,KAAK,sBAAsB,CAAC;aACzE,GAAG,CAAC,GAAG,UAAU,CAA8B,CAAA;QAClD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAGZ;QACC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;aACzB,OAAO,CAAC,kDAAkD,CAAC;aAC3D,GAAG,CAAC,KAAK,CAAC,KAAK,CAA0B,CAAA;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;aACvB,OAAO,CACN,gGAAgG,CACjG;aACA,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAA8B,CAAA;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzD,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,OAAO,KAAK,IAAI;YAC1B,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACxC,YAAY,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC;YACxC,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS;gBACnE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;SACxC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,OAAO,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAA;IACxC,CAAC;CACF"}

package/dist/adapters/storage/sqlite-lifecycle.d.ts

@@ -0,0 +1,19 @@
+import type { CredentialRef } from '../../ports/credentials.js';
+import type { BackupReport } from '../../ports/storage.js';
+import { type SqliteDatabase } from './sqlite-driver.js';
+import { SqliteProjectionStorage } from './sqlite-projection.js';
+import type { RestoreManifest } from './sqlite-recovery.js';
+export declare abstract class SqliteLifecycleStorage extends SqliteProjectionStorage {
+    initialize(): Promise<void>;
+    private assertStartupConfiguration;
+    reconcileContentKeyLifecycle(): Promise<void>;
+    removeCredentialIfPresent(ref: CredentialRef): Promise<void>;
+    createMigrationBackup(version: number): Promise<string>;
+    backupUnsafe(path: string): Promise<BackupReport>;
+    openDatabase(path: string): SqliteDatabase;
+    assertEncryptedArtifact(path: string): Promise<void>;
+    secureArtifacts(): Promise<void>;
+    assertReadableBackup(path: string): Promise<void>;
+    rollbackRestore(manifest: RestoreManifest): Promise<void>;
+}
+//# sourceMappingURL=sqlite-lifecycle.d.ts.map

package/dist/adapters/storage/sqlite-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-lifecycle.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAE1D,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAcjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAW3D,8BAAsB,sBAAuB,SAAQ,uBAAuB;IACpE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CA8DhC;IAED,OAAO,CAAC,0BAA0B;IAc5B,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CA0ElD;IAEK,yBAAyB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAMjE;IAEK,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ5D;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAqDtD;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAYzC;IAEK,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWzD;IAEK,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAIrC;IAEK,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBtD;IAEK,eAAe,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC9D;CACF"}

package/dist/adapters/storage/sqlite-lifecycle.js

@@ -0,0 +1,307 @@
+import { randomUUID } from 'node:crypto';
+import { closeSync } from 'node:fs';
+import { link, lstat, rename, rm, stat, unlink } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { performance } from 'node:perf_hooks';
+import { parseConversationId, parseEventId } from '../../domain/ids.js';
+import { credentialRef } from '../../ports/credentials.js';
+import { bindDescriptorLifetime, openBoundSqliteDatabase } from './sqlite-bound-open.js';
+import { configureCipherDatabase } from './sqlite-driver.js';
+import { StorageError } from './sqlite-errors.js';
+import { assertApprovedPath, classifySqliteError, ensureDirectory, openProtectedInput, rejectSymlink, secureArtifact, secureLiveSqliteArtifact, syncDirectory, syncFile, validatePath, } from './sqlite-paths.js';
+import { SqliteProjectionStorage } from './sqlite-projection.js';
+import { restoreManifestPath } from './sqlite-recovery.js';
+import { asString, credentialErrorCode } from './sqlite-rows.js';
+import { applyConnectionPragmas, migrateSchema, pragmaNumber, pragmaString, SQLITE_SCHEMA_VERSION, } from './sqlite-schema.js';
+export class SqliteLifecycleStorage extends SqliteProjectionStorage {
+    async initialize() {
+        let stageStarted = performance.now();
+        const fromVersion = pragmaNumber(this.database, 'user_version');
+        if (fromVersion > SQLITE_SCHEMA_VERSION)
+            throw new StorageError('SQLITE_SCHEMA_NEWER', 'Database schema is newer than this Braid release');
+        if (fromVersion < SQLITE_SCHEMA_VERSION && fromVersion > 0)
+            await this.createMigrationBackup(fromVersion);
+        if (fromVersion < SQLITE_SCHEMA_VERSION) {
+            this.begin();
+            try {
+                migrateSchema(this.database);
+                this.migrationHooks?.beforeVersionCommit?.(SQLITE_SCHEMA_VERSION);
+                if (fromVersion > 0)
+                    this.writeProjection(this.buildProjection());
+                this.commit(fromVersion === 0 ? 'schema.initialize' : 'migration');
+            }
+            catch (error) {
+                this.rollback();
+                throw classifySqliteError(error);
+            }
+        }
+        this.observeStartup('schema', stageStarted);
+        stageStarted = performance.now();
+        await this.reconcileContentKeyLifecycle();
+        this.observeStartup('content-keys', stageStarted);
+        stageStarted = performance.now();
+        await this.stateSnapshots.reconcileUnsafe();
+        await this.stateSnapshots.pruneUnsafe();
+        this.observeStartup('snapshot-maintenance', stageStarted);
+        stageStarted = performance.now();
+        const stored = this.database
+            .prepare('SELECT revision, state_json, checksum FROM braid_projection_state WHERE projection_name = ?')
+            .get('canonical');
+        if (!stored) {
+            const built = this.buildProjection();
+            this.begin();
+            try {
+                this.writeProjection(built);
+                this.commit('projection.initialize');
+            }
+            catch (error) {
+                this.rollback();
+                throw classifySqliteError(error);
+            }
+        }
+        else {
+            this.assertStoredProjectionSummary(stored);
+        }
+        this.observeStartup('projection', stageStarted);
+        stageStarted = performance.now();
+        if (fromVersion === SQLITE_SCHEMA_VERSION)
+            this.assertStartupConfiguration();
+        else {
+            const report = this.integrityReport();
+            if (!report.ok)
+                throw new StorageError('STORAGE_INTEGRITY_FAILURE', report.errors.join('; '));
+        }
+        this.observeStartup('configuration', stageStarted);
+        stageStarted = performance.now();
+        await this.secureArtifacts();
+        this.observeStartup('artifact-permissions', stageStarted);
+    }
+    assertStartupConfiguration() {
+        const failures = [];
+        if (pragmaNumber(this.database, 'foreign_keys') !== 1)
+            failures.push('foreign_keys is disabled');
+        if (pragmaString(this.database, 'journal_mode')?.toLowerCase() !== 'wal') {
+            failures.push('journal_mode is not WAL');
+        }
+        if (pragmaString(this.database, 'cipher')?.toLowerCase() !== 'sqlcipher') {
+            failures.push('SQLCipher mode is not active');
+        }
+        if (failures.length > 0) {
+            throw new StorageError('STORAGE_INTEGRITY_FAILURE', failures.join('; '));
+        }
+    }
+    async reconcileContentKeyLifecycle() {
+        const rotations = this.database
+            .prepare('SELECT conversation_id, old_credential_ref, new_credential_ref, redacted_event_id, phase FROM braid_content_key_rotations ORDER BY conversation_id')
+            .all();
+        for (const rotation of rotations) {
+            const conversationId = parseConversationId(rotation.conversation_id);
+            const oldRef = credentialRef(rotation.old_credential_ref);
+            const newRef = credentialRef(rotation.new_credential_ref);
+            const current = this.database
+                .prepare('SELECT credential_ref FROM braid_conversation_keys WHERE conversation_id = ?')
+                .get(conversationId);
+            if (!current)
+                throw new StorageError('CONTENT_KEY_UNAVAILABLE', `Conversation ${conversationId} has no content key`);
+            const currentRef = credentialRef(asString(current.credential_ref, 'credential_ref'));
+            if (currentRef === newRef) {
+                if (rotation.redacted_event_id === null || rotation.phase !== 'rewritten') {
+                    throw new StorageError('CONTENT_KEY_ROTATION_UNVERIFIED', `Conversation ${conversationId} has an unverified content key rotation`);
+                }
+                const verified = await this.verifyConversation(conversationId, parseEventId(rotation.redacted_event_id), newRef);
+                if (!verified) {
+                    throw new StorageError('REDACTION_VERIFY_FAILED', `Conversation ${conversationId} content rewrite failed verification`);
+                }
+                await this.removeCredentialIfPresent(oldRef);
+            }
+            else if (currentRef === oldRef) {
+                await this.removeCredentialIfPresent(newRef);
+            }
+            else {
+                throw new StorageError('CONTENT_KEY_ROTATION_CONFLICT', `Conversation ${conversationId} has an unexpected content key rotation`);
+            }
+            this.begin();
+            try {
+                this.database
+                    .prepare('DELETE FROM braid_content_key_rotations WHERE conversation_id = ?')
+                    .run(conversationId);
+                this.commit('key.reconcile');
+            }
+            catch (error) {
+                this.rollback();
+                throw classifySqliteError(error);
+            }
+        }
+        const destroyed = this.database
+            .prepare('SELECT credential_ref FROM braid_conversation_keys WHERE destroyed = 1 ORDER BY conversation_id')
+            .all();
+        for (const row of destroyed) {
+            await this.removeCredentialIfPresent(credentialRef(asString(row.credential_ref, 'credential_ref')));
+        }
+    }
+    async removeCredentialIfPresent(ref) {
+        try {
+            await this.credentials.remove(ref);
+        }
+        catch (error) {
+            if (credentialErrorCode(error) !== 'CREDENTIAL_NOT_FOUND')
+                throw error;
+        }
+    }
+    async createMigrationBackup(version) {
+        await ensureDirectory(this.backupDirectory);
+        const path = join(this.backupDirectory, `${basename(this.path)}.pre-migration-v${version}-${Date.now()}.bak`);
+        await this.backupUnsafe(path);
+        return path;
+    }
+    async backupUnsafe(path) {
+        this.assertOpen();
+        const destination = validatePath(path, 'Backup path');
+        if (destination === this.path)
+            throw new StorageError('BACKUP_PATH', 'Backup cannot overwrite the live database');
+        await assertApprovedPath(destination, this.workspaceRoot ?? dirname(this.path), 'Backup path');
+        await ensureDirectory(dirname(destination));
+        await rejectSymlink(destination, false);
+        try {
+            await lstat(destination);
+            throw new StorageError('BACKUP_EXISTS', 'Backup destination already exists');
+        }
+        catch (error) {
+            if (error instanceof StorageError)
+                throw error;
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const temporary = `${destination}.partial-${randomUUID()}`;
+        try {
+            this.durableBoundaryHook?.('before:backup');
+            this.database.prepare('VACUUM INTO ?').run(temporary);
+            await secureArtifact(temporary);
+            await this.assertEncryptedArtifact(temporary);
+            await this.assertReadableBackup(temporary);
+            await syncFile(temporary);
+            this.durableBoundaryHook?.('before:backup.publish');
+            try {
+                await link(temporary, destination);
+            }
+            catch (error) {
+                if (error.code === 'EEXIST') {
+                    throw new StorageError('BACKUP_EXISTS', 'Backup destination already exists', {
+                        cause: error,
+                    });
+                }
+                throw error;
+            }
+            await syncFile(destination);
+            await syncDirectory(dirname(destination));
+            this.durableBoundaryHook?.('after:backup.publish');
+            this.durableBoundaryHook?.('before:backup.temp.remove');
+            await unlink(temporary);
+            await syncDirectory(dirname(destination));
+            this.durableBoundaryHook?.('after:backup.temp.remove');
+            const bytes = (await stat(destination)).size;
+            this.latestBackupPath = destination;
+            try {
+                this.durableBoundaryHook?.('after:backup');
+            }
+            catch {
+                // The backup is already complete; a test observer cannot invalidate it.
+            }
+            return { path: destination, bytes, encrypted: true };
+        }
+        catch (error) {
+            await rm(temporary, { force: true }).catch(() => undefined);
+            throw error instanceof StorageError ? error : classifySqliteError(error);
+        }
+    }
+    openDatabase(path) {
+        const opened = openBoundSqliteDatabase(path, this.databaseFactory, this.busyTimeoutMs);
+        try {
+            configureCipherDatabase(opened.database, this.databaseKey, {
+                newDatabase: opened.newDatabase,
+            });
+            return bindDescriptorLifetime(opened.database, opened.fileDescriptor);
+        }
+        catch (error) {
+            opened.database.close();
+            closeSync(opened.fileDescriptor);
+            throw error;
+        }
+    }
+    async assertEncryptedArtifact(path) {
+        const handle = await openProtectedInput(path, 'encrypted storage artifact');
+        let bytes;
+        try {
+            bytes = await handle.readFile();
+        }
+        finally {
+            await handle.close();
+        }
+        if (bytes.length < 32 || bytes.subarray(0, 16).toString('ascii') === 'SQLite format 3\u0000') {
+            throw new StorageError('STORAGE_NOT_ENCRYPTED', `Storage artifact is not encrypted: ${path}`);
+        }
+    }
+    async secureArtifacts() {
+        await secureLiveSqliteArtifact(this.path);
+        await secureLiveSqliteArtifact(this.artifacts().wal);
+        await secureLiveSqliteArtifact(this.artifacts().sharedMemory);
+    }
+    async assertReadableBackup(path) {
+        const database = this.openDatabase(path);
+        try {
+            const quick = database.prepare('PRAGMA quick_check').all();
+            const full = database.prepare('PRAGMA integrity_check').all();
+            const isOk = (rows) => rows.length > 0 && rows.every((row) => Object.values(row).some((value) => value === 'ok'));
+            if (!isOk(quick) || !isOk(full)) {
+                throw new StorageError('BACKUP_INTEGRITY_FAILURE', 'Encrypted backup failed SQLite integrity checks');
+            }
+        }
+        finally {
+            database.close();
+        }
+    }
+    async rollbackRestore(manifest) {
+        if (this.database.open)
+            this.database.close();
+        const liveExists = await stat(this.path)
+            .then(() => true)
+            .catch(() => false);
+        const displacedExists = await stat(manifest.displaced)
+            .then(() => true)
+            .catch(() => false);
+        const candidateInstalled = displacedExists &&
+            (manifest.phase === 'live-displaced' ||
+                manifest.phase === 'installed' ||
+                manifest.phase === 'verified' ||
+                liveExists);
+        if (candidateInstalled && liveExists) {
+            await rm(this.path, { force: true });
+            await syncDirectory(dirname(this.path));
+        }
+        for (const [source, target] of [
+            [manifest.displaced, this.path],
+            [manifest.displacedWal, `${this.path}-wal`],
+            [manifest.displacedSharedMemory, `${this.path}-shm`],
+        ]) {
+            const sourceExists = await stat(source)
+                .then(() => true)
+                .catch(() => false);
+            const targetExists = await stat(target)
+                .then(() => true)
+                .catch(() => false);
+            if (sourceExists && !targetExists) {
+                await rename(source, target);
+                await syncDirectory(dirname(this.path));
+            }
+        }
+        await rm(manifest.temporary, { force: true });
+        await unlink(restoreManifestPath(this.path)).catch((error) => {
+            if (error.code !== 'ENOENT')
+                throw error;
+        });
+        await syncDirectory(dirname(this.path));
+        this.database = this.openDatabase(this.path);
+        applyConnectionPragmas(this.database, this.busyTimeoutMs);
+    }
+}
+//# sourceMappingURL=sqlite-lifecycle.js.map