@tangle-network/braid 0.1.0

package/dist/adapters/storage/sqlite-redaction.js

@@ -0,0 +1,361 @@
+import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { canonicalDigest } from '../../domain/canonical.js';
+import { parseConversationId, parseRunId } from '../../domain/ids.js';
+import { credentialRef } from '../../ports/credentials.js';
+import { decryptPayload, encryptPayload, payloadChecksum } from './sqlite-crypto.js';
+import { StorageError } from './sqlite-errors.js';
+import { SqliteMaintenanceStorage } from './sqlite-maintenance.js';
+import { classifySqliteError } from './sqlite-paths.js';
+import { asBuffer, asString, missingFromCursor, now, redactedPersistedPayload, redactionReasonDigest, } from './sqlite-rows.js';
+import { assertOperationRequestDigest } from './storage-validation.js';
+export class SqliteRedactionStorage extends SqliteMaintenanceStorage {
+    async applyRetention(input) {
+        assertOperationRequestDigest(input.operation, {
+            before: input.before,
+            ...(input.conversationId === undefined ? {} : { conversationId: input.conversationId }),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        let mutationCommitted = false;
+        try {
+            const result = await this.writes.run(async () => {
+                this.assertOpen();
+                const conditions = ['e.received_at < ?', 'e.redacted = 0', 'c.terminal = 1'];
+                const parameters = [input.before];
+                if (input.conversationId !== undefined) {
+                    conditions.push('e.conversation_id = ?');
+                    parameters.push(input.conversationId);
+                }
+                const rows = this.database
+                    .prepare(`SELECT e.* FROM braid_journal_events e
+         JOIN braid_run_cursors c ON c.run_id = e.run_id WHERE ${conditions.join(' AND ')}`)
+                    .all(...parameters);
+                if (rows.length === 0)
+                    return { redactedEvents: 0, deletedConversations: [] };
+                const keys = new Map();
+                try {
+                    for (const row of rows) {
+                        const conversationId = parseConversationId(row.conversation_id);
+                        if (!keys.has(conversationId)) {
+                            const key = await this.existingContentKey(conversationId);
+                            if (!key)
+                                throw new StorageError('CONTENT_KEY_UNAVAILABLE', `Content key for ${conversationId} is unavailable`);
+                            keys.set(conversationId, key);
+                        }
+                    }
+                    await this.stateSnapshots.destroyKeysBeforeMutation();
+                    this.begin();
+                    for (const row of rows) {
+                        const conversationId = parseConversationId(row.conversation_id);
+                        const key = keys.get(conversationId);
+                        if (!key)
+                            throw new StorageError('CONTENT_KEY_UNAVAILABLE', 'Retention content key is unavailable');
+                        const original = decryptPayload(asBuffer(row.payload, 'payload'), key);
+                        const marker = redactedPersistedPayload(original, row, 'retention');
+                        const encoded = encryptPayload(marker, key);
+                        this.database
+                            .prepare('UPDATE braid_journal_events SET payload = ?, redacted = 1, payload_checksum = ? WHERE conversation_id = ? AND event_id = ?')
+                            .run(encoded, payloadChecksum(marker), row.conversation_id, row.event_id);
+                        encoded.fill(0);
+                        this.database
+                            .prepare(`INSERT INTO braid_redaction_records(conversation_id, event_id, reason, rewritten_at)
+             VALUES (?, ?, 'retention', ?) ON CONFLICT(conversation_id, event_id) DO UPDATE SET reason = excluded.reason, rewritten_at = excluded.rewritten_at`)
+                            .run(row.conversation_id, row.event_id, now());
+                    }
+                    this.stateSnapshots.invalidateUnsafe();
+                    this.commit('retention');
+                    mutationCommitted = true;
+                    await this.stateSnapshots.finishInvalidationUnsafe();
+                    return { redactedEvents: rows.length, deletedConversations: [] };
+                }
+                catch (error) {
+                    if (!mutationCommitted)
+                        this.rollback();
+                    throw classifySqliteError(error);
+                }
+                finally {
+                    for (const key of keys.values())
+                        key.fill(0);
+                }
+            });
+            await this.completeMutation(input.operation, 'terminal', result);
+            return result;
+        }
+        catch (error) {
+            await this.completeMutationFailure(input.operation, error, mutationCommitted);
+            throw error;
+        }
+    }
+    async redact(input) {
+        assertOperationRequestDigest(input.operation, {
+            conversationId: input.conversationId,
+            eventId: input.eventId,
+            reasonDigest: canonicalDigest(input.reason),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        let mutationCommitted = false;
+        try {
+            const result = await this.writes.run(async () => this.withExclusiveLock(async () => {
+                this.assertOpen();
+                const target = this.database
+                    .prepare('SELECT * FROM braid_journal_events WHERE conversation_id = ? AND event_id = ?')
+                    .get(input.conversationId, input.eventId);
+                if (!target)
+                    throw new StorageError('EVENT_NOT_FOUND', `Event ${input.eventId} was not found`);
+                const keyRow = this.database
+                    .prepare('SELECT credential_ref, destroyed FROM braid_conversation_keys WHERE conversation_id = ?')
+                    .get(input.conversationId);
+                const oldRef = keyRow === undefined || Number(keyRow.destroyed) === 1
+                    ? undefined
+                    : credentialRef(asString(keyRow.credential_ref, 'credential_ref'));
+                const oldKey = await this.existingContentKey(input.conversationId);
+                if (!oldKey)
+                    throw new StorageError('CONTENT_KEY_UNAVAILABLE', 'The old content key is unavailable');
+                if (oldRef === undefined) {
+                    oldKey.fill(0);
+                    throw new StorageError('CONTENT_KEY_UNAVAILABLE', 'The conversation has no replaceable content key');
+                }
+                const newRef = credentialRef(`cred:v1:content-redacted-${createHash('sha256').update(input.conversationId).digest('hex')}-${randomUUID()}`);
+                const newKey = randomBytes(32);
+                const rows = this.database
+                    .prepare('SELECT * FROM braid_journal_events WHERE conversation_id = ? ORDER BY storage_id')
+                    .all(input.conversationId);
+                let rewritten = [];
+                try {
+                    await this.stateSnapshots.destroyKeysBeforeMutation();
+                    this.begin();
+                    try {
+                        this.database
+                            .prepare(`INSERT INTO braid_content_key_rotations(
+               conversation_id, old_credential_ref, new_credential_ref, redacted_event_id, phase, prepared_at
+             ) VALUES (?, ?, ?, ?, 'prepared', ?)
+             ON CONFLICT(conversation_id) DO UPDATE SET old_credential_ref = excluded.old_credential_ref,
+             new_credential_ref = excluded.new_credential_ref, redacted_event_id = excluded.redacted_event_id,
+             phase = excluded.phase, prepared_at = excluded.prepared_at`)
+                            .run(input.conversationId, oldRef, newRef, input.eventId, now());
+                        this.commit('redaction.prepare');
+                    }
+                    catch (error) {
+                        this.rollback();
+                        throw error;
+                    }
+                    this.durableBoundaryHook?.('before:redaction.key.store');
+                    await this.credentials.store({ ref: newRef, value: newKey });
+                    this.durableBoundaryHook?.('after:redaction.key.store');
+                    rewritten = rows.map((row) => {
+                        const oldPayload = decryptPayload(asBuffer(row.payload, 'payload'), oldKey);
+                        const nextPayload = row.event_id === input.eventId
+                            ? redactedPersistedPayload(oldPayload, row, input.reason)
+                            : oldPayload;
+                        const encoded = encryptPayload(nextPayload, newKey);
+                        return {
+                            row,
+                            encoded,
+                            checksum: payloadChecksum(nextPayload),
+                            redacted: row.event_id === input.eventId || row.redacted === 1,
+                        };
+                    });
+                    this.begin();
+                    for (const item of rewritten) {
+                        this.database
+                            .prepare('UPDATE braid_journal_events SET payload = ?, payload_checksum = ?, redacted = ? WHERE storage_id = ?')
+                            .run(item.encoded, item.checksum, item.redacted ? 1 : 0, item.row.storage_id);
+                        item.encoded.fill(0);
+                    }
+                    this.database
+                        .prepare('UPDATE braid_conversation_keys SET credential_ref = ?, destroyed = 0 WHERE conversation_id = ?')
+                        .run(newRef, input.conversationId);
+                    this.database
+                        .prepare(`UPDATE braid_content_key_rotations
+               SET phase = 'rewritten' WHERE conversation_id = ?`)
+                        .run(input.conversationId);
+                    this.database
+                        .prepare(`INSERT INTO braid_redaction_records(conversation_id, event_id, reason, rewritten_at)
+             VALUES (?, ?, ?, ?) ON CONFLICT(conversation_id, event_id) DO UPDATE SET reason = excluded.reason, rewritten_at = excluded.rewritten_at`)
+                        .run(input.conversationId, input.eventId, redactionReasonDigest(input.reason), now());
+                    this.stateSnapshots.invalidateUnsafe();
+                    this.commit('redaction');
+                    mutationCommitted = true;
+                    await this.stateSnapshots.finishInvalidationUnsafe();
+                }
+                catch (error) {
+                    if (!mutationCommitted) {
+                        this.rollback();
+                        await this.removeCredentialIfPresent(newRef).catch(() => undefined);
+                        this.begin();
+                        try {
+                            this.database
+                                .prepare('DELETE FROM braid_content_key_rotations WHERE conversation_id = ?')
+                                .run(input.conversationId);
+                            this.commit('redaction.prepare.cleanup');
+                        }
+                        catch {
+                            this.rollback();
+                        }
+                    }
+                    for (const item of rewritten)
+                        item.encoded.fill(0);
+                    oldKey.fill(0);
+                    newKey.fill(0);
+                    throw classifySqliteError(error);
+                }
+                for (const item of rewritten)
+                    item.encoded.fill(0);
+                try {
+                    const verification = await this.verifyConversation(input.conversationId, input.eventId, newRef);
+                    if (!verification) {
+                        throw new StorageError('REDACTION_VERIFY_FAILED', 'Redaction rewrite verification failed');
+                    }
+                    this.durableBoundaryHook?.('before:redaction.old-key.remove');
+                    await this.removeCredentialIfPresent(oldRef);
+                    this.durableBoundaryHook?.('after:redaction.old-key.remove');
+                    this.begin();
+                    try {
+                        this.database
+                            .prepare('DELETE FROM braid_content_key_rotations WHERE conversation_id = ?')
+                            .run(input.conversationId);
+                        this.commit('redaction.cleanup');
+                    }
+                    catch (error) {
+                        this.rollback();
+                        throw error;
+                    }
+                }
+                catch (error) {
+                    // A committed rewrite is recoverable: the rotation row intentionally
+                    // remains until startup can finish key cleanup.
+                    throw error instanceof StorageError
+                        ? error
+                        : new StorageError('REDACTION_CLEANUP_FAILED', 'Redaction key cleanup did not complete', { cause: error });
+                }
+                finally {
+                    oldKey.fill(0);
+                    newKey.fill(0);
+                }
+                return {
+                    conversationId: input.conversationId,
+                    redactedEventId: input.eventId,
+                    rewrittenEvents: rewritten.length,
+                    newContentKeyRef: newRef,
+                };
+            }));
+            await this.completeMutation(input.operation, 'terminal', result);
+            return result;
+        }
+        catch (error) {
+            await this.completeMutationFailure(input.operation, error, mutationCommitted);
+            throw error;
+        }
+    }
+    async destroyConversation(input) {
+        assertOperationRequestDigest(input.operation, {
+            conversationId: input.conversationId,
+            reasonDigest: canonicalDigest(input.reason),
+        });
+        const replay = await this.reuseMutation(input.operation);
+        if (replay !== undefined)
+            return replay;
+        let mutationCommitted = false;
+        try {
+            const result = await this.writes.run(async () => {
+                this.assertOpen();
+                const tombstone = this.database
+                    .prepare('SELECT reason FROM braid_conversation_tombstones WHERE conversation_id = ?')
+                    .get(input.conversationId);
+                if (tombstone) {
+                    return {
+                        conversationId: input.conversationId,
+                        destroyed: true,
+                        retainedCiphertext: true,
+                    };
+                }
+                const keyRow = this.database
+                    .prepare('SELECT credential_ref FROM braid_conversation_keys WHERE conversation_id = ?')
+                    .get(input.conversationId);
+                if (!keyRow)
+                    throw new StorageError('CONVERSATION_NOT_FOUND', `Conversation ${input.conversationId} was not found`);
+                const ref = credentialRef(asString(keyRow.credential_ref, 'credential_ref'));
+                await this.stateSnapshots.destroyKeysBeforeMutation();
+                this.begin();
+                try {
+                    this.database
+                        .prepare('UPDATE braid_journal_events SET redacted = 0 WHERE conversation_id = ?')
+                        .run(input.conversationId);
+                    this.database
+                        .prepare('UPDATE braid_conversation_keys SET destroyed = 1 WHERE conversation_id = ?')
+                        .run(input.conversationId);
+                    this.database
+                        .prepare(`INSERT INTO braid_conversation_tombstones(conversation_id, reason, deleted_at)
+               VALUES (?, ?, ?)
+               ON CONFLICT(conversation_id) DO UPDATE SET reason = excluded.reason, deleted_at = excluded.deleted_at`)
+                        .run(input.conversationId, redactionReasonDigest(input.reason), now());
+                    this.stateSnapshots.invalidateUnsafe();
+                    this.writeProjection(this.buildProjection());
+                    this.commit('destruction');
+                    mutationCommitted = true;
+                    await this.stateSnapshots.finishInvalidationUnsafe();
+                }
+                catch (error) {
+                    this.rollback();
+                    throw classifySqliteError(error);
+                }
+                try {
+                    await this.credentials.remove(ref);
+                }
+                catch (error) {
+                    throw new StorageError('CONTENT_KEY_DESTRUCTION_FAILED', 'Conversation content key destruction failed', { cause: error });
+                }
+                return { conversationId: input.conversationId, destroyed: true, retainedCiphertext: true };
+            });
+            await this.completeMutation(input.operation, 'terminal', result);
+            return result;
+        }
+        catch (error) {
+            await this.completeMutationFailure(input.operation, error, mutationCommitted);
+            throw error;
+        }
+    }
+    async compact(operation) {
+        assertOperationRequestDigest(operation, {});
+        const replay = await this.reuseMutation(operation);
+        if (replay !== undefined)
+            return;
+        let mutationCommitted = false;
+        try {
+            await this.writes.run(async () => {
+                this.assertOpen();
+                try {
+                    this.database.pragma('wal_checkpoint(TRUNCATE)');
+                    this.database.exec('VACUUM');
+                    mutationCommitted = true;
+                    await this.secureArtifacts();
+                }
+                catch (error) {
+                    throw classifySqliteError(error);
+                }
+            });
+            await this.completeMutation(operation, 'terminal', { completed: true });
+        }
+        catch (error) {
+            await this.completeMutationFailure(operation, error, mutationCommitted);
+            throw error;
+        }
+    }
+    async reconcileNonTerminalRuns() {
+        this.assertOpen();
+        const rows = this.database
+            .prepare('SELECT * FROM braid_run_cursors WHERE terminal = 0 ORDER BY run_id')
+            .all();
+        return rows.map((row) => ({
+            runId: parseRunId(row.run_id),
+            conversationId: parseConversationId(row.conversation_id),
+            lastSequence: row.last_sequence,
+            lastCursor: row.last_cursor,
+            missingHistory: missingFromCursor(row),
+        }));
+    }
+}
+//# sourceMappingURL=sqlite-redaction.js.map

package/dist/adapters/storage/sqlite-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-redaction.js","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAU1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,GAAG,EACH,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AAEtE,MAAM,OAAO,sBAAuB,SAAQ,wBAAwB;IAClE,KAAK,CAAC,cAAc,CAAC,KAIpB;QACC,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SACxF,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAkB,KAAK,CAAC,SAAS,CAAC,CAAA;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9C,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;gBAC5E,MAAM,UAAU,GAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACvC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;oBACxC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;gBACvC,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;qBACvB,OAAO,CACN;iEACqD,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAChF;qBACA,GAAG,CAAC,GAAG,UAAU,CAA8B,CAAA;gBAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAA;gBAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAA;gBAC9C,IAAI,CAAC;oBACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACvB,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;wBAC/D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;4BACzD,IAAI,CAAC,GAAG;gCACN,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,mBAAmB,cAAc,iBAAiB,CACnD,CAAA;4BACH,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;wBAC/B,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,CAAA;oBACrD,IAAI,CAAC,KAAK,EAAE,CAAA;oBACZ,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACvB,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;wBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;wBACpC,IAAI,CAAC,GAAG;4BACN,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,sCAAsC,CACvC,CAAA;wBACH,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;wBACtE,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;wBACnE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;wBAC3C,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN,4HAA4H,CAC7H;6BACA,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;wBAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;wBACf,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN;+JAC+I,CAChJ;6BACA,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;oBAClD,CAAC;oBACD,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAA;oBACtC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;oBACxB,iBAAiB,GAAG,IAAI,CAAA;oBACxB,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,EAAE,CAAA;oBACpD,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAA;gBAClE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,iBAAiB;wBAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;oBACvC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;wBAAS,CAAC;oBACT,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE;wBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAC9C,CAAC;YACH,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;YAChE,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;YAC7E,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAKZ;QACC,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAkB,KAAK,CAAC,SAAS,CAAC,CAAA;QACzE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAC9C,IAAI,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;qBACzB,OAAO,CACN,+EAA+E,CAChF;qBACA,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAA+B,CAAA;gBACzE,IAAI,CAAC,MAAM;oBACT,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,SAAS,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;gBACnF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;qBACzB,OAAO,CACN,yFAAyF,CAC1F;qBACA,GAAG,CAAC,KAAK,CAAC,cAAc,CAEd,CAAA;gBACb,MAAM,MAAM,GACV,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;oBACpD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAA;gBACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;gBAClE,IAAI,CAAC,MAAM;oBACT,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,oCAAoC,CAAC,CAAA;gBACzF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,iDAAiD,CAClD,CAAA;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,aAAa,CAC1B,4BAA4B,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,EAAE,CAC9G,CAAA;gBACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;gBAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;qBACvB,OAAO,CACN,kFAAkF,CACnF;qBACA,GAAG,CAAC,KAAK,CAAC,cAAc,CAA8B,CAAA;gBACzD,IAAI,SAAS,GAKR,EAAE,CAAA;gBACP,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,CAAA;oBACrD,IAAI,CAAC,KAAK,EAAE,CAAA;oBACZ,IAAI,CAAC;wBACH,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN;;;;;wEAKsD,CACvD;6BACA,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;wBAClE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,QAAQ,EAAE,CAAA;wBACf,MAAM,KAAK,CAAA;oBACb,CAAC;oBAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,4BAA4B,CAAC,CAAA;oBACxD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;oBAC5D,IAAI,CAAC,mBAAmB,EAAE,CAAC,2BAA2B,CAAC,CAAA;oBACvD,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC3B,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;wBAC3E,MAAM,WAAW,GACf,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO;4BAC5B,CAAC,CAAC,wBAAwB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;4BACzD,CAAC,CAAC,UAAU,CAAA;wBAChB,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;wBACnD,OAAO;4BACL,GAAG;4BACH,OAAO;4BACP,QAAQ,EAAE,eAAe,CAAC,WAAW,CAAC;4BACtC,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;yBAC/D,CAAA;oBACH,CAAC,CAAC,CAAA;oBAEF,IAAI,CAAC,KAAK,EAAE,CAAA;oBACZ,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;wBAC7B,IAAI,CAAC,QAAQ;6BACV,OAAO,CACN,sGAAsG,CACvG;6BACA,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;wBAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACtB,CAAC;oBACD,IAAI,CAAC,QAAQ;yBACV,OAAO,CACN,gGAAgG,CACjG;yBACA,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;oBACpC,IAAI,CAAC,QAAQ;yBACV,OAAO,CACN;iEACiD,CAClD;yBACA,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;oBAC5B,IAAI,CAAC,QAAQ;yBACV,OAAO,CACN;qJACqI,CACtI;yBACA,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;oBACvF,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAA;oBACtC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;oBACxB,iBAAiB,GAAG,IAAI,CAAA;oBACxB,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,EAAE,CAAA;gBACtD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBACvB,IAAI,CAAC,QAAQ,EAAE,CAAA;wBACf,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;wBACnE,IAAI,CAAC,KAAK,EAAE,CAAA;wBACZ,IAAI,CAAC;4BACH,IAAI,CAAC,QAAQ;iCACV,OAAO,CAAC,mEAAmE,CAAC;iCAC5E,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;4BAC5B,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;wBAC1C,CAAC;wBAAC,MAAM,CAAC;4BACP,IAAI,CAAC,QAAQ,EAAE,CAAA;wBACjB,CAAC;oBACH,CAAC;oBACD,KAAK,MAAM,IAAI,IAAI,SAAS;wBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBAClD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,SAAS;oBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAClD,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAChD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,MAAM,CACP,CAAA;oBACD,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,uCAAuC,CACxC,CAAA;oBACH,CAAC;oBACD,IAAI,CAAC,mBAAmB,EAAE,CAAC,iCAAiC,CAAC,CAAA;oBAC7D,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;oBAC5C,IAAI,CAAC,mBAAmB,EAAE,CAAC,gCAAgC,CAAC,CAAA;oBAC5D,IAAI,CAAC,KAAK,EAAE,CAAA;oBACZ,IAAI,CAAC;wBACH,IAAI,CAAC,QAAQ;6BACV,OAAO,CAAC,mEAAmE,CAAC;6BAC5E,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;wBAC5B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,QAAQ,EAAE,CAAA;wBACf,MAAM,KAAK,CAAA;oBACb,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qEAAqE;oBACrE,gDAAgD;oBAChD,MAAM,KAAK,YAAY,YAAY;wBACjC,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,IAAI,YAAY,CACd,0BAA0B,EAC1B,wCAAwC,EACxC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;gBACP,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACd,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChB,CAAC;gBACD,OAAO;oBACL,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,eAAe,EAAE,KAAK,CAAC,OAAO;oBAC9B,eAAe,EAAE,SAAS,CAAC,MAAM;oBACjC,gBAAgB,EAAE,MAAM;iBACzB,CAAA;YACH,CAAC,CAAC,CACH,CAAA;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;YAChE,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;YAC7E,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAIzB;QACC,4BAA4B,CAAC,KAAK,CAAC,SAAS,EAAE;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAoB,KAAK,CAAC,SAAS,CAAC,CAAA;QAC3E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9C,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ;qBAC5B,OAAO,CAAC,4EAA4E,CAAC;qBACrF,GAAG,CAAC,KAAK,CAAC,cAAc,CAA8C,CAAA;gBACzE,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO;wBACL,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,SAAS,EAAE,IAAI;wBACf,kBAAkB,EAAE,IAAI;qBACzB,CAAA;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ;qBACzB,OAAO,CAAC,8EAA8E,CAAC;qBACvF,GAAG,CAAC,KAAK,CAAC,cAAc,CAAsD,CAAA;gBACjF,IAAI,CAAC,MAAM;oBACT,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,gBAAgB,KAAK,CAAC,cAAc,gBAAgB,CACrD,CAAA;gBACH,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAA;gBAC5E,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,CAAA;gBACrD,IAAI,CAAC,KAAK,EAAE,CAAA;gBACZ,IAAI,CAAC;oBACH,IAAI,CAAC,QAAQ;yBACV,OAAO,CAAC,wEAAwE,CAAC;yBACjF,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;oBAC5B,IAAI,CAAC,QAAQ;yBACV,OAAO,CAAC,4EAA4E,CAAC;yBACrF,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;oBAC5B,IAAI,CAAC,QAAQ;yBACV,OAAO,CACN;;qHAEuG,CACxG;yBACA,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;oBACxE,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAA;oBACtC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAA;oBAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;oBAC1B,iBAAiB,GAAG,IAAI,CAAA;oBACxB,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,EAAE,CAAA;gBACtD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,QAAQ,EAAE,CAAA;oBACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CACpB,gCAAgC,EAChC,6CAA6C,EAC7C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;gBACH,CAAC;gBACD,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;YAC5F,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;YAChE,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;YAC7E,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAA0B;QACtC,4BAA4B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAA+B,SAAS,CAAC,CAAA;QAChF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAM;QAChC,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC/B,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,IAAI,CAAC;oBACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAA;oBAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBAC5B,iBAAiB,GAAG,IAAI,CAAA;oBACxB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;YACH,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;YACvE,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;aACvB,OAAO,CAAC,oEAAoE,CAAC;aAC7E,GAAG,EAA0B,CAAA;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC;YACxD,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC;SACvC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/adapters/storage/sqlite-rows.d.ts

@@ -0,0 +1,29 @@
+import type { CredentialRef } from '../../ports/credentials.js';
+import type { EffectRecord } from '../../ports/effect-storage.js';
+import type { JsonValue, MissingHistory, OperationRecord, ProjectionRun, ProjectionSnapshot } from '../../ports/storage.js';
+import type { CursorRow, OperationRow, SqliteEventRow } from './sqlite-types.js';
+export declare function now(): string;
+export declare function asNumber(value: unknown, field: string): number;
+export declare function asString(value: unknown, field: string): string;
+export declare function asBuffer(value: unknown, field: string): Buffer;
+export declare function cloneJson(value: JsonValue): JsonValue;
+export declare function jsonValue(value: unknown): JsonValue;
+export declare function redactedPersistedPayload(value: JsonValue, row: SqliteEventRow, _reason: string): JsonValue;
+export declare function credentialErrorCode(error: unknown): string | undefined;
+export declare function deterministicCredentialRef(prefix: string, value: string): CredentialRef;
+export declare function redactionReasonDigest(reason: string): string;
+export declare function operationRecordFromRow(row: OperationRow): OperationRecord;
+export declare function effectRecordFromRow(row: Record<string, unknown>): EffectRecord;
+export declare function missingFromCursor(row: CursorRow): MissingHistory | null;
+export declare const PROJECTION_EVENT_DIGEST_SEED: string;
+export declare function appendProjectionEventDigest(previous: string, eventId: string): string;
+export declare function projectionRunDigest(runs: readonly ProjectionRun[]): string;
+export declare function projectionChecksum(input: {
+    readonly schemaVersion: number;
+    readonly eventCount: number;
+    readonly revision: number;
+    readonly eventIdsDigest: string;
+    readonly runsDigest: string;
+}): string;
+export declare function projectionFromRows(rows: readonly SqliteEventRow[], cursors: readonly CursorRow[]): ProjectionSnapshot;
+//# sourceMappingURL=sqlite-rows.d.ts.map

package/dist/adapters/storage/sqlite-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-rows.d.ts","sourceRoot":"","sources":["../../../src/adapters/storage/sqlite-rows.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,aAAa,EACb,kBAAkB,EACnB,MAAM,wBAAwB,CAAA;AAI/B,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEhF,wBAAgB,GAAG,IAAI,MAAM,CAE5B;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAErD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAEnD;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,GACd,SAAS,CA+DX;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAGvF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,eAAe,CAyBzE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAmC9E;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,cAAc,GAAG,IAAI,CAOvE;AAED,eAAO,MAAM,4BAA4B,QAEzB,CAAA;AAEhB,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAS1E;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,GAAG,MAAM,CAET;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,cAAc,EAAE,EAC/B,OAAO,EAAE,SAAS,SAAS,EAAE,GAC5B,kBAAkB,CAkCpB"}

package/dist/adapters/storage/sqlite-rows.js

@@ -0,0 +1,228 @@
+import { createHash } from 'node:crypto';
+import { canonicalDigest, canonicalJson } from '../../domain/canonical.js';
+import { parseConversationId, parseEventId, parseOperationId, parseRunId, } from '../../domain/ids.js';
+import { isCanonicalIsoDateTime } from '../../domain/text.js';
+import { CredentialError, credentialRef } from '../../ports/credentials.js';
+import { isJsonValue, PROJECTION_SCHEMA_VERSION } from '../../ports/storage.js';
+import { assertEffectRecordInput } from './storage-validation.js';
+import { StorageError } from './sqlite-errors.js';
+export function now() {
+    return new Date().toISOString();
+}
+export function asNumber(value, field) {
+    const number = typeof value === 'bigint' ? Number(value) : Number(value);
+    if (!Number.isSafeInteger(number))
+        throw new StorageError('STORAGE_ROW_INVALID', `Invalid ${field} in SQLite row`);
+    return number;
+}
+export function asString(value, field) {
+    if (typeof value !== 'string')
+        throw new StorageError('STORAGE_ROW_INVALID', `Invalid ${field} in SQLite row`);
+    return value;
+}
+export function asBuffer(value, field) {
+    if (Buffer.isBuffer(value))
+        return Buffer.from(value);
+    if (value instanceof Uint8Array)
+        return Buffer.from(value);
+    throw new StorageError('STORAGE_ROW_INVALID', `Invalid ${field} in SQLite row`);
+}
+export function cloneJson(value) {
+    return JSON.parse(canonicalJson(value));
+}
+export function jsonValue(value) {
+    return JSON.parse(canonicalJson(value));
+}
+export function redactedPersistedPayload(value, row, _reason) {
+    const eventId = asString(row.event_id, 'event_id');
+    const storageSequence = asNumber(row.storage_id, 'storage_id');
+    const fallback = () => ({
+        __braidEvent: {
+            kind: 'unknown.event',
+            unknown: {
+                id: eventId,
+                type: asString(row.kind, 'kind'),
+                namespace: 'braid.redacted',
+                summary: 'Event payload redacted',
+                sequence: asNumber(row.run_sequence, 'run_sequence'),
+            },
+        },
+        __braidEnvelope: {
+            eventId,
+            sequence: storageSequence,
+            revision: storageSequence,
+            occurredAt: asString(row.occurred_at, 'occurred_at'),
+            ...(row.cursor === null ? {} : { cursor: asString(row.cursor, 'cursor') }),
+        },
+    });
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return fallback();
+    const candidate = value;
+    const event = candidate.__braidEvent;
+    const envelope = candidate.__braidEnvelope;
+    if (event === null ||
+        typeof event !== 'object' ||
+        Array.isArray(event) ||
+        envelope === null ||
+        typeof envelope !== 'object' ||
+        Array.isArray(envelope))
+        return fallback();
+    const eventRecord = event;
+    const envelopeRecord = envelope;
+    if (typeof eventRecord.kind !== 'string' ||
+        typeof envelopeRecord.sequence !== 'number' ||
+        typeof envelopeRecord.revision !== 'number' ||
+        typeof envelopeRecord.occurredAt !== 'string')
+        return fallback();
+    return {
+        __braidEvent: {
+            kind: 'unknown.event',
+            unknown: {
+                id: eventId,
+                type: eventRecord.kind,
+                namespace: 'braid.redacted',
+                summary: 'Event payload redacted',
+                sequence: envelopeRecord.sequence,
+            },
+        },
+        __braidEnvelope: {
+            eventId,
+            sequence: envelopeRecord.sequence,
+            revision: envelopeRecord.revision,
+            occurredAt: envelopeRecord.occurredAt,
+            ...(typeof envelopeRecord.cursor === 'string' ? { cursor: envelopeRecord.cursor } : {}),
+        },
+    };
+}
+export function credentialErrorCode(error) {
+    return error instanceof CredentialError ? error.code : undefined;
+}
+export function deterministicCredentialRef(prefix, value) {
+    const digest = createHash('sha256').update(value).digest('hex');
+    return credentialRef(`cred:v1:${prefix}-${digest}`);
+}
+export function redactionReasonDigest(reason) {
+    return `sha256:${createHash('sha256').update(reason).digest('hex')}`;
+}
+export function operationRecordFromRow(row) {
+    const request = JSON.parse(row.request_json);
+    if (!isJsonValue(request))
+        throw new StorageError('OPERATION_RECORD_INVALID', 'Stored operation request is invalid');
+    const result = row.result_json === null ? undefined : JSON.parse(row.result_json);
+    if (result !== undefined && !isJsonValue(result)) {
+        throw new StorageError('OPERATION_RECORD_INVALID', 'Stored operation result is invalid');
+    }
+    if (!isCanonicalIsoDateTime(row.created_at) ||
+        !isCanonicalIsoDateTime(row.updated_at) ||
+        row.updated_at < row.created_at) {
+        throw new StorageError('OPERATION_RECORD_INVALID', 'Stored operation timestamps are invalid');
+    }
+    return {
+        operationId: parseOperationId(row.operation_id),
+        kind: row.operation_kind,
+        request,
+        requestDigest: row.request_digest,
+        status: row.status,
+        ...(result === undefined ? {} : { result }),
+        updatedAt: row.updated_at,
+        createdAt: row.created_at,
+    };
+}
+export function effectRecordFromRow(row) {
+    const metadataValue = JSON.parse(asString(row.metadata_json, 'metadata_json'));
+    if (metadataValue === null ||
+        typeof metadataValue !== 'object' ||
+        Array.isArray(metadataValue) ||
+        Object.values(metadataValue).some((value) => typeof value !== 'string')) {
+        throw new StorageError('EFFECT_RECORD_INVALID', 'Stored effect metadata is invalid');
+    }
+    const status = asString(row.status, 'status');
+    if (!['pending', 'acknowledged', 'failed', 'unknown', 'conflict', 'terminal'].includes(status)) {
+        throw new StorageError('EFFECT_RECORD_INVALID', `Unknown effect status ${status}`);
+    }
+    const record = {
+        operationId: parseOperationId(asString(row.operation_id, 'operation_id')),
+        effectKind: asString(row.effect_kind, 'effect_kind'),
+        requestDigest: asString(row.request_digest, 'request_digest'),
+        status: status,
+        attempt: asNumber(row.attempt, 'attempt'),
+        createdAt: asString(row.created_at, 'created_at'),
+        updatedAt: asString(row.updated_at, 'updated_at'),
+        metadata: metadataValue,
+        ...(row.detail === null || row.detail === undefined
+            ? {}
+            : { detail: asString(row.detail, 'detail') }),
+        ...(row.external_reference === null || row.external_reference === undefined
+            ? {}
+            : { externalReference: asString(row.external_reference, 'external_reference') }),
+        ...(row.conflict_with_digest === null || row.conflict_with_digest === undefined
+            ? {}
+            : { conflictWithDigest: asString(row.conflict_with_digest, 'conflict_with_digest') }),
+    };
+    assertEffectRecordInput(record);
+    return record;
+}
+export function missingFromCursor(row) {
+    if (row.missing_from === null || row.missing_to === null)
+        return null;
+    return {
+        runId: parseRunId(row.run_id),
+        fromSequence: row.missing_from,
+        toSequence: row.missing_to,
+    };
+}
+export const PROJECTION_EVENT_DIGEST_SEED = createHash('sha256')
+    .update('braid-projection-events-v1')
+    .digest('hex');
+export function appendProjectionEventDigest(previous, eventId) {
+    return createHash('sha256').update(`${previous}\u0000${eventId}`).digest('hex');
+}
+export function projectionRunDigest(runs) {
+    const aggregate = Buffer.alloc(32);
+    for (const run of [...runs].sort((left, right) => left.runId.localeCompare(right.runId))) {
+        const digest = Buffer.from(canonicalDigest(run), 'hex');
+        for (let index = 0; index < aggregate.length; index += 1) {
+            aggregate[index] = (aggregate[index] ?? 0) ^ (digest[index] ?? 0);
+        }
+    }
+    return aggregate.toString('hex');
+}
+export function projectionChecksum(input) {
+    return canonicalDigest(input);
+}
+export function projectionFromRows(rows, cursors) {
+    const runs = new Map();
+    for (const row of cursors) {
+        runs.set(row.run_id, {
+            runId: parseRunId(row.run_id),
+            conversationId: parseConversationId(row.conversation_id),
+            lastSequence: row.last_sequence,
+            lastCursor: row.last_cursor,
+            missingFrom: row.missing_from,
+            missingTo: row.missing_to,
+            terminal: row.terminal === 1,
+        });
+    }
+    const eventIds = rows.map((row) => parseEventId(row.event_id));
+    const base = {
+        schemaVersion: PROJECTION_SCHEMA_VERSION,
+        eventCount: rows.length,
+        revision: rows.length,
+        eventIds,
+        runs: [...runs.values()].sort((left, right) => left.runId.localeCompare(right.runId)),
+    };
+    let eventIdsDigest = PROJECTION_EVENT_DIGEST_SEED;
+    for (const eventId of eventIds)
+        eventIdsDigest = appendProjectionEventDigest(eventIdsDigest, eventId);
+    return {
+        ...base,
+        checksum: projectionChecksum({
+            schemaVersion: base.schemaVersion,
+            eventCount: base.eventCount,
+            revision: base.revision,
+            eventIdsDigest,
+            runsDigest: projectionRunDigest(base.runs),
+        }),
+    };
+}
+//# sourceMappingURL=sqlite-rows.js.map