cursedbelt-server 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (606) hide show
  1. package/LICENSE +15 -0
  2. package/dist/server/activity/index.d.ts +36 -0
  3. package/dist/server/activity/index.js +36 -0
  4. package/dist/server/activity/migrations.d.ts +21 -0
  5. package/dist/server/activity/migrations.js +55 -0
  6. package/dist/server/activity/shareSource.d.ts +11 -0
  7. package/dist/server/activity/shareSource.js +45 -0
  8. package/dist/server/activity/store.d.ts +123 -0
  9. package/dist/server/activity/store.js +178 -0
  10. package/dist/server/app.d.ts +56 -0
  11. package/dist/server/app.js +45 -0
  12. package/dist/server/audit/index.d.ts +2 -0
  13. package/dist/server/audit/index.js +2 -0
  14. package/dist/server/audit/migrations.d.ts +2 -0
  15. package/dist/server/audit/migrations.js +79 -0
  16. package/dist/server/audit/sqliteSink.d.ts +36 -0
  17. package/dist/server/audit/sqliteSink.js +95 -0
  18. package/dist/server/audit/sqliteSink.test.d.ts +1 -0
  19. package/dist/server/audit/sqliteSink.test.js +180 -0
  20. package/dist/server/auth/cookie.d.ts +22 -0
  21. package/dist/server/auth/cookie.js +35 -0
  22. package/dist/server/auth/csrf.d.ts +42 -0
  23. package/dist/server/auth/csrf.js +36 -0
  24. package/dist/server/auth/fileTokenSigner.d.ts +10 -0
  25. package/dist/server/auth/fileTokenSigner.js +22 -0
  26. package/dist/server/auth/getOnly.d.ts +20 -0
  27. package/dist/server/auth/getOnly.js +27 -0
  28. package/dist/server/auth/index.d.ts +12 -0
  29. package/dist/server/auth/index.js +15 -0
  30. package/dist/server/auth/jwt.d.ts +18 -0
  31. package/dist/server/auth/jwt.js +56 -0
  32. package/dist/server/auth/loginThrottle.d.ts +118 -0
  33. package/dist/server/auth/loginThrottle.js +204 -0
  34. package/dist/server/auth/middleware.d.ts +14 -0
  35. package/dist/server/auth/middleware.js +47 -0
  36. package/dist/server/auth/password.d.ts +14 -0
  37. package/dist/server/auth/password.js +65 -0
  38. package/dist/server/auth/sessionStore.d.ts +19 -0
  39. package/dist/server/auth/sessionStore.js +221 -0
  40. package/dist/server/auth/totp.d.ts +34 -0
  41. package/dist/server/auth/totp.js +81 -0
  42. package/dist/server/auth/types.d.ts +133 -0
  43. package/dist/server/auth/types.js +1 -0
  44. package/dist/server/auth/vault.d.ts +27 -0
  45. package/dist/server/auth/vault.js +57 -0
  46. package/dist/server/context.d.ts +35 -0
  47. package/dist/server/context.js +1 -0
  48. package/dist/server/ctgr.d.ts +32 -0
  49. package/dist/server/ctgr.js +69 -0
  50. package/dist/server/db/kysely.d.ts +14 -0
  51. package/dist/server/db/kysely.js +16 -0
  52. package/dist/server/db/plumbingTypes.d.ts +116 -0
  53. package/dist/server/db/plumbingTypes.js +12 -0
  54. package/dist/server/dropzone/duplicates.d.ts +82 -0
  55. package/dist/server/dropzone/duplicates.js +90 -0
  56. package/dist/server/dropzone/index.d.ts +13 -0
  57. package/dist/server/dropzone/index.js +13 -0
  58. package/dist/server/dropzone/scan.d.ts +166 -0
  59. package/dist/server/dropzone/scan.js +272 -0
  60. package/dist/server/errors.d.ts +7 -0
  61. package/dist/server/errors.js +7 -0
  62. package/dist/server/guard/argon2Binding.d.ts +97 -0
  63. package/dist/server/guard/argon2Binding.js +138 -0
  64. package/dist/server/guard/index.d.ts +4 -0
  65. package/dist/server/guard/index.js +6 -0
  66. package/dist/server/guard/kdfWorker.d.ts +101 -0
  67. package/dist/server/guard/kdfWorker.js +301 -0
  68. package/dist/server/guard/kdfWorkerEntry.d.ts +1 -0
  69. package/dist/server/guard/kdfWorkerEntry.js +15 -0
  70. package/dist/server/guard/passwordVerifier.d.ts +65 -0
  71. package/dist/server/guard/passwordVerifier.js +122 -0
  72. package/dist/server/guard/revocationStore.d.ts +132 -0
  73. package/dist/server/guard/revocationStore.js +211 -0
  74. package/dist/server/guard/sessionSigner.d.ts +132 -0
  75. package/dist/server/guard/sessionSigner.js +303 -0
  76. package/dist/server/guard/verifier.d.ts +21 -0
  77. package/dist/server/guard/verifier.js +1 -0
  78. package/dist/server/incidents/channels.d.ts +161 -0
  79. package/dist/server/incidents/channels.js +357 -0
  80. package/dist/server/incidents/checks.d.ts +61 -0
  81. package/dist/server/incidents/checks.js +55 -0
  82. package/dist/server/incidents/index.d.ts +51 -0
  83. package/dist/server/incidents/index.js +51 -0
  84. package/dist/server/incidents/migrations.d.ts +20 -0
  85. package/dist/server/incidents/migrations.js +58 -0
  86. package/dist/server/incidents/notifier.d.ts +79 -0
  87. package/dist/server/incidents/notifier.js +141 -0
  88. package/dist/server/incidents/reporter.d.ts +60 -0
  89. package/dist/server/incidents/reporter.js +49 -0
  90. package/dist/server/incidents/routes.d.ts +91 -0
  91. package/dist/server/incidents/routes.js +202 -0
  92. package/dist/server/incidents/store.d.ts +75 -0
  93. package/dist/server/incidents/store.js +176 -0
  94. package/dist/server/incidents/types.d.ts +107 -0
  95. package/dist/server/incidents/types.js +32 -0
  96. package/dist/server/index.d.ts +25 -0
  97. package/dist/server/index.js +53 -0
  98. package/dist/server/jobs/fireQueue.d.ts +12 -0
  99. package/dist/server/jobs/fireQueue.js +37 -0
  100. package/dist/server/jobs/index.d.ts +6 -0
  101. package/dist/server/jobs/index.js +10 -0
  102. package/dist/server/jobs/logger.d.ts +10 -0
  103. package/dist/server/jobs/logger.js +14 -0
  104. package/dist/server/jobs/plainjobAdapter.d.ts +19 -0
  105. package/dist/server/jobs/plainjobAdapter.js +48 -0
  106. package/dist/server/jobs/polling.d.ts +17 -0
  107. package/dist/server/jobs/polling.js +79 -0
  108. package/dist/server/jobs/runner.d.ts +24 -0
  109. package/dist/server/jobs/runner.js +186 -0
  110. package/dist/server/jobs/timeout.d.ts +28 -0
  111. package/dist/server/jobs/timeout.js +47 -0
  112. package/dist/server/jobs/types.d.ts +167 -0
  113. package/dist/server/jobs/types.js +12 -0
  114. package/dist/server/master-lock/guard.d.ts +53 -0
  115. package/dist/server/master-lock/guard.js +205 -0
  116. package/dist/server/master-lock/index.d.ts +21 -0
  117. package/dist/server/master-lock/index.js +21 -0
  118. package/dist/server/master-lock/lockPage.d.ts +34 -0
  119. package/dist/server/master-lock/lockPage.js +281 -0
  120. package/dist/server/master-lock/masterLock.d.ts +294 -0
  121. package/dist/server/master-lock/masterLock.js +523 -0
  122. package/dist/server/master-lock/principals.d.ts +76 -0
  123. package/dist/server/master-lock/principals.js +157 -0
  124. package/dist/server/master-lock/seed.d.ts +47 -0
  125. package/dist/server/master-lock/seed.js +93 -0
  126. package/dist/server/master-lock/store.d.ts +19 -0
  127. package/dist/server/master-lock/store.js +20 -0
  128. package/dist/server/media-bun/image.d.ts +7 -0
  129. package/dist/server/media-bun/image.js +96 -0
  130. package/dist/server/media-bun/index.d.ts +4 -0
  131. package/dist/server/media-bun/index.js +10 -0
  132. package/dist/server/media-bun/streaming.d.ts +86 -0
  133. package/dist/server/media-bun/streaming.js +237 -0
  134. package/dist/server/media-bun/video.d.ts +35 -0
  135. package/dist/server/media-bun/video.js +181 -0
  136. package/dist/server/metrics/metricsBuffer.d.ts +39 -0
  137. package/dist/server/metrics/metricsBuffer.js +36 -0
  138. package/dist/server/metrics/normalizeRoute.d.ts +5 -0
  139. package/dist/server/metrics/normalizeRoute.js +58 -0
  140. package/dist/server/middleware/correlationId.d.ts +9 -0
  141. package/dist/server/middleware/correlationId.js +20 -0
  142. package/dist/server/middleware/corsAllowlist.d.ts +38 -0
  143. package/dist/server/middleware/corsAllowlist.js +37 -0
  144. package/dist/server/middleware/errorEnvelope.d.ts +17 -0
  145. package/dist/server/middleware/errorEnvelope.js +32 -0
  146. package/dist/server/middleware/index.d.ts +9 -0
  147. package/dist/server/middleware/index.js +10 -0
  148. package/dist/server/middleware/localOrigin.d.ts +71 -0
  149. package/dist/server/middleware/localOrigin.js +119 -0
  150. package/dist/server/middleware/rateLimit.d.ts +56 -0
  151. package/dist/server/middleware/rateLimit.js +86 -0
  152. package/dist/server/middleware/requestLogger.d.ts +29 -0
  153. package/dist/server/middleware/requestLogger.js +47 -0
  154. package/dist/server/middleware/securityHeaders.d.ts +29 -0
  155. package/dist/server/middleware/securityHeaders.js +44 -0
  156. package/dist/server/middleware/zValidator.d.ts +29 -0
  157. package/dist/server/middleware/zValidator.js +57 -0
  158. package/dist/server/migration/runner.d.ts +42 -0
  159. package/dist/server/migration/runner.js +70 -0
  160. package/dist/server/migration/types.d.ts +16 -0
  161. package/dist/server/migration/types.js +1 -0
  162. package/dist/server/net/outboundGuard.d.ts +30 -0
  163. package/dist/server/net/outboundGuard.js +199 -0
  164. package/dist/server/notifications/hub.d.ts +67 -0
  165. package/dist/server/notifications/hub.js +187 -0
  166. package/dist/server/notifications/index.d.ts +47 -0
  167. package/dist/server/notifications/index.js +46 -0
  168. package/dist/server/notifications/migrations.d.ts +13 -0
  169. package/dist/server/notifications/migrations.js +20 -0
  170. package/dist/server/notifications/routes.d.ts +58 -0
  171. package/dist/server/notifications/routes.js +113 -0
  172. package/dist/server/notifications/service.d.ts +58 -0
  173. package/dist/server/notifications/service.js +41 -0
  174. package/dist/server/paths/appDataHome.d.ts +19 -0
  175. package/dist/server/paths/appDataHome.js +68 -0
  176. package/dist/server/private-media/crypto.d.ts +37 -0
  177. package/dist/server/private-media/crypto.js +111 -0
  178. package/dist/server/private-media/index-store.d.ts +31 -0
  179. package/dist/server/private-media/index-store.js +36 -0
  180. package/dist/server/private-media/mountPrivateRoutes.d.ts +26 -0
  181. package/dist/server/private-media/mountPrivateRoutes.js +219 -0
  182. package/dist/server/private-media/pipeline.d.ts +37 -0
  183. package/dist/server/private-media/pipeline.js +97 -0
  184. package/dist/server/private-media/unlock.d.ts +52 -0
  185. package/dist/server/private-media/unlock.js +55 -0
  186. package/dist/server/resume/index.d.ts +2 -0
  187. package/dist/server/resume/index.js +2 -0
  188. package/dist/server/resume/routes.d.ts +41 -0
  189. package/dist/server/resume/routes.js +50 -0
  190. package/dist/server/resume/store.d.ts +37 -0
  191. package/dist/server/resume/store.js +38 -0
  192. package/dist/server/retention/archive.d.ts +78 -0
  193. package/dist/server/retention/archive.js +284 -0
  194. package/dist/server/retention/fleet.d.ts +50 -0
  195. package/dist/server/retention/fleet.js +66 -0
  196. package/dist/server/retention/index.d.ts +38 -0
  197. package/dist/server/retention/index.js +38 -0
  198. package/dist/server/retention/policy.d.ts +263 -0
  199. package/dist/server/retention/policy.js +264 -0
  200. package/dist/server/retention/store.d.ts +101 -0
  201. package/dist/server/retention/store.js +251 -0
  202. package/dist/server/retention/sweeper.d.ts +69 -0
  203. package/dist/server/retention/sweeper.js +289 -0
  204. package/dist/server/retention/target.d.ts +143 -0
  205. package/dist/server/retention/target.js +438 -0
  206. package/dist/server/search/index.d.ts +2 -0
  207. package/dist/server/search/index.js +6 -0
  208. package/dist/server/search/pgSearchProvider.d.ts +91 -0
  209. package/dist/server/search/pgSearchProvider.js +330 -0
  210. package/dist/server/search/pgSearchProvider.pg.test.d.ts +1 -0
  211. package/dist/server/search/pgSearchProvider.pg.test.js +338 -0
  212. package/dist/server/search/pgSearchSchema.d.ts +81 -0
  213. package/dist/server/search/pgSearchSchema.js +89 -0
  214. package/dist/server/sharing/index.d.ts +18 -0
  215. package/dist/server/sharing/index.js +16 -0
  216. package/dist/server/sharing/migrations.d.ts +6 -0
  217. package/dist/server/sharing/migrations.js +79 -0
  218. package/dist/server/sharing/router.d.ts +111 -0
  219. package/dist/server/sharing/router.js +93 -0
  220. package/dist/server/sharing/sql.d.ts +67 -0
  221. package/dist/server/sharing/sql.js +88 -0
  222. package/dist/server/sharing/store.d.ts +173 -0
  223. package/dist/server/sharing/store.js +484 -0
  224. package/dist/server/sqlite/backup.d.ts +48 -0
  225. package/dist/server/sqlite/backup.js +97 -0
  226. package/dist/server/sqlite/browse.d.ts +42 -0
  227. package/dist/server/sqlite/browse.js +84 -0
  228. package/dist/server/sqlite/export.d.ts +32 -0
  229. package/dist/server/sqlite/export.js +42 -0
  230. package/dist/server/sqlite/fts5.d.ts +106 -0
  231. package/dist/server/sqlite/fts5.js +154 -0
  232. package/dist/server/sqlite/health.d.ts +44 -0
  233. package/dist/server/sqlite/health.js +52 -0
  234. package/dist/server/sqlite/import.d.ts +36 -0
  235. package/dist/server/sqlite/import.js +108 -0
  236. package/dist/server/sqlite/index.d.ts +9 -0
  237. package/dist/server/sqlite/index.js +15 -0
  238. package/dist/server/sqlite/readonlySql.d.ts +15 -0
  239. package/dist/server/sqlite/readonlySql.js +65 -0
  240. package/dist/server/sqlite/stats.d.ts +22 -0
  241. package/dist/server/sqlite/stats.js +32 -0
  242. package/dist/server/sqlite/viewer.d.ts +17 -0
  243. package/dist/server/sqlite/viewer.js +56 -0
  244. package/dist/server/storage/binaryServerProcessing.d.ts +23 -0
  245. package/dist/server/storage/binaryServerProcessing.js +81 -0
  246. package/dist/server/storage/binaryServerStore.d.ts +3 -0
  247. package/dist/server/storage/binaryServerStore.js +95 -0
  248. package/dist/server/storage/diskStore.d.ts +2 -0
  249. package/dist/server/storage/diskStore.js +88 -0
  250. package/dist/server/storage/files/adapter.d.ts +33 -0
  251. package/dist/server/storage/files/adapter.js +203 -0
  252. package/dist/server/storage/files/catalogue.d.ts +72 -0
  253. package/dist/server/storage/files/catalogue.js +1033 -0
  254. package/dist/server/storage/files/chunkedUpload.d.ts +56 -0
  255. package/dist/server/storage/files/chunkedUpload.js +70 -0
  256. package/dist/server/storage/files/fileRoutes.d.ts +51 -0
  257. package/dist/server/storage/files/fileRoutes.js +405 -0
  258. package/dist/server/storage/files/index.d.ts +9 -0
  259. package/dist/server/storage/files/index.js +11 -0
  260. package/dist/server/storage/files/migrations.d.ts +2 -0
  261. package/dist/server/storage/files/migrations.js +163 -0
  262. package/dist/server/storage/files/mimeByExt.d.ts +1 -0
  263. package/dist/server/storage/files/mimeByExt.js +13 -0
  264. package/dist/server/storage/files/stack.d.ts +136 -0
  265. package/dist/server/storage/files/stack.js +132 -0
  266. package/dist/server/storage/files/storageOps.d.ts +54 -0
  267. package/dist/server/storage/files/storageOps.js +110 -0
  268. package/dist/server/storage/files/types.d.ts +261 -0
  269. package/dist/server/storage/files/types.js +22 -0
  270. package/dist/server/storage/imageThumbnail.d.ts +3 -0
  271. package/dist/server/storage/imageThumbnail.js +50 -0
  272. package/dist/server/storage/index.d.ts +15 -0
  273. package/dist/server/storage/index.js +27 -0
  274. package/dist/server/storage/mountMediaRoutes.d.ts +28 -0
  275. package/dist/server/storage/mountMediaRoutes.js +141 -0
  276. package/dist/server/storage/objectStoreMediaStore.d.ts +4 -0
  277. package/dist/server/storage/objectStoreMediaStore.js +57 -0
  278. package/dist/server/storage/s3ObjectStore.d.ts +63 -0
  279. package/dist/server/storage/s3ObjectStore.js +187 -0
  280. package/dist/server/storage/sources.d.ts +47 -0
  281. package/dist/server/storage/sources.js +148 -0
  282. package/dist/server/storage/streamRange.d.ts +19 -0
  283. package/dist/server/storage/streamRange.js +69 -0
  284. package/dist/server/storage/streamToken.d.ts +16 -0
  285. package/dist/server/storage/streamToken.js +54 -0
  286. package/dist/server/storage/transcodeJobs.d.ts +65 -0
  287. package/dist/server/storage/transcodeJobs.js +104 -0
  288. package/dist/server/storage/types.d.ts +193 -0
  289. package/dist/server/storage/types.js +41 -0
  290. package/dist/server/storage/videoDerivativeKeys.d.ts +127 -0
  291. package/dist/server/storage/videoDerivativeKeys.js +149 -0
  292. package/dist/server/storage/videoProcessor.d.ts +30 -0
  293. package/dist/server/storage/videoProcessor.js +148 -0
  294. package/dist/server/sync/alarm.d.ts +34 -0
  295. package/dist/server/sync/alarm.js +91 -0
  296. package/dist/server/sync/commands.d.ts +87 -0
  297. package/dist/server/sync/commands.js +241 -0
  298. package/dist/server/sync/engine.d.ts +62 -0
  299. package/dist/server/sync/engine.js +184 -0
  300. package/dist/server/sync/http.d.ts +106 -0
  301. package/dist/server/sync/http.js +243 -0
  302. package/dist/server/sync/index.d.ts +41 -0
  303. package/dist/server/sync/index.js +41 -0
  304. package/dist/server/sync/opLog.d.ts +61 -0
  305. package/dist/server/sync/opLog.js +96 -0
  306. package/dist/server/sync/planner.d.ts +31 -0
  307. package/dist/server/sync/planner.js +30 -0
  308. package/dist/server/sync/status.d.ts +63 -0
  309. package/dist/server/sync/status.js +49 -0
  310. package/dist/server/sync/timer.d.ts +52 -0
  311. package/dist/server/sync/timer.js +170 -0
  312. package/dist/server/sync/tokens.d.ts +25 -0
  313. package/dist/server/sync/tokens.js +51 -0
  314. package/dist/server/sync/types.d.ts +101 -0
  315. package/dist/server/sync/types.js +29 -0
  316. package/dist/server/ws/eventBus.d.ts +14 -0
  317. package/dist/server/ws/eventBus.js +42 -0
  318. package/dist/server/ws/hub.d.ts +20 -0
  319. package/dist/server/ws/hub.js +154 -0
  320. package/dist/server/ws/index.d.ts +5 -0
  321. package/dist/server/ws/index.js +7 -0
  322. package/dist/server/ws/presence.d.ts +11 -0
  323. package/dist/server/ws/presence.js +20 -0
  324. package/dist/server/ws/room.d.ts +17 -0
  325. package/dist/server/ws/room.js +23 -0
  326. package/dist/server/ws/types.d.ts +122 -0
  327. package/dist/server/ws/types.js +1 -0
  328. package/package.json +234 -0
  329. package/src/declaredDepsAreImported.spec.ts +87 -0
  330. package/src/leafSubpathsImportNothing.spec.ts +358 -0
  331. package/src/lockfileIsTracked.spec.ts +50 -0
  332. package/src/namedSubpathsResolve.spec.ts +122 -0
  333. package/src/noPathDeps.spec.ts +24 -0
  334. package/src/publishShape.spec.ts +89 -0
  335. package/src/server/activity/index.ts +59 -0
  336. package/src/server/activity/migrations.ts +67 -0
  337. package/src/server/activity/shareSource.ts +57 -0
  338. package/src/server/activity/store.spec.ts +255 -0
  339. package/src/server/activity/store.ts +368 -0
  340. package/src/server/app.spec.ts +243 -0
  341. package/src/server/app.ts +89 -0
  342. package/src/server/audit/index.ts +2 -0
  343. package/src/server/audit/migrations.ts +88 -0
  344. package/src/server/audit/sqliteSink.test.ts +200 -0
  345. package/src/server/audit/sqliteSink.ts +162 -0
  346. package/src/server/auth/cookie.spec.ts +46 -0
  347. package/src/server/auth/cookie.ts +42 -0
  348. package/src/server/auth/csrf.spec.ts +81 -0
  349. package/src/server/auth/csrf.ts +83 -0
  350. package/src/server/auth/fileTokenSigner.ts +40 -0
  351. package/src/server/auth/getOnly.spec.ts +53 -0
  352. package/src/server/auth/getOnly.ts +32 -0
  353. package/src/server/auth/index.ts +51 -0
  354. package/src/server/auth/jwt.spec.ts +106 -0
  355. package/src/server/auth/jwt.ts +75 -0
  356. package/src/server/auth/loginThrottle.spec.ts +213 -0
  357. package/src/server/auth/loginThrottle.ts +261 -0
  358. package/src/server/auth/middleware.spec.ts +148 -0
  359. package/src/server/auth/middleware.ts +56 -0
  360. package/src/server/auth/password.spec.ts +48 -0
  361. package/src/server/auth/password.ts +71 -0
  362. package/src/server/auth/sessionStore.spec.ts +189 -0
  363. package/src/server/auth/sessionStore.ts +261 -0
  364. package/src/server/auth/totp.spec.ts +73 -0
  365. package/src/server/auth/totp.ts +92 -0
  366. package/src/server/auth/types.ts +146 -0
  367. package/src/server/auth/vault.spec.ts +51 -0
  368. package/src/server/auth/vault.ts +71 -0
  369. package/src/server/context.ts +37 -0
  370. package/src/server/ctgr.spec.ts +138 -0
  371. package/src/server/ctgr.ts +108 -0
  372. package/src/server/db/kysely.spec.ts +62 -0
  373. package/src/server/db/kysely.ts +21 -0
  374. package/src/server/db/plumbingTypes.ts +126 -0
  375. package/src/server/dropzone/duplicates.ts +121 -0
  376. package/src/server/dropzone/index.ts +30 -0
  377. package/src/server/dropzone/scan.spec.ts +255 -0
  378. package/src/server/dropzone/scan.ts +342 -0
  379. package/src/server/errors.spec.ts +76 -0
  380. package/src/server/errors.ts +22 -0
  381. package/src/server/guard/argon2Binding.spec.ts +117 -0
  382. package/src/server/guard/argon2Binding.ts +195 -0
  383. package/src/server/guard/argon2Kat.spec.ts +250 -0
  384. package/src/server/guard/guard.spec.ts +390 -0
  385. package/src/server/guard/index.ts +6 -0
  386. package/src/server/guard/kdfWorker.spec.ts +283 -0
  387. package/src/server/guard/kdfWorker.ts +367 -0
  388. package/src/server/guard/kdfWorkerEntry.ts +16 -0
  389. package/src/server/guard/passwordVerifier.spec.ts +71 -0
  390. package/src/server/guard/passwordVerifier.ts +175 -0
  391. package/src/server/guard/revocationStore.spec.ts +135 -0
  392. package/src/server/guard/revocationStore.ts +291 -0
  393. package/src/server/guard/sessionSigner.ts +425 -0
  394. package/src/server/guard/verifier.ts +27 -0
  395. package/src/server/incidents/channels.ts +487 -0
  396. package/src/server/incidents/checks.ts +120 -0
  397. package/src/server/incidents/incidents.spec.ts +463 -0
  398. package/src/server/incidents/index.ts +96 -0
  399. package/src/server/incidents/migrations.ts +66 -0
  400. package/src/server/incidents/notifier.ts +215 -0
  401. package/src/server/incidents/reporter.ts +110 -0
  402. package/src/server/incidents/routes.ts +314 -0
  403. package/src/server/incidents/store.ts +329 -0
  404. package/src/server/incidents/types.ts +116 -0
  405. package/src/server/index.ts +248 -0
  406. package/src/server/jobs/fireQueue.spec.ts +85 -0
  407. package/src/server/jobs/fireQueue.ts +37 -0
  408. package/src/server/jobs/index.ts +26 -0
  409. package/src/server/jobs/logger.ts +16 -0
  410. package/src/server/jobs/plainjobAdapter.spec.ts +34 -0
  411. package/src/server/jobs/plainjobAdapter.ts +54 -0
  412. package/src/server/jobs/polling.spec.ts +219 -0
  413. package/src/server/jobs/polling.ts +81 -0
  414. package/src/server/jobs/runner.spec.ts +213 -0
  415. package/src/server/jobs/runner.ts +213 -0
  416. package/src/server/jobs/timeout.spec.ts +35 -0
  417. package/src/server/jobs/timeout.ts +53 -0
  418. package/src/server/jobs/types.ts +188 -0
  419. package/src/server/master-lock/guard.spec.ts +347 -0
  420. package/src/server/master-lock/guard.ts +290 -0
  421. package/src/server/master-lock/index.ts +44 -0
  422. package/src/server/master-lock/lockPage.spec.ts +88 -0
  423. package/src/server/master-lock/lockPage.ts +313 -0
  424. package/src/server/master-lock/masterLock.spec.ts +338 -0
  425. package/src/server/master-lock/masterLock.ts +627 -0
  426. package/src/server/master-lock/principals.spec.ts +378 -0
  427. package/src/server/master-lock/principals.ts +175 -0
  428. package/src/server/master-lock/seed.spec.ts +69 -0
  429. package/src/server/master-lock/seed.ts +112 -0
  430. package/src/server/master-lock/store.ts +35 -0
  431. package/src/server/media-bun/image.spec.ts +115 -0
  432. package/src/server/media-bun/image.ts +134 -0
  433. package/src/server/media-bun/index.ts +52 -0
  434. package/src/server/media-bun/streaming.spec.ts +134 -0
  435. package/src/server/media-bun/streaming.ts +347 -0
  436. package/src/server/media-bun/video.spec.ts +115 -0
  437. package/src/server/media-bun/video.ts +232 -0
  438. package/src/server/metrics/metricsBuffer.ts +92 -0
  439. package/src/server/metrics/normalizeRoute.spec.ts +51 -0
  440. package/src/server/metrics/normalizeRoute.ts +63 -0
  441. package/src/server/middleware/correlationId.ts +24 -0
  442. package/src/server/middleware/corsAllowlist.spec.ts +118 -0
  443. package/src/server/middleware/corsAllowlist.ts +69 -0
  444. package/src/server/middleware/errorEnvelope.ts +38 -0
  445. package/src/server/middleware/index.ts +19 -0
  446. package/src/server/middleware/localOrigin.spec.ts +168 -0
  447. package/src/server/middleware/localOrigin.ts +139 -0
  448. package/src/server/middleware/rateLimit.spec.ts +72 -0
  449. package/src/server/middleware/rateLimit.ts +125 -0
  450. package/src/server/middleware/requestLogger.ts +95 -0
  451. package/src/server/middleware/securityHeaders.ts +78 -0
  452. package/src/server/middleware/zValidator.spec.ts +251 -0
  453. package/src/server/middleware/zValidator.ts +114 -0
  454. package/src/server/migration/runner.spec.ts +88 -0
  455. package/src/server/migration/runner.ts +87 -0
  456. package/src/server/migration/types.ts +17 -0
  457. package/src/server/net/outboundGuard.spec.ts +90 -0
  458. package/src/server/net/outboundGuard.ts +205 -0
  459. package/src/server/notifications/hub.ts +245 -0
  460. package/src/server/notifications/index.ts +77 -0
  461. package/src/server/notifications/migrations.ts +39 -0
  462. package/src/server/notifications/routes.ts +177 -0
  463. package/src/server/notifications/service.spec.ts +305 -0
  464. package/src/server/notifications/service.ts +112 -0
  465. package/src/server/paths/appDataHome.spec.ts +87 -0
  466. package/src/server/paths/appDataHome.ts +84 -0
  467. package/src/server/private-media/blobRoute.spec.ts +165 -0
  468. package/src/server/private-media/crypto.spec.ts +81 -0
  469. package/src/server/private-media/crypto.ts +155 -0
  470. package/src/server/private-media/gatePolicy.spec.ts +98 -0
  471. package/src/server/private-media/index-store.ts +83 -0
  472. package/src/server/private-media/mountPrivateRoutes.ts +265 -0
  473. package/src/server/private-media/pipeline.spec.ts +111 -0
  474. package/src/server/private-media/pipeline.ts +170 -0
  475. package/src/server/private-media/routes.spec.ts +265 -0
  476. package/src/server/private-media/unlock.ts +112 -0
  477. package/src/server/resume/index.ts +8 -0
  478. package/src/server/resume/resume.spec.ts +118 -0
  479. package/src/server/resume/routes.ts +92 -0
  480. package/src/server/resume/store.ts +82 -0
  481. package/src/server/retention/archive.spec.ts +181 -0
  482. package/src/server/retention/archive.ts +353 -0
  483. package/src/server/retention/fleet.ts +104 -0
  484. package/src/server/retention/index.ts +101 -0
  485. package/src/server/retention/policy.spec.ts +132 -0
  486. package/src/server/retention/policy.ts +392 -0
  487. package/src/server/retention/store.spec.ts +236 -0
  488. package/src/server/retention/store.ts +338 -0
  489. package/src/server/retention/sweeper.spec.ts +321 -0
  490. package/src/server/retention/sweeper.ts +367 -0
  491. package/src/server/retention/target.spec.ts +592 -0
  492. package/src/server/retention/target.ts +613 -0
  493. package/src/server/search/index.ts +12 -0
  494. package/src/server/search/pgSearchProvider.pg.test.ts +392 -0
  495. package/src/server/search/pgSearchProvider.ts +421 -0
  496. package/src/server/search/pgSearchSchema.ts +147 -0
  497. package/src/server/sharing/index.ts +65 -0
  498. package/src/server/sharing/migrations.ts +128 -0
  499. package/src/server/sharing/router.spec.ts +167 -0
  500. package/src/server/sharing/router.ts +194 -0
  501. package/src/server/sharing/sql.ts +109 -0
  502. package/src/server/sharing/store.spec.ts +408 -0
  503. package/src/server/sharing/store.ts +737 -0
  504. package/src/server/sqlite/backup.spec.ts +114 -0
  505. package/src/server/sqlite/backup.ts +154 -0
  506. package/src/server/sqlite/browse.spec.ts +70 -0
  507. package/src/server/sqlite/browse.ts +120 -0
  508. package/src/server/sqlite/export.spec.ts +43 -0
  509. package/src/server/sqlite/export.ts +74 -0
  510. package/src/server/sqlite/fts5.spec.ts +175 -0
  511. package/src/server/sqlite/fts5.ts +255 -0
  512. package/src/server/sqlite/health.spec.ts +79 -0
  513. package/src/server/sqlite/health.ts +105 -0
  514. package/src/server/sqlite/import.spec.ts +75 -0
  515. package/src/server/sqlite/import.ts +141 -0
  516. package/src/server/sqlite/index.ts +64 -0
  517. package/src/server/sqlite/readonlySql.spec.ts +58 -0
  518. package/src/server/sqlite/readonlySql.ts +67 -0
  519. package/src/server/sqlite/stats.spec.ts +21 -0
  520. package/src/server/sqlite/stats.ts +61 -0
  521. package/src/server/sqlite/viewer.spec.ts +127 -0
  522. package/src/server/sqlite/viewer.ts +72 -0
  523. package/src/server/storage/binaryServerProcessing.integration.spec.ts +222 -0
  524. package/src/server/storage/binaryServerProcessing.spec.ts +150 -0
  525. package/src/server/storage/binaryServerProcessing.ts +127 -0
  526. package/src/server/storage/binaryServerStore.ts +102 -0
  527. package/src/server/storage/chunked.integration.spec.ts +185 -0
  528. package/src/server/storage/diskStore.ts +83 -0
  529. package/src/server/storage/files/adapter.photo.display.spec.ts +169 -0
  530. package/src/server/storage/files/adapter.photo.spec.ts +128 -0
  531. package/src/server/storage/files/adapter.spec.ts +121 -0
  532. package/src/server/storage/files/adapter.ts +255 -0
  533. package/src/server/storage/files/catalogue.media-host.spec.ts +184 -0
  534. package/src/server/storage/files/catalogue.orderings.spec.ts +157 -0
  535. package/src/server/storage/files/catalogue.private.spec.ts +106 -0
  536. package/src/server/storage/files/catalogue.recover.spec.ts +131 -0
  537. package/src/server/storage/files/catalogue.sort.spec.ts +154 -0
  538. package/src/server/storage/files/catalogue.spec.ts +133 -0
  539. package/src/server/storage/files/catalogue.trash-import.spec.ts +125 -0
  540. package/src/server/storage/files/catalogue.ts +1326 -0
  541. package/src/server/storage/files/chunkedUpload.spec.ts +111 -0
  542. package/src/server/storage/files/chunkedUpload.ts +146 -0
  543. package/src/server/storage/files/collections.spec.ts +294 -0
  544. package/src/server/storage/files/fileRoutes.replace.spec.ts +88 -0
  545. package/src/server/storage/files/fileRoutes.spec.ts +327 -0
  546. package/src/server/storage/files/fileRoutes.ts +462 -0
  547. package/src/server/storage/files/index.ts +66 -0
  548. package/src/server/storage/files/migrations.ts +187 -0
  549. package/src/server/storage/files/mimeByExt.ts +14 -0
  550. package/src/server/storage/files/stack.spec.ts +258 -0
  551. package/src/server/storage/files/stack.ts +284 -0
  552. package/src/server/storage/files/storageOps.spec.ts +126 -0
  553. package/src/server/storage/files/storageOps.ts +213 -0
  554. package/src/server/storage/files/types.ts +285 -0
  555. package/src/server/storage/imageThumbnail.spec.ts +81 -0
  556. package/src/server/storage/imageThumbnail.ts +60 -0
  557. package/src/server/storage/index.ts +122 -0
  558. package/src/server/storage/mountMediaRoutes.ts +231 -0
  559. package/src/server/storage/objectStore.spec.ts +272 -0
  560. package/src/server/storage/objectStoreMediaStore.ts +63 -0
  561. package/src/server/storage/s3ObjectStore.ts +239 -0
  562. package/src/server/storage/sources.ts +245 -0
  563. package/src/server/storage/storage.spec.ts +219 -0
  564. package/src/server/storage/streamRange.ts +92 -0
  565. package/src/server/storage/streamToken.ts +76 -0
  566. package/src/server/storage/transcode.integration.spec.ts +134 -0
  567. package/src/server/storage/transcodeJobs.spec.ts +152 -0
  568. package/src/server/storage/transcodeJobs.ts +171 -0
  569. package/src/server/storage/types.ts +230 -0
  570. package/src/server/storage/videoDerivativeKeys.spec.ts +112 -0
  571. package/src/server/storage/videoDerivativeKeys.ts +172 -0
  572. package/src/server/storage/videoProcessor.posterOnly.spec.ts +106 -0
  573. package/src/server/storage/videoProcessor.ts +229 -0
  574. package/src/server/sync/alarm.spec.ts +149 -0
  575. package/src/server/sync/alarm.ts +137 -0
  576. package/src/server/sync/commands.spec.ts +145 -0
  577. package/src/server/sync/commands.ts +361 -0
  578. package/src/server/sync/engine.spec.ts +496 -0
  579. package/src/server/sync/engine.ts +255 -0
  580. package/src/server/sync/http.ts +316 -0
  581. package/src/server/sync/httpRemote.spec.ts +158 -0
  582. package/src/server/sync/index.ts +90 -0
  583. package/src/server/sync/opLog.spec.ts +110 -0
  584. package/src/server/sync/opLog.ts +189 -0
  585. package/src/server/sync/planner.spec.ts +53 -0
  586. package/src/server/sync/planner.ts +62 -0
  587. package/src/server/sync/status.spec.ts +92 -0
  588. package/src/server/sync/status.ts +108 -0
  589. package/src/server/sync/timer.spec.ts +150 -0
  590. package/src/server/sync/timer.ts +207 -0
  591. package/src/server/sync/tokens.spec.ts +38 -0
  592. package/src/server/sync/tokens.ts +94 -0
  593. package/src/server/sync/types.ts +108 -0
  594. package/src/server/ws/eventBus.spec.ts +67 -0
  595. package/src/server/ws/eventBus.ts +46 -0
  596. package/src/server/ws/hub.integration.spec.ts +93 -0
  597. package/src/server/ws/hub.spec.ts +282 -0
  598. package/src/server/ws/hub.ts +168 -0
  599. package/src/server/ws/index.ts +20 -0
  600. package/src/server/ws/presence.spec.ts +27 -0
  601. package/src/server/ws/presence.ts +26 -0
  602. package/src/server/ws/room.spec.ts +36 -0
  603. package/src/server/ws/room.ts +29 -0
  604. package/src/server/ws/types.ts +134 -0
  605. package/src/skippedTestsAreAnswered.spec.ts +215 -0
  606. package/src/testTmpRoot.spec.ts +102 -0
@@ -0,0 +1,592 @@
1
+ import { Database } from "bun:sqlite";
2
+ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
3
+ import {
4
+ mkdirSync,
5
+ mkdtempSync,
6
+ readdirSync,
7
+ readFileSync,
8
+ rmSync,
9
+ utimesSync,
10
+ writeFileSync,
11
+ } from "node:fs";
12
+ import { tmpdir } from "node:os";
13
+ import { join } from "node:path";
14
+ import { DAY_MS, resolveRetentionPolicy, type RetentionDeclaration } from "./policy";
15
+ import { createJsonlArchive, verifyArchive } from "./archive";
16
+ import {
17
+ createArchivingSqliteTableTarget,
18
+ createFileDirTarget,
19
+ createSqliteTableTarget,
20
+ } from "./target";
21
+
22
+ const NOW = 1_800_000_000_000;
23
+ const daysAgo = (n: number): number => NOW - n * DAY_MS;
24
+
25
+ const rowDecl: RetentionDeclaration = {
26
+ app: "orch",
27
+ id: "events",
28
+ label: "Event trail",
29
+ category: "event-log",
30
+ unit: "rows",
31
+ location: "orch.sqlite · events",
32
+ consequence: "the narrative of past runs",
33
+ };
34
+
35
+ describe("createSqliteTableTarget", () => {
36
+ let db: Database;
37
+
38
+ beforeEach(() => {
39
+ db = new Database(":memory:");
40
+ db.run("CREATE TABLE events (id INTEGER PRIMARY KEY, at INTEGER, task_id TEXT)");
41
+ db.run("CREATE TABLE tasks (id TEXT PRIMARY KEY, status TEXT)");
42
+ });
43
+ afterEach(() => db.close());
44
+
45
+ const insert = (at: number | null, taskId: string | null = null): void => {
46
+ db.query("INSERT INTO events (at, task_id) VALUES ($at, $task)").run({
47
+ $at: at,
48
+ $task: taskId,
49
+ } as never);
50
+ };
51
+
52
+ test("deletes rows past the cutoff and keeps the rest", () => {
53
+ for (const d of [40, 30, 20, 5, 1]) insert(daysAgo(d));
54
+ const target = createSqliteTableTarget({
55
+ db,
56
+ declaration: rowDecl,
57
+ table: "events",
58
+ timeColumn: "at",
59
+ });
60
+ const policy = resolveRetentionPolicy(rowDecl, { days: 14 });
61
+
62
+ expect(target.preview(policy, NOW)).toEqual({ aged: 3, overflow: 0 });
63
+ expect(target.sweep(policy, NOW)).toMatchObject({ aged: 3, overflow: 0 });
64
+ expect(target.measure().items).toBe(2);
65
+ });
66
+
67
+ test("preview never mutates — it is the same predicate, not a second one", () => {
68
+ for (const d of [40, 30, 1]) insert(daysAgo(d));
69
+ const target = createSqliteTableTarget({
70
+ db,
71
+ declaration: rowDecl,
72
+ table: "events",
73
+ timeColumn: "at",
74
+ });
75
+ const policy = resolveRetentionPolicy(rowDecl, { days: 14 });
76
+ target.preview(policy, NOW);
77
+ target.preview(policy, NOW);
78
+ expect(target.measure().items).toBe(3);
79
+ expect(target.sweep(policy, NOW).aged).toBe(2);
80
+ });
81
+
82
+ test("protectWhere exempts live working state from the AGE rule", () => {
83
+ db.query("INSERT INTO tasks (id, status) VALUES ('t-live', 'parked')").run();
84
+ db.query("INSERT INTO tasks (id, status) VALUES ('t-done', 'done')").run();
85
+ insert(daysAgo(90), "t-live"); // parked for months — the trail explains WHY
86
+ insert(daysAgo(90), "t-done");
87
+ insert(daysAgo(90), null);
88
+
89
+ const target = createSqliteTableTarget({
90
+ db,
91
+ declaration: rowDecl,
92
+ table: "events",
93
+ timeColumn: "at",
94
+ protectWhere:
95
+ "EXISTS (SELECT 1 FROM tasks t WHERE t.id = events.task_id AND t.status NOT IN ('done'))",
96
+ });
97
+ expect(target.sweep(resolveRetentionPolicy(rowDecl, { days: 14 }), NOW).aged).toBe(2);
98
+ expect(target.measure().items).toBe(1);
99
+ });
100
+
101
+ test("floorItems keeps the newest N at ANY age — the rule with no exceptions", () => {
102
+ for (const d of [400, 300, 200, 100]) insert(daysAgo(d));
103
+ const target = createSqliteTableTarget({
104
+ db,
105
+ declaration: rowDecl,
106
+ table: "events",
107
+ timeColumn: "at",
108
+ });
109
+ const policy = resolveRetentionPolicy({ ...rowDecl, floorItems: 2 }, { days: 1 });
110
+ expect(target.sweep(policy, NOW).aged).toBe(2);
111
+ expect(target.measure().items).toBe(2);
112
+ });
113
+
114
+ test("the floor counts the whole table, not just the deletable subset", () => {
115
+ // A table of protected rows plus one old row must not delete that row while
116
+ // claiming to keep three.
117
+ db.query("INSERT INTO tasks (id, status) VALUES ('t-live', 'parked')").run();
118
+ for (const d of [10, 9, 8]) insert(daysAgo(d), "t-live");
119
+ insert(daysAgo(400));
120
+ const target = createSqliteTableTarget({
121
+ db,
122
+ declaration: rowDecl,
123
+ table: "events",
124
+ timeColumn: "at",
125
+ protectWhere:
126
+ "EXISTS (SELECT 1 FROM tasks t WHERE t.id = events.task_id AND t.status NOT IN ('done'))",
127
+ });
128
+ const policy = resolveRetentionPolicy({ ...rowDecl, floorItems: 3 }, { days: 30 });
129
+ // Newest 3 are the protected ones; the old row is #4, so it is deletable.
130
+ expect(target.sweep(policy, NOW).aged).toBe(1);
131
+ expect(target.measure().items).toBe(3);
132
+ });
133
+
134
+ test("the item cap is blunt on purpose — it ignores protectWhere", () => {
135
+ db.query("INSERT INTO tasks (id, status) VALUES ('t-live', 'running')").run();
136
+ for (let i = 0; i < 10; i++) insert(daysAgo(1), "t-live"); // all live, all recent
137
+ const target = createSqliteTableTarget({
138
+ db,
139
+ declaration: rowDecl,
140
+ table: "events",
141
+ timeColumn: "at",
142
+ protectWhere:
143
+ "EXISTS (SELECT 1 FROM tasks t WHERE t.id = events.task_id AND t.status NOT IN ('done'))",
144
+ });
145
+ const policy = resolveRetentionPolicy({ ...rowDecl, defaultMaxItems: 4 });
146
+ expect(target.sweep(policy, NOW)).toMatchObject({ aged: 0, overflow: 6 });
147
+ expect(target.measure().items).toBe(4);
148
+ });
149
+
150
+ test("the cap never digs below the floor", () => {
151
+ for (let i = 0; i < 10; i++) insert(daysAgo(1));
152
+ const target = createSqliteTableTarget({
153
+ db,
154
+ declaration: rowDecl,
155
+ table: "events",
156
+ timeColumn: "at",
157
+ });
158
+ const policy = resolveRetentionPolicy({ ...rowDecl, defaultMaxItems: 2, floorItems: 6 });
159
+ expect(target.sweep(policy, NOW).overflow).toBe(4);
160
+ expect(target.measure().items).toBe(6);
161
+ });
162
+
163
+ test("a NULL timestamp is ageless and kept — an unknown age is not an old one", () => {
164
+ insert(null);
165
+ insert(daysAgo(400));
166
+ const target = createSqliteTableTarget({
167
+ db,
168
+ declaration: rowDecl,
169
+ table: "events",
170
+ timeColumn: "at",
171
+ });
172
+ expect(target.sweep(resolveRetentionPolicy(rowDecl, { days: 1 }), NOW).aged).toBe(1);
173
+ expect(target.measure().items).toBe(1);
174
+ });
175
+
176
+ test("a disabled policy is a no-op, and days:0 disables only the age rule", () => {
177
+ for (let i = 0; i < 5; i++) insert(daysAgo(400));
178
+ const target = createSqliteTableTarget({
179
+ db,
180
+ declaration: rowDecl,
181
+ table: "events",
182
+ timeColumn: "at",
183
+ });
184
+ expect(target.sweep(resolveRetentionPolicy(rowDecl, { enabled: false }), NOW)).toMatchObject({
185
+ aged: 0,
186
+ });
187
+ expect(target.measure().items).toBe(5);
188
+ expect(
189
+ target.sweep(resolveRetentionPolicy(rowDecl, { days: 0, maxItems: 2 }), NOW),
190
+ ).toMatchObject({
191
+ aged: 0,
192
+ overflow: 3,
193
+ });
194
+ });
195
+
196
+ test("refuses an unsafe table or column name rather than interpolating it", () => {
197
+ expect(() =>
198
+ createSqliteTableTarget({
199
+ db,
200
+ declaration: rowDecl,
201
+ table: 'events"; DROP TABLE tasks; --',
202
+ timeColumn: "at",
203
+ }),
204
+ ).toThrow(/unsafe table name/);
205
+ expect(() =>
206
+ createSqliteTableTarget({ db, declaration: rowDecl, table: "events", timeColumn: "at)" }),
207
+ ).toThrow(/unsafe column name/);
208
+ });
209
+
210
+ test("measure reports the oldest timestamp so the UI can show a real age", () => {
211
+ insert(daysAgo(30));
212
+ insert(daysAgo(2));
213
+ const target = createSqliteTableTarget({
214
+ db,
215
+ declaration: rowDecl,
216
+ table: "events",
217
+ timeColumn: "at",
218
+ });
219
+ expect(target.measure()).toEqual({ items: 2, oldestAt: daysAgo(30) });
220
+ });
221
+ });
222
+
223
+ describe("createFileDirTarget", () => {
224
+ let dir: string;
225
+ const fileDecl: RetentionDeclaration = {
226
+ app: "orch",
227
+ id: "attempt-transcripts",
228
+ label: "Attempt transcripts",
229
+ category: "transcript",
230
+ unit: "files",
231
+ location: "logs/attempts/*.jsonl",
232
+ consequence: "the verbatim worker output for old attempts",
233
+ };
234
+
235
+ beforeEach(() => {
236
+ dir = mkdtempSync(join(tmpdir(), "retention-files-"));
237
+ });
238
+ afterEach(() => rmSync(dir, { recursive: true, force: true }));
239
+
240
+ const write = (name: string, ageDays: number, bytes = 10): void => {
241
+ const path = join(dir, name);
242
+ writeFileSync(path, "x".repeat(bytes));
243
+ const seconds = (NOW - ageDays * DAY_MS) / 1000;
244
+ utimesSync(path, seconds, seconds);
245
+ };
246
+
247
+ test("deletes files past the cutoff and reports the bytes reclaimed", () => {
248
+ write("a.jsonl", 40, 100);
249
+ write("b.jsonl", 30, 200);
250
+ write("c.jsonl", 2, 50);
251
+ const target = createFileDirTarget({ declaration: fileDecl, dir, match: /\.jsonl$/ });
252
+ const policy = resolveRetentionPolicy(fileDecl, { days: 14 });
253
+
254
+ expect(target.preview(policy, NOW)).toEqual({ aged: 2, overflow: 0 });
255
+ expect(target.sweep(policy, NOW)).toMatchObject({ aged: 2, bytesFreed: 300 });
256
+ expect(target.measure()).toMatchObject({ items: 1, bytes: 50 });
257
+ });
258
+
259
+ test("only governs what it can prove it owns — non-matching files and subdirs are invisible", () => {
260
+ write("a.jsonl", 400);
261
+ write("keep-me.txt", 400);
262
+ mkdirSync(join(dir, "nested"));
263
+ writeFileSync(join(dir, "nested", "deep.jsonl"), "x");
264
+ const target = createFileDirTarget({ declaration: fileDecl, dir, match: /\.jsonl$/ });
265
+ expect(target.measure().items).toBe(1);
266
+ expect(target.sweep(resolveRetentionPolicy(fileDecl, { days: 1 }), NOW).aged).toBe(1);
267
+ expect(Bun.file(join(dir, "keep-me.txt")).size).toBeGreaterThan(0);
268
+ expect(Bun.file(join(dir, "nested", "deep.jsonl")).size).toBeGreaterThan(0);
269
+ });
270
+
271
+ test("floorItems keeps the newest N at any age", () => {
272
+ for (const d of [400, 300, 200]) write(`f${d}.jsonl`, d);
273
+ const target = createFileDirTarget({ declaration: fileDecl, dir, match: /\.jsonl$/ });
274
+ const policy = resolveRetentionPolicy({ ...fileDecl, floorItems: 2 }, { days: 1 });
275
+ expect(target.sweep(policy, NOW).aged).toBe(1);
276
+ expect(target.measure().items).toBe(2);
277
+ });
278
+
279
+ test("the cap removes the OLDEST survivors, never the newest", () => {
280
+ for (const d of [5, 4, 3, 2, 1]) write(`f${d}.jsonl`, d);
281
+ const target = createFileDirTarget({ declaration: fileDecl, dir, match: /\.jsonl$/ });
282
+ const policy = resolveRetentionPolicy({ ...fileDecl, defaultMaxItems: 2 });
283
+ expect(target.sweep(policy, NOW)).toMatchObject({ aged: 0, overflow: 3 });
284
+ expect(target.measure().items).toBe(2);
285
+ expect(Bun.file(join(dir, "f1.jsonl")).size).toBeGreaterThan(0);
286
+ expect(Bun.file(join(dir, "f2.jsonl")).size).toBeGreaterThan(0);
287
+ });
288
+
289
+ test("the byte budget drops oldest-first until the directory fits", () => {
290
+ // The right bound when items vary by orders of magnitude — one deep run is
291
+ // 5 MB and one trivial attempt 4 KB, so a count cap bounds nothing useful.
292
+ write("old.jsonl", 5, 1000);
293
+ write("mid.jsonl", 4, 1000);
294
+ write("new.jsonl", 3, 1000);
295
+ const target = createFileDirTarget({ declaration: fileDecl, dir, match: /\.jsonl$/ });
296
+ const policy = resolveRetentionPolicy({ ...fileDecl, defaultMaxBytes: 2000 });
297
+ expect(target.sweep(policy, NOW)).toMatchObject({ aged: 0, overflow: 1, bytesFreed: 1000 });
298
+ expect(target.measure()).toMatchObject({ items: 2, bytes: 2000 });
299
+ expect(Bun.file(join(dir, "new.jsonl")).size).toBeGreaterThan(0);
300
+ });
301
+
302
+ test("`protect` holds against the AGE rule and BOTH caps", () => {
303
+ // A live transcript unlinked out from under its writer loses the output with
304
+ // no error anywhere — so protection is absolute, not merely age-scoped.
305
+ write("live.jsonl", 400, 5000);
306
+ write("settled.jsonl", 400, 5000);
307
+ const target = createFileDirTarget({
308
+ declaration: fileDecl,
309
+ dir,
310
+ match: /\.jsonl$/,
311
+ protect: (files) => new Set(files.filter((f) => f.name === "live.jsonl").map((f) => f.path)),
312
+ });
313
+ const policy = resolveRetentionPolicy(
314
+ { ...fileDecl, defaultMaxBytes: 1, defaultMaxItems: 0 },
315
+ { days: 1 },
316
+ );
317
+ const report = target.sweep(policy, NOW);
318
+ expect(report).toMatchObject({ aged: 1, protectedItems: 1 });
319
+ expect(Bun.file(join(dir, "live.jsonl")).size).toBe(5000);
320
+ expect(target.measure().items).toBe(1);
321
+ });
322
+
323
+ test("`protect` is called ONCE per sweep, with every governed file", () => {
324
+ // One database query for the protected set, not one per file.
325
+ for (const d of [3, 2, 1]) write(`f${d}.jsonl`, d);
326
+ let calls = 0;
327
+ let sawNames: string[] = [];
328
+ const target = createFileDirTarget({
329
+ declaration: fileDecl,
330
+ dir,
331
+ match: /\.jsonl$/,
332
+ protect: (files) => {
333
+ calls++;
334
+ sawNames = files.map((f) => f.name).sort();
335
+ return new Set();
336
+ },
337
+ });
338
+ target.sweep(resolveRetentionPolicy(fileDecl), NOW);
339
+ expect(calls).toBe(1);
340
+ expect(sawNames).toEqual(["f1.jsonl", "f2.jsonl", "f3.jsonl"]);
341
+ });
342
+
343
+ test("preview accounts for protection exactly as the sweep does", () => {
344
+ write("live.jsonl", 400);
345
+ write("settled.jsonl", 400);
346
+ const target = createFileDirTarget({
347
+ declaration: fileDecl,
348
+ dir,
349
+ match: /\.jsonl$/,
350
+ protect: (files) => new Set(files.filter((f) => f.name === "live.jsonl").map((f) => f.path)),
351
+ });
352
+ const policy = resolveRetentionPolicy(fileDecl, { days: 1 });
353
+ expect(target.preview(policy, NOW)).toEqual({ aged: 1, overflow: 0 });
354
+ expect(target.sweep(policy, NOW).aged).toBe(1);
355
+ });
356
+
357
+ test("a missing directory is a resource with nothing in it, not an error", () => {
358
+ const target = createFileDirTarget({ declaration: fileDecl, dir: join(dir, "absent") });
359
+ expect(target.measure()).toMatchObject({ items: 0, bytes: 0 });
360
+ expect(target.sweep(resolveRetentionPolicy(fileDecl), NOW)).toMatchObject({ aged: 0 });
361
+ });
362
+ });
363
+
364
+ // ── archive-then-trim ────────────────────────────────────────────────────────
365
+
366
+ const historyDecl: RetentionDeclaration = {
367
+ app: "notes",
368
+ id: "sync-history",
369
+ label: "Sync history",
370
+ category: "archived-history",
371
+ unit: "rows",
372
+ location: "notes.sqlite · ops",
373
+ consequence: "the older half of the sync log, which lives in the archive instead",
374
+ };
375
+
376
+ describe("🔴 an archiving category cannot be governed by a target that only deletes", () => {
377
+ test("createSqliteTableTarget REFUSES it, naming the target that can", () => {
378
+ const db = new Database(":memory:");
379
+ db.run("CREATE TABLE ops (seq INTEGER PRIMARY KEY, at INTEGER)");
380
+ expect(() =>
381
+ createSqliteTableTarget({ db, declaration: historyDecl, table: "ops", timeColumn: "at" }),
382
+ ).toThrow(/createArchivingSqliteTableTarget/);
383
+ db.close();
384
+ });
385
+
386
+ test("createFileDirTarget REFUSES it too", () => {
387
+ expect(() => createFileDirTarget({ declaration: historyDecl, dir: "/tmp/nope" })).toThrow(
388
+ /only deletes/,
389
+ );
390
+ });
391
+
392
+ test("...and the archiving target refuses a category that does NOT promise an archive", () => {
393
+ // The other direction matters just as much: an archiving target over an
394
+ // `event-log` would quietly keep a second copy of data the owner agreed to
395
+ // lose, and grow a disk nobody is watching.
396
+ const db = new Database(":memory:");
397
+ db.run("CREATE TABLE events (id INTEGER PRIMARY KEY, at INTEGER)");
398
+ expect(() =>
399
+ createArchivingSqliteTableTarget({
400
+ db,
401
+ declaration: rowDecl,
402
+ table: "events",
403
+ timeColumn: "at",
404
+ archive: createJsonlArchive({
405
+ app: "orch",
406
+ resource: "events",
407
+ home: { dir: mkdtempSync(join(tmpdir(), "cb-tgt-")), terminal: true },
408
+ }),
409
+ }),
410
+ ).toThrow(/does not archive before deleting/);
411
+ db.close();
412
+ });
413
+ });
414
+
415
+ describe("createArchivingSqliteTableTarget", () => {
416
+ let db: Database;
417
+ let dir: string;
418
+
419
+ beforeEach(() => {
420
+ db = new Database(":memory:");
421
+ db.run("CREATE TABLE ops (seq INTEGER PRIMARY KEY, at INTEGER, kind TEXT, payload TEXT)");
422
+ dir = mkdtempSync(join(tmpdir(), "cb-tgt-"));
423
+ });
424
+ afterEach(() => {
425
+ db.close();
426
+ rmSync(dir, { recursive: true, force: true });
427
+ });
428
+
429
+ const insert = (at: number, kind = "item.upsert"): void => {
430
+ db.query("INSERT INTO ops (at, kind, payload) VALUES ($at, $kind, '{}')").run({
431
+ $at: at,
432
+ $kind: kind,
433
+ } as never);
434
+ };
435
+
436
+ const target = (over: Partial<Parameters<typeof createArchivingSqliteTableTarget>[0]> = {}) =>
437
+ createArchivingSqliteTableTarget({
438
+ db,
439
+ declaration: historyDecl,
440
+ table: "ops",
441
+ timeColumn: "at",
442
+ idColumn: "seq",
443
+ archive: createJsonlArchive({
444
+ app: "notes",
445
+ resource: "sync-history",
446
+ home: { dir, terminal: true },
447
+ }),
448
+ ...over,
449
+ });
450
+
451
+ test("aged rows are in the archive AND out of the table — in that order", () => {
452
+ for (const d of [40, 35, 5, 1]) insert(daysAgo(d));
453
+ const report = target().sweep(resolveRetentionPolicy(historyDecl, { days: 30 }), NOW);
454
+
455
+ expect(report.aged).toBe(2);
456
+ expect(report.archived).toBe(2);
457
+ expect((db.query("SELECT COUNT(*) AS n FROM ops").get() as { n: number }).n).toBe(2);
458
+ expect(verifyArchive(dir)).toMatchObject({ segments: 1, rows: 2, bad: [] });
459
+ });
460
+
461
+ test("the archived rows are the WHOLE row, every column, not a projection", () => {
462
+ insert(daysAgo(40), "tag.set");
463
+ target().sweep(resolveRetentionPolicy(historyDecl, { days: 30 }), NOW);
464
+ const [line] = readdirSync(dir)
465
+ .filter((n) => n !== "index.jsonl")
466
+ .map((n) => readFileSync(join(dir, n), "utf8").trim());
467
+ expect(JSON.parse(line as string)).toEqual({
468
+ seq: 1,
469
+ at: daysAgo(40),
470
+ kind: "tag.set",
471
+ payload: "{}",
472
+ });
473
+ });
474
+
475
+ test("🔴 an archive that cannot be written deletes NOTHING", () => {
476
+ // The single most important assertion in this file. A sink that throws must
477
+ // leave the table exactly as it was — the ordering rule prod's diskGuard.sh
478
+ // broke, expressed as a test.
479
+ for (const d of [40, 35]) insert(daysAgo(d));
480
+ const broken = target({
481
+ archive: {
482
+ dir: "/nowhere",
483
+ terminal: true,
484
+ pendingBytes: () => 0,
485
+ write: () => {
486
+ throw new Error("disk full");
487
+ },
488
+ },
489
+ });
490
+ expect(() => broken.sweep(resolveRetentionPolicy(historyDecl, { days: 30 }), NOW)).toThrow(
491
+ /disk full/,
492
+ );
493
+ expect((db.query("SELECT COUNT(*) AS n FROM ops").get() as { n: number }).n).toBe(2);
494
+ });
495
+
496
+ test("🔴 a STAGED archive nobody is collecting REFUSES to trim, and says why", () => {
497
+ for (const d of [40, 35]) insert(daysAgo(d));
498
+ const staged = target({
499
+ archive: createJsonlArchive({
500
+ app: "notes",
501
+ resource: "sync-history",
502
+ home: { dir, terminal: false },
503
+ }),
504
+ pendingBudgetBytes: 1,
505
+ });
506
+ // Seal one segment so there is something uncollected to notice.
507
+ writeFileSync(join(dir, "sync-history-20260101-000000.jsonl"), "x".repeat(64));
508
+
509
+ const report = staged.sweep(resolveRetentionPolicy(historyDecl, { days: 30 }), NOW);
510
+ expect(report.aged).toBe(0);
511
+ expect(report.blocked).toMatch(/has not been collected/);
512
+ expect((db.query("SELECT COUNT(*) AS n FROM ops").get() as { n: number }).n).toBe(2);
513
+ });
514
+
515
+ test("a TERMINAL archive never blocks, however much it holds", () => {
516
+ for (const d of [40, 35]) insert(daysAgo(d));
517
+ writeFileSync(join(dir, "sync-history-20260101-000000.jsonl"), "x".repeat(4096));
518
+ const report = target({ pendingBudgetBytes: 1 }).sweep(
519
+ resolveRetentionPolicy(historyDecl, { days: 30 }),
520
+ NOW,
521
+ );
522
+ expect(report.blocked).toBeUndefined();
523
+ expect(report.aged).toBe(2);
524
+ });
525
+
526
+ test("protectWhere and the floor hold, exactly as they do for a deleting target", () => {
527
+ for (const d of [50, 45, 40, 35]) insert(daysAgo(d));
528
+ insert(daysAgo(60), "pinned");
529
+ const report = target({ protectWhere: "ops.kind = 'pinned'" }).sweep(
530
+ resolveRetentionPolicy({ ...historyDecl, floorItems: 2 }, { days: 30 }),
531
+ NOW,
532
+ );
533
+ expect(report.aged).toBe(2);
534
+ const kept = db.query("SELECT kind FROM ops ORDER BY seq").all() as Array<{ kind: string }>;
535
+ expect(kept.map((r) => r.kind)).toEqual(["item.upsert", "item.upsert", "pinned"]);
536
+ });
537
+
538
+ test("🔴 the item-count backstop ARCHIVES too — the overflow path has no unarchived escape", () => {
539
+ // If the cap could dump rows straight to /dev/null, the one case where the
540
+ // history is growing fastest is the one case it is destroyed.
541
+ for (let i = 0; i < 6; i++) insert(daysAgo(1));
542
+ const report = target().sweep(
543
+ resolveRetentionPolicy({ ...historyDecl, defaultMaxItems: 2 }, { days: 30 }),
544
+ NOW,
545
+ );
546
+ expect(report.overflow).toBe(4);
547
+ expect(report.archived).toBe(4);
548
+ expect(verifyArchive(dir)).toMatchObject({ rows: 4, bad: [] });
549
+ });
550
+
551
+ test("maxBatch drains across sweeps rather than holding years of rows at once", () => {
552
+ for (let i = 0; i < 10; i++) insert(daysAgo(40));
553
+ const t = target({ maxBatch: 4 });
554
+ const policy = resolveRetentionPolicy(historyDecl, { days: 30 });
555
+ expect(t.sweep(policy, NOW).aged).toBe(4);
556
+ expect(t.sweep(policy, NOW + 1000).aged).toBe(4);
557
+ expect(t.sweep(policy, NOW + 2000).aged).toBe(2);
558
+ expect((db.query("SELECT COUNT(*) AS n FROM ops").get() as { n: number }).n).toBe(0);
559
+ expect(verifyArchive(dir)).toMatchObject({ rows: 10, bad: [] });
560
+ });
561
+
562
+ test("a sweep with nothing to move seals no segment", () => {
563
+ insert(daysAgo(1));
564
+ const report = target().sweep(resolveRetentionPolicy(historyDecl, { days: 30 }), NOW);
565
+ expect(report.aged).toBe(0);
566
+ expect(report.archived).toBeUndefined();
567
+ expect(readdirSync(dir)).toEqual([]);
568
+ });
569
+
570
+ test("a table that does not exist yet is an empty resource, not a boot failure", () => {
571
+ const fresh = new Database(":memory:");
572
+ const t = createArchivingSqliteTableTarget({
573
+ db: fresh,
574
+ declaration: historyDecl,
575
+ table: "ops",
576
+ timeColumn: "at",
577
+ idColumn: "seq",
578
+ archive: createJsonlArchive({
579
+ app: "notes",
580
+ resource: "sync-history",
581
+ home: { dir, terminal: true },
582
+ }),
583
+ });
584
+ expect(t.measure()).toEqual({ items: 0 });
585
+ expect(t.sweep(resolveRetentionPolicy(historyDecl), NOW)).toEqual({
586
+ at: NOW,
587
+ aged: 0,
588
+ overflow: 0,
589
+ });
590
+ fresh.close();
591
+ });
592
+ });