cursedbelt-server 4.40.1 → 4.40.3

package/dist/server/d1/pullD1.js

@@ -287,6 +287,15 @@ export async function pullD1ToSqlite(options) {
         // `exec`, not `run`: each is many statements and `run` would execute only the first,
         // leaving a file with a schema and no rows that looks perfectly valid.
         db.exec(options.schemaSql);
+        // 🔴 The schema's TRIGGERS come off for the load and go back on after it. A trigger fires on
+        // every restored row as if it were a new write: measured 2026-09-29, collections' api-cache
+        // stamp triggers (AFTER INSERT ON items → a `meta` row) wrote `meta` during the `items` load,
+        // and `meta`'s own rows then refused with `UNIQUE constraint failed: meta.key` — every
+        // nightly backup of an app with such a trigger would have failed. D1's rows are already the
+        // triggers' results; the snapshot needs the triggers only for what happens AFTER it.
+        const triggers = db.query("SELECT name, sql FROM sqlite_master WHERE type = 'trigger' AND sql IS NOT NULL").all();
+        for (const t of triggers)
+            db.exec(`DROP TRIGGER ${sqlIdent(t.name)}`);
         // 🔴 A table D1 holds that the schema does not declare is created from D1's OWN DDL, never
         // dropped: measured on music's first post-cutover pull (2026-09-23), `art_lookups` — a
         // cache its art job creates where it first needs it — made the whole pull refuse with
@@ -301,6 +310,8 @@ export async function pullD1ToSqlite(options) {
         for (const { text } of dumps)
             if (text)
                 db.exec(text);
+        for (const t of triggers)
+            db.exec(t.sql);
         if (options.afterLoadSql)
             db.exec(options.afterLoadSql);
         // 🔴 Every table holds as many rows as were read from D1, or this is not a backup: the check

package/dist/server/incidents/store.js

@@ -165,7 +165,7 @@ export function createIncidentStore(db) {
         },
         acknowledge(fp, now = Date.now()) {
             const row = selectOne.get(fp);
-            if (!row || row.state !== "open")
+            if (row?.state !== "open")
                 return false;
             db.prepare(`UPDATE ${INCIDENTS_TABLE} SET state = 'acknowledged', acknowledged_at = ?
 					WHERE fingerprint = ?`).run(now, fp);

package/dist/server/sharing/router.js

@@ -26,7 +26,7 @@ const isLevel = (v) => v === 'read' || v === 'write';
  * ```
  */
 export function mountShareRoutes(
-// biome-ignore lint/suspicious/noExplicitAny: the caller's Hono env is theirs, and this
+// `any` on purpose: the caller's Hono env is theirs, and this
 // module reads nothing off it — narrowing it would force every app to name its own Env
 // here for no gain.
 app, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cursedbelt-server",
-	"version": "4.40.1",
+	"version": "4.40.3",
 	"license": "ISC",
 	"type": "module",
 	"description": "The app-facing Bun/Hono server tier of the cursedbelt split — storage, sharing, activity, guard, sync. React-free; cursedbelt-core below it.",
@@ -25,7 +25,8 @@
 		"verify": "bun run gate",
 		"prepublishOnly": "bun run gate --force",
 		"test:pg": "bun run scripts/testPg.ts",
-		"gate": "bun run scripts/paths.ts --only gate.ts"
+		"gate": "bun run scripts/paths.ts --only gate.ts",
+		"lint": "biome check --error-on-warnings ."
 	},
 	"files": [
 		"dist",
@@ -352,7 +353,7 @@
 	"dependencies": {
 		"argon2id": "1.0.1",
 		"cursedbelt-core": "^2.1.1",
-		"cursedops": ">=0.8.1 <0.12.0",
+		"cursedops": ">=0.8.1 <0.13.0",
 		"cwip": "^4.6.0",
 		"jose": "^6.2.3"
 	},
@@ -387,7 +388,7 @@
 		}
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^2.5.0",
+		"@biomejs/biome": "^2.5.14",
 		"@happy-dom/global-registrator": "^20.10.6",
 		"@node-rs/argon2": "^2.0.2",
 		"@types/bun": "^1.3.14",
@@ -408,6 +409,9 @@
 			{
 				"script": "paths"
 			},
+			{
+				"script": "lint"
+			},
 			{
 				"script": "typecheck"
 			},

package/src/server/d1/pullD1.spec.ts

@@ -290,6 +290,29 @@ describe('pulling D1 down — paged SELECTs, table by table, never an export', (
 		expect(row?.art_key).toBe('art/1');
 	});
 
+	test('🔴 a schema TRIGGER does not fire on the restored rows, and is in the snapshot after (collections, 2026-09-29)', async () => {
+		const dir = scratch();
+		const schema = `${SCHEMA}
+CREATE TRIGGER items_stamp AFTER INSERT ON items BEGIN
+  INSERT INTO meta (key, value) VALUES ('v', 1) ON CONFLICT(key) DO UPDATE SET value = value + 1;
+END;`;
+		const source = new Database(':memory:');
+		source.exec(schema);
+		source.exec("INSERT INTO items VALUES ('a', 'x'); INSERT INTO items VALUES ('b', 'y');");
+		await pullD1ToSqlite({
+			destination: join(dir, 'pulled.sqlite'),
+			database: 'collections',
+			schemaSql: schema,
+			requiredTable: 'items',
+			afterLoadSql: REBUILD,
+			wrangler: d1(source).run,
+		});
+		const db = opened(dir);
+		expect(Number((db.query("SELECT value FROM meta WHERE key = 'v'").get() as { value: unknown }).value)).toBe(2);
+		expect(db.query("SELECT name FROM sqlite_master WHERE type = 'trigger'").all()).toEqual([{ name: 'items_stamp' }]);
+		db.close();
+	});
+
 	test('🔴 a database without the required table is refused as the wrong one', async () => {
 		const dir = scratch();
 		await expect(

package/src/server/d1/pullD1.ts

@@ -346,6 +346,17 @@ export async function pullD1ToSqlite(options: PullD1Options): Promise<void> {
 		// `exec`, not `run`: each is many statements and `run` would execute only the first,
 		// leaving a file with a schema and no rows that looks perfectly valid.
 		db.exec(options.schemaSql);
+		// 🔴 The schema's TRIGGERS come off for the load and go back on after it. A trigger fires on
+		// every restored row as if it were a new write: measured 2026-09-29, collections' api-cache
+		// stamp triggers (AFTER INSERT ON items → a `meta` row) wrote `meta` during the `items` load,
+		// and `meta`'s own rows then refused with `UNIQUE constraint failed: meta.key` — every
+		// nightly backup of an app with such a trigger would have failed. D1's rows are already the
+		// triggers' results; the snapshot needs the triggers only for what happens AFTER it.
+		const triggers = db.query("SELECT name, sql FROM sqlite_master WHERE type = 'trigger' AND sql IS NOT NULL").all() as {
+			name: string;
+			sql: string;
+		}[];
+		for (const t of triggers) db.exec(`DROP TRIGGER ${sqlIdent(t.name)}`);
 		// 🔴 A table D1 holds that the schema does not declare is created from D1's OWN DDL, never
 		// dropped: measured on music's first post-cutover pull (2026-09-23), `art_lookups` — a
 		// cache its art job creates where it first needs it — made the whole pull refuse with
@@ -359,6 +370,7 @@ export async function pullD1ToSqlite(options: PullD1Options): Promise<void> {
 		}
 		// One table at a time, so a fault is located rather than smeared over the whole load.
 		for (const { text } of dumps) if (text) db.exec(text);
+		for (const t of triggers) db.exec(t.sql);
 		if (options.afterLoadSql) db.exec(options.afterLoadSql);
 		// 🔴 Every table holds as many rows as were read from D1, or this is not a backup: the check
 		// that makes a silently truncated load (task 2128's NUL padding, or whatever does it next)

package/src/server/incidents/incidents.spec.ts

@@ -208,7 +208,6 @@ describe("what a message may not contain or travel down", () => {
 			store.reconcile("ingest", [
 				{
 					...stuckIngest(),
-					// biome-ignore lint/suspicious/noExplicitAny: the point of the test is the wrong type
 					facts: { failed: 42, firstFile: "Mom's 60th birthday.mov" as any },
 				},
 			]),

package/src/server/incidents/store.ts

@@ -316,7 +316,7 @@ export function createIncidentStore(db: Database): IncidentStore {
 
 		acknowledge(fp, now = Date.now()) {
 			const row = selectOne.get(fp) as Row | null;
-			if (!row || row.state !== "open") return false;
+			if (row?.state !== "open") return false;
 			db.prepare(
 				`UPDATE ${INCIDENTS_TABLE} SET state = 'acknowledged', acknowledged_at = ?
 					WHERE fingerprint = ?`,

package/src/server/master-lock/guard.spec.ts

@@ -11,7 +11,6 @@ import {
 	MASTER_LOCK_STATE_HEADER,
 	type MasterLockKdfParams,
 	deriveMasterLockVerifier,
-	newMasterLockKdfParams,
 } from "cursedbelt-core/master-lock";
 import { createMasterLockGuard } from "./guard.js";
 import { MasterLock } from "./masterLock.js";

package/src/server/master-lock/sessions.spec.ts

@@ -107,7 +107,9 @@ describe("🔴 two devices in flight together (task 2138)", () => {
 			let pending: string | null = null;
 			const lock = new MasterLock({
 				store: record,
-				state: { read: () => seen, write: (json) => void (pending = json) },
+				state: { read: () => seen, write: (json) => {
+					pending = json;
+				} },
 				seedJson: SEED,
 			});
 			return { lock, settle: () => pending !== null && createKvMasterLockStore(kv, MASTER_LOCK_STATE_KEY).write(pending) };

package/src/server/sharing/router.ts

@@ -126,7 +126,7 @@ const isLevel = (v: unknown): v is ShareLevel => v === 'read' || v === 'write';
  * ```
  */
 export function mountShareRoutes<V extends ShareRouterViewer>(
-  // biome-ignore lint/suspicious/noExplicitAny: the caller's Hono env is theirs, and this
+  // `any` on purpose: the caller's Hono env is theirs, and this
   // module reads nothing off it — narrowing it would force every app to name its own Env
   // here for no gain.
   app: Hono<any>,

package/src/server/storage/files/catalogue.media-host.spec.ts

@@ -17,8 +17,6 @@ import { bytesStream } from 'cursedbelt-core/testing';
 const CTX: MediaCtx = { userId: 'u1', tenantId: 't1' };
 const OWNER = CTX.userId;
 const stream = bytesStream;
-const drain = async (s: ReadableStream<Uint8Array>): Promise<Uint8Array> =>
-  new Uint8Array(await new Response(s).arrayBuffer());
 
 let db: Database;
 let root: string;