cursedbelt 0.0.0

package/dist/server/sqlite/backup.d.ts

@@ -0,0 +1,36 @@
+import type { Database } from 'bun:sqlite';
+export interface SqliteBackupS3Opts {
+    bucket: string;
+    /** Key prefix within the bucket, e.g. `'ca/backups'`. */
+    prefix: string;
+    /** AWS region; falls back to Bun's env resolution when omitted. */
+    region?: string;
+    /** Custom endpoint (e.g. an S3-compatible store like R2/MinIO). */
+    endpoint?: string;
+}
+export interface SqliteBackupOpts {
+    /** Directory backups are written to (created if missing). */
+    backupDir: string;
+    /** How many local backups to retain after each run. Default: 7. */
+    maxBackups?: number;
+    /** Mirror each backup to S3 after writing it locally. */
+    s3?: SqliteBackupS3Opts;
+}
+export interface BackupInfo {
+    path: string;
+    createdAt: Date;
+    sizeMb: number;
+}
+export interface SqliteBackupService {
+    /** Write a fresh backup now, mirror to S3 (if configured), prune, and describe it. */
+    runNow(): Promise<{
+        path: string;
+        sizeMb: number;
+    }>;
+    /** Local backups, newest first. */
+    listBackups(): BackupInfo[];
+    /** Delete the oldest backups beyond `maxBackups`. */
+    pruneOld(): void;
+}
+export declare function createSqliteBackupService(db: Database, opts: SqliteBackupOpts): SqliteBackupService;
+//# sourceMappingURL=backup.d.ts.map

package/dist/server/sqlite/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/backup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAsB3C,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,EAAE,CAAC,EAAE,kBAAkB,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,mCAAmC;IACnC,WAAW,IAAI,UAAU,EAAE,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,IAAI,IAAI,CAAC;CAClB;AAqBD,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,gBAAgB,GACrB,mBAAmB,CAqDrB"}

package/dist/server/sqlite/backup.js

@@ -0,0 +1,75 @@
+import { randomBytes } from 'node:crypto';
+import { existsSync, mkdirSync, readdirSync, rmSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * SQLite backup service for `bun:sqlite` — the from-scratch replacement for the apps'
+ * `backupService.ts`. It uses `VACUUM INTO`, the correct primitive for `bun:sqlite`:
+ * it writes a compact, defragmented copy with all WAL data merged in (the Node
+ * `better-sqlite3` online `.backup()` API does not exist here). Reads continue under
+ * WAL during the copy; only writes serialize behind it — negligible for normal DB
+ * sizes, so the `daily-backup` cron job (task 29) runs it off-peak on the main thread.
+ *
+ * Optional S3 mirroring uses Bun's native S3 client (credentials from the environment,
+ * never stored here). The job *definition* lives in the app; this is the reusable
+ * mechanism.
+ */
+const BACKUP_PREFIX = 'backup-';
+const BACKUP_EXT = '.sqlite';
+const BYTES_PER_MB = 1_048_576;
+const hasBunS3 = () => typeof Bun.S3Client === 'function';
+async function uploadToS3(localPath, s3) {
+    if (!hasBunS3()) {
+        console.warn('[sqlite-backup] S3 is configured but Bun.S3Client is unavailable; skipping upload. ' +
+            'Upgrade Bun (≥1.1) or remove the s3 option.');
+        return;
+    }
+    const client = new Bun.S3Client({
+        bucket: s3.bucket,
+        region: s3.region,
+        endpoint: s3.endpoint,
+    });
+    const key = `${s3.prefix.replace(/\/+$/, '')}/${localPath.split('/').pop()}`;
+    await client.file(key).write(Bun.file(localPath));
+}
+export function createSqliteBackupService(db, opts) {
+    const { backupDir, maxBackups = 7, s3 } = opts;
+    if (s3 && !hasBunS3()) {
+        console.warn('[sqlite-backup] S3 mirroring requested but Bun.S3Client is unavailable in this runtime; ' +
+            'backups will be written locally only.');
+    }
+    const service = {
+        async runNow() {
+            mkdirSync(backupDir, { recursive: true });
+            // ISO timestamp (filesystem-safe) + a short random suffix so rapid successive
+            // runs in the same millisecond never collide onto one path.
+            const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+            const outPath = join(backupDir, `${BACKUP_PREFIX}${stamp}-${randomBytes(3).toString('hex')}${BACKUP_EXT}`);
+            // VACUUM INTO checkpoints the WAL and writes a clean, compact copy.
+            db.run('VACUUM INTO ?', [outPath]);
+            const sizeMb = statSync(outPath).size / BYTES_PER_MB;
+            if (s3)
+                await uploadToS3(outPath, s3);
+            service.pruneOld();
+            return { path: outPath, sizeMb };
+        },
+        listBackups() {
+            if (!existsSync(backupDir))
+                return [];
+            return readdirSync(backupDir)
+                .filter((f) => f.startsWith(BACKUP_PREFIX) && f.endsWith(BACKUP_EXT))
+                .map((f) => {
+                const path = join(backupDir, f);
+                const stat = statSync(path);
+                return { path, createdAt: stat.mtime, sizeMb: stat.size / BYTES_PER_MB };
+            })
+                .sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || b.path.localeCompare(a.path));
+        },
+        pruneOld() {
+            for (const old of service.listBackups().slice(maxBackups)) {
+                rmSync(old.path, { force: true });
+            }
+        },
+    };
+    return service;
+}
+//# sourceMappingURL=backup.js.map

package/dist/server/sqlite/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../../src/server/sqlite/backup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;GAWG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,SAAS,CAAC;AAoC/B,MAAM,QAAQ,GAAG,GAAY,EAAE,CAAC,OAAQ,GAA8B,CAAC,QAAQ,KAAK,UAAU,CAAC;AAE/F,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,EAAsB;IACjE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CACV,qFAAqF;YACnF,6CAA6C,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,QAAQ,EAAE,EAAE,CAAC,QAAQ;KACtB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7E,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAY,EACZ,IAAsB;IAEtB,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAE/C,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,0FAA0F;YACxF,uCAAuC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAwB;QACnC,KAAK,CAAC,MAAM;YACV,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,8EAA8E;YAC9E,4DAA4D;YAC5D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,EACT,GAAG,aAAa,GAAG,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,CAC1E,CAAC;YAEF,oEAAoE;YACpE,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;YAErD,IAAI,EAAE;gBAAE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAEtC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,WAAW;YACT,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtC,OAAO,WAAW,CAAC,SAAS,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;iBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YAC3E,CAAC,CAAC;iBACD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACxF,CAAC;QACN,CAAC;QAED,QAAQ;YACN,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server/sqlite/fts5.d.ts

@@ -0,0 +1,105 @@
+import type { Database } from 'bun:sqlite';
+export interface FtsTableSpec {
+    /** The FTS5 virtual table to create, e.g. `'notes_fts'`. */
+    table: string;
+    /** The source ("content") table whose text it indexes, e.g. `'notes'`. */
+    contentTable: string;
+    /** The content table's rowid/primary-key column. Default: `'id'`. */
+    contentRowid?: string;
+    /** Indexed columns — must exist on the content table, in this order. */
+    columns: string[];
+    /**
+     * FTS5 tokenizer directive. Default: `unicode61 remove_diacritics 2` (case- and
+     * accent-folding, the right default for human text). Pass e.g. `'porter unicode61'`
+     * for stemming, or `'trigram'` for substring search.
+     */
+    tokenize?: string;
+}
+/**
+ * Build the DDL for one external-content FTS5 table and its three sync triggers
+ * (insert/update/delete), as a single multi-statement string ready for `db.run()`.
+ *
+ * External content (`content=<table>, content_rowid=<pk>`) means the FTS index stores
+ * only the inverted index, never a second copy of the text — the triggers mirror every
+ * write into the index. This is the canonical pattern from the SQLite FTS5 docs,
+ * generated once so apps don't repeat it per table.
+ */
+export declare function buildFtsSchema(spec: FtsTableSpec): string;
+/** Create every table in `specs` and its triggers on `db` (one `db.run` per spec). */
+export declare function applyFtsSchema(db: Database, ...specs: FtsTableSpec[]): void;
+export interface FtsResult {
+    /** The content row's rowid (its `content_rowid` value). */
+    rowid: number;
+    /** FTS5 bm25 relevance — lower (more negative) is more relevant. */
+    rank: number;
+    /** Present only when `snippet` was requested: a truncated, match-marked excerpt. */
+    snippet?: string;
+    /** Present only when `highlight` was requested: the full column with matches marked. */
+    highlight?: string;
+}
+export interface FtsSnippetOpts {
+    /** FTS column index to excerpt; `-1` (default) auto-picks the best-matching column. */
+    column?: number;
+    /** Wraps each match, default `'<b>'`. */
+    startMatch?: string;
+    /** Closes each match, default `'</b>'`. */
+    endMatch?: string;
+    /** Inserted where text is trimmed, default `'…'`. */
+    ellipsis?: string;
+    /** Max tokens in the excerpt (1–64), default `16`. */
+    maxTokens?: number;
+}
+export interface FtsHighlightOpts {
+    /** FTS column index to return (required — `highlight()` has no auto column). */
+    column: number;
+    /** Wraps each match, default `'<b>'`. */
+    startMatch?: string;
+    /** Closes each match, default `'</b>'`. */
+    endMatch?: string;
+}
+export interface FtsSearchOpts {
+    /** The FTS5 table to query, e.g. `'notes_fts'`. */
+    table: string;
+    /** Raw user query — sanitized into a prefix-match expression before MATCH. */
+    query: string;
+    /** Page size, default `20`. */
+    limit?: number;
+    /** Row offset, default `0`. */
+    offset?: number;
+    /** Request a `snippet(...)` excerpt column. */
+    snippet?: FtsSnippetOpts;
+    /** Request a `highlight(...)` column. */
+    highlight?: FtsHighlightOpts;
+}
+export interface Fts5Search {
+    /** Ranked search; returns `[]` for an empty/operator-only query (never throws on it). */
+    search(opts: FtsSearchOpts): FtsResult[];
+    /** Rebuild one FTS index from its content table (post-ETL / after `clear`). */
+    rebuild(table: string): void;
+    /** Rebuild every table passed to {@link createFts5Search} (`tables` option). */
+    rebuildAll(): void;
+    /** Empty an FTS index (the `'delete-all'` command) — pair with `rebuild` for bulk loads. */
+    clear(table: string): void;
+    /** Merge the index's b-tree segments (the `'optimize'` command) for faster queries. */
+    optimize(table: string): void;
+}
+/**
+ * Build a ranked-search facade over the FTS5 tables named in `opts.tables` (the set
+ * `rebuildAll()` iterates). The `db` handle is the same one the app uses — one
+ * connection, one WAL.
+ */
+export declare function createFts5Search(db: Database, opts?: {
+    tables?: string[];
+}): Fts5Search;
+/**
+ * Convert arbitrary user input into a safe FTS5 MATCH expression: every run of
+ * letters/digits/underscore becomes a quoted prefix token (`"term"*`), joined by
+ * spaces (FTS5's implicit AND). All FTS5 operators (`" * : ^ ( ) - + NEAR …`) are
+ * dropped with the surrounding punctuation, so the query can neither inject syntax
+ * nor raise a parse error. Returns `''` when nothing searchable remains.
+ *
+ * Examples: `hello` → `"hello"*`; `hello world` → `"hello"* "world"*` (both must
+ * match); `DROP TABLE` → `"DROP"* "TABLE"*` (a literal search, harmless).
+ */
+export declare function sanitizeFtsQuery(raw: string): string;
+//# sourceMappingURL=fts5.d.ts.map

package/dist/server/sqlite/fts5.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fts5.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/fts5.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA0C3C,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAiCzD;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,CAE3E;AAID,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,yFAAyF;IACzF,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,CAAC;IACzC,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gFAAgF;IAChF,UAAU,IAAI,IAAI,CAAC;IACnB,4FAA4F;IAC5F,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAkBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAAG,UAAU,CAwC3F;AAID;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIpD"}

package/dist/server/sqlite/fts5.js

@@ -0,0 +1,151 @@
+/**
+ * FTS5 full-text search for `bun:sqlite` — the from-scratch replacement for the apps'
+ * hand-rolled `LIKE '%' || ? || '%'` search. Three pieces:
+ *
+ *  1. {@link buildFtsSchema} — generates the `CREATE VIRTUAL TABLE` + the three
+ *     external-content sync triggers for one indexed table. Apps call it from a
+ *     migration instead of hand-writing the (highly repetitive) trigger SQL 4×.
+ *  2. {@link createFts5Search} — a ranked query builder (bm25 `rank`, `snippet`,
+ *     `highlight`) over those tables, plus the FTS5 maintenance commands
+ *     (`rebuild`/`clear`/`optimize`) the ETL and bulk importers need.
+ *  3. {@link sanitizeFtsQuery} — turns arbitrary user input into a safe AND-of-prefix
+ *     FTS5 MATCH expression (no operator injection, no parse errors).
+ *
+ * FTS5 is compiled into `bun:sqlite` (NOT `node:sqlite`, which omits it). Everything
+ * here is app-agnostic: the indexed table names are a *constructor option*, never
+ * hard-coded — ca and ru index different tables.
+ */
+/** A safe, unquoted SQL identifier (table/column name). */
+const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function assertIdent(name, what) {
+    if (!IDENT.test(name)) {
+        throw new Error(`Invalid ${what}: ${JSON.stringify(name)} (expected a plain SQL identifier)`);
+    }
+    return name;
+}
+/** Double-quote an identifier (validated first, so the quoting can't be escaped out of). */
+const q = (name) => `"${name}"`;
+/** Single-quote a string literal for inlining (doubles embedded quotes). */
+const lit = (s) => `'${s.replace(/'/g, "''")}'`;
+/** Coerce to a bounded non-negative integer for inlining (snippet token counts, etc.). */
+const int = (n, fallback) => Number.isFinite(n) ? Math.trunc(n) : fallback;
+/**
+ * Build the DDL for one external-content FTS5 table and its three sync triggers
+ * (insert/update/delete), as a single multi-statement string ready for `db.run()`.
+ *
+ * External content (`content=<table>, content_rowid=<pk>`) means the FTS index stores
+ * only the inverted index, never a second copy of the text — the triggers mirror every
+ * write into the index. This is the canonical pattern from the SQLite FTS5 docs,
+ * generated once so apps don't repeat it per table.
+ */
+export function buildFtsSchema(spec) {
+    const table = assertIdent(spec.table, 'fts table name');
+    const content = assertIdent(spec.contentTable, 'content table name');
+    const rowid = assertIdent(spec.contentRowid ?? 'id', 'content rowid column');
+    if (spec.columns.length === 0) {
+        throw new Error(`buildFtsSchema(${table}): at least one indexed column is required`);
+    }
+    const cols = spec.columns.map((c) => assertIdent(c, 'indexed column'));
+    const tokenize = spec.tokenize ?? 'unicode61 remove_diacritics 2';
+    const colList = cols.map(q).join(', ');
+    const newVals = cols.map((c) => `new.${q(c)}`).join(', ');
+    const oldVals = cols.map((c) => `old.${q(c)}`).join(', ');
+    // `INSERT INTO <fts>(<fts>, rowid, …) VALUES('delete', …)` is FTS5's documented way
+    // to remove the prior term rows for a content row before re-indexing it.
+    return `
+CREATE VIRTUAL TABLE IF NOT EXISTS ${q(table)} USING fts5(
+  ${colList},
+  content=${q(content)},
+  content_rowid=${q(rowid)},
+  tokenize=${lit(tokenize)}
+);
+CREATE TRIGGER IF NOT EXISTS ${q(`${table}_ai`)} AFTER INSERT ON ${q(content)} BEGIN
+  INSERT INTO ${q(table)}(rowid, ${colList}) VALUES (new.${q(rowid)}, ${newVals});
+END;
+CREATE TRIGGER IF NOT EXISTS ${q(`${table}_ad`)} AFTER DELETE ON ${q(content)} BEGIN
+  INSERT INTO ${q(table)}(${q(table)}, rowid, ${colList}) VALUES ('delete', old.${q(rowid)}, ${oldVals});
+END;
+CREATE TRIGGER IF NOT EXISTS ${q(`${table}_au`)} AFTER UPDATE ON ${q(content)} BEGIN
+  INSERT INTO ${q(table)}(${q(table)}, rowid, ${colList}) VALUES ('delete', old.${q(rowid)}, ${oldVals});
+  INSERT INTO ${q(table)}(rowid, ${colList}) VALUES (new.${q(rowid)}, ${newVals});
+END;`.trim();
+}
+/** Create every table in `specs` and its triggers on `db` (one `db.run` per spec). */
+export function applyFtsSchema(db, ...specs) {
+    for (const spec of specs)
+        db.run(buildFtsSchema(spec));
+}
+function snippetExpr(table, o) {
+    const col = int(o.column ?? -1, -1);
+    const start = lit(o.startMatch ?? '<b>');
+    const end = lit(o.endMatch ?? '</b>');
+    const ell = lit(o.ellipsis ?? '…');
+    const tokens = Math.min(64, Math.max(1, int(o.maxTokens ?? 16, 16)));
+    return `snippet(${q(table)}, ${col}, ${start}, ${end}, ${ell}, ${tokens}) AS snippet`;
+}
+function highlightExpr(table, o) {
+    const col = Math.max(0, int(o.column, 0));
+    const start = lit(o.startMatch ?? '<b>');
+    const end = lit(o.endMatch ?? '</b>');
+    return `highlight(${q(table)}, ${col}, ${start}, ${end}) AS highlight`;
+}
+/**
+ * Build a ranked-search facade over the FTS5 tables named in `opts.tables` (the set
+ * `rebuildAll()` iterates). The `db` handle is the same one the app uses — one
+ * connection, one WAL.
+ */
+export function createFts5Search(db, opts = {}) {
+    const tables = (opts.tables ?? []).map((t) => assertIdent(t, 'fts table name'));
+    const facade = {
+        search(o) {
+            const match = sanitizeFtsQuery(o.query);
+            if (!match)
+                return [];
+            const table = assertIdent(o.table, 'fts table name');
+            const projection = ['rowid', 'rank'];
+            if (o.snippet)
+                projection.push(snippetExpr(table, o.snippet));
+            if (o.highlight)
+                projection.push(highlightExpr(table, o.highlight));
+            const sql = `SELECT ${projection.join(', ')} FROM ${q(table)} WHERE ${q(table)} MATCH ? ORDER BY rank LIMIT ? OFFSET ?`;
+            return db
+                .query(sql)
+                .all(match, Math.max(0, int(o.limit ?? 20, 20)), Math.max(0, int(o.offset ?? 0, 0)));
+        },
+        rebuild(table) {
+            const t = assertIdent(table, 'fts table name');
+            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('rebuild')`);
+        },
+        rebuildAll() {
+            for (const t of tables)
+                facade.rebuild(t);
+        },
+        clear(table) {
+            const t = assertIdent(table, 'fts table name');
+            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('delete-all')`);
+        },
+        optimize(table) {
+            const t = assertIdent(table, 'fts table name');
+            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('optimize')`);
+        },
+    };
+    return facade;
+}
+// ── Query sanitization ─────────────────────────────────────────────────────────
+/**
+ * Convert arbitrary user input into a safe FTS5 MATCH expression: every run of
+ * letters/digits/underscore becomes a quoted prefix token (`"term"*`), joined by
+ * spaces (FTS5's implicit AND). All FTS5 operators (`" * : ^ ( ) - + NEAR …`) are
+ * dropped with the surrounding punctuation, so the query can neither inject syntax
+ * nor raise a parse error. Returns `''` when nothing searchable remains.
+ *
+ * Examples: `hello` → `"hello"*`; `hello world` → `"hello"* "world"*` (both must
+ * match); `DROP TABLE` → `"DROP"* "TABLE"*` (a literal search, harmless).
+ */
+export function sanitizeFtsQuery(raw) {
+    const tokens = raw.match(/[\p{L}\p{N}_]+/gu);
+    if (!tokens || tokens.length === 0)
+        return '';
+    return tokens.map((t) => `"${t}"*`).join(' ');
+}
+//# sourceMappingURL=fts5.js.map

package/dist/server/sqlite/fts5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fts5.js","sourceRoot":"","sources":["../../../src/server/sqlite/fts5.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,2DAA2D;AAC3D,MAAM,KAAK,GAAG,0BAA0B,CAAC;AAEzC,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAEhE,0FAA0F;AAC1F,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,QAAgB,EAAU,EAAE,CAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAqBhD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,4CAA4C,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,+BAA+B,CAAC;IAElE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1D,oFAAoF;IACpF,yEAAyE;IACzE,OAAO;qCAC4B,CAAC,CAAC,KAAK,CAAC;IACzC,OAAO;YACC,CAAC,CAAC,OAAO,CAAC;kBACJ,CAAC,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,QAAQ,CAAC;;+BAEK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;;+BAEhD,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,OAAO,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;;+BAEvE,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,OAAO,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;gBACtF,CAAC,CAAC,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;KAC1E,CAAC,IAAI,EAAE,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,GAAG,KAAqB;IACnE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAiED,SAAS,WAAW,CAAC,KAAa,EAAE,CAAiB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG,KAAK,GAAG,KAAK,MAAM,cAAc,CAAC;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAmB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IACtC,OAAO,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG,gBAAgB,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,OAA8B,EAAE;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAe;QACzB,MAAM,CAAC,CAAC;YACN,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAErD,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAEpE,MAAM,GAAG,GAAG,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC;YACxH,OAAO,EAAE;iBACN,KAAK,CAAsC,GAAG,CAAC;iBAC/C,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,CAAC,KAAK;YACX,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QAED,UAAU;YACR,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QAED,QAAQ,CAAC,KAAK;YACZ,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/dist/server/sqlite/health.d.ts

@@ -0,0 +1,45 @@
+import type { Database } from 'bun:sqlite';
+/**
+ * DB-layer health probes for `bun:sqlite`. Each is a small, self-describing descriptor
+ * — `name` + `description` + an async `check()` returning a status — so it can be
+ * rendered in an operator console and drive readiness from one source.
+ *
+ * The shape is intentionally dependency-free (it does NOT import cwip's health types):
+ * apps adapt a descriptor into cwip's `HealthCheck` registry with a trivial map, e.g.
+ *
+ * ```ts
+ * registry.register(...createSqliteHealthChecks(db, {}).map((p) => async () => {
+ *   const r = await p.check();
+ *   return { id: p.name, title: p.description, category: 'Database',
+ *            severity: 'warn', status: r.status, detail: r.message ?? '', remediation: [] };
+ * }));
+ * ```
+ *
+ * `status` values (`ok`/`warn`/`error`) already line up with cwip's `HealthStatus`.
+ */
+export type SqliteHealthStatus = 'ok' | 'warn' | 'error';
+export interface SqliteHealthResult {
+    status: SqliteHealthStatus;
+    /** Human-readable detail for the current status. */
+    message?: string;
+}
+export interface SqliteHealthCheck {
+    /** Stable id, e.g. `'sqlite:integrity'`. */
+    name: string;
+    /** Short human description. */
+    description: string;
+    check(): Promise<SqliteHealthResult>;
+}
+export interface SqliteHealthOpts {
+    /** Warn when the DB file exceeds this many bytes. Default: 500 MB. */
+    maxSizeBytes?: number;
+    /** Warn when the WAL holds more than this many pages. Default: 1000. */
+    maxWalPages?: number;
+}
+/**
+ * Build the SQLite health probes for `db`. Use `quick_check` (fast, still catches
+ * corruption) in the loop; expose the exhaustive `integrity_check` as an
+ * admin-triggered action elsewhere.
+ */
+export declare function createSqliteHealthChecks(db: Database, opts?: SqliteHealthOpts): SqliteHealthCheck[];
+//# sourceMappingURL=health.d.ts.map

package/dist/server/sqlite/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,QAAQ,EACZ,IAAI,GAAE,gBAAqB,GAC1B,iBAAiB,EAAE,CAiDrB"}

package/dist/server/sqlite/health.js

@@ -0,0 +1,53 @@
+const BYTES_PER_MB = 1_048_576;
+const mb = (bytes) => `${(bytes / BYTES_PER_MB).toFixed(1)}MB`;
+/**
+ * Build the SQLite health probes for `db`. Use `quick_check` (fast, still catches
+ * corruption) in the loop; expose the exhaustive `integrity_check` as an
+ * admin-triggered action elsewhere.
+ */
+export function createSqliteHealthChecks(db, opts = {}) {
+    const maxSizeBytes = opts.maxSizeBytes ?? 500 * BYTES_PER_MB;
+    const maxWalPages = opts.maxWalPages ?? 1000;
+    return [
+        {
+            name: 'sqlite:integrity',
+            description: 'SQLite quick_check integrity',
+            async check() {
+                const row = db.query('PRAGMA quick_check').get();
+                const outcome = row ? Object.values(row)[0] : undefined;
+                return outcome === 'ok'
+                    ? { status: 'ok', message: 'ok' }
+                    : { status: 'error', message: outcome ?? 'unknown' };
+            },
+        },
+        {
+            name: 'sqlite:size',
+            description: 'DB file size within threshold',
+            async check() {
+                const info = db
+                    .query('SELECT page_count, page_size FROM pragma_page_count(), pragma_page_size()')
+                    .get();
+                const bytes = (info?.page_count ?? 0) * (info?.page_size ?? 4096);
+                return bytes > maxSizeBytes
+                    ? { status: 'warn', message: `DB is ${mb(bytes)} (threshold: ${mb(maxSizeBytes)})` }
+                    : { status: 'ok', message: mb(bytes) };
+            },
+        },
+        {
+            name: 'sqlite:wal',
+            description: 'WAL checkpoint lag',
+            async check() {
+                // PRAGMA wal_checkpoint returns one row {busy, log, checkpointed}; `log` is the
+                // total WAL pages, or -1 when the DB is not in WAL mode (treat as 0).
+                const row = db
+                    .query('PRAGMA wal_checkpoint(PASSIVE)')
+                    .get();
+                const pages = row && row.log > 0 ? row.log : 0;
+                return pages > maxWalPages
+                    ? { status: 'warn', message: `WAL has ${pages} pages (threshold: ${maxWalPages})` }
+                    : { status: 'ok', message: `${pages} WAL pages` };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=health.js.map

package/dist/server/sqlite/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/server/sqlite/health.ts"],"names":[],"mappings":"AA4CA,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,EAAE,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAE/E;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,EAAY,EACZ,OAAyB,EAAE;IAE3B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,YAAY,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAE7C,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,8BAA8B;YAC3C,KAAK,CAAC,KAAK;gBACT,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAA6B,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC7E,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxD,OAAO,OAAO,KAAK,IAAI;oBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;oBACjC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;YACzD,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,+BAA+B;YAC5C,KAAK,CAAC,KAAK;gBACT,MAAM,IAAI,GAAG,EAAE;qBACZ,KAAK,CACJ,2EAA2E,CAC5E;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;gBAClE,OAAO,KAAK,GAAG,YAAY;oBACzB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE;oBACpF,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,CAAC;SACF;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,oBAAoB;YACjC,KAAK,CAAC,KAAK;gBACT,gFAAgF;gBAChF,sEAAsE;gBACtE,MAAM,GAAG,GAAG,EAAE;qBACX,KAAK,CACJ,gCAAgC,CACjC;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,OAAO,KAAK,GAAG,WAAW;oBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,sBAAsB,WAAW,GAAG,EAAE;oBACnF,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,YAAY,EAAE,CAAC;YACtD,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/server/sqlite/index.d.ts

@@ -0,0 +1,6 @@
+export { type BackupInfo, createSqliteBackupService, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, } from './backup';
+export { applyFtsSchema, buildFtsSchema, createFts5Search, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, sanitizeFtsQuery, } from './fts5';
+export { createSqliteHealthChecks, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, } from './health';
+export { isReadOnlySql } from './readonlySql';
+export { createSqliteViewerMiddleware } from './viewer';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/sqlite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,UAAU,EACf,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC"}

package/dist/server/sqlite/index.js

@@ -0,0 +1,10 @@
+// cursedbelt SQLite toolkit extras (task 30) — bun:sqlite-native primitives layered
+// on the migration runner (task 24): FTS5 ranked search, a read-only DB viewer, the
+// VACUUM-INTO backup service, and DB-layer health probes. All app-agnostic; the apps
+// supply table names, paths, and thresholds.
+export { createSqliteBackupService, } from './backup';
+export { applyFtsSchema, buildFtsSchema, createFts5Search, sanitizeFtsQuery, } from './fts5';
+export { createSqliteHealthChecks, } from './health';
+export { isReadOnlySql } from './readonlySql';
+export { createSqliteViewerMiddleware } from './viewer';
+//# sourceMappingURL=index.js.map

package/dist/server/sqlite/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/sqlite/index.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oFAAoF;AACpF,qFAAqF;AACrF,6CAA6C;AAE7C,OAAO,EAEL,yBAAyB,GAI1B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,EAOhB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,GAKzB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC"}

package/dist/server/sqlite/readonlySql.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Defense-in-depth read-only guard for the SQLite viewer's ad-hoc query endpoint. A
+ * conservative *lexical* check, NOT a parser: it rejects the obvious foot-guns
+ * (writes, DDL, PRAGMA, ATTACH, stacked statements) before SQL reaches the DB. The
+ * real guarantees are the owner-only mount + this allowlist, layered.
+ *
+ * cursedbelt keeps its own copy rather than depending on cwip — the toolkit's server
+ * surface stays dependency-light, and the rule set here is tuned for SQLite (PRAGMA /
+ * ATTACH are SQLite-specific write vectors).
+ */
+/**
+ * True only for a single read-only statement: a `SELECT`, or a `WITH … SELECT` CTE.
+ * Rejects stacked statements, `SELECT … INTO`, and any forbidden keyword as a word.
+ */
+export declare function isReadOnlySql(sql: string): boolean;
+//# sourceMappingURL=readonlySql.d.ts.map

package/dist/server/sqlite/readonlySql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readonlySql.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/readonlySql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmCH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAkBlD"}

package/dist/server/sqlite/readonlySql.js

@@ -0,0 +1,66 @@
+/**
+ * Defense-in-depth read-only guard for the SQLite viewer's ad-hoc query endpoint. A
+ * conservative *lexical* check, NOT a parser: it rejects the obvious foot-guns
+ * (writes, DDL, PRAGMA, ATTACH, stacked statements) before SQL reaches the DB. The
+ * real guarantees are the owner-only mount + this allowlist, layered.
+ *
+ * cursedbelt keeps its own copy rather than depending on cwip — the toolkit's server
+ * surface stays dependency-light, and the rule set here is tuned for SQLite (PRAGMA /
+ * ATTACH are SQLite-specific write vectors).
+ */
+const FORBIDDEN = [
+    'insert',
+    'update',
+    'delete',
+    'drop',
+    'alter',
+    'truncate',
+    'create',
+    'replace',
+    'attach',
+    'detach',
+    'reindex',
+    'vacuum',
+    'pragma',
+    'begin',
+    'commit',
+    'rollback',
+    'savepoint',
+    'release',
+    'grant',
+    'revoke',
+];
+/** Strip `--` line comments and block comments, collapse whitespace, lowercase. */
+function normalize(sql) {
+    return sql
+        .replace(/--[^\n]*/g, ' ')
+        .replace(/\/\*[\s\S]*?\*\//g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .toLowerCase();
+}
+/**
+ * True only for a single read-only statement: a `SELECT`, or a `WITH … SELECT` CTE.
+ * Rejects stacked statements, `SELECT … INTO`, and any forbidden keyword as a word.
+ */
+export function isReadOnlySql(sql) {
+    const s = normalize(sql);
+    if (!s)
+        return false;
+    // Only a trailing `;` terminator is allowed — no stacked statements.
+    const body = s.replace(/;\s*$/, '');
+    if (body.includes(';'))
+        return false;
+    // Must begin with SELECT or a CTE.
+    if (!/^(select|with)\b/.test(body))
+        return false;
+    // `SELECT … INTO new_table` writes a table — block it.
+    if (/\bselect\b[\s\S]*\binto\b/.test(body))
+        return false;
+    for (const kw of FORBIDDEN) {
+        if (new RegExp(`\\b${kw}\\b`).test(body))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=readonlySql.js.map

package/dist/server/sqlite/readonlySql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readonlySql.js","sourceRoot":"","sources":["../../../src/server/sqlite/readonlySql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,SAAS,GAAG;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,mFAAmF;AACnF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAErB,qEAAqE;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,mCAAmC;IACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjD,uDAAuD;IACvD,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/sqlite/viewer.d.ts

@@ -0,0 +1,4 @@
+import type { Database } from 'bun:sqlite';
+import { Hono } from 'hono';
+export declare function createSqliteViewerMiddleware(db: Database): Hono;
+//# sourceMappingURL=viewer.d.ts.map

package/dist/server/sqlite/viewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/viewer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA0C5B,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAqE/D"}