cursedbelt 2.7.0 → 3.0.0

package/dist/server/sqlite/backup.js

@@ -1,98 +0,0 @@
-import { Database } from 'bun:sqlite';
-import { randomBytes } from 'node:crypto';
-import { existsSync, mkdirSync, readdirSync, rmSync, statSync } from 'node:fs';
-import { join } from 'node:path';
-/**
- * SQLite backup service for `bun:sqlite` — the from-scratch replacement for the apps'
- * `backupService.ts`. It uses `VACUUM INTO`, the correct primitive for `bun:sqlite`:
- * it writes a compact, defragmented copy with all WAL data merged in (the Node
- * `better-sqlite3` online `.backup()` API does not exist here). Reads continue under
- * WAL during the copy; only writes serialize behind it — negligible for normal DB
- * sizes, so the `daily-backup` cron job (task 29) runs it off-peak on the main thread.
- *
- * Optional S3 mirroring uses Bun's native S3 client (credentials from the environment,
- * never stored here). The job *definition* lives in the app; this is the reusable
- * mechanism.
- */
-const BACKUP_PREFIX = 'backup-';
-const BACKUP_EXT = '.sqlite';
-const BYTES_PER_MB = 1_048_576;
-/**
- * `VACUUM INTO` a source db path to a fresh destination file — the path-level
- * snapshot primitive behind `createSqliteBackupService` and the satellites' own
- * backup scripts. It is transactionally consistent even while the db is being
- * written under WAL (unlike `cp`), and it REFUSES an existing target, so a
- * same-instant re-run errors rather than half-overwriting a previous snapshot.
- * Opens the source read-only, closes it, and returns the snapshot's byte size.
- *
- * Use this when the caller chooses the exact destination path (a dated dir, a
- * `latest.sqlite`, a remote-pull staging file); use {@link createSqliteBackupService}
- * when you want a managed backup DIRECTORY with timestamped names + retention + S3.
- */
-export function snapshotSqlite(sourcePath, destPath) {
-    const source = new Database(sourcePath, { readonly: true });
-    try {
-        source.run(`VACUUM INTO '${destPath.replaceAll("'", "''")}'`);
-    }
-    finally {
-        source.close();
-    }
-    return statSync(destPath).size;
-}
-const hasBunS3 = () => typeof Bun.S3Client === 'function';
-async function uploadToS3(localPath, s3) {
-    if (!hasBunS3()) {
-        console.warn('[sqlite-backup] S3 is configured but Bun.S3Client is unavailable; skipping upload. ' +
-            'Upgrade Bun (≥1.1) or remove the s3 option.');
-        return;
-    }
-    const client = new Bun.S3Client({
-        bucket: s3.bucket,
-        region: s3.region,
-        endpoint: s3.endpoint,
-    });
-    const key = `${s3.prefix.replace(/\/+$/, '')}/${localPath.split('/').pop()}`;
-    await client.file(key).write(Bun.file(localPath));
-}
-export function createSqliteBackupService(db, opts) {
-    const { backupDir, maxBackups = 7, s3 } = opts;
-    if (s3 && !hasBunS3()) {
-        console.warn('[sqlite-backup] S3 mirroring requested but Bun.S3Client is unavailable in this runtime; ' +
-            'backups will be written locally only.');
-    }
-    const service = {
-        async runNow() {
-            mkdirSync(backupDir, { recursive: true });
-            // ISO timestamp (filesystem-safe) + a short random suffix so rapid successive
-            // runs in the same millisecond never collide onto one path.
-            const stamp = new Date().toISOString().replace(/[:.]/g, '-');
-            const outPath = join(backupDir, `${BACKUP_PREFIX}${stamp}-${randomBytes(3).toString('hex')}${BACKUP_EXT}`);
-            // VACUUM INTO checkpoints the WAL and writes a clean, compact copy.
-            db.run('VACUUM INTO ?', [outPath]);
-            const sizeMb = statSync(outPath).size / BYTES_PER_MB;
-            if (s3)
-                await uploadToS3(outPath, s3);
-            service.pruneOld();
-            return { path: outPath, sizeMb };
-        },
-        listBackups() {
-            if (!existsSync(backupDir))
-                return [];
-            return readdirSync(backupDir)
-                .filter((f) => f.startsWith(BACKUP_PREFIX) && f.endsWith(BACKUP_EXT))
-                .map((f) => {
-                const path = join(backupDir, f);
-                const stat = statSync(path);
-                return { path, createdAt: stat.mtime, sizeMb: stat.size / BYTES_PER_MB };
-            })
-                .sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime() || b.path.localeCompare(a.path));
-        },
-        pruneOld() {
-            for (const old of service.listBackups().slice(maxBackups)) {
-                rmSync(old.path, { force: true });
-            }
-        },
-    };
-    return service;
-}
-//# sourceMappingURL=backup.js.map

package/dist/server/sqlite/backup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../../src/server/sqlite/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;GAWG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,SAAS,CAAC;AAoC/B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,QAAgB;IACjE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,QAAQ,GAAG,GAAY,EAAE,CAAC,OAAQ,GAA8B,CAAC,QAAQ,KAAK,UAAU,CAAC;AAE/F,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,EAAsB;IACjE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CACV,qFAAqF;YACnF,6CAA6C,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,QAAQ,EAAE,EAAE,CAAC,QAAQ;KACtB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7E,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAY,EACZ,IAAsB;IAEtB,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAE/C,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,0FAA0F;YACxF,uCAAuC,CAC1C,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAwB;QACnC,KAAK,CAAC,MAAM;YACV,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,8EAA8E;YAC9E,4DAA4D;YAC5D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,EACT,GAAG,aAAa,GAAG,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,CAC1E,CAAC;YAEF,oEAAoE;YACpE,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;YAErD,IAAI,EAAE;gBAAE,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAEtC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,WAAW;YACT,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtC,OAAO,WAAW,CAAC,SAAS,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;iBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YAC3E,CAAC,CAAC;iBACD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACxF,CAAC;QACN,CAAC;QAED,QAAQ;YACN,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server/sqlite/browse.d.ts

@@ -1,43 +0,0 @@
-import type { Database } from 'bun:sqlite';
-/** Clamp a requested page size into `[1, MAX_PAGE]`, falling back when unparseable. */
-export declare function clampLimit(raw: number | string | undefined, fallback: number): number;
-/** Clamp an offset to a non-negative integer (0 when unparseable). */
-export declare function clampOffset(raw: number | string | undefined): number;
-/** Is `name` an actual table in this DB? (The injection guard for `SELECT * FROM`.) */
-export declare function isKnownTable(db: Database, name: string): boolean;
-/** Double-quote a name already proven to exist in `sqlite_master`. */
-export declare function quoteIdent(name: string): string;
-export interface SqliteTableInfo {
-    name: string;
-    count: number;
-}
-/** User tables (FTS shadow + `sqlite_*` internals excluded) with row counts. */
-export declare function listSqliteTables(db: Database): SqliteTableInfo[];
-export interface SqliteTablePage {
-    items: Record<string, unknown>[];
-    total: number;
-    limit: number;
-    offset: number;
-}
-export declare class UnknownTableError extends Error {
-    readonly table: string;
-    constructor(table: string);
-}
-/**
- * A clamped, paginated window over one table. Throws {@link UnknownTableError} for a
- * table that isn't in `sqlite_master` (callers map that to a 404).
- */
-export declare function readSqliteTable(db: Database, table: string, opts?: {
-    limit?: number | string;
-    offset?: number | string;
-}): SqliteTablePage;
-export declare class NotReadOnlyError extends Error {
-    constructor();
-}
-/**
- * Run an ad-hoc read-only query with bound params. Throws {@link NotReadOnlyError}
- * for anything the {@link isReadOnlySql} guard rejects (non-SELECT, stacked
- * statements, PRAGMA, …); SQLite errors (bad column/table) propagate as `Error`.
- */
-export declare function runReadonlySqlite(db: Database, sql: string, params?: unknown[]): Record<string, unknown>[];
-//# sourceMappingURL=browse.d.ts.map

package/dist/server/sqlite/browse.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/browse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAmB3C,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAEpE;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,GAAG,eAAe,EAAE,CAYhE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aACd,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAI1C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAO,GAC/D,eAAe,CAYjB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;;CAK1C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,OAAO,EAAO,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAG3B"}

package/dist/server/sqlite/browse.js

@@ -1,85 +0,0 @@
-import { clampPageLimit } from 'cwip/math';
-import { isReadOnlySql } from './readonlySql';
-/**
- * Hono-free read-only SQLite browse primitives — the shared core beneath
- * `createSqliteViewerMiddleware` (viewer.ts) AND any consumer that can't mount a
- * Hono sub-app (e.g. a cursedshell plugin's `defineService`, whose routes are pure
- * data, or an app with a bespoke transport). One primitive per concern: the
- * middleware is now a thin HTTP wrapper over these functions.
- *
- * Every path is read-only and injection-safe: table names are validated against
- * `sqlite_master` before interpolation, all values are bound, and ad-hoc SQL is
- * gated by {@link isReadOnlySql} (SELECT/WITH only). Authn/authz is the caller's job.
- */
-/** A sane admin page-size window. */
-const MAX_PAGE = 1000;
-/** Clamp a requested page size into `[1, MAX_PAGE]`, falling back when unparseable. */
-export function clampLimit(raw, fallback) {
-    return clampPageLimit(raw, { max: MAX_PAGE, fallback });
-}
-/** Clamp an offset to a non-negative integer (0 when unparseable). */
-export function clampOffset(raw) {
-    return clampPageLimit(raw, { min: 0, max: Number.POSITIVE_INFINITY, fallback: 0 });
-}
-/** Is `name` an actual table in this DB? (The injection guard for `SELECT * FROM`.) */
-export function isKnownTable(db, name) {
-    const row = db
-        .query("SELECT COUNT(*) AS n FROM sqlite_master WHERE type='table' AND name = ?")
-        .get(name);
-    return (row?.n ?? 0) > 0;
-}
-/** Double-quote a name already proven to exist in `sqlite_master`. */
-export function quoteIdent(name) {
-    return `"${name.replace(/"/g, '""')}"`;
-}
-/** User tables (FTS shadow + `sqlite_*` internals excluded) with row counts. */
-export function listSqliteTables(db) {
-    const names = db
-        .query("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
-        .all()
-        .map((r) => r.name);
-    return names.map((name) => ({
-        name,
-        count: db.query(`SELECT COUNT(*) AS n FROM ${quoteIdent(name)}`).get()?.n ?? 0,
-    }));
-}
-export class UnknownTableError extends Error {
-    table;
-    constructor(table) {
-        super(`Unknown table: ${table}`);
-        this.table = table;
-        this.name = 'UnknownTableError';
-    }
-}
-/**
- * A clamped, paginated window over one table. Throws {@link UnknownTableError} for a
- * table that isn't in `sqlite_master` (callers map that to a 404).
- */
-export function readSqliteTable(db, table, opts = {}) {
-    if (!isKnownTable(db, table))
-        throw new UnknownTableError(table);
-    const limit = clampLimit(opts.limit, 50);
-    const offset = clampOffset(opts.offset);
-    const items = db
-        .query(`SELECT * FROM ${quoteIdent(table)} LIMIT ? OFFSET ?`)
-        .all(limit, offset);
-    const total = db.query(`SELECT COUNT(*) AS n FROM ${quoteIdent(table)}`).get()?.n ?? 0;
-    return { items, total, limit, offset };
-}
-export class NotReadOnlyError extends Error {
-    constructor() {
-        super('Only read-only SELECT/WITH queries are allowed');
-        this.name = 'NotReadOnlyError';
-    }
-}
-/**
- * Run an ad-hoc read-only query with bound params. Throws {@link NotReadOnlyError}
- * for anything the {@link isReadOnlySql} guard rejects (non-SELECT, stacked
- * statements, PRAGMA, …); SQLite errors (bad column/table) propagate as `Error`.
- */
-export function runReadonlySqlite(db, sql, params = []) {
-    if (typeof sql !== 'string' || !isReadOnlySql(sql))
-        throw new NotReadOnlyError();
-    return db.query(sql).all(...params);
-}
-//# sourceMappingURL=browse.js.map

package/dist/server/sqlite/browse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browse.js","sourceRoot":"","sources":["../../../src/server/sqlite/browse.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;;GAUG;AAEH,qCAAqC;AACrC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,GAAgC,EAAE,QAAgB;IAC3E,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,GAAgC;IAC1D,OAAO,cAAc,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,EAAY,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,EAAE;SACX,KAAK,CACJ,yEAAyE,CAC1E;SACA,GAAG,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAOD,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,EAAY;IAC3C,MAAM,KAAK,GAAG,EAAE;SACb,KAAK,CACJ,8FAA8F,CAC/F;SACA,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI;QACJ,KAAK,EACH,EAAE,CAAC,KAAK,CAAoB,6BAA6B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC;KAC7F,CAAC,CAAC,CAAC;AACN,CAAC;AASD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACd;IAA5B,YAA4B,KAAa;QACvC,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;QADP,UAAK,GAAL,KAAK,CAAQ;QAEvC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAY,EACZ,KAAa,EACb,OAA8D,EAAE;IAEhE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,EAAE;SACb,KAAK,CACJ,iBAAiB,UAAU,CAAC,KAAK,CAAC,mBAAmB,CACtD;SACA,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtB,MAAM,KAAK,GACT,EAAE,CAAC,KAAK,CAAoB,6BAA6B,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,GAAW,EACX,SAAoB,EAAE;IAEtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACjF,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,MAAkB,CAA8B,CAAC;AAChF,CAAC"}

package/dist/server/sqlite/export.d.ts

@@ -1,33 +0,0 @@
-import type { Database } from 'bun:sqlite';
-/**
- * Export primitives for `bun:sqlite` — the missing "get the data out" half of the
- * SQLite toolkit. Table export composes the ONE canonical serializers (`toCsv` from
- * `cwip/csv`, `JSON.stringify` for JSON — no third CSV/JSON path); snapshot export
- * reuses the `VACUUM INTO` primitive (see `backup.ts`) to produce a portable `.sqlite`.
- *
- * These return in-memory payloads (text / bytes) rather than streaming to a Response,
- * so they're transport-agnostic: a cursedshell plugin returns them over its JSON RPC
- * (base64 for bytes), a Hono app streams them as a `Content-Disposition: attachment`
- * download. Admin-scale — a whole-DB snapshot is base64'd through JSON, fine for
- * typical DB sizes; very large DBs should stream a file route instead.
- */
-export type TableExportFormat = 'csv' | 'json';
-export interface TableExport {
-    filename: string;
-    mime: string;
-    text: string;
-}
-/** All rows of one table serialized to CSV or JSON. Throws {@link UnknownTableError}. */
-export declare function exportSqliteTable(db: Database, table: string, format: TableExportFormat): TableExport;
-export interface SnapshotExport {
-    filename: string;
-    mime: string;
-    bytes: Uint8Array;
-}
-/**
- * A compact, WAL-merged copy of the whole database as `.sqlite` bytes, via
- * `VACUUM INTO` a throwaway temp file (the same primitive `createSqliteBackupService`
- * uses). The temp file is always removed.
- */
-export declare function exportSqliteSnapshot(db: Database): SnapshotExport;
-//# sourceMappingURL=export.d.ts.map

package/dist/server/sqlite/export.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAO3C;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yFAAyF;AACzF,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,WAAW,CAiBb;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,GAAG,cAAc,CAUjE"}

package/dist/server/sqlite/export.js

@@ -1,43 +0,0 @@
-import { readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { toCsv } from 'cwip/csv';
-import { isKnownTable, quoteIdent, UnknownTableError } from './browse';
-/** All rows of one table serialized to CSV or JSON. Throws {@link UnknownTableError}. */
-export function exportSqliteTable(db, table, format) {
-    if (!isKnownTable(db, table))
-        throw new UnknownTableError(table);
-    const rows = db.query(`SELECT * FROM ${quoteIdent(table)}`).all();
-    if (format === 'json') {
-        return {
-            filename: `${table}.json`,
-            mime: 'application/json',
-            text: JSON.stringify(rows, null, 2),
-        };
-    }
-    return {
-        filename: `${table}.csv`,
-        mime: 'text/csv',
-        // toCsv needs at least the columns; an empty table yields an empty string, which
-        // is a valid (header-less) CSV for a zero-row export.
-        text: toCsv(rows),
-    };
-}
-/**
- * A compact, WAL-merged copy of the whole database as `.sqlite` bytes, via
- * `VACUUM INTO` a throwaway temp file (the same primitive `createSqliteBackupService`
- * uses). The temp file is always removed.
- */
-export function exportSqliteSnapshot(db) {
-    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
-    const tmp = join(tmpdir(), `cb-export-${stamp}-${Math.random().toString(36).slice(2)}.sqlite`);
-    try {
-        db.run('VACUUM INTO ?', [tmp]);
-        const bytes = new Uint8Array(readFileSync(tmp));
-        return { filename: `snapshot-${stamp}.sqlite`, mime: 'application/x-sqlite3', bytes };
-    }
-    finally {
-        rmSync(tmp, { force: true });
-    }
-}
-//# sourceMappingURL=export.js.map

package/dist/server/sqlite/export.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/server/sqlite/export.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAuBvE,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAC/B,EAAY,EACZ,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAA8B,iBAAiB,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/F,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,EAAE,GAAG,KAAK,OAAO;YACzB,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,GAAG,KAAK,MAAM;QACxB,IAAI,EAAE,UAAU;QAChB,iFAAiF;QACjF,sDAAsD;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;KAClB,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAY;IAC/C,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,YAAY,KAAK,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IACxF,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/server/sqlite/fts5.d.ts

@@ -1,107 +0,0 @@
-import type { Database } from 'bun:sqlite';
-export interface FtsTableSpec {
-    /** The FTS5 virtual table to create, e.g. `'notes_fts'`. */
-    table: string;
-    /** The source ("content") table whose text it indexes, e.g. `'notes'`. */
-    contentTable: string;
-    /** The content table's rowid/primary-key column. Default: `'id'`. */
-    contentRowid?: string;
-    /** Indexed columns — must exist on the content table, in this order. */
-    columns: string[];
-    /**
-     * FTS5 tokenizer directive. Default: `unicode61 remove_diacritics 2` (case- and
-     * accent-folding, the right default for human text). Pass e.g. `'porter unicode61'`
-     * for stemming, or `'trigram'` for substring search.
-     */
-    tokenize?: string;
-}
-/**
- * Build the DDL for one external-content FTS5 table and its three sync triggers
- * (insert/update/delete), as a single multi-statement string ready for `db.run()`.
- *
- * External content (`content=<table>, content_rowid=<pk>`) means the FTS index stores
- * only the inverted index, never a second copy of the text — the triggers mirror every
- * write into the index. This is the canonical pattern from the SQLite FTS5 docs,
- * generated once so apps don't repeat it per table.
- */
-export declare function buildFtsSchema(spec: FtsTableSpec): string;
-/** Create every table in `specs` and its triggers on `db` (one `db.run` per spec). */
-export declare function applyFtsSchema(db: Database, ...specs: FtsTableSpec[]): void;
-export interface FtsResult {
-    /** The content row's rowid (its `content_rowid` value). */
-    rowid: number;
-    /** FTS5 bm25 relevance — lower (more negative) is more relevant. */
-    rank: number;
-    /** Present only when `snippet` was requested: a truncated, match-marked excerpt. */
-    snippet?: string;
-    /** Present only when `highlight` was requested: the full column with matches marked. */
-    highlight?: string;
-}
-export interface FtsSnippetOpts {
-    /** FTS column index to excerpt; `-1` (default) auto-picks the best-matching column. */
-    column?: number;
-    /** Wraps each match, default `'<b>'`. */
-    startMatch?: string;
-    /** Closes each match, default `'</b>'`. */
-    endMatch?: string;
-    /** Inserted where text is trimmed, default `'…'`. */
-    ellipsis?: string;
-    /** Max tokens in the excerpt (1–64), default `16`. */
-    maxTokens?: number;
-}
-export interface FtsHighlightOpts {
-    /** FTS column index to return (required — `highlight()` has no auto column). */
-    column: number;
-    /** Wraps each match, default `'<b>'`. */
-    startMatch?: string;
-    /** Closes each match, default `'</b>'`. */
-    endMatch?: string;
-}
-export interface FtsSearchOpts {
-    /** The FTS5 table to query, e.g. `'notes_fts'`. */
-    table: string;
-    /** Raw user query — sanitized into a prefix-match expression before MATCH. */
-    query: string;
-    /** Page size, default `20`. */
-    limit?: number;
-    /** Row offset, default `0`. */
-    offset?: number;
-    /** Request a `snippet(...)` excerpt column. */
-    snippet?: FtsSnippetOpts;
-    /** Request a `highlight(...)` column. */
-    highlight?: FtsHighlightOpts;
-}
-export interface Fts5Search {
-    /** Ranked search; returns `[]` for an empty/operator-only query (never throws on it). */
-    search(opts: FtsSearchOpts): FtsResult[];
-    /** Rebuild one FTS index from its content table (post-ETL / after `clear`). */
-    rebuild(table: string): void;
-    /** Rebuild every table passed to {@link createFts5Search} (`tables` option). */
-    rebuildAll(): void;
-    /** Empty an FTS index (the `'delete-all'` command) — pair with `rebuild` for bulk loads. */
-    clear(table: string): void;
-    /** Merge the index's b-tree segments (the `'optimize'` command) for faster queries. */
-    optimize(table: string): void;
-}
-/**
- * Build a ranked-search facade over the FTS5 tables named in `opts.tables` (the set
- * `rebuildAll()` iterates). The `db` handle is the same one the app uses — one
- * connection, one WAL.
- */
-export declare function createFts5Search(db: Database, opts?: {
-    tables?: string[];
-}): Fts5Search;
-/**
- * Convert arbitrary user input into a safe FTS5 MATCH expression: every run of
- * letters/digits/underscore becomes a quoted prefix token (`"term"*`), joined by
- * spaces (FTS5's implicit AND). All FTS5 operators (`" * : ^ ( ) - + NEAR …`) are
- * dropped with the surrounding punctuation, so the query can neither inject syntax
- * nor raise a parse error. Returns `''` when nothing searchable remains.
- *
- * Examples: `hello` → `"hello"*`; `hello world` → `"hello"* "world"*` (both must
- * match); `DROP TABLE` → `"DROP"* "TABLE"*` (a literal search, harmless).
- */
-export declare function sanitizeFtsQuery(raw: string, opts?: {
-    mode?: 'all' | 'any';
-}): string;
-//# sourceMappingURL=fts5.d.ts.map

package/dist/server/sqlite/fts5.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fts5.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/fts5.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA0C3C,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAiCzD;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,CAE3E;AAID,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,yCAAyC;IACzC,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,yFAAyF;IACzF,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,CAAC;IACzC,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gFAAgF;IAChF,UAAU,IAAI,IAAI,CAAC;IACnB,4FAA4F;IAC5F,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAkBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAAG,UAAU,CAwC3F;AAID;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;CAAO,GAAG,MAAM,CAQzF"}

package/dist/server/sqlite/fts5.js

@@ -1,155 +0,0 @@
-/**
- * FTS5 full-text search for `bun:sqlite` — the from-scratch replacement for the apps'
- * hand-rolled `LIKE '%' || ? || '%'` search. Three pieces:
- *
- *  1. {@link buildFtsSchema} — generates the `CREATE VIRTUAL TABLE` + the three
- *     external-content sync triggers for one indexed table. Apps call it from a
- *     migration instead of hand-writing the (highly repetitive) trigger SQL 4×.
- *  2. {@link createFts5Search} — a ranked query builder (bm25 `rank`, `snippet`,
- *     `highlight`) over those tables, plus the FTS5 maintenance commands
- *     (`rebuild`/`clear`/`optimize`) the ETL and bulk importers need.
- *  3. {@link sanitizeFtsQuery} — turns arbitrary user input into a safe AND-of-prefix
- *     FTS5 MATCH expression (no operator injection, no parse errors).
- *
- * FTS5 is compiled into `bun:sqlite` (NOT `node:sqlite`, which omits it). Everything
- * here is app-agnostic: the indexed table names are a *constructor option*, never
- * hard-coded — ca and ru index different tables.
- */
-/** A safe, unquoted SQL identifier (table/column name). */
-const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
-function assertIdent(name, what) {
-    if (!IDENT.test(name)) {
-        throw new Error(`Invalid ${what}: ${JSON.stringify(name)} (expected a plain SQL identifier)`);
-    }
-    return name;
-}
-/** Double-quote an identifier (validated first, so the quoting can't be escaped out of). */
-const q = (name) => `"${name}"`;
-/** Single-quote a string literal for inlining (doubles embedded quotes). */
-const lit = (s) => `'${s.replace(/'/g, "''")}'`;
-/** Coerce to a bounded non-negative integer for inlining (snippet token counts, etc.). */
-const int = (n, fallback) => Number.isFinite(n) ? Math.trunc(n) : fallback;
-/**
- * Build the DDL for one external-content FTS5 table and its three sync triggers
- * (insert/update/delete), as a single multi-statement string ready for `db.run()`.
- *
- * External content (`content=<table>, content_rowid=<pk>`) means the FTS index stores
- * only the inverted index, never a second copy of the text — the triggers mirror every
- * write into the index. This is the canonical pattern from the SQLite FTS5 docs,
- * generated once so apps don't repeat it per table.
- */
-export function buildFtsSchema(spec) {
-    const table = assertIdent(spec.table, 'fts table name');
-    const content = assertIdent(spec.contentTable, 'content table name');
-    const rowid = assertIdent(spec.contentRowid ?? 'id', 'content rowid column');
-    if (spec.columns.length === 0) {
-        throw new Error(`buildFtsSchema(${table}): at least one indexed column is required`);
-    }
-    const cols = spec.columns.map((c) => assertIdent(c, 'indexed column'));
-    const tokenize = spec.tokenize ?? 'unicode61 remove_diacritics 2';
-    const colList = cols.map(q).join(', ');
-    const newVals = cols.map((c) => `new.${q(c)}`).join(', ');
-    const oldVals = cols.map((c) => `old.${q(c)}`).join(', ');
-    // `INSERT INTO <fts>(<fts>, rowid, …) VALUES('delete', …)` is FTS5's documented way
-    // to remove the prior term rows for a content row before re-indexing it.
-    return `
-CREATE VIRTUAL TABLE IF NOT EXISTS ${q(table)} USING fts5(
-  ${colList},
-  content=${q(content)},
-  content_rowid=${q(rowid)},
-  tokenize=${lit(tokenize)}
-);
-CREATE TRIGGER IF NOT EXISTS ${q(`${table}_ai`)} AFTER INSERT ON ${q(content)} BEGIN
-  INSERT INTO ${q(table)}(rowid, ${colList}) VALUES (new.${q(rowid)}, ${newVals});
-END;
-CREATE TRIGGER IF NOT EXISTS ${q(`${table}_ad`)} AFTER DELETE ON ${q(content)} BEGIN
-  INSERT INTO ${q(table)}(${q(table)}, rowid, ${colList}) VALUES ('delete', old.${q(rowid)}, ${oldVals});
-END;
-CREATE TRIGGER IF NOT EXISTS ${q(`${table}_au`)} AFTER UPDATE ON ${q(content)} BEGIN
-  INSERT INTO ${q(table)}(${q(table)}, rowid, ${colList}) VALUES ('delete', old.${q(rowid)}, ${oldVals});
-  INSERT INTO ${q(table)}(rowid, ${colList}) VALUES (new.${q(rowid)}, ${newVals});
-END;`.trim();
-}
-/** Create every table in `specs` and its triggers on `db` (one `db.run` per spec). */
-export function applyFtsSchema(db, ...specs) {
-    for (const spec of specs)
-        db.run(buildFtsSchema(spec));
-}
-function snippetExpr(table, o) {
-    const col = int(o.column ?? -1, -1);
-    const start = lit(o.startMatch ?? '<b>');
-    const end = lit(o.endMatch ?? '</b>');
-    const ell = lit(o.ellipsis ?? '…');
-    const tokens = Math.min(64, Math.max(1, int(o.maxTokens ?? 16, 16)));
-    return `snippet(${q(table)}, ${col}, ${start}, ${end}, ${ell}, ${tokens}) AS snippet`;
-}
-function highlightExpr(table, o) {
-    const col = Math.max(0, int(o.column, 0));
-    const start = lit(o.startMatch ?? '<b>');
-    const end = lit(o.endMatch ?? '</b>');
-    return `highlight(${q(table)}, ${col}, ${start}, ${end}) AS highlight`;
-}
-/**
- * Build a ranked-search facade over the FTS5 tables named in `opts.tables` (the set
- * `rebuildAll()` iterates). The `db` handle is the same one the app uses — one
- * connection, one WAL.
- */
-export function createFts5Search(db, opts = {}) {
-    const tables = (opts.tables ?? []).map((t) => assertIdent(t, 'fts table name'));
-    const facade = {
-        search(o) {
-            const match = sanitizeFtsQuery(o.query);
-            if (!match)
-                return [];
-            const table = assertIdent(o.table, 'fts table name');
-            const projection = ['rowid', 'rank'];
-            if (o.snippet)
-                projection.push(snippetExpr(table, o.snippet));
-            if (o.highlight)
-                projection.push(highlightExpr(table, o.highlight));
-            const sql = `SELECT ${projection.join(', ')} FROM ${q(table)} WHERE ${q(table)} MATCH ? ORDER BY rank LIMIT ? OFFSET ?`;
-            return db
-                .query(sql)
-                .all(match, Math.max(0, int(o.limit ?? 20, 20)), Math.max(0, int(o.offset ?? 0, 0)));
-        },
-        rebuild(table) {
-            const t = assertIdent(table, 'fts table name');
-            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('rebuild')`);
-        },
-        rebuildAll() {
-            for (const t of tables)
-                facade.rebuild(t);
-        },
-        clear(table) {
-            const t = assertIdent(table, 'fts table name');
-            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('delete-all')`);
-        },
-        optimize(table) {
-            const t = assertIdent(table, 'fts table name');
-            db.run(`INSERT INTO ${q(t)}(${q(t)}) VALUES('optimize')`);
-        },
-    };
-    return facade;
-}
-// ── Query sanitization ─────────────────────────────────────────────────────────
-/**
- * Convert arbitrary user input into a safe FTS5 MATCH expression: every run of
- * letters/digits/underscore becomes a quoted prefix token (`"term"*`), joined by
- * spaces (FTS5's implicit AND). All FTS5 operators (`" * : ^ ( ) - + NEAR …`) are
- * dropped with the surrounding punctuation, so the query can neither inject syntax
- * nor raise a parse error. Returns `''` when nothing searchable remains.
- *
- * Examples: `hello` → `"hello"*`; `hello world` → `"hello"* "world"*` (both must
- * match); `DROP TABLE` → `"DROP"* "TABLE"*` (a literal search, harmless).
- */
-export function sanitizeFtsQuery(raw, opts = {}) {
-    const tokens = raw.match(/[\p{L}\p{N}_]+/gu);
-    if (!tokens || tokens.length === 0)
-        return '';
-    // 'all' (default) = AND-of-prefix — precision, right for search-as-you-type.
-    // 'any' = OR-of-prefix — recall, right for retrieval from a natural-language
-    // question where requiring every word ("what do I have about…") matches nothing;
-    // bm25 still ranks docs hitting more/rarer terms first.
-    return tokens.map((t) => `"${t}"*`).join(opts.mode === 'any' ? ' OR ' : ' ');
-}
-//# sourceMappingURL=fts5.js.map

package/dist/server/sqlite/fts5.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fts5.js","sourceRoot":"","sources":["../../../src/server/sqlite/fts5.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,2DAA2D;AAC3D,MAAM,KAAK,GAAG,0BAA0B,CAAC;AAEzC,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAEhE,0FAA0F;AAC1F,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,QAAgB,EAAU,EAAE,CAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAqBhD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,4CAA4C,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,+BAA+B,CAAC;IAElE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1D,oFAAoF;IACpF,yEAAyE;IACzE,OAAO;qCAC4B,CAAC,CAAC,KAAK,CAAC;IACzC,OAAO;YACC,CAAC,CAAC,OAAO,CAAC;kBACJ,CAAC,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,QAAQ,CAAC;;+BAEK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;;+BAEhD,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,OAAO,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;;+BAEvE,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,OAAO,2BAA2B,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;gBACtF,CAAC,CAAC,KAAK,CAAC,WAAW,OAAO,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO;KAC1E,CAAC,IAAI,EAAE,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,GAAG,KAAqB;IACnE,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAiED,SAAS,WAAW,CAAC,KAAa,EAAE,CAAiB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG,KAAK,GAAG,KAAK,MAAM,cAAc,CAAC;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAmB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IACtC,OAAO,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG,gBAAgB,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,OAA8B,EAAE;IAC7E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAe;QACzB,MAAM,CAAC,CAAC;YACN,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAErD,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAEpE,MAAM,GAAG,GAAG,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC;YACxH,OAAO,EAAE;iBACN,KAAK,CAAsC,GAAG,CAAC;iBAC/C,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,CAAC,KAAK;YACX,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QAED,UAAU;YACR,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QAED,QAAQ,CAAC,KAAK;YACZ,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/C,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,OAAiC,EAAE;IAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,6EAA6E;IAC7E,6EAA6E;IAC7E,iFAAiF;IACjF,wDAAwD;IACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC"}