cursedbelt 2.7.0 → 3.0.0

package/dist/server/sqlite/health.d.ts

@@ -1,45 +0,0 @@
-import type { Database } from 'bun:sqlite';
-/**
- * DB-layer health probes for `bun:sqlite`. Each is a small, self-describing descriptor
- * — `name` + `description` + an async `check()` returning a status — so it can be
- * rendered in an operator console and drive readiness from one source.
- *
- * The shape is intentionally dependency-free (it does NOT import cwip's health types):
- * apps adapt a descriptor into cwip's `HealthCheck` registry with a trivial map, e.g.
- *
- * ```ts
- * registry.register(...createSqliteHealthChecks(db, {}).map((p) => async () => {
- *   const r = await p.check();
- *   return { id: p.name, title: p.description, category: 'Database',
- *            severity: 'warn', status: r.status, detail: r.message ?? '', remediation: [] };
- * }));
- * ```
- *
- * `status` values (`ok`/`warn`/`error`) already line up with cwip's `HealthStatus`.
- */
-export type SqliteHealthStatus = 'ok' | 'warn' | 'error';
-export interface SqliteHealthResult {
-    status: SqliteHealthStatus;
-    /** Human-readable detail for the current status. */
-    message?: string;
-}
-export interface SqliteHealthCheck {
-    /** Stable id, e.g. `'sqlite:integrity'`. */
-    name: string;
-    /** Short human description. */
-    description: string;
-    check(): Promise<SqliteHealthResult>;
-}
-export interface SqliteHealthOpts {
-    /** Warn when the DB file exceeds this many bytes. Default: 500 MB. */
-    maxSizeBytes?: number;
-    /** Warn when the WAL holds more than this many pages. Default: 1000. */
-    maxWalPages?: number;
-}
-/**
- * Build the SQLite health probes for `db`. Use `quick_check` (fast, still catches
- * corruption) in the loop; expose the exhaustive `integrity_check` as an
- * admin-triggered action elsewhere.
- */
-export declare function createSqliteHealthChecks(db: Database, opts?: SqliteHealthOpts): SqliteHealthCheck[];
-//# sourceMappingURL=health.d.ts.map

package/dist/server/sqlite/health.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,QAAQ,EACZ,IAAI,GAAE,gBAAqB,GAC1B,iBAAiB,EAAE,CAiDrB"}

package/dist/server/sqlite/health.js

@@ -1,53 +0,0 @@
-const BYTES_PER_MB = 1_048_576;
-const mb = (bytes) => `${(bytes / BYTES_PER_MB).toFixed(1)}MB`;
-/**
- * Build the SQLite health probes for `db`. Use `quick_check` (fast, still catches
- * corruption) in the loop; expose the exhaustive `integrity_check` as an
- * admin-triggered action elsewhere.
- */
-export function createSqliteHealthChecks(db, opts = {}) {
-    const maxSizeBytes = opts.maxSizeBytes ?? 500 * BYTES_PER_MB;
-    const maxWalPages = opts.maxWalPages ?? 1000;
-    return [
-        {
-            name: 'sqlite:integrity',
-            description: 'SQLite quick_check integrity',
-            async check() {
-                const row = db.query('PRAGMA quick_check').get();
-                const outcome = row ? Object.values(row)[0] : undefined;
-                return outcome === 'ok'
-                    ? { status: 'ok', message: 'ok' }
-                    : { status: 'error', message: outcome ?? 'unknown' };
-            },
-        },
-        {
-            name: 'sqlite:size',
-            description: 'DB file size within threshold',
-            async check() {
-                const info = db
-                    .query('SELECT page_count, page_size FROM pragma_page_count(), pragma_page_size()')
-                    .get();
-                const bytes = (info?.page_count ?? 0) * (info?.page_size ?? 4096);
-                return bytes > maxSizeBytes
-                    ? { status: 'warn', message: `DB is ${mb(bytes)} (threshold: ${mb(maxSizeBytes)})` }
-                    : { status: 'ok', message: mb(bytes) };
-            },
-        },
-        {
-            name: 'sqlite:wal',
-            description: 'WAL checkpoint lag',
-            async check() {
-                // PRAGMA wal_checkpoint returns one row {busy, log, checkpointed}; `log` is the
-                // total WAL pages, or -1 when the DB is not in WAL mode (treat as 0).
-                const row = db
-                    .query('PRAGMA wal_checkpoint(PASSIVE)')
-                    .get();
-                const pages = row && row.log > 0 ? row.log : 0;
-                return pages > maxWalPages
-                    ? { status: 'warn', message: `WAL has ${pages} pages (threshold: ${maxWalPages})` }
-                    : { status: 'ok', message: `${pages} WAL pages` };
-            },
-        },
-    ];
-}
-//# sourceMappingURL=health.js.map

package/dist/server/sqlite/health.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/server/sqlite/health.ts"],"names":[],"mappings":"AA4CA,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,EAAE,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAE/E;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,EAAY,EACZ,OAAyB,EAAE;IAE3B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,YAAY,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAE7C,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,8BAA8B;YAC3C,KAAK,CAAC,KAAK;gBACT,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAA6B,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC7E,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxD,OAAO,OAAO,KAAK,IAAI;oBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;oBACjC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;YACzD,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,+BAA+B;YAC5C,KAAK,CAAC,KAAK;gBACT,MAAM,IAAI,GAAG,EAAE;qBACZ,KAAK,CACJ,2EAA2E,CAC5E;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;gBAClE,OAAO,KAAK,GAAG,YAAY;oBACzB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE;oBACpF,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,CAAC;SACF;QACD;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,oBAAoB;YACjC,KAAK,CAAC,KAAK;gBACT,gFAAgF;gBAChF,sEAAsE;gBACtE,MAAM,GAAG,GAAG,EAAE;qBACX,KAAK,CACJ,gCAAgC,CACjC;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,OAAO,KAAK,GAAG,WAAW;oBACxB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,sBAAsB,WAAW,GAAG,EAAE;oBACnF,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,YAAY,EAAE,CAAC;YACtD,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/server/sqlite/import.d.ts

@@ -1,37 +0,0 @@
-import { Database } from 'bun:sqlite';
-/**
- * Write-side SQLite primitives — the counterpart to the read-only `browse.ts` /
- * `export.ts`. Both surfaces are deliberately scoped: row import into an EXISTING
- * table and whole-DB snapshot restore. No arbitrary DDL, no schema mutation — the
- * table must already exist, and only its real columns are written.
- *
- * Every operation runs inside a transaction so a mid-operation failure rolls the DB
- * back atomically (stronger than a copy-aside snapshot). Foreign-key enforcement is
- * suspended for the bulk replace/restore and always restored afterward.
- */
-export type ImportMode = 'append' | 'replace';
-export interface ImportResult {
-    inserted: number;
-}
-/**
- * Insert already-parsed rows into an existing table. Unknown keys are dropped (only
- * columns that actually exist on the table are written); `replace` clears the table
- * first. Returns the number of rows inserted. Throws {@link UnknownTableError} for a
- * table not in `sqlite_master`.
- */
-export declare function importRowsIntoSqliteTable(db: Database, table: string, rows: Record<string, unknown>[], opts?: {
-    mode?: ImportMode;
-}): ImportResult;
-export interface RestoreResult {
-    restoredTables: string[];
-    totalRows: number;
-}
-/**
- * Restore a `.sqlite` snapshot into the live DB, table by table. For every table
- * present in BOTH the snapshot and the target, the target's rows are replaced by the
- * snapshot's (via `ATTACH` + `INSERT … SELECT`). Tables that exist only in the
- * snapshot (or only in the target) are left untouched — this is a data restore, not
- * a schema migration. Atomic: any failure rolls the whole restore back.
- */
-export declare function restoreSqliteSnapshot(db: Database, bytes: Uint8Array): RestoreResult;
-//# sourceMappingURL=import.d.ts.map

package/dist/server/sqlite/import.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOtC;;;;;;;;;GASG;AAEH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAUD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAC/B,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,UAAU,CAAA;CAAO,GAC/B,YAAY,CAyBd;AAkBD,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,GAAG,aAAa,CA0CpF"}

package/dist/server/sqlite/import.js

@@ -1,109 +0,0 @@
-import { Database } from 'bun:sqlite';
-import { withForeignKeysOff } from 'cwip/sqlite';
-import { rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { isKnownTable, quoteIdent, UnknownTableError } from './browse';
-/** Real column names of a table, in declared order. */
-function tableColumns(db, table) {
-    return db
-        .query(`PRAGMA table_info(${quoteIdent(table)})`)
-        .all()
-        .map((r) => r.name);
-}
-/**
- * Insert already-parsed rows into an existing table. Unknown keys are dropped (only
- * columns that actually exist on the table are written); `replace` clears the table
- * first. Returns the number of rows inserted. Throws {@link UnknownTableError} for a
- * table not in `sqlite_master`.
- */
-export function importRowsIntoSqliteTable(db, table, rows, opts = {}) {
-    if (!isKnownTable(db, table))
-        throw new UnknownTableError(table);
-    const mode = opts.mode ?? 'append';
-    const valid = new Set(tableColumns(db, table));
-    // Columns to write = table columns present in at least one row (preserve order).
-    const cols = tableColumns(db, table).filter((c) => rows.some((r) => c in r && valid.has(c)));
-    const runImport = db.transaction(() => {
-        if (mode === 'replace')
-            db.run(`DELETE FROM ${quoteIdent(table)}`);
-        if (rows.length === 0 || cols.length === 0)
-            return 0;
-        const placeholders = cols.map(() => '?').join(', ');
-        const colList = cols.map(quoteIdent).join(', ');
-        const stmt = db.prepare(`INSERT INTO ${quoteIdent(table)} (${colList}) VALUES (${placeholders})`);
-        let inserted = 0;
-        for (const row of rows) {
-            stmt.run(...cols.map((c) => normalizeValue(row[c])));
-            inserted++;
-        }
-        return inserted;
-    });
-    const inserted = mode === 'replace' ? withForeignKeysOff(db, runImport) : runImport();
-    return { inserted };
-}
-/** bun:sqlite binds string/number/bigint/boolean/null/Uint8Array; coerce the rest. */
-function normalizeValue(v) {
-    if (v === undefined || v === null)
-        return null;
-    if (typeof v === 'string' ||
-        typeof v === 'number' ||
-        typeof v === 'bigint' ||
-        typeof v === 'boolean' ||
-        v instanceof Uint8Array) {
-        return v;
-    }
-    // Objects/arrays → JSON text (the pragmatic choice for a foreign-format import).
-    return JSON.stringify(v);
-}
-/**
- * Restore a `.sqlite` snapshot into the live DB, table by table. For every table
- * present in BOTH the snapshot and the target, the target's rows are replaced by the
- * snapshot's (via `ATTACH` + `INSERT … SELECT`). Tables that exist only in the
- * snapshot (or only in the target) are left untouched — this is a data restore, not
- * a schema migration. Atomic: any failure rolls the whole restore back.
- */
-export function restoreSqliteSnapshot(db, bytes) {
-    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
-    const tmp = join(tmpdir(), `cb-restore-${stamp}-${Math.random().toString(36).slice(2)}.sqlite`);
-    writeFileSync(tmp, bytes);
-    try {
-        // Validate it opens as SQLite and enumerate its user tables.
-        const snap = new Database(tmp, { readonly: true });
-        let snapTables;
-        try {
-            snapTables = snap
-                .query("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'")
-                .all()
-                .map((r) => r.name);
-        }
-        finally {
-            snap.close();
-        }
-        const targets = snapTables.filter((t) => isKnownTable(db, t));
-        let totalRows = 0;
-        withForeignKeysOff(db, () => {
-            db.run('ATTACH DATABASE ? AS restore_src', [tmp]);
-            try {
-                const run = db.transaction(() => {
-                    for (const t of targets) {
-                        const q = quoteIdent(t);
-                        db.run(`DELETE FROM main.${q}`);
-                        db.run(`INSERT INTO main.${q} SELECT * FROM restore_src.${q}`);
-                        totalRows +=
-                            db.query(`SELECT COUNT(*) AS n FROM main.${q}`).get()?.n ?? 0;
-                    }
-                });
-                run();
-            }
-            finally {
-                db.run('DETACH DATABASE restore_src');
-            }
-        });
-        return { restoredTables: targets, totalRows };
-    }
-    finally {
-        rmSync(tmp, { force: true });
-    }
-}
-//# sourceMappingURL=import.js.map

package/dist/server/sqlite/import.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../src/server/sqlite/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAmBvE,uDAAuD;AACvD,SAAS,YAAY,CAAC,EAAY,EAAE,KAAa;IAC/C,OAAO,EAAE;SACN,KAAK,CAAuB,qBAAqB,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;SACtE,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAY,EACZ,KAAa,EACb,IAA+B,EAC/B,OAA8B,EAAE;IAEhC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/C,iFAAiF;IACjF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,eAAe,UAAU,CAAC,KAAK,CAAC,KAAK,OAAO,aAAa,YAAY,GAAG,CACzE,CAAC;QACF,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACtF,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,SAAS;QACtB,CAAC,YAAY,UAAU,EACvB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,iFAAiF;IACjF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAY,EAAE,KAAiB;IACnE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,6DAA6D;QAC7D,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI;iBACd,KAAK,CACJ,gFAAgF,CACjF;iBACA,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE;YAC1B,EAAE,CAAC,GAAG,CAAC,kCAAkC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;wBACxB,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;wBACxB,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;wBAChC,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;wBAC/D,SAAS;4BACP,EAAE,CAAC,KAAK,CAAoB,kCAAkC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBACrF,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,GAAG,EAAE,CAAC;YACR,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/server/sqlite/index.d.ts

@@ -1,10 +0,0 @@
-export { type BackupInfo, createSqliteBackupService, snapshotSqlite, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, } from './backup';
-export { clampLimit, clampOffset, isKnownTable, listSqliteTables, NotReadOnlyError, quoteIdent, readSqliteTable, runReadonlySqlite, type SqliteTableInfo, type SqliteTablePage, UnknownTableError, } from './browse';
-export { exportSqliteSnapshot, exportSqliteTable, type SnapshotExport, type TableExport, type TableExportFormat, } from './export';
-export { applyFtsSchema, buildFtsSchema, createFts5Search, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, sanitizeFtsQuery, } from './fts5';
-export { createSqliteHealthChecks, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, } from './health';
-export { type ImportMode, type ImportResult, importRowsIntoSqliteTable, type RestoreResult, restoreSqliteSnapshot, } from './import';
-export { isReadOnlySql } from './readonlySql';
-export { collectSqliteStats, type DbStats, type TableStat } from './stats';
-export { createSqliteViewerMiddleware } from './viewer';
-//# sourceMappingURL=index.d.ts.map

package/dist/server/sqlite/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,UAAU,EACf,yBAAyB,EACzB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,yBAAyB,EACzB,KAAK,aAAa,EAClB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC"}

package/dist/server/sqlite/index.js

@@ -1,16 +0,0 @@
-// cursedbelt SQLite toolkit extras (task 30) — bun:sqlite-native primitives layered
-// on the migration runner (task 24): FTS5 ranked search, a read-only DB viewer, the
-// VACUUM-INTO backup service, DB-layer health probes, plus the Hono-free browse /
-// export / import / stats primitives that back both the viewer middleware and any
-// bespoke-transport consumer (a cursedshell plugin, the encrypted-GET "f" app). All
-// app-agnostic; the apps supply table names, paths, and thresholds.
-export { createSqliteBackupService, snapshotSqlite, } from './backup';
-export { clampLimit, clampOffset, isKnownTable, listSqliteTables, NotReadOnlyError, quoteIdent, readSqliteTable, runReadonlySqlite, UnknownTableError, } from './browse';
-export { exportSqliteSnapshot, exportSqliteTable, } from './export';
-export { applyFtsSchema, buildFtsSchema, createFts5Search, sanitizeFtsQuery, } from './fts5';
-export { createSqliteHealthChecks, } from './health';
-export { importRowsIntoSqliteTable, restoreSqliteSnapshot, } from './import';
-export { isReadOnlySql } from './readonlySql';
-export { collectSqliteStats } from './stats';
-export { createSqliteViewerMiddleware } from './viewer';
-//# sourceMappingURL=index.js.map

package/dist/server/sqlite/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/sqlite/index.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,oFAAoF;AACpF,kFAAkF;AAClF,kFAAkF;AAClF,oFAAoF;AACpF,oEAAoE;AAEpE,OAAO,EAEL,yBAAyB,EACzB,cAAc,GAIf,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,iBAAiB,EAGjB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAIlB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,EAOhB,gBAAgB,GACjB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,GAKzB,MAAM,UAAU,CAAC;AAClB,OAAO,EAGL,yBAAyB,EAEzB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC"}

package/dist/server/sqlite/readonlySql.d.ts

@@ -1,16 +0,0 @@
-/**
- * Defense-in-depth read-only guard for the SQLite viewer's ad-hoc query endpoint. A
- * conservative *lexical* check, NOT a parser: it rejects the obvious foot-guns
- * (writes, DDL, PRAGMA, ATTACH, stacked statements) before SQL reaches the DB. The
- * real guarantees are the owner-only mount + this allowlist, layered.
- *
- * cursedbelt keeps its own copy rather than depending on cwip — the toolkit's server
- * surface stays dependency-light, and the rule set here is tuned for SQLite (PRAGMA /
- * ATTACH are SQLite-specific write vectors).
- */
-/**
- * True only for a single read-only statement: a `SELECT`, or a `WITH … SELECT` CTE.
- * Rejects stacked statements, `SELECT … INTO`, and any forbidden keyword as a word.
- */
-export declare function isReadOnlySql(sql: string): boolean;
-//# sourceMappingURL=readonlySql.d.ts.map

package/dist/server/sqlite/readonlySql.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"readonlySql.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/readonlySql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmCH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAkBlD"}

package/dist/server/sqlite/readonlySql.js

@@ -1,66 +0,0 @@
-/**
- * Defense-in-depth read-only guard for the SQLite viewer's ad-hoc query endpoint. A
- * conservative *lexical* check, NOT a parser: it rejects the obvious foot-guns
- * (writes, DDL, PRAGMA, ATTACH, stacked statements) before SQL reaches the DB. The
- * real guarantees are the owner-only mount + this allowlist, layered.
- *
- * cursedbelt keeps its own copy rather than depending on cwip — the toolkit's server
- * surface stays dependency-light, and the rule set here is tuned for SQLite (PRAGMA /
- * ATTACH are SQLite-specific write vectors).
- */
-const FORBIDDEN = [
-    'insert',
-    'update',
-    'delete',
-    'drop',
-    'alter',
-    'truncate',
-    'create',
-    'replace',
-    'attach',
-    'detach',
-    'reindex',
-    'vacuum',
-    'pragma',
-    'begin',
-    'commit',
-    'rollback',
-    'savepoint',
-    'release',
-    'grant',
-    'revoke',
-];
-/** Strip `--` line comments and block comments, collapse whitespace, lowercase. */
-function normalize(sql) {
-    return sql
-        .replace(/--[^\n]*/g, ' ')
-        .replace(/\/\*[\s\S]*?\*\//g, ' ')
-        .replace(/\s+/g, ' ')
-        .trim()
-        .toLowerCase();
-}
-/**
- * True only for a single read-only statement: a `SELECT`, or a `WITH … SELECT` CTE.
- * Rejects stacked statements, `SELECT … INTO`, and any forbidden keyword as a word.
- */
-export function isReadOnlySql(sql) {
-    const s = normalize(sql);
-    if (!s)
-        return false;
-    // Only a trailing `;` terminator is allowed — no stacked statements.
-    const body = s.replace(/;\s*$/, '');
-    if (body.includes(';'))
-        return false;
-    // Must begin with SELECT or a CTE.
-    if (!/^(select|with)\b/.test(body))
-        return false;
-    // `SELECT … INTO new_table` writes a table — block it.
-    if (/\bselect\b[\s\S]*\binto\b/.test(body))
-        return false;
-    for (const kw of FORBIDDEN) {
-        if (new RegExp(`\\b${kw}\\b`).test(body))
-            return false;
-    }
-    return true;
-}
-//# sourceMappingURL=readonlySql.js.map

package/dist/server/sqlite/readonlySql.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"readonlySql.js","sourceRoot":"","sources":["../../../src/server/sqlite/readonlySql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,SAAS,GAAG;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,mFAAmF;AACnF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAErB,qEAAqE;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,mCAAmC;IACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjD,uDAAuD;IACvD,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/sqlite/stats.d.ts

@@ -1,23 +0,0 @@
-import type { Database } from 'bun:sqlite';
-/**
- * DB usage stats for `bun:sqlite` — per-table row counts and on-disk byte sizes
- * plus the total database file size. Feeds both StatTiles and the rows/bytes charts
- * in an admin surface. Per-table bytes use the `dbstat` virtual table when the build
- * supports it (it does in `bun:sqlite`); if a query for it ever fails, byte sizes
- * degrade to `null` rather than throwing — row counts and the file size still work.
- */
-export interface TableStat {
-    name: string;
-    rows: number;
-    /** On-disk bytes for this table's pages, or `null` when `dbstat` is unavailable. */
-    bytes: number | null;
-}
-export interface DbStats {
-    /** Total database file size in bytes (`page_count * page_size`). */
-    fileBytes: number;
-    /** Sum of every table's row count. */
-    totalRows: number;
-    tables: TableStat[];
-}
-export declare function collectSqliteStats(db: Database): DbStats;
-//# sourceMappingURL=stats.d.ts.map

package/dist/server/sqlite/stats.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/stats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C;;;;;;GAMG;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAwBD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAYxD"}

package/dist/server/sqlite/stats.js

@@ -1,33 +0,0 @@
-import { listSqliteTables } from './browse';
-/** Whole-database size from the page pragmas (works without `dbstat`). */
-function fileBytes(db) {
-    const pageCount = db.query('PRAGMA page_count').get()?.page_count ?? 0;
-    const pageSize = db.query('PRAGMA page_size').get()?.page_size ?? 0;
-    return pageCount * pageSize;
-}
-/** Per-table byte sizes from `dbstat`, or `null` for all tables if it's unavailable. */
-function bytesByTable(db) {
-    try {
-        const rows = db
-            .query('SELECT name, SUM(pgsize) AS bytes FROM dbstat GROUP BY name')
-            .all();
-        return new Map(rows.map((r) => [r.name, r.bytes]));
-    }
-    catch {
-        return null;
-    }
-}
-export function collectSqliteStats(db) {
-    const byTable = bytesByTable(db);
-    const tables = listSqliteTables(db).map(({ name, count }) => ({
-        name,
-        rows: count,
-        bytes: byTable ? (byTable.get(name) ?? 0) : null,
-    }));
-    return {
-        fileBytes: fileBytes(db),
-        totalRows: tables.reduce((sum, t) => sum + t.rows, 0),
-        tables,
-    };
-}
-//# sourceMappingURL=stats.js.map

package/dist/server/sqlite/stats.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/server/sqlite/stats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAyB5C,0EAA0E;AAC1E,SAAS,SAAS,CAAC,EAAY;IAC7B,MAAM,SAAS,GACb,EAAE,CAAC,KAAK,CAA6B,mBAAmB,CAAC,CAAC,GAAG,EAAE,EAAE,UAAU,IAAI,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAA4B,kBAAkB,CAAC,CAAC,GAAG,EAAE,EAAE,SAAS,IAAI,CAAC,CAAC;IAC/F,OAAO,SAAS,GAAG,QAAQ,CAAC;AAC9B,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,EAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE;aACZ,KAAK,CACJ,6DAA6D,CAC9D;aACA,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAY;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAgB,gBAAgB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI;QACJ,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KACjD,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/server/sqlite/viewer.d.ts

@@ -1,18 +0,0 @@
-import type { Database } from 'bun:sqlite';
-import { Hono } from 'hono';
-/**
- * A read-only SQLite browser as a Hono sub-app — a thin HTTP wrapper over the
- * Hono-free primitives in `browse.ts` (the same primitives a cursedshell plugin or
- * a bespoke-transport app consumes directly). Mount it behind the owner-only guard:
- *
- * ```ts
- * app.route('/api/v1/admin/sqlite', ownerOnly(createSqliteViewerMiddleware(db)));
- * ```
- *
- * Three endpoints — list tables + counts, paginate one table, run an ad-hoc
- * `SELECT` — letting the owner inspect the live DB without shell access. Every path
- * is read-only (see `browse.ts` for the injection/read-only guards). Authn/authz is
- * the mounting app's job (this sub-app trusts that it is already owner-gated).
- */
-export declare function createSqliteViewerMiddleware(db: Database): Hono;
-//# sourceMappingURL=viewer.d.ts.map

package/dist/server/sqlite/viewer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"viewer.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/viewer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAU5B;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CA8C/D"}

package/dist/server/sqlite/viewer.js

@@ -1,57 +0,0 @@
-import { Hono } from 'hono';
-import { ApiError, toErrorEnvelope } from '../errors';
-import { listSqliteTables, NotReadOnlyError, readSqliteTable, runReadonlySqlite, UnknownTableError, } from './browse';
-/**
- * A read-only SQLite browser as a Hono sub-app — a thin HTTP wrapper over the
- * Hono-free primitives in `browse.ts` (the same primitives a cursedshell plugin or
- * a bespoke-transport app consumes directly). Mount it behind the owner-only guard:
- *
- * ```ts
- * app.route('/api/v1/admin/sqlite', ownerOnly(createSqliteViewerMiddleware(db)));
- * ```
- *
- * Three endpoints — list tables + counts, paginate one table, run an ad-hoc
- * `SELECT` — letting the owner inspect the live DB without shell access. Every path
- * is read-only (see `browse.ts` for the injection/read-only guards). Authn/authz is
- * the mounting app's job (this sub-app trusts that it is already owner-gated).
- */
-export function createSqliteViewerMiddleware(db) {
-    const app = new Hono();
-    app.get('/tables', (c) => c.json({ items: listSqliteTables(db) }));
-    app.get('/tables/:table', (c) => {
-        try {
-            return c.json(readSqliteTable(db, c.req.param('table'), {
-                limit: c.req.query('limit'),
-                offset: c.req.query('offset'),
-            }));
-        }
-        catch (err) {
-            if (err instanceof UnknownTableError) {
-                return c.json(toErrorEnvelope(new ApiError(404, 'Unknown table', { code: 'unknown_table' })), 404);
-            }
-            throw err;
-        }
-    });
-    app.post('/query', async (c) => {
-        let payload;
-        try {
-            payload = await c.req.json();
-        }
-        catch {
-            return c.json(toErrorEnvelope(new ApiError(400, 'Invalid JSON body', { code: 'bad_request' })), 400);
-        }
-        const params = Array.isArray(payload.params) ? payload.params : [];
-        try {
-            const items = runReadonlySqlite(db, payload.sql, params);
-            return c.json({ items });
-        }
-        catch (err) {
-            if (err instanceof NotReadOnlyError) {
-                return c.json(toErrorEnvelope(new ApiError(400, err.message, { code: 'not_read_only' })), 400);
-            }
-            return c.json(toErrorEnvelope(new ApiError(400, err instanceof Error ? err.message : String(err), { code: 'query_failed' })), 400);
-        }
-    });
-    return app;
-}
-//# sourceMappingURL=viewer.js.map

package/dist/server/sqlite/viewer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"viewer.js","sourceRoot":"","sources":["../../../src/server/sqlite/viewer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAElB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAAY;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;gBACxC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC3B,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,OAA4C,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,MAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,GAAa,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBACpC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CACb,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAC9F,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/storage/binaryServerProcessing.d.ts

@@ -1,24 +0,0 @@
-import type { ImageDerivatives, VideoProcessor } from './files/catalogue';
-export type BinaryServerProcessingConfig = {
-    /** e.g. 'https://binary-server.cursedalchemy.com' — same value as the byte store's baseUrl. */
-    baseUrl: string;
-    /** App namespace (path + token scope), e.g. 'p'. Keys sent to the transcode API are
-     * app-scoped (`<appId>/<key>`), matching what the MediaStore adapter writes. */
-    appId: string;
-    /** Shared server-to-server secret (x-internal-secret). */
-    internalSecret: string;
-    /** HLS rung heights (passed through as the job's ladder). */
-    ladderHeights?: number[];
-    /** Poll cadence while a job runs. */
-    pollMs?: number;
-    /** Give up on a job after this long (it keeps running server-side; the row just fails). */
-    timeoutMs?: number;
-    fetchImpl?: typeof fetch;
-    /** Injectable clock/sleep for tests. */
-    sleep?: (ms: number) => Promise<void>;
-};
-export declare function createBinaryServerProcessing(cfg: BinaryServerProcessingConfig): {
-    videoProcessor: VideoProcessor;
-    imageDerivatives: ImageDerivatives;
-};
-//# sourceMappingURL=binaryServerProcessing.d.ts.map

package/dist/server/storage/binaryServerProcessing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binaryServerProcessing.d.ts","sourceRoot":"","sources":["../../../src/server/storage/binaryServerProcessing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAoB1E,MAAM,MAAM,4BAA4B,GAAG;IACzC,+FAA+F;IAC/F,OAAO,EAAE,MAAM,CAAC;IAChB;oFACgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,cAAc,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,4BAA4B,GAAG;IAC/E,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,gBAAgB,CAAC;CACpC,CAoFA"}