prisma-risk / tsoracle / 41172974418

97%

push

github

feat(file): export a versioned stopped-state receipt (#745)

* feat(file): export a versioned stopped-state receipt

Backups and migrations of a file-driver oracle need a trustworthy record of its stopped state: the committed timestamp reservation, every retained lease and the dense counters, plus an inventory of the files that make up the recovery set.

tsoracle-driver-file gains StoppedFileState, which takes the native lock read-only without initialization, validates every record with a shared semantic validator and emits a versioned receipt (schema tsoracle.stopped-file-state, version 1) with a SHA-256 inventory that records absent lazy files explicitly. The library API is unconditional. The new stopped-state-export feature adds the tsoracle export file command, and makes driver startup use the shared validator and init_seeded hold the native lock while it writes the seed, so a seeded directory is exportable. Default builds keep their existing behavior.

The lease decoder now rejects an impossible record count before allocating. docs/stopped-file-export.md describes the capture, inventory, refusal and restore contract.

Signed-off-by: Sebastian Thiebaud <sebastian@prismarisk.com>

* chore(fuzz): sync the fuzz lockfile with the export dependencies

The fuzz workspace builds tsoracle-driver-file by path, so its lockfile needs the sha2 closure the stopped-state export added.

Signed-off-by: Sebastian Thiebaud <sebastian@prismarisk.com>

---------

Signed-off-by: Sebastian Thiebaud <sebastian@prismarisk.com>

730 of 739 new or added lines in 4 files covered. (98.78%)

19946 of 20623 relevant lines covered (96.72%)

276918.17 hits per line