sqlite

Jul 23, 2026

Changes in this version

+ func Checkpoint(db *sql.DB) error

Jul 9, 2026

Changes in this version

+ func MigrateFileToEncrypted(path string, masterKey []byte, pt PrincipalType, id string) (rowsCopied int, changed bool, err error)

+ func OpenEnveloped(path string, masterKey []byte, pt PrincipalType, id string) (*sql.DB, error)

Jul 8, 2026

Changes in this version

+ func OpenPragma(dsn string, pragmas []Pragma) (*sql.DB, error)

+ func SetPersistWAL(rawConn any, on bool) error

Jul 8, 2026

Changes in this version

+ func IsConstraintForeignKey(err error) bool

+ func IsConstraintPrimaryKey(err error) bool

+ func IsConstraintUnique(err error) bool

Jul 4, 2026

Changes in this version

+ var DefaultPragmas = []Pragma

+ func PragmaDSN(path string, pragmas []Pragma) string

+ type CommitHookFn func() int32

+ type HookRegisterer interface

+ RegisterCommitHook func(CommitHookFn)

+ func CommitHookRegisterer(driverConn any) (HookRegisterer, bool)

+ type Pragma struct

+ Name string

+ Value string

Jun 23, 2026

Changes in this version

+ func PrincipalAAD(principalType PrincipalType, principalID string) []byte

Jun 23, 2026

Changes in this version

+ func CodecLinked() bool

+ func DeriveChildKey(parentKey []byte, principalType PrincipalType, principalID string) ([]byte, error)

+ func NewDEK() ([]byte, error)

+ func UnwrapDEK(kek, blob []byte) ([]byte, error)

+ func WrapDEK(kek, dek []byte) ([]byte, error)

type PrincipalType

+ const PrincipalGlobal

Jun 23, 2026

Changes in this version

+ var ErrEncryptionUnavailable = errors.New(...)

+ func DSN(path string, rawKey []byte) string

+ func EncryptionAvailable() bool

+ func OpenDB(path string, rawKey []byte) (*sql.DB, error)

type DB

+ func (db *DB) Encrypted() bool

Jun 23, 2026

Changes in this version

+ var ErrDuplicateSigner = errors.New("sqlite: duplicate signer")

+ var ErrInvalidSig = errors.New("sqlite: invalid attestation signature")

+ var ErrSessionExpired = errors.New("sqlite: attestation session expired")

+ var ErrThresholdNotMet = errors.New("sqlite: threshold attestations not met")

+ func DeriveKey(masterKey []byte, principalType PrincipalType, principalID string) ([]byte, error)

+ type Config struct

+ Listen string

+ Mode Mode

+ NodeID string

+ Parties int

+ Peers []string

+ RawKey []byte

+ SigningKey ed25519.PrivateKey

+ Threshold int

+ type DB struct

+ func Open(path string, opts ...Option) (*DB, error)

+ type Mode string

+ const ModeCRDT

+ const ModeRaft

+ const ModeSingle

+ const ModeThreshold

+ type Option func(*Config)

+ func WithCRDT(nodeID, listen string, peers []string) Option

+ func WithKey(passphrase string) Option

+ func WithPeers(peers []string) Option

+ func WithPrincipalKey(masterKey []byte, principalType PrincipalType, principalID string) Option

+ func WithRaft(nodeID, listen string, peers []string) Option

+ func WithRawKey(key []byte) Option

+ func WithThreshold(t, n int, signingKey ed25519.PrivateKey) Option

+ type PrincipalType string

+ const PrincipalOrg

+ const PrincipalUser

+ type ThresholdManager struct

+ func NewThresholdManager(threshold, parties int, nodeID string, signingKey ed25519.PrivateKey) *ThresholdManager

+ func (tm *ThresholdManager) Attest(proposalID [32]byte, nodeID string, signature []byte) error

+ func (tm *ThresholdManager) CleanExpired() int

+ func (tm *ThresholdManager) Pending() int

+ func (tm *ThresholdManager) Propose(sql string, params []any) ([32]byte, error)

+ func (tm *ThresholdManager) RegisterPeer(nodeID string, pubKey ed25519.PublicKey)

+ func (tm *ThresholdManager) SetCommitFunc(fn func(string, []any) error)

+ type WriteProposal struct

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ ID [32]byte

+ Params []any

+ Proposer string

+ SQL string