Make the database portable and encryptable (#3848) - #5526

Open

shai-almog wants to merge 95 commits into

feature/portable-encryptable-database

Commits on Aug 6, 2026

Define the portable Database contract and add the encryption API

shai-almog
and
claude
committed
5b0f0b0
Make the simulator conformant and able to open encrypted databases

shai-almog
and
claude
committed
a29da0d
Make the iOS database conformant and fix three defects in it

shai-almog
and
claude
committed
85f6127
Bring Android to the database contract and add encrypted databases

shai-almog
and
claude
committed
0fedd67
Give the native Windows and Linux ports a database

shai-almog
and
claude
committed
b0e2de8
Replace WebSQL with SQLite on WebAssembly and gate the engine per app

shai-almog
and
claude
committed
dcf1f1f
Add device conformance tests, documentation and the interop proof

shai-almog
and
claude
committed
ce77b83
Fix the three CI failures from the first run

shai-almog
and
claude
committed
70dc81f
Exclude the SQLCipher package from the Ant Android build too

shai-almog
and
claude
committed
d595bd9
Address the review findings and the second round of CI failures

shai-almog
and
claude
committed
7f2f2c7
Address the second batch of review findings

shai-almog
and
claude
committed
766ab43
Address the third batch of review findings

shai-almog
and
claude
committed
1b78be8
Satisfy the forbidden PMD rules

shai-almog
and
claude
committed
c8ca4a5
Compile the engine's ciphers without assuming CPU features are enabled

shai-almog
and
claude
committed
dbcceec
Add copyright headers to the new guide snippet files

shai-almog
and
claude
committed
ba13354
Address the fourth review batch, the guide prose gate and CodeQL noise

shai-almog
and
claude
committed
ecad03f
Fix failed-commit recovery, parameter counts and the JS key probe

shai-almog
and
claude
committed
efbab6c
Report unbound parameters from executeQuery(String) with the shared message

shai-almog
and
claude
committed
f5767b0
Default Ant projects to database compatibility mode

shai-almog
and
claude
committed
e282819
Roll back through the engine when an Android commit fails

shai-almog
and
claude
committed
730a69a
Close out the fourth review round

shai-almog
and
claude
committed
cb0456a
Make Android encryption buildable, and actually exercise it

shai-almog
and
claude
committed
c6f57d4
Make encrypt and decrypt work on Android

shai-almog
and
claude
committed
452c6cf
Stop the JavaScript port hanging when the SQLite engine will not start

shai-almog
and
claude
committed
952f337
Do not assert a filesystem path where databases are not filesystem backed

shai-almog
and
claude
committed
7a70937
Close out the fifth review round

shai-almog
and
claude
committed
62e2271
Stop every JavaScript native binding from throwing across the bridge

shai-almog
and
claude
committed
4a11dc9
Fix three ways the previous round's fixes could fail

shai-almog
and
claude
committed
d4d3c89
Complete the migration recovery, and stop OPFS trouble losing data

shai-almog
and
claude
committed
483acb2
Type-check the SQLCipher package, which nothing else compiles

shai-almog
and
claude
committed
81cbb36

Commits on Aug 7, 2026

Close the remaining native and dispatch error paths

shai-almog
and
claude
committed
4c32755
Resolve the cipher check's dependencies from the reactor, not a repository

shai-almog
and
claude
committed
13cef92
Sweep the error paths I had fixed in only one implementation

shai-almog
and
claude
committed
2b527c3
Fix three defects the previous round's fixes introduced or left

shai-almog
and
claude
committed
ce68bdd
Move migration artifacts out of the database namespace entirely

shai-almog
and
claude
committed
79aceb2
Make delete and exists aware of interrupted conversions, and finish the JS sweep

shai-almog
and
claude
committed
ecf667b
Prove ownership of migration files instead of picking a location

shai-almog
and
claude
committed
14c1630
Report close failures, and track trigger bodies by position

shai-almog
and
claude
committed
be69b0b
Merge remote-tracking branch 'origin/master' into feature/portable-encryptable-database
shai-almog
committed
da4d201
Hoist casts out of catch regions and exchange SQL text as UTF-8 bytes

shai-almog
and
claude
committed
2420d98
Detect the port from the database, not from Display

shai-almog
and
claude
committed
26dcced
Record the export before writing it, and refuse a passphrase SQLite would cut short

shai-almog
and
claude
committed
c1fc047
Count named and numbered placeholders the way the engine does

shai-almog
and
claude
committed
f3e483b
Read a whole SQLite parameter name, not just its identifier characters

shai-almog
and
claude
committed
26a59d8
Merge remote-tracking branch 'origin/master' into feature/portable-encryptable-database
shai-almog
committed
643699a
Hold a port to its own legacy behaviour, not to another port's

shai-almog
and
claude
committed
018356f
Gate the SQLite payloads on the application, not on the framework

shai-almog
and
claude
committed
06b22a6
Keep windows.h from dragging winsock.h into the database bindings

shai-almog
and
claude
committed
8dc65cf
Finish gating the cipher, and stop recovery touching files it does not own

shai-almog
and
claude
committed
3d74b04
Document what using a database, and encrypting one, costs a build

shai-almog
and
claude
committed
a6bee19
Track transactions opened by script, and stop three ways to lose data

shai-almog
and
claude
committed
9b8733a

Commits on Aug 8, 2026

Count every Android connection, and read a script the way the engine does

shai-almog
and
claude
committed
aabde20
See a transaction whichever entry point opened it

shai-almog
and
claude
committed
15865f2
Read ROLLBACK TO as tokens, and hold the database for the whole conversion

shai-almog
and
claude
committed
b4b662e
Take the connection slot before the engine opens, and share one classifier

shai-almog
and
claude
committed
59d3853
Ask the engine whether a transaction is open, instead of inferring it

shai-almog
and
claude
committed
ca1cc1a
Claim the database for an in-place key rotation too

shai-almog
and
claude
committed
4712b47
Merge remote-tracking branch 'origin/master' into feature/portable-encryptable-database
shai-almog
committed
c7b0fe9
Keep the last readable copy, and make the claim cover recovery

shai-almog
and
claude
committed
14555d1
Hold a key change to one connection, and load the JS engine's wasm

shai-almog
and
claude
committed
266d6e8
Report an unavailable managed key as a note, not a skipped group

shai-almog
and
claude
committed
406b094
Hold the rekey claim for the whole rewrite, and ship a wasm that compiles

shai-almog
and
claude
committed
9f409ea
Key the simulator registry by the resolved file

shai-almog
and
claude
committed
b39c725
Reserve the slot before opening, and key the browser's engine through a VFS

shai-almog
and
claude
committed
e842054
Track savepoint transactions, and read the BEGIN mode as a token

shai-almog
and
claude
committed
27c2584
Claim the simulator's file before JDBC opens it, and stop a vacuous check

shai-almog
and
claude
committed
37e28b7
Read whole savepoint names, and hold the claim until the handle is gone

shai-almog
and
claude
committed
6a35664
Calibrate the ciphertext check, and stack savepoints of one name

shai-almog
and
claude
committed
57167c6
Ask the no-key question on a database nothing else depends on

shai-almog
and
claude
committed
a134e50
End a savepoint transaction through SQL on Android too

shai-almog
and
claude
committed
5f0bbb5
Return a Java long exactly from the browser, and count nested transactions

shai-almog
and
claude
committed
9be5fb3
Merge master into feature/portable-encryptable-database
shai-almog
committed
bf23c85
Move Google sign-in to a SDK that links on a simulator

shai-almog
and
claude
committed
3a1e67c
Track a legacy execute, and close the constructor nobody could satisfy

shai-almog
and
claude
committed
185633d
Keep a database an unkeyed open could not read, and nest only where nesting works

shai-almog
and
claude
committed
26bc092

Commits on Aug 9, 2026

Report a database that will not open as an IOException

shai-almog
and
claude
committed
9d325d9
Keep a savepoint stack, and hold the simulator to SQLite's grammar

shai-almog
and
claude
committed
3f8e3bd
Unwind the savepoint stack on ROLLBACK TO, and clean up what recovery displaces

shai-almog
and
claude
committed
3150fa1
Ask which config factory was called, and refresh a rewound cursor's count

shai-almog
and
claude
committed
74c115c
Key a managed alias on the resolved file on the remaining ports

shai-almog
and
claude
committed
c538064
Scan library jars and the database package, and say what count costs

shai-almog
and
claude
committed
75e3952
Retry the suite build past a Maven Central 403

shai-almog
and
claude
committed
fb4ad8c
Resolve a managed key the same way wherever it is looked up

shai-almog
and
claude
committed
02b051d
Track a parameterized savepoint, and stop the wrapper deadlocking on itself

shai-almog
and
claude
committed
2d72a0d
Destroy one managed key, not two, and refresh the count on any backward seek

shai-almog
and
claude
committed
f664689
End a savepoint transaction through SQL from a script too

shai-almog
and
claude
committed
b91482b
Merge remote-tracking branch 'origin/master' into feature/portable-encryptable-database
shai-almog
committed
0826b63
Fold savepoint names as SQLite does, and ask the engine after every statement

shai-almog
and
claude
committed
8a33f40
Check the worker before the lock, and read the engine on the failure path too

shai-almog
and
claude
committed
3bf5d9c

Commits on Aug 10, 2026

Restore the browser's engine read, and let isInTransaction skip the lock

shai-almog
and
claude
committed
f0840c9
Clear Android's flag when a rollback finds nothing to roll back

shai-almog
and
claude
committed
89a4517
Register a wrapped connection, and let queued callers hear that the database closed

shai-almog
and
claude
committed
a32ef74
Read a SQLite URI connection, and clear state when there is nothing left to end

shai-almog
and
claude
committed
63f20b4
Match the raw-key literal that is actually written, and free the cursor close

shai-almog
and
claude
committed
594b8df
Quote by the exact literal, rekey a nameless handle, and stop killing the worker

shai-almog
and
claude
committed
a051ebb