quantydb-sqlite 0.4.0

//! quantydb-sqlite: a reader for the SQLite 3 file format.
//!
//! This crate exists so that importing a `.sqlite` file needs no SQLite
//! library, no C toolchain and no ffi (ADR-005). It only ever reads, and
//! the type it reads through cannot write, so the file being imported
//! cannot be damaged by us.
//!
//! The bar it is held to is the same one our own format reader meets: any
//! input at all, including one built specifically to break it, produces
//! either correct data or an error. Never a panic, never a row that is not
//! in the file.
//!
//! ```no_run
//! use quantydb_sqlite::{FileSource, Reader};
//!
//! let reader = Reader::open(FileSource::open("chinook.sqlite")?)?;
//! println!("{} pages of {} bytes", reader.page_count(), reader.header().page_size);
//! # Ok::<(), quantydb_sqlite::SqliteError>(())
//! ```

mod affinity;
mod cell;
mod ddl;
mod error;
mod header;
mod page;
mod record;
mod schema;
mod source;
mod survey;
mod tree;
mod varint;
mod wal;

pub use affinity::{Affinity, StorageClass};
pub use cell::Cell;
pub use ddl::{parse_create_table, ColumnDef, Constraint, Generated, KeyColumn, TableDef};
pub use error::{Result, SqliteError};
pub use header::{Header, TextEncoding};
pub use page::{BtreePage, PageKind};
pub use record::{decode as decode_record, SqliteValue};
pub use schema::{ObjectKind, Schema, SchemaObject};
pub use source::{FileSource, SliceSource, Source};
pub use survey::{Cell as MappedCell, ColumnSurvey, RowLayout, TableSurvey};
pub use tree::{IndexScan, Row, Rows, TableRow, TableScan};
pub use wal::{Wal, WalSource};

/// A SQLite database file, opened for reading.
pub struct Reader<S: Source> {
    source: S,
    header: Header,
    page_count: u32,
}

impl<S: Source> Reader<S> {
    /// Read and validate the header, then work out how many pages the file
    /// really has.
    pub fn open(source: S) -> Result<Reader<S>> {
        let file_len = source.len()?;
        if file_len < header::HEADER_LEN as u64 {
            return Err(SqliteError::not_sqlite(format!(
                "file is {file_len} bytes, shorter than the {} byte header",
                header::HEADER_LEN
            )));
        }
        let mut buf = [0u8; header::HEADER_LEN];
        source.read_at(0, &mut buf)?;
        let header = Header::parse(&buf)?;

        // a wal mode database is complete in its main file only once the
        // log has been checkpointed into it. the flag alone cannot tell us
        // whether that happened, so the source is asked: one that looked
        // beside the file, or one that reads the log itself, says yes, and
        // anything else gets refused rather than quietly handed a database
        // as it stood at the last checkpoint.
        if header.wal_mode && !source.accounts_for_wal() {
            return Err(SqliteError::unsupported(
                "the database is in wal mode and nothing here accounts for its log, so the \
                 main file may be missing committed data; open it with open_file, put a \
                 WalSource around it, or check the log in first, for example with: \
                 sqlite3 db.sqlite 'pragma wal_checkpoint(truncate)'",
            ));
        }

        // the header may state the page count, and the file itself implies
        // one. where they disagree the file is truncated, and finding that
        // out here gives a clear message instead of an unexpected eof in
        // the middle of a scan later on.
        let pages_in_file = file_len / header.page_size as u64;
        let page_count = match header.header_page_count {
            Some(claimed) => {
                if claimed as u64 > pages_in_file {
                    return Err(SqliteError::malformed(
                        None,
                        format!(
                            "the header says {claimed} pages of {} bytes, but the file only \
                             holds {pages_in_file}",
                            header.page_size
                        ),
                    ));
                }
                claimed
            }
            None => u32::try_from(pages_in_file).unwrap_or(u32::MAX),
        };
        if page_count == 0 {
            return Err(SqliteError::malformed(
                None,
                "the file holds no complete page",
            ));
        }

        Ok(Reader {
            source,
            header,
            page_count,
        })
    }

    pub fn header(&self) -> &Header {
        &self.header
    }

    /// Pages in the database. Page numbers run from 1 to this value.
    pub fn page_count(&self) -> u32 {
        self.page_count
    }

    /// Read one whole page, reserved trailer included.
    pub fn read_page(&self, number: u32) -> Result<Vec<u8>> {
        if number == 0 || number > self.page_count {
            return Err(SqliteError::malformed(
                number,
                format!(
                    "page {number} is outside the file's 1..={}",
                    self.page_count
                ),
            ));
        }
        let size = self.header.page_size as usize;
        let offset = (number as u64 - 1) * self.header.page_size as u64;
        let mut bytes = vec![0u8; size];
        self.source.read_at(offset, &mut bytes)?;
        Ok(bytes)
    }

    /// Read a page and parse it as a b-tree page.
    pub fn btree_page(&self, number: u32) -> Result<BtreePage> {
        let bytes = self.read_page(number)?;
        // page 1 carries the database header in front of its b-tree header
        let body_offset = if number == 1 { header::HEADER_LEN } else { 0 };
        BtreePage::parse(
            number,
            bytes,
            self.header.usable_size() as usize,
            body_offset,
        )
    }

    /// Parse one cell of a b-tree page, following overflow pages so the
    /// payload comes back whole.
    pub fn cell(&self, page: &BtreePage, index: usize) -> Result<Cell> {
        let usable = self.header.usable_size() as usize;
        let layout = cell::parse(page, index, usable, self.payload_limit())?;
        Ok(match layout {
            cell::CellLayout::TableInterior { child, rowid } => {
                Cell::TableInterior { child, rowid }
            }
            cell::CellLayout::TableLeaf { rowid, payload } => Cell::TableLeaf {
                rowid,
                payload: self.assemble(payload)?,
            },
            cell::CellLayout::IndexInterior { child, payload } => Cell::IndexInterior {
                child,
                payload: self.assemble(payload)?,
            },
            cell::CellLayout::IndexLeaf { payload } => Cell::IndexLeaf {
                payload: self.assemble(payload)?,
            },
        })
    }

    /// Read the database's own description of itself.
    ///
    /// The schema lives in a table rooted at page 1, so this is an ordinary
    /// scan; it is separate only because everything else in the file is
    /// found through it.
    pub fn schema(&self) -> Result<Schema> {
        let mut rows = Vec::new();
        for row in self.table_scan(1)? {
            rows.push(row?.values);
        }
        Schema::from_rows(rows, self.page_count)
    }

    /// Walk the table b-tree rooted at `root`, yielding rows in rowid order.
    ///
    /// The walk is lazy: a table larger than memory is read a page at a
    /// time, and a caller that only wants the first row only pays for the
    /// pages down to it.
    pub fn table_scan(&self, root: u32) -> Result<TableScan<'_, S>> {
        TableScan::new(self, root)
    }

    /// Walk the index b-tree rooted at `root`, yielding entries in key
    /// order.
    ///
    /// This reads real indexes and, because a without rowid table is an
    /// index b-tree holding whole rows, those tables too.
    pub fn index_scan(&self, root: u32) -> Result<IndexScan<'_, S>> {
        IndexScan::new(self, root)
    }

    /// Decode a record with the encoding this database uses.
    ///
    /// The same as the free function, minus the chance of passing the
    /// wrong encoding: this one reads it off the header in hand.
    pub fn decode_record(&self, payload: &[u8]) -> Result<Vec<SqliteValue>> {
        record::decode(payload, self.header.text_encoding)
    }

    /// Rows of a table, whichever kind of table it is.
    ///
    /// Which walk applies is not a matter of taste: a rowid table is a
    /// table b-tree and a without rowid table is an index b-tree, and the
    /// root page says which one it is. Reading that off the page rather
    /// than off the create statement means this works before any sql has
    /// been parsed, and cannot disagree with the file.
    pub fn rows(&self, root: u32) -> Result<Rows<'_, S>> {
        let kind = self.btree_page(root)?.kind;
        if kind.is_table() {
            Ok(Rows::Rowid(self.table_scan(root)?))
        } else {
            Ok(Rows::Keyed(self.index_scan(root)?))
        }
    }

    /// The largest payload the file could hold, used to reject length
    /// varints that ask for more memory than the file could ever supply.
    fn payload_limit(&self) -> u64 {
        self.page_count as u64 * self.header.page_size as u64
    }

    /// Stitch a payload back together across its overflow chain.
    ///
    /// Every overflow page spends its first four bytes on the next page
    /// number and the rest on payload. The loop is bounded by the payload
    /// length rather than by the chain, so a chain that loops back on
    /// itself terminates instead of hanging; it then fails the check below
    /// because the file is malformed either way.
    fn assemble(&self, payload: cell::PayloadRef<'_>) -> Result<Vec<u8>> {
        if payload.overflow.is_none() {
            return Ok(payload.local.to_vec());
        }
        let usable = self.header.usable_size() as usize;
        let per_page = usable - 4;

        let mut out = Vec::with_capacity(payload.total);
        out.extend_from_slice(payload.local);
        let mut next = payload.overflow.unwrap_or(0);
        while out.len() < payload.total {
            if next == 0 {
                return Err(SqliteError::malformed(
                    None,
                    format!(
                        "an overflow chain ended after {} of {} payload bytes",
                        out.len(),
                        payload.total
                    ),
                ));
            }
            let page = self.read_page(next)?;
            next = u32::from_be_bytes([page[0], page[1], page[2], page[3]]);
            let take = per_page.min(payload.total - out.len());
            out.extend_from_slice(&page[4..4 + take]);
        }
        if next != 0 {
            return Err(SqliteError::malformed(
                None,
                "an overflow chain continues past the end of its payload",
            ));
        }
        Ok(out)
    }
}

/// Open a database file by path, log included if there is one.
///
/// This is the call that does the right thing without the caller having to
/// know what wal mode is: if a `-wal` file sits next to the database and
/// holds committed frames, its pages are read on top of the main file, and
/// if it does not, nothing changes.
pub fn open_file(
    path: impl AsRef<std::path::Path>,
) -> Result<Reader<WalSource<FileSource, FileSource>>> {
    let path = path.as_ref();
    let main = FileSource::open(path)?;

    let mut log_path = path.as_os_str().to_os_string();
    log_path.push("-wal");
    let log = match FileSource::open(std::path::Path::new(&log_path)) {
        Ok(source) => Some(source),
        // no log next to the database is the ordinary case, not a failure
        Err(SqliteError::Io(e)) if e.kind() == std::io::ErrorKind::NotFound => None,
        Err(e) => return Err(e),
    };

    Reader::open(WalSource::new(main, log)?)
}