mirror of
https://github.com/Such-Software/grin-lws.git
synced 2026-10-17 15:41:43 +02:00
jwinterm
0dc1804e67
The review's premise (sqlx::Any breaks on SQLite $N placeholders) is wrong for sqlx 0.7: SQLite accepts $N numbered params and binds them positionally, including reused placeholders. A probe test applies the real migration + exercises set_cursor's reused-$N upsert, insert_output (quoted "commit", bool), coinbase-maturity reads, and mark_spent against SQLite — all pass. The only true incompatibility was DEFAULT now(), changed to the portable DEFAULT CURRENT_TIMESTAMP. Schema + queries now run unchanged on both backends. Updated the stale dialect notes.
67 lines
3.3 KiB
SQL
67 lines
3.3 KiB
SQL
-- grin-lws initial schema.
|
|
--
|
|
-- This service is a REAL light-wallet-server: it holds a per-account output
|
|
-- store keyed by each account's `rewind_hash` (a view credential) and a
|
|
-- reorg-safe chain cursor. It NEVER stores a private/spend key — `rewind_hash`
|
|
-- is view-only (it can recognize a wallet's outputs and read amounts, but
|
|
-- cannot spend).
|
|
--
|
|
-- Dialect: runs as-is on BOTH PostgreSQL and SQLite (verified in a test).
|
|
-- SQLite accepts the Postgres type names via its type-affinity rules
|
|
-- (BIGINT/BOOLEAN/TIMESTAMPTZ), and the app binds `$N` placeholders through
|
|
-- sqlx's `Any` driver, which SQLite accepts. `DEFAULT CURRENT_TIMESTAMP` is
|
|
-- portable (unlike `now()`). `commit` is a reserved word, so it is always
|
|
-- quoted as "commit".
|
|
|
|
-- An account = one registered view credential.
|
|
CREATE TABLE IF NOT EXISTS accounts (
|
|
-- The wallet's rewind_hash (64 hex). View-only; safe to persist.
|
|
rewind_hash TEXT PRIMARY KEY,
|
|
-- The height the scanner should (re)start from when this account was added
|
|
-- (a wallet birthday). Never advances backwards on its own.
|
|
start_height BIGINT NOT NULL,
|
|
-- How far the scanner has processed this account. Advances toward the tip;
|
|
-- lowered only by an explicit backwards rescan.
|
|
scan_height BIGINT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP
|
|
);
|
|
|
|
-- Outputs the scanner recognized for a registered account (rewound rangeproof
|
|
-- matched). Crucially stores the recovered derivation path (`key_id` /
|
|
-- `n_child`) so a client can spend WITHOUT a client-side identify search.
|
|
CREATE TABLE IF NOT EXISTS outputs (
|
|
"commit" TEXT PRIMARY KEY,
|
|
rewind_hash TEXT NOT NULL REFERENCES accounts(rewind_hash) ON DELETE CASCADE,
|
|
value BIGINT NOT NULL,
|
|
height BIGINT NOT NULL,
|
|
mmr_index BIGINT NOT NULL,
|
|
is_coinbase BOOLEAN NOT NULL DEFAULT false,
|
|
lock_height BIGINT NOT NULL DEFAULT 0,
|
|
-- Recovered from the proof message during rewind (grin_recover_output
|
|
-- equivalent, server-side). Enables direct spend by the client.
|
|
key_id TEXT,
|
|
n_child INTEGER,
|
|
-- Spend tracking: set when this output's commitment appears as a tx input.
|
|
spent BOOLEAN NOT NULL DEFAULT false,
|
|
spent_height BIGINT
|
|
);
|
|
|
|
-- Balance / unspent-set queries filter by (account, spent).
|
|
CREATE INDEX IF NOT EXISTS idx_outputs_account_spent ON outputs (rewind_hash, spent);
|
|
-- Spend detection matches an on-chain input commitment against stored outputs.
|
|
CREATE INDEX IF NOT EXISTS idx_outputs_commit ON outputs ("commit");
|
|
|
|
-- Single-row scanner cursor. Grin is scanned by walking the output PMMR in
|
|
-- insertion-index order, so the resume point is an output index, not a block
|
|
-- position. `height`/`block_hash` hold the chain tip last seen (the reorg-
|
|
-- detection checkpoint). On a reorg the scanner rolls back rows above the fork
|
|
-- and reseeks from there.
|
|
CREATE TABLE IF NOT EXISTS chain_cursor (
|
|
id INTEGER PRIMARY KEY CHECK (id = 1),
|
|
-- Highest output PMMR index already scanned (forward-scan resume point).
|
|
output_mmr_index BIGINT NOT NULL DEFAULT 0,
|
|
-- Chain tip height + block hash at the last tick (reorg checkpoint).
|
|
height BIGINT NOT NULL,
|
|
block_hash TEXT NOT NULL
|
|
);
|