Module migrations 

One-time database migrations.

A fresh database is stamped current and a legacy database is walked through the named migrations, once the version and server name gates decide it is safe to touch.

Modules

account_status 🔒

clear_servername_status 🔒

conduit 🔒

email_bindings 🔒

fix_bad_double_separator_in_state_cache 🔒

fix_hashed_sentinel_passwords 🔒

fix_readreceiptid_readreceipt_duplicates 🔒

fix_referencedevents_missing_sep 🔒

import_conduit_knocks 🔒

injectivity 🔒

Short id injectivity: the one-time scan and repair.

migrate_media 🔒

migrate_profile_keys 🔒

moderation 🔒

rebuild_roomid_tscount_pducount 🔒

remove_remote_media_userid 🔒

retroactively_fix_bad_data_from_roomuserid_joined 🔒

split_conduit_highlight_counts 🔒

upgrade_legacy_mediaid_user 🔒

Constants

DATABASE_VERSION 🔒

The current schema version.

FORCE_MIGRATION_DELAY 🔒

FOREIGN_LINEAGE_MARKER 🔒

A marker written by a sibling conduwuit-lineage server but never by tuwunel. Its presence identifies a foreign database at a higher schema number even after tuwunel has stamped its own server_name, so a database opened by both servers in turn keeps booting rather than being refused as too new.

SERVER_NAME_KEY 🔒

Functions

backfill_server_name 🔒

Stamp the marker on a database that pre-dates SERVER_NAME_KEY by probing for any user from the configured server. If none, the database belongs to a different server and reuse is refused.

check_database_version 🔒

Gate the discovered schema version before migrations and the server_name backfill run. The integer is comparable only within tuwunel’s own lineage; a foreign database (Conduit and forks) numbers schema on a colliding ladder and is recognized as foreign by is_foreign_lineage, so its number is not gated. Within our lineage a version below 13 is refused as unmigratable and one above this build as too new to open safely; force_migration overrides the latter for a deliberate downgrade.

check_server_name 🔒

Matrix resource ownership is based on the server name; changing it requires recreating the database from scratch. The marker is stamped once in fresh(); pre-marker databases are backfilled by probing for any user from the configured server.

fresh 🔒

is_foreign_lineage 🔒

Whether the database comes from a foreign (non-tuwunel) lineage: it predates our SERVER_NAME_KEY stamp, or carries a conduwuit-lineage migration marker that persists even after we stamp ours. Must be read before the server_name backfill, which removes the first signal.

local_user_id 🔒

Assembles a local user id from a localpart a foreign column records.

migrate 🔒

Apply any migrations

migrations 🔒

Type Aliases

UserIdBuf 🔒

Inline budget for a local user id assembled from a foreign localpart.