Method open

nodedb/src/control/security/catalog/system_catalog.rs:21–64

Open or create the system catalog at the given path.

(path: &Path)

impl SystemCatalog {
    /// Open or create the system catalog at the given path.
    pub fn open(path: &Path) -> crate::Result<Self> {
        if let Some(parent) = path.parent() {
            std::fs::create_dir_all(parent)?;
        }

        let db = Database::create(path).map_err(|e| catalog_err("open", e))?;

        // Bootstrap every `_system.*` table from the canonical registry —
        // but only if at least one is actually missing. Probing read-only
        // first keeps `open` byte-idempotent on an already-bootstrapped
        // catalog: a write transaction + commit stamps a fresh meta/commit
        // page on redb every time, so an unconditional bootstrap rewrites
        // `system.redb` on every boot (changing its size/md5) even when
        // nothing changed — and a boot that then fails its integrity check
        // would have mutated persistent catalog state on its way out.
        // Opening a table in a write transaction creates it if absent; the
        // registry is the single source of truth, so a table cannot be
        // read in production code without being bootstrapped here.
        let needs_bootstrap = match db.begin_read() {
            Ok(read_txn) => super::bootstrap_tables::BOOTSTRAP_TABLES
                .iter()
                .any(|table| (table.probe)(&read_txn).is_err()),
            // A read transaction on a brand-new database can fail before
            // the first commit; treat that as "bootstrap needed".
            Err(_) => true,
        };
        if needs_bootstrap {
            let write_txn = db.begin_write().map_err(|e| catalog_err("init txn", e))?;
            {
                for table in super::bootstrap_tables::BOOTSTRAP_TABLES {
                    (table.create)(&write_txn)
                        .map_err(|e| catalog_err(&format!("init {} table", table.label), e))?;
                }
            }
            write_txn
                .commit()
                .map_err(|e| catalog_err("init commit", e))?;
            info!(path = %path.display(), "system catalog opened (bootstrapped)");
        } else {
            info!(path = %path.display(), "system catalog opened");
        }

        Ok(Self { db })
    }

    /// Execute a write transaction on the WASM_MODULES table.
    fn wasm_write<F, T>(&self, op: &str, f: F) -> crate::Result<T>