True if this header begins a complete database snapshot (MinTXID == 1).

The keep-newest invariant shared by every retention path: if the last file marked for deletion is the newest file overall, un-mark it so at least one

Drives the REAL binary's write path over `workload()`: seeds WAL mode, then for each statement-group writes via plain `sqlite3` and runs `litestream r

Runs the real `litestream restore -o <out> <file-url>` for a replica tree.

Builds the lock-object key: `lock.json` when `path` is empty, else `<path>/lock.json`. Ported byte-for-byte from `lockKey` (s3/leaser.go:83-88).

Build the S3 key for an LTX file: `{path}/{level:04x}/{min}-{max}.ltx`. Ported from s3/replica_client.go:629, 677, 1040-1042.

Map an `object_store::Error` to `crate::Error`, preserving NotFound as `io::ErrorKind::NotFound` so callers keep working with the std error kind. Mirr

`true` if a TCP connection to the MinIO endpoint succeeds within a short timeout. Used to decide skip-vs-run without blocking.

`app` labels this client's traffic in the User-Agent (the aws AppName format, `app/<name>`), keeping e.g. the lease safety lane observable in black-bo

Opens an application writer connection in WAL mode (the host's own handle).

Reads all committed frames to end-of-file and returns a map of page number → byte offset of the latest committed version of that page, the max offset

Parses a `<min>-<max>.ltx` filename (ltx.go:450-459).

Parse an S3 host into `(bucket, region, endpoint, force_path_style)`. Direct port of `ParseHost` (s3/replica_client.go:1608-1652): MinIO-style `bucke

Lexically cleans a slash-separated path. A faithful port of `Clean` in the Go standard library `path` package (`go/src/path/path.go`, `func Clean`).

Joins any number of path elements into a single slash-separated path, cleaning the result. A faithful port of `Join` in the Go standard library `path

Reads `n` bytes at absolute `offset`, returning `None` (the `io.EOF` case) when fewer than `n` bytes are available — exactly the behavior of Go's `io.

Reads and validates the WAL header into `self`. Ported from `readHeader` in litestream@v0.5.11 wal_reader.go:90-129.

Rolls back the long-running read transaction. Ported from `releaseReadLock` (db.go:979-992). Uses the `rollback` helper semantics: a "no transaction

Restores the database from this replica's client into `output_path`. Convenience wrapper over [`restore`] using this replica's client and the most-re

Runs `litestream <args...>`, asserting success and surfacing stderr on failure.

Drive a promise and apply `on_fulfilled` as soon as it settles. The callback may return a composite waitUntil promise after publishing its response. T

Seed the replicated position from the caller's known-durable state and mark it known, so the next sync skips the `calc_pos` listing. A fresh cell seed

The cell to shed right now: resident, idle, not holding an alarm the node still owes, and the least recently used of those. Demand shedding and pressu

Returns the remaining time until expiry, or `None` once expired. Ported from `Lease.TTL` (leaser.go:42-44): `time.Until(ExpiresAt)`. Go returns a *ne

A unique path prefix per test run so concurrent / repeated runs don't collide and the suite always starts from a clean slate (it `delete_all`s first).

The head_bucket replacement: prove the bucket is reachable and the credential is accepted with one list page.

Size of the WAL file in bytes, 0 if absent. Ported from `walFileSize` (db.go:1183-1191).

The cell's committed-write position: SQLite's total completed row changes on this connection, monotonic for the life of the activation. The output gat