Interface: RewrapBatch
Defined in: packages/persistence/src/personal/subject-keys.ts:155
What one SubjectKeys.rewrap call did. Counts and subject ids; never a key or a key's bytes.
Properties
changed
readonlychanged:number
Defined in: packages/persistence/src/personal/subject-keys.ts:182
Keys that had changed by the time the batch wrote: erased, or re-wrapped by another run. Nothing was written for them and nothing needs to be.
cursor
readonlycursor:string|undefined
Defined in: packages/persistence/src/personal/subject-keys.ts:163
Pass as after to take the next batch. It moves past rows that were skipped, so a
damaged key is met once per run and not once per batch. Unchanged when the batch
stopped, so the same rows are taken again.
done
readonlydone:boolean
Defined in: packages/persistence/src/personal/subject-keys.ts:165
Whether the read came back short, which means no key is left beyond this batch.
examined
readonlyexamined:number
Defined in: packages/persistence/src/personal/subject-keys.ts:157
Live keys read that were not under the active key encryption key.
rewrapped
readonlyrewrapped: readonlyRewrappedSource[]
Defined in: packages/persistence/src/personal/subject-keys.ts:171
What the batch did, by the key encryption key the keys were under: how many it moved
and how many it could not open. Exactly what record was given; empty when no row
changed and no key was damaged.
stopped?
readonlyoptionalstopped?:RewrapStop
Defined in: packages/persistence/src/personal/subject-keys.ts:184
Present when the batch stopped. It then wrote nothing, whatever it had prepared.
unwrapFailed
readonlyunwrapFailed: readonlystring[]
Defined in: packages/persistence/src/personal/subject-keys.ts:177
Subjects whose stored key did not authenticate under the key its row names
(unwrap_failed). Their rows are untouched: the value is damaged, and no retry
repairs it. An operator decides what becomes of each.