菜单
Use when storing a whole SQLite database compressed and/or encrypted at rest in a gosqlite vfs/vault container (live, per-transaction durable) — the liteorm.org/dialect/sqlite/vault package; distinct from per-object lob compression and from the lighter OpenEncrypted page cipher.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when storing large or growing binary content (files, uploads, blobs) in SQLite as streamed io.ReaderAt/io.WriterAt instead of loading whole []byte — the orm.LOB field + liteorm.org/dialect/sqlite/lob.
Use when working with liteorm's declarative orm front-end — model structs and tags, AutoMigrate, the orm.Repo, associations (Load/Attach), hooks, or soft delete.
Use when liteorm code behaves unexpectedly, or proactively before writing it, to avoid the common gotchas around loading, soft delete, types, and dialect-gated operators.
Use when migrating a gorm codebase to liteorm — running models on gorm tags as-is, rewriting them to native orm tags, and adjusting for what differs.
Use when adding vector (sqlite-vec), full-text (FTS5), or hybrid RRF search to liteorm's SQLite backend.
Use when capturing, applying, inverting, or concatenating SQLite changesets (the SESSION extension) for audit logs, one-way replication, or undo — the liteorm.org/dialect/sqlite/changeset package. SQLite backend only.
| name | vault |
| description | Use when storing a whole SQLite database compressed and/or encrypted at rest in a gosqlite vfs/vault container (live, per-transaction durable) — the liteorm.org/dialect/sqlite/vault package; distinct from per-object lob compression and from the lighter OpenEncrypted page cipher. |
Import liteorm.org/dialect/sqlite/vault. It stores a SQLite database in a gosqlite vfs/vault container — one file that is, independently, compressed and/or encrypted at rest. The database is queried live in place with per-transaction durability (a crash leaves the last committed state). The returned *liteorm.DB is used exactly like one from sqlite.Open.
db, err := vault.Open("app.db") // compressed at the default level, live
defer db.Close()
import gosqlite "gosqlite.org"
db, err := vault.OpenConfig(
gosqlite.Config{Path: "app.db", Pragmas: gosqlite.RecommendedPragmas()},
vault.Options{Level: vault.CompressionBest, Key: key}, // both; Level alone = compress, Key alone = encrypt
)
vault.CompressionNone|Fastest|Fast|Default|Better|Best. None (zero value) stores raw. Compress-then-encrypt order.Key is the raw cipher key (32-byte Adiantum default / 64-byte AES-XTS); derive from a passphrase with gosqlite.org/vfs/crypto's DeriveKey. For shared access use Options.Recipients (+ Masters/Writers, via gosqlite.org/crypto/keyring); Key/Recipients are mutually exclusive, create-time.vault.Open / OpenConfig — live, per-transaction durable, in place. The default; use for anything long-lived.vault.OpenSnapshot / OpenSnapshotConfig — archival model: inflated to a plaintext working copy for the session, recompressed at Close. Per-session durability, plaintext on disk (NOT at-rest encryption). For distribution / open-modify-close only.VACUUM (≈doubles the file). Reclaim via the gosqlite.org/vfs/vault path functions: online Checkpoint/Trim/CompactLogicalOnline, offline Compact/CompactLogical; plus Pack/Unpack, Snapshot, Rekey/Rewrap/Members.sqlite.OpenEncrypted instead — vault is for compression and/or multi-recipient/tamper-evident encryption.orm.LOB field — see the large-objects skill.examples/vault.