Fix foreign key constraints and improve snapshot tracking

- Add unified compression/encryption package in internal/blobgen
- Update DATAMODEL.md to reflect current schema implementation
- Refactor snapshot cleanup into well-named methods for clarity
- Add snapshot_id to uploads table to track new blobs per snapshot
- Fix blob count reporting for incremental backups
- Add DeleteOrphaned method to BlobChunkRepository
- Fix cleanup order to respect foreign key constraints
- Update tests to reflect schema changes

internal/blob/packer_test.go

@@ -2,13 +2,14 @@ package blob
 
 import (
 	"bytes"
+	"context"
 	"crypto/sha256"
+	"database/sql"
 	"encoding/hex"
 	"io"
 	"testing"
 
 	"filippo.io/age"
-	"git.eeqj.de/sneak/vaultik/internal/crypto"
 	"git.eeqj.de/sneak/vaultik/internal/database"
 	"git.eeqj.de/sneak/vaultik/internal/log"
 	"github.com/klauspost/compress/zstd"
@@ -30,12 +31,6 @@ func TestPacker(t *testing.T) {
 		t.Fatalf("failed to parse test identity: %v", err)
 	}
 
-	// Create test encryptor using the public key
-	enc, err := crypto.NewEncryptor([]string{testPublicKey})
-	if err != nil {
-		t.Fatalf("failed to create encryptor: %v", err)
-	}
-
 	t.Run("single chunk creates single blob", func(t *testing.T) {
 		// Create test database
 		db, err := database.NewTestDB()
@@ -48,7 +43,7 @@ func TestPacker(t *testing.T) {
 		cfg := PackerConfig{
 			MaxBlobSize:      10 * 1024 * 1024, // 10MB
 			CompressionLevel: 3,
-			Encryptor:        enc,
+			Recipients:       []string{testPublicKey},
 			Repositories:     repos,
 		}
 		packer, err := NewPacker(cfg)
@@ -59,8 +54,22 @@ func TestPacker(t *testing.T) {
 		// Create a chunk
 		data := []byte("Hello, World!")
 		hash := sha256.Sum256(data)
+		hashStr := hex.EncodeToString(hash[:])
+
+		// Create chunk in database first
+		dbChunk := &database.Chunk{
+			ChunkHash: hashStr,
+			Size:      int64(len(data)),
+		}
+		err = repos.WithTx(context.Background(), func(ctx context.Context, tx *sql.Tx) error {
+			return repos.Chunks.Create(ctx, tx, dbChunk)
+		})
+		if err != nil {
+			t.Fatalf("failed to create chunk in db: %v", err)
+		}
+
 		chunk := &ChunkRef{
-			Hash: hex.EncodeToString(hash[:]),
+			Hash: hashStr,
 			Data: data,
 		}
 
@@ -123,7 +132,7 @@ func TestPacker(t *testing.T) {
 		cfg := PackerConfig{
 			MaxBlobSize:      10 * 1024 * 1024, // 10MB
 			CompressionLevel: 3,
-			Encryptor:        enc,
+			Recipients:       []string{testPublicKey},
 			Repositories:     repos,
 		}
 		packer, err := NewPacker(cfg)
@@ -136,8 +145,22 @@ func TestPacker(t *testing.T) {
 		for i := 0; i < 10; i++ {
 			data := bytes.Repeat([]byte{byte(i)}, 1000)
 			hash := sha256.Sum256(data)
+			hashStr := hex.EncodeToString(hash[:])
+
+			// Create chunk in database first
+			dbChunk := &database.Chunk{
+				ChunkHash: hashStr,
+				Size:      int64(len(data)),
+			}
+			err = repos.WithTx(context.Background(), func(ctx context.Context, tx *sql.Tx) error {
+				return repos.Chunks.Create(ctx, tx, dbChunk)
+			})
+			if err != nil {
+				t.Fatalf("failed to create chunk in db: %v", err)
+			}
+
 			chunks[i] = &ChunkRef{
-				Hash: hex.EncodeToString(hash[:]),
+				Hash: hashStr,
 				Data: data,
 			}
 		}
@@ -191,7 +214,7 @@ func TestPacker(t *testing.T) {
 		cfg := PackerConfig{
 			MaxBlobSize:      5000, // 5KB max
 			CompressionLevel: 3,
-			Encryptor:        enc,
+			Recipients:       []string{testPublicKey},
 			Repositories:     repos,
 		}
 		packer, err := NewPacker(cfg)
@@ -204,8 +227,22 @@ func TestPacker(t *testing.T) {
 		for i := 0; i < 10; i++ {
 			data := bytes.Repeat([]byte{byte(i)}, 1000) // 1KB each
 			hash := sha256.Sum256(data)
+			hashStr := hex.EncodeToString(hash[:])
+
+			// Create chunk in database first
+			dbChunk := &database.Chunk{
+				ChunkHash: hashStr,
+				Size:      int64(len(data)),
+			}
+			err = repos.WithTx(context.Background(), func(ctx context.Context, tx *sql.Tx) error {
+				return repos.Chunks.Create(ctx, tx, dbChunk)
+			})
+			if err != nil {
+				t.Fatalf("failed to create chunk in db: %v", err)
+			}
+
 			chunks[i] = &ChunkRef{
-				Hash: hex.EncodeToString(hash[:]),
+				Hash: hashStr,
 				Data: data,
 			}
 		}
@@ -265,7 +302,7 @@ func TestPacker(t *testing.T) {
 		cfg := PackerConfig{
 			MaxBlobSize:      10 * 1024 * 1024, // 10MB
 			CompressionLevel: 3,
-			Encryptor:        enc,
+			Recipients:       []string{testPublicKey},
 			Repositories:     repos,
 		}
 		packer, err := NewPacker(cfg)
@@ -276,8 +313,22 @@ func TestPacker(t *testing.T) {
 		// Create test data
 		data := bytes.Repeat([]byte("Test data for encryption!"), 100)
 		hash := sha256.Sum256(data)
+		hashStr := hex.EncodeToString(hash[:])
+
+		// Create chunk in database first
+		dbChunk := &database.Chunk{
+			ChunkHash: hashStr,
+			Size:      int64(len(data)),
+		}
+		err = repos.WithTx(context.Background(), func(ctx context.Context, tx *sql.Tx) error {
+			return repos.Chunks.Create(ctx, tx, dbChunk)
+		})
+		if err != nil {
+			t.Fatalf("failed to create chunk in db: %v", err)
+		}
+
 		chunk := &ChunkRef{
-			Hash: hex.EncodeToString(hash[:]),
+			Hash: hashStr,
 			Data: data,
 		}