From 99cdbb56c7f6311fe873e03cd27ac2ee1fb460e1 Mon Sep 17 00:00:00 2001
From: kyehn <kyehn@users.noreply.github.com>
Date: Sun, 21 Sep 2025 07:46:46 +0800
Subject: [PATCH] sqlcipher: 4.6.1 -> 4.12.0

---
 pkgs/by-name/sq/sqlcipher/package.nix | 68 ++++++++++++++++++++-------
 1 file changed, 50 insertions(+), 18 deletions(-)

diff --git a/pkgs/by-name/sq/sqlcipher/package.nix b/pkgs/by-name/sq/sqlcipher/package.nix
index 8602fe564cbb..732ffb6ff6e1 100644
--- a/pkgs/by-name/sq/sqlcipher/package.nix
+++ b/pkgs/by-name/sq/sqlcipher/package.nix
@@ -4,28 +4,28 @@
   fetchFromGitHub,
   openssl,
   tcl,
-  installShellFiles,
   buildPackages,
   readline,
   ncurses,
   zlib,
   sqlite,
+  util-linux,
 }:
 
-stdenv.mkDerivation rec {
+stdenv.mkDerivation (finalAttrs: {
   pname = "sqlcipher";
-  version = "4.6.1";
+  version = "4.12.0";
 
   src = fetchFromGitHub {
     owner = "sqlcipher";
     repo = "sqlcipher";
-    rev = "v${version}";
-    hash = "sha256-VcD3NwVrC75kLOJiIgrnzVpkBPhjxTmEFyKg/87wHGc=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-dJBZw8SzcNS0GGt9el4tiR7gc2DOajuUVfDukwrVPeQ=";
   };
 
   nativeBuildInputs = [
-    installShellFiles
     tcl
+    util-linux
   ];
 
   buildInputs = [
@@ -42,24 +42,56 @@ stdenv.mkDerivation rec {
   configureFlags = [
     "--enable-threadsafe"
     "--with-readline-inc=-I${lib.getDev readline}/include"
+    "--enable-load-extension"
   ];
 
-  CFLAGS = [
-    # We want feature parity with sqlite
-    sqlite.NIX_CFLAGS_COMPILE
-    "-DSQLITE_HAS_CODEC"
-  ];
-
-  BUILD_CC = "$(CC_FOR_BUILD)";
-
-  TCLLIBDIR = "${placeholder "out"}/lib/tcl${lib.versions.majorMinor tcl.version}";
+  env = {
+    NIX_CFLAGS_COMPILE = toString [
+      # We want feature parity with sqlite
+      sqlite.NIX_CFLAGS_COMPILE
+      "-DSQLITE_HAS_CODEC"
+      "-DSQLITE_EXTRA_INIT=sqlcipher_extra_init"
+      "-DSQLITE_EXTRA_SHUTDOWN=sqlcipher_extra_shutdown"
+      "-DSQLITE_TEMP_STORE=3"
+    ];
+    LDFLAGS = toString [
+      "-lssl"
+      "-lcrypto"
+    ];
+    BUILD_CC = "$(CC_FOR_BUILD)";
+    TCLLIBDIR = "${placeholder "out"}/lib/tcl${lib.versions.majorMinor tcl.version}";
+  };
 
+  # Rename files from sqlite3 to sqlcipher to prevent file collisons
   postInstall = ''
-    installManPage sqlcipher.1
+    mv $out/bin/{sqlite3,sqlcipher}
+    mkdir $out/include/sqlcipher
+    mv $out/include/sqlite3.h $out/include/sqlcipher/sqlite3.h
+    mv $out/include/sqlite3ext.h $out/include/sqlcipher/sqlite3ext.h
+    mv $out/lib/lib{sqlite3,sqlcipher}.a
+    rm -f $out/lib/libsqlite3.0.dylib $out/lib/libsqlite3.dylib $out/lib/libsqlite3.so $out/lib/libsqlite3.so.0
+    rename libsqlite3 libsqlcipher $out/lib/libsqlite3*
+    mv $out/lib/pkgconfig/{sqlite3,sqlcipher}.pc
+    mv $out/share/man/man1/{sqlite3,sqlcipher}.1
+    substituteInPlace $out/lib/pkgconfig/sqlcipher.pc \
+      --replace-fail "-lsqlite3" "-lsqlcipher" \
+      --replace-fail "-lz" "-lz -lcrypto" \
+      --replace-fail "includedir}" "includedir}/sqlcipher"
+  ''
+  + lib.optionalString stdenv.hostPlatform.isDarwin ''
+    f=$(echo $out/lib/libsqlcipher.*.dylib)
+    ln --symbolic --force "$f" $out/lib/libsqlcipher.0.dylib
+    ln --symbolic --force "$f" $out/lib/libsqlcipher.dylib
+    ln --symbolic --force "$f" $out/lib/libsqlite3.dylib
+  ''
+  + lib.optionalString stdenv.hostPlatform.isLinux ''
+    f=$(echo $out/lib/libsqlcipher.so.*)
+    ln --symbolic --force "$f" $out/lib/libsqlcipher.so.0
+    ln --symbolic --force "$f" $out/lib/libsqlcipher.so
   '';
 
   meta = {
-    changelog = "https://github.com/sqlcipher/sqlcipher/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/sqlcipher/sqlcipher/blob/${finalAttrs.src.rev}/CHANGELOG.md";
     description = "SQLite extension that provides 256 bit AES encryption of database files";
     mainProgram = "sqlcipher";
     homepage = "https://www.zetetic.net/sqlcipher/";
@@ -67,4 +99,4 @@ stdenv.mkDerivation rec {
     maintainers = [ ];
     platforms = lib.platforms.unix;
   };
-}
+})