@bjornpagen/bumbledb 1.3.0 → 2.0.0-rc.1

package/dist/runtime-native.d.ts

@@ -1,141 +0,0 @@
-/** Exact-version internal bridge, shared by core and log. Not a public API. */
-import type { DbHandle, LogChainKind, LogCommandKind, LogCommandMetadata, LogCommandRef, LogCondition, LogDecisionStamp, LogIdentity, LogLimits, LogOutcomeWire, LogSchemaHandle, LogStateStamp, Violation } from "./native.js";
-import { native } from "./native.js";
-import type { SchemaSpec } from "./spec.js";
-export interface RuntimeHandle {
-    readonly __runtime: unique symbol;
-}
-export interface OperationHandle {
-    readonly __operation: unique symbol;
-}
-export interface DirectoryHandle {
-    readonly __directory: unique symbol;
-}
-/** Stamped `NativeKind::RepositoryLock` mint — not a directory-owner twin. */
-export interface RepositoryLockHandle {
-    readonly __repositoryLock: unique symbol;
-}
-/** Resource kinds installed in native worker tables. */
-export type NativeKind = "snapshot" | "prepared" | "result" | "cursor" | "draft" | "changes" | "repository-lock";
-/**
- * Checked capability into the native registry. JS tokens validate
- * these five fields; native re-judges kind/generation/owner on every verb.
- */
-export interface Capability {
-    readonly runtime: bigint;
-    readonly worker: number;
-    readonly kind: NativeKind;
-    readonly id: bigint;
-    readonly generation: bigint;
-}
-export type ManagedDbOutcome = {
-    readonly tag: "accepted";
-    readonly db: DbHandle;
-} | {
-    readonly tag: "rejected";
-    readonly violations: readonly Violation[];
-} | {
-    readonly tag: "refused";
-    readonly kind: "schemaError" | "newtypeMismatch" | "fingerprintMismatch" | "destinationExists";
-    readonly message: string;
-};
-export type LogTakeWire = {
-    readonly ok: false;
-    readonly kind: LogCommandKind | LogChainKind;
-    readonly message: string;
-} | {
-    /** Command sealed: envelope bytes + reference. */
-    readonly ok: true;
-    readonly bytes: Uint8Array;
-    readonly ref: LogCommandRef;
-} | {
-    /** Command parsed. */
-    readonly ok: true;
-    readonly identity: LogIdentity;
-    readonly receiptEpoch: bigint;
-    readonly requestId: string;
-    readonly condition: LogCondition;
-    readonly changes: Uint8Array;
-    readonly result: Uint8Array;
-    readonly ref: LogCommandRef;
-} | {
-    /** Decision framed. */
-    readonly ok: true;
-    readonly bytes: Uint8Array;
-    readonly digest: Uint8Array;
-} | {
-    /** Decision decoded (and chain-verified when a parent was given). */
-    readonly ok: true;
-    readonly identity: LogIdentity;
-    readonly seq: bigint;
-    readonly parent: LogDecisionStamp;
-    readonly beforeState: LogStateStamp;
-    readonly afterState: LogStateStamp;
-    readonly commandBytes: Uint8Array;
-    readonly command: LogCommandRef;
-    readonly outcome: LogOutcomeWire;
-    readonly digest: Uint8Array;
-};
-export interface OptionsWire {
-    readonly workers?: number | undefined;
-    readonly queueCapacity?: number | undefined;
-    readonly cleanupCapacity?: number | undefined;
-    readonly ownerCapacity?: number | undefined;
-    readonly nativeHandleCapacity?: number | undefined;
-    readonly cleanupTimeoutMs?: number | undefined;
-}
-export interface InspectionWire {
-    readonly phase: "open" | "closing" | "closed";
-    readonly queued: bigint;
-    readonly active: bigint;
-    readonly retained: bigint;
-    readonly owners: bigint;
-    readonly databases: bigint;
-    readonly natives: bigint;
-}
-export type CloseWire = {
-    readonly kind: "closed";
-} | {
-    readonly kind: "incomplete";
-    readonly outstanding: InspectionWire;
-} | {
-    readonly kind: "failed";
-};
-interface RuntimeNative {
-    runtimeErrorCodes(): readonly string[];
-    runtimeOpen(options: OptionsWire): RuntimeHandle;
-    runtimeReady(runtime: RuntimeHandle, callback: () => void): OperationHandle;
-    runtimeHash(runtime: RuntimeHandle, bytes: Uint8Array, callback: () => void): OperationHandle;
-    runtimeTake(operation: OperationHandle): Uint8Array | null;
-    runtimeCancel(operation: OperationHandle, callback: (report: CloseWire) => void): void;
-    runtimeClose(runtime: RuntimeHandle, callback: (report: CloseWire) => void): void;
-    runtimeInspect(runtime: RuntimeHandle): InspectionWire;
-    /**
-     * L12 request (D12/D25): one-shot arm. Next `dispatch_payload_message`
-     * must cancel after `work()` returns and the post-work `checkpoint()`
-     * (`runtime.rs` ~860–862), before `complete_operation` writes
-     * `operation.output`. A local `QueuedOutput` is not registration.
-     * Predelivery: no JS take; cursor stays on row1 so retry does not skip.
-     */
-    runtimeArmPublicationCancel(runtime: RuntimeHandle): void;
-    runtimeDirectoryAcquire(runtime: RuntimeHandle, path: string, callback: () => void): OperationHandle;
-    runtimeDirectoryTake(operation: OperationHandle): DirectoryHandle;
-    runtimeDirectoryBegin(owner: DirectoryHandle): OperationHandle;
-    runtimeDirectoryCheck(operation: OperationHandle): void;
-    runtimeDirectoryEnd(operation: OperationHandle): void;
-    runtimeDirectoryClose(owner: DirectoryHandle, remove: boolean, callback: (report: CloseWire) => void): void;
-    runtimeDirectoryDbOpen(owner: DirectoryHandle, childName: string, spec: SchemaSpec, create: boolean, callback: () => void): OperationHandle;
-    runtimeDbTake(operation: OperationHandle): ManagedDbOutcome;
-    runtimeManagedDbClose(db: DbHandle, callback: (report: CloseWire) => void): void;
-    runtimeLogCommandSeal(runtime: RuntimeHandle, schema: LogSchemaHandle, metadata: LogCommandMetadata, changes: Uint8Array, result: Uint8Array | null, limits: LogLimits, callback: () => void): OperationHandle;
-    runtimeLogCommandParse(runtime: RuntimeHandle, schema: LogSchemaHandle, bytes: Uint8Array, limits: LogLimits, callback: () => void): OperationHandle;
-    runtimeLogDecisionDecode(runtime: RuntimeHandle, bytes: Uint8Array, parent: LogDecisionStamp | null, limits: LogLimits, callback: () => void): OperationHandle;
-    runtimeLogTake(operation: OperationHandle): LogTakeWire;
-    /** L14 mint: `Runtime::mint_repository_lock` stamps `NativeKind::RepositoryLock` at take. */
-    logRepositoryLockAcquire(runtime: RuntimeHandle, directory: string, callback: () => void): OperationHandle;
-    logRepositoryLockTake(operation: OperationHandle): RepositoryLockHandle;
-    logRepositoryLockRelease(owner: RepositoryLockHandle, callback: (report: CloseWire) => void): void;
-}
-export declare const runtimeNative: typeof native & RuntimeNative;
-export {};
-//# sourceMappingURL=runtime-native.d.ts.map

package/dist/runtime-native.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-native.d.ts","sourceRoot":"","sources":["../src/runtime-native.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,KAAK,EACX,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,cAAc,EACd,eAAe,EACf,aAAa,EACb,SAAS,EACT,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAE1C,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,MAAM,CAAA;CACjC;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,MAAM,CAAA;CACnC;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,WAAW,EAAE,OAAO,MAAM,CAAA;CACnC;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,MAAM,CAAA;CACxC;AAED,wDAAwD;AACxD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,iBAAiB,CAAA;AAEhH;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,gBAAgB,GACzB;IAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,GACvE;IACA,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,mBAAmB,CAAA;IAC9F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACvB,CAAA;AAEJ,MAAM,MAAM,WAAW,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9F;IACA,kDAAkD;IAClD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC1B,GACD;IACA,sBAAsB;IACtB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC1B,GACD;IACA,uBAAuB;IACvB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC1B,GACD;IACA,qEAAqE;IACrE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC1B,CAAA;AAEJ,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC9C;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,SAAS,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE9B,UAAU,aAAa;IACtB,iBAAiB,IAAI,SAAS,MAAM,EAAE,CAAA;IACtC,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,CAAA;IAChD,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,eAAe,CAAA;IAC3E,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,eAAe,CAAA;IAC7F,WAAW,CAAC,SAAS,EAAE,eAAe,GAAG,UAAU,GAAG,IAAI,CAAA;IAC1D,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAA;IACtF,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAA;IACjF,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAAA;IACtD;;;;;;OAMG;IACH,2BAA2B,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAA;IACzD,uBAAuB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,eAAe,CAAA;IACpG,oBAAoB,CAAC,SAAS,EAAE,eAAe,GAAG,eAAe,CAAA;IACjE,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CAAA;IAC9D,qBAAqB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAA;IACvD,mBAAmB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAA;IACrD,qBAAqB,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAA;IAC3G,sBAAsB,CACrB,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,IAAI,GAClB,eAAe,CAAA;IAClB,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,gBAAgB,CAAA;IAC3D,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAA;IAIhF,qBAAqB,CACpB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,UAAU,GAAG,IAAI,EACzB,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,IAAI,GAClB,eAAe,CAAA;IAClB,sBAAsB,CACrB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,IAAI,GAClB,eAAe,CAAA;IAClB,wBAAwB,CACvB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,IAAI,GAClB,eAAe,CAAA;IAClB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,WAAW,CAAA;IACvD,6FAA6F;IAC7F,wBAAwB,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,eAAe,CAAA;IAC1G,qBAAqB,CAAC,SAAS,EAAE,eAAe,GAAG,oBAAoB,CAAA;IACvE,wBAAwB,CAAC,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAA;CAClG;AAGD,eAAO,MAAM,aAAa,EAAa,OAAO,MAAM,GAAG,aAAa,CAAA"}

package/dist/runtime-native.js

@@ -1,5 +0,0 @@
-/** Exact-version internal bridge, shared by core and log. Not a public API. */
-import { native } from "#native.ts";
-// The checked source/fresh-addon roster test pins this private declaration.
-export const runtimeNative = native;
-//# sourceMappingURL=runtime-native.js.map

package/dist/runtime-native.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-native.js","sourceRoot":"","sources":["../src/runtime-native.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAiB/E,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AA0KnC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAuC,CAAA"}

package/pack-provenance.json

@@ -1,7 +0,0 @@
-{
-	"candidateSourceDigest": "cf0cd07de3f8596acc7b15601063911472272a859f0fad176c3f75cd48f95719",
-	"specificationRevision": "87e9a83ee21d1f843c73ac6e7057b2b740db75aae70a553b8053b4f38e87bd2d",
-	"stagedAt": "2026-09-11T16:23:11.093Z",
-	"package": "@bjornpagen/bumbledb",
-	"version": "1.3.0"
-}

package/src/close.ts

@@ -1,53 +0,0 @@
-import { Effect } from "effect"
-import { finalizeClose } from "#runtime.ts"
-import type { CloseReport } from "#runtime-errors.ts"
-import { DbError } from "#runtime-errors.ts"
-/**
- * Shared close/drain adapters for scoped core owners (drafts, changes,
- * snapshots, sessions, results, cursors, databases). Early `close()` joins
- * the native close transition and
- * returns the honest {@link CloseReport}; a scope FINALIZER runs the same
- * close and surfaces `incomplete`/`failed` as a structured `CloseFailure`
- * DEFECT in the finalizer Cause — never catch-and-log, never false
- * quiescence. Teardown uses the runtime's reserved cleanup envelope
- * natively; repeated close joins the same stored transition (idempotent).
- */
-import type { CloseWire } from "#runtime-native.ts"
-
-function reportOf(operation: string, wire: CloseWire): CloseReport {
-	if (wire.kind === "failed") {
-		return { kind: "failed", error: new DbError({ operation, reason: { _tag: "Internal" } }) }
-	}
-	return wire
-}
-
-/**
- * Adapts one native close verb to `Effect<CloseReport>`: registration is
- * synchronous, completion resumes exactly once, and the whole wait is
- * uninterruptible — a close is a bounded registration/drain handshake, not
- * long maskable work (the native side owns the cleanup deadline).
- */
-function drainClose(
-	operation: string,
-	start: (callback: (report: CloseWire) => void) => void
-): Effect.Effect<CloseReport> {
-	return Effect.callback<CloseReport>((resume) => {
-		try {
-			start((report) => resume(Effect.succeed(reportOf(operation, report))))
-		} catch (cause) {
-			resume(
-				Effect.succeed({
-					kind: "failed",
-					error: cause instanceof DbError ? cause : new DbError({ operation, reason: { _tag: "Internal" } })
-				})
-			)
-		}
-	}).pipe(Effect.uninterruptible)
-}
-
-/** The finalizer policy: run the close, then die on incomplete/failed (E stays never). */
-function releaseOwner(operation: string, start: (callback: (report: CloseWire) => void) => void): Effect.Effect<void> {
-	return drainClose(operation, start).pipe(Effect.flatMap((report) => finalizeClose(operation, report)))
-}
-
-export { drainClose, releaseOwner }

package/src/db-native.ts

@@ -1,243 +0,0 @@
-/**
- * Private database bridge over worker-owned core snapshots and results.
- * The implementation lives in `ts/crate/src/`; this is not a public API.
- * Every verb runs on the shared bounded executor, registers under its
- * operation ownership and completes through the registered callback; `runtimeCancel` cancels
- * and joins any of them. Close verbs report the real drain outcome through
- * `CloseWire`.
- */
-
-import type { ChangeCounts } from "#changes.ts"
-import type { DbHandle, ParsedQuery, QueryParam, SealedDescriptor, Violation } from "#native.ts"
-import { native } from "#native.ts"
-import type { CellValue } from "#rows.ts"
-import type { CloseWire, OperationHandle, RuntimeHandle } from "#runtime-native.ts"
-import type { SchemaSpec } from "#spec.ts"
-
-export interface SnapshotHandle {
-	readonly __snapshot: unique symbol
-}
-export interface PreparedHandle {
-	readonly __prepared: unique symbol
-}
-export interface ResultHandle {
-	readonly __result: unique symbol
-}
-export interface CursorHandle {
-	readonly __cursor: unique symbol
-}
-export interface DraftHandle {
-	readonly __draft: unique symbol
-}
-export interface ChangesHandle {
-	readonly __changes: unique symbol
-}
-export interface ChangesCursorHandle {
-	readonly __changesCursor: unique symbol
-}
-
-/** The core-local witness: catalog/store identity plus generation, never a StateStamp. */
-export interface WitnessWire {
-	readonly store: string
-	readonly generation: bigint
-}
-
-export type ExpectedWire =
-	| { readonly kind: "any" }
-	| { readonly kind: "exact"; readonly store: string; readonly generation: bigint }
-
-export type ApplyOutcomeWire =
-	| { readonly tag: "accepted"; readonly witness: WitnessWire }
-	| { readonly tag: "no-change"; readonly witness: WitnessWire }
-	| { readonly tag: "invariant-rejected"; readonly violations: readonly Violation[] }
-	| { readonly tag: "moved"; readonly witnessed: WitnessWire; readonly current: WitnessWire }
-
-export type JudgeOutcomeWire =
-	| { readonly tag: "admitted"; readonly base: WitnessWire; readonly changes: ChangeCounts }
-	| {
-			readonly tag: "invariant-rejected"
-			readonly base: WitnessWire
-			readonly changes: ChangeCounts
-			readonly violations: readonly Violation[]
-	  }
-	| { readonly tag: "moved"; readonly witnessed: WitnessWire; readonly current: WitnessWire }
-
-/** Bounded database diagnostics: measurements, never retained row payloads. */
-export interface DbInspectionWire {
-	readonly generation: bigint
-	readonly storage: import("#db.ts").StorageInspection
-	readonly retainedOperations: bigint
-}
-
-export interface SnapshotWire {
-	readonly snapshot: SnapshotHandle
-	readonly witness: WitnessWire
-}
-
-export interface ChangesWire {
-	readonly changes: ChangesHandle
-	readonly fingerprint: string
-	readonly counts: ChangeCounts
-	readonly byteLength: bigint
-}
-
-export interface ChangeRecordWire {
-	readonly relation: number
-	readonly kind: "add" | "remove"
-	readonly values: readonly CellValue[]
-}
-
-export interface MutationReportWire {
-	readonly submitted: bigint
-	readonly changed: bigint
-}
-
-interface DbBridge {
-	/** Schema admission/compilation; take yields detached descriptor data. */
-	runtimeSchemaCompile(runtime: RuntimeHandle, spec: SchemaSpec, callback: () => void): OperationHandle
-	runtimeSchemaTake(operation: OperationHandle): SealedDescriptor
-
-	/** Coherent owned snapshot acquisition off a managed database. */
-	runtimeDbSnapshot(db: DbHandle, callback: () => void): OperationHandle
-	runtimeSnapshotTake(operation: OperationHandle): SnapshotWire
-	runtimeSnapshotClose(snapshot: SnapshotHandle, callback: (report: CloseWire) => void): void
-
-	/** One compiled query, with an independent share of the snapshot pin. */
-	runtimeSnapshotPrepare(snapshot: SnapshotHandle, query: ParsedQuery, callback: () => void): OperationHandle
-	runtimePreparedTake(operation: OperationHandle): PreparedHandle
-	runtimePreparedClose(prepared: PreparedHandle, callback: (report: CloseWire) => void): void
-	runtimePreparedReleaseMemory(prepared: PreparedHandle, callback: () => void): OperationHandle
-
-	/** Exact-key point read; take yields one owned row or null (absent). */
-	runtimeSnapshotGet(
-		snapshot: SnapshotHandle,
-		relationId: number,
-		keyStatementId: number,
-		keyCells: readonly CellValue[],
-		callback: () => void
-	): OperationHandle
-	runtimeRowTake(operation: OperationHandle): readonly CellValue[] | null
-
-	/**
-	 * Complete execution. One-shot preparation drops before publication;
-	 * explicit preparation reuses its compiled plan and scratch. The result is
-	 * sealed and independent only after ALL evaluation succeeded.
-	 */
-	runtimeSnapshotExecute(
-		snapshot: SnapshotHandle,
-		query: ParsedQuery,
-		params: readonly QueryParam[],
-		callback: () => void
-	): OperationHandle
-	runtimePreparedExecute(prepared: PreparedHandle, params: readonly QueryParam[], callback: () => void): OperationHandle
-	runtimeResultTake(operation: OperationHandle): ResultHandle
-	runtimeResultClose(result: ResultHandle, callback: (report: CloseWire) => void): void
-
-	/**
-	 * Explicit full materialization into final native row arrays.
-	 * Failure leaves the sealed backing available.
-	 */
-	runtimeResultCollect(result: ResultHandle, callback: () => void): OperationHandle
-	runtimeRowsTake(operation: OperationHandle): readonly (readonly CellValue[])[]
-
-	/**
-	 * Atomic spend: moves the completed result's backing storage into one
-	 * private cursor. A second transfer, or transfer racing collect,
-	 * refuses (SpentHandle) before touching the backing.
-	 */
-	runtimeResultCursor(result: ResultHandle, callback: () => void): OperationHandle
-	runtimeCursorTake(operation: OperationHandle): CursorHandle
-	/** One bounded delivery batch; null is EOF. Execution is already complete. */
-	runtimeCursorNext(cursor: CursorHandle, callback: () => void): OperationHandle
-	runtimePageTake(operation: OperationHandle): readonly (readonly CellValue[])[] | null
-	runtimeCursorClose(cursor: CursorHandle, callback: (report: CloseWire) => void): void
-
-	/** Database-free draft acquisition (schema compiled/checked on the executor). */
-	runtimeDraftOpen(runtime: RuntimeHandle, spec: SchemaSpec, callback: () => void): OperationHandle
-	runtimeDraftTake(operation: OperationHandle): DraftHandle
-	/**
-	 * One bounded ingestion chunk (rows × arity cells, row-major, sealed
-	 * field order). Rows are owned by the draft until finish. Failure spends
-	 * the draft and starts tracked
-	 * drain natively.
-	 */
-	runtimeDraftInsert(
-		draft: DraftHandle,
-		relationId: number,
-		rows: bigint,
-		cells: readonly CellValue[],
-		callback: () => void
-	): OperationHandle
-	runtimeDraftDelete(
-		draft: DraftHandle,
-		relationId: number,
-		rows: bigint,
-		cells: readonly CellValue[],
-		callback: () => void
-	): OperationHandle
-	runtimeReportTake(operation: OperationHandle): MutationReportWire
-	/** Consumes the draft into an immutable schema-bound ChangeSet (one command, add-wins normalization). */
-	runtimeDraftFinish(draft: DraftHandle, callback: () => void): OperationHandle
-	runtimeChangesTake(operation: OperationHandle): ChangesWire
-	runtimeDraftClose(draft: DraftHandle, callback: (report: CloseWire) => void): void
-	runtimeChangesClose(changes: ChangesHandle, callback: (report: CloseWire) => void): void
-	/** Owned immutable bytes; parsing checks canonical order and the supplied schema. */
-	runtimeChangesBytes(changes: ChangesHandle, callback: () => void): OperationHandle
-	runtimeChangesParse(
-		runtime: RuntimeHandle,
-		spec: SchemaSpec,
-		bytes: Uint8Array,
-		callback: () => void
-	): OperationHandle
-	/** One command's add-wins composition, not sequential application. */
-	runtimeChangesCompose(left: ChangesHandle, right: ChangesHandle, callback: () => void): OperationHandle
-	/** Independent bounded traversal; never spends the immutable source. */
-	runtimeChangesCursor(changes: ChangesHandle, callback: () => void): OperationHandle
-	runtimeChangesCursorTake(operation: OperationHandle): ChangesCursorHandle
-	runtimeChangesCursorNext(cursor: ChangesCursorHandle, callback: () => void): OperationHandle
-	runtimeChangePageTake(operation: OperationHandle): readonly ChangeRecordWire[] | null
-	runtimeChangesCursorClose(cursor: ChangesCursorHandle, callback: (report: CloseWire) => void): void
-
-	/** One immutable final-state admission/commit under the managed owner. */
-	runtimeDbApply(db: DbHandle, changes: ChangesHandle, expected: ExpectedWire, callback: () => void): OperationHandle
-	runtimeApplyTake(operation: OperationHandle): ApplyOutcomeWire
-	/** Same candidate admission as apply, aborted on its worker before returning. */
-	runtimeDbJudge(db: DbHandle, changes: ChangesHandle, expected: ExpectedWire, callback: () => void): OperationHandle
-	runtimeJudgeTake(operation: OperationHandle): JudgeOutcomeWire
-
-	runtimeDbInspect(db: DbHandle, callback: () => void): OperationHandle
-	runtimeDbClearCache(db: DbHandle, callback: () => void): OperationHandle
-	runtimeDbInspectTake(operation: OperationHandle): DbInspectionWire
-
-	/** Shared canonical row codec (also the log/migration encoding). */
-	runtimeEncodeRows(
-		runtime: RuntimeHandle,
-		spec: SchemaSpec,
-		relationId: number,
-		rows: bigint,
-		cells: readonly CellValue[],
-		callback: () => void
-	): OperationHandle
-	runtimeBytesTake(operation: OperationHandle): Uint8Array
-	runtimeDecodeRows(
-		runtime: RuntimeHandle,
-		spec: SchemaSpec,
-		relationId: number,
-		bytes: Uint8Array,
-		callback: () => void
-	): OperationHandle
-
-	/**
-	 * Read-only migration-codec integration over native `schema_file` and
-	 * `migration::{plan, manifest}` through the shared executor: bounded
-	 * owned input, bounded owned JSON response bytes, one registered
-	 * cancellable operation. Neither verb opens, initializes, freezes or
-	 * migrates a database.
-	 */
-	runtimeMigrationSchema(runtime: RuntimeHandle, spec: SchemaSpec, callback: () => void): OperationHandle
-	runtimeMigrationRead(runtime: RuntimeHandle, request: Uint8Array, callback: () => void): OperationHandle
-}
-
-// The fresh-addon roster test pins this private declaration exactly as it
-// pins #runtime-native.ts's; the two casts re-type the SAME single binding.
-export const dbNative = native as typeof native & DbBridge

package/src/internal/log.ts

@@ -1,48 +0,0 @@
-/**
- * @bjornpagen/bumbledb/internal/log — the exact-version cross-package seam
- * consumed by `@bjornpagen/bumbledb-log`. Unsupported application surface;
- * not a security boundary. Native kind/runtime/owner/state validation remains
- * mandatory on every verb. Real types are shipped; this is not stripInternal.
- */
-export type { ChangeDraft } from "#changes.ts"
-export { ChangeSet, internalChanges } from "#changes.ts"
-export type { CompiledSchema, SchemaId } from "#compile.ts"
-export { Schema } from "#compile.ts"
-export type { PreparedQuery, QueryReader } from "#db.ts"
-export { Db, internalPublishedReader } from "#db.ts"
-export type { SnapshotHandle } from "#db-native.ts"
-export { lower } from "#lower.ts"
-export { internalMigrationRead, internalMigrationSchema } from "#migration.ts"
-export {
-	internalBlake3,
-	internalDescriptor,
-	internalLogIdentities,
-	internalLogSchema,
-	nativeBindingIsLoaded
-} from "#native.ts"
-export type { CompleteResult } from "#result.ts"
-export { factCellsOf } from "#rows.ts"
-export type { NativeRuntimeOptions, RepositoryLock } from "#runtime.ts"
-export {
-	finalizeClose,
-	hashChunk,
-	internalAcquireRepositoryLock,
-	NativeRuntime,
-	nativeOperation,
-	nativeOperationWith,
-	runtimeHandle
-} from "#runtime.ts"
-export type { CloseReport, OutstandingWork } from "#runtime-errors.ts"
-export { CloseFailure, DbError, dbError, runtimeErrorCodes } from "#runtime-errors.ts"
-export type {
-	Capability,
-	CloseWire,
-	DirectoryHandle,
-	InspectionWire,
-	NativeKind,
-	OperationHandle,
-	RepositoryLockHandle,
-	RuntimeHandle
-} from "#runtime-native.ts"
-export { runtimeNative } from "#runtime-native.ts"
-export { schemasAgree } from "#schema.ts"

package/src/migration.ts

@@ -1,61 +0,0 @@
-/**
- * Private log-migration integration entrypoints: the two read-only
- * native migration-codec verbs the `@bjornpagen/bumbledb-log/migrations`
- * generator imports, wired over the shared executor onto the native
- * `schema_file`, `migration::plan` and `migration::manifest` modules.
- *
- * Both follow `hashChunk`'s shape: bounded owned input, bounded owned JSON
- * response bytes, ONE registered cancellable operation under the acquired
- * `NativeRuntime`. The schema verb takes the SDK `SchemaSpec` object — the
- * same wire that already crosses the bridge for open/create — never a
- * respelled text form. Neither verb opens, initializes, freezes or migrates
- * a database; the durable migrate/activate/abort workflow is the log's
- * admin surface, not this seam.
- */
-import { Effect } from "effect"
-import { dbNative } from "#db-native.ts"
-import { nativeOperationWith, runtimeHandle } from "#runtime.ts"
-import { DbError, dbError } from "#runtime-errors.ts"
-import type { SchemaSpec } from "#spec.ts"
-
-function owned(operation: string, value: Uint8Array | null): Uint8Array {
-	if (value === null) {
-		throw dbError(operation, { _tag: "Internal" })
-	}
-	return value
-}
-
-/**
- * Canonical schema admission for the migration generator: validates the
- * spec natively and yields bounded JSON bytes carrying the canonical
- * `schemaId` and the rendered schema snapshot.
- */
-const internalMigrationSchema = Effect.fn("internalMigrationSchema")(function* (spec: SchemaSpec) {
-	const runtime = yield* runtimeHandle()
-	return yield* nativeOperationWith(
-		"internalMigrationSchema",
-		(callback) => dbNative.runtimeMigrationSchema(runtime, spec, callback),
-		dbNative.runtimeBytesTake,
-		(bytes) => owned("internalMigrationSchema", bytes)
-	)
-})
-
-/**
- * One bounded read-only migration-codec request (plan parse/validate/
- * render/digest, manifest verify/append preview, plan-set digests): owned
- * JSON request bytes in, owned JSON response bytes out.
- */
-const internalMigrationRead = Effect.fn("internalMigrationRead")(function* (request: Uint8Array) {
-	if (!(request instanceof Uint8Array) || !(request.buffer instanceof ArrayBuffer)) {
-		return yield* Effect.fail(new DbError({ operation: "internalMigrationRead", reason: { _tag: "InvalidArgument" } }))
-	}
-	const runtime = yield* runtimeHandle()
-	return yield* nativeOperationWith(
-		"internalMigrationRead",
-		(callback) => dbNative.runtimeMigrationRead(runtime, request, callback),
-		dbNative.runtimeBytesTake,
-		(bytes) => owned("internalMigrationRead", bytes)
-	)
-})
-
-export { internalMigrationRead, internalMigrationSchema }