@delali/sirannon-db 0.3.1-next.43 → 0.3.1-next.46

package/dist/backup/index.d.ts

@@ -1,9 +1,9 @@
-import { B as BackupDestination, f as BackupRunReport } from '../types-DApb7dvw.js';
-export { g as BackupChain, h as BackupChainBase, i as BackupChainChange, j as BackupChainPosition, k as BackupChainRecord, l as BackupCycle, m as BackupCycleError, n as BackupCycleOptions, o as BackupCycleStatus, p as BackupFileReport, q as BackupGroupMembership, r as BackupGroupSource, s as BackupLogPosition, t as BackupNodePreference, u as BackupPiece, v as BackupProgress, w as BackupSkip, x as BackupSkipReason, y as BackupToDestinationOptions, z as BackupVerifyResult, C as DEFAULT_CHAIN_NAME, E as chainLogName, F as readBackupChains, G as verifyBackupRecord } from '../types-DApb7dvw.js';
-export { B as BackupCapabilities, a as BackupChainLocation, b as BackupRestorePlan, c as BackupSafeToDeleteOptions, d as backupPiecesSafeToDelete, p as planBackupRestore } from '../database-backup-C090lMHc.js';
-import { B as BackupRestoreOptions, a as BackupRestoreReport } from '../restore-options-C9MW9gpm.js';
-export { b as BackupRestoreProgress } from '../restore-options-C9MW9gpm.js';
-import '../query-types-Cv8N7pXj.js';
+import { B as BackupDestination, f as BackupRunReport } from '../types-_k29or0d.js';
+export { g as BackupChain, h as BackupChainBase, i as BackupChainChange, j as BackupChainPosition, k as BackupChainRecord, l as BackupCycle, m as BackupCycleError, n as BackupCycleOptions, o as BackupCycleStatus, p as BackupFileReport, q as BackupGroupMembership, r as BackupGroupSource, s as BackupLogPosition, t as BackupNodePreference, u as BackupPiece, v as BackupProgress, w as BackupSkip, x as BackupSkipReason, y as BackupToDestinationOptions, z as BackupVerifyResult, C as DEFAULT_CHAIN_NAME, E as chainLogName, F as readBackupChains, G as verifyBackupRecord } from '../types-_k29or0d.js';
+export { B as BackupCapabilities, a as BackupChainLocation, b as BackupRestorePlan, c as BackupSafeToDeleteOptions, d as backupPiecesSafeToDelete, p as planBackupRestore } from '../database-backup-CAuL6aA-.js';
+import { B as BackupRestoreOptions, a as BackupRestoreReport } from '../restore-options-DDOqVqDn.js';
+export { b as BackupRestoreProgress } from '../restore-options-DDOqVqDn.js';
+import '../query-types-p1liOP-b.js';
 
 /** What one assembled file took to build.
  * @public

package/dist/backup/index.mjs

@@ -1,8 +1,8 @@
-export { assembleFromDestination, restoreBackup } from '../chunk-63VBFSCS.mjs';
+export { assembleFromDestination, restoreBackup } from '../chunk-E7Q7HE46.mjs';
 export { backupPiecesSafeToDelete, planBackupRestore } from '../chunk-YNTDOFTN.mjs';
 export { verifyBackupRecord } from '../chunk-7SC2TZAS.mjs';
 import '../chunk-U445A3C4.mjs';
-import '../chunk-DVS4QSIZ.mjs';
+import '../chunk-GYCEJNU4.mjs';
 export { DEFAULT_CHAIN_NAME, chainLogName, readBackupChains } from '../chunk-YVF2ZJTE.mjs';
-import '../chunk-V5FUJEYY.mjs';
+import '../chunk-QBBLSQHQ.mjs';
 import '../chunk-PBRXXISQ.mjs';

package/dist/backup-scheduler/index.d.ts

@@ -1,6 +1,6 @@
-import { I as SQLiteConnection, J as BackupFileCopy, K as BackupRunRequest, f as BackupRunReport, L as BackupScheduleRequest } from '../types-DApb7dvw.js';
-export { p as BackupFileReport, O as BackupScheduleOptions, R as RunExclusive } from '../types-DApb7dvw.js';
-import '../query-types-Cv8N7pXj.js';
+import { I as SQLiteConnection, J as BackupFileCopy, K as BackupRunRequest, f as BackupRunReport, L as BackupScheduleRequest } from '../types-_k29or0d.js';
+export { p as BackupFileReport, O as BackupScheduleOptions, R as RunExclusive } from '../types-_k29or0d.js';
+import '../query-types-p1liOP-b.js';
 
 /** What one runtime needs before a copy can reach a destination without a local file.
  * @internal

package/dist/backup-scheduler/index.mjs

@@ -1,6 +1,6 @@
-export { BackupScheduler } from '../chunk-DXXCLTFF.mjs';
+export { BackupScheduler } from '../chunk-JQWGHSEH.mjs';
 import '../chunk-W67A4H2E.mjs';
-import '../chunk-2QCPVE67.mjs';
-import '../chunk-DVS4QSIZ.mjs';
-import '../chunk-V5FUJEYY.mjs';
+import '../chunk-E6IMX7RS.mjs';
+import '../chunk-GYCEJNU4.mjs';
+import '../chunk-QBBLSQHQ.mjs';
 import '../chunk-PBRXXISQ.mjs';

package/dist/{change-tracker-uG9gWvsY.d.ts → change-tracker-BY8_k6lS.d.ts}

@@ -1,5 +1,5 @@
-import { I as SQLiteConnection } from './types-DApb7dvw.js';
-import { C as ChangeEvent } from './query-types-Cv8N7pXj.js';
+import { I as SQLiteConnection } from './types-_k29or0d.js';
+import { C as ChangeEvent } from './query-types-p1liOP-b.js';
 
 /**
  * How long a change tracker keeps changes, and how much it reads at a time.

package/dist/chunk-3LXXH3RA.mjs

@@ -0,0 +1,6 @@
+// src/core/operation-registry.ts
+function operationRef(name) {
+  return { name };
+}
+
+export { operationRef };

package/dist/{chunk-7FQRQH5Z.mjs → chunk-45MKELYA.mjs}

@@ -1,4 +1,4 @@
-import { META_TABLE, CHANGES_TABLE, MIGRATIONS_TABLE, APPLIED_CHANGES_TABLE, COLUMN_VERSIONS_TABLE, DEVICE_CURSORS_TABLE, PEER_STATE_TABLE, SYNC_STATE_TABLE, STAGED_CHANGES_TABLE } from './chunk-7R4ER4FB.mjs';
+import { META_TABLE, CHANGES_TABLE, MIGRATIONS_TABLE, APPLIED_CHANGES_TABLE, COLUMN_VERSIONS_TABLE, DEVICE_CURSORS_TABLE, PEER_STATE_TABLE, SYNC_STATE_TABLE, STAGED_CHANGES_TABLE, isReservedIdentifier } from './chunk-6CMCO7S4.mjs';
 import { SirannonError } from './chunk-PBRXXISQ.mjs';
 
 // src/core/system-catalog/sqlite-catalog.ts
@@ -636,7 +636,19 @@ var DDL_DENY_RE = /\b(load_extension|ATTACH|randomblob|zeroblob|writefile|readfi
 function validateIdentifier(name) {
   return IDENTIFIER_RE.test(name);
 }
+var CREATE_INDEX_TARGETS_RE = /^\s*CREATE\s+INDEX(?:\s+IF\s+NOT\s+EXISTS)?\s+(?:["`[]?[A-Za-z_][A-Za-z0-9_]*["`\]]?\s*\.\s*)?["`[]?([A-Za-z_][A-Za-z0-9_]*)["`\]]?\s+ON\s+(?:["`[]?[A-Za-z_][A-Za-z0-9_]*["`\]]?\s*\.\s*)?["`[]?([A-Za-z_][A-Za-z0-9_]*)/i;
+var DDL_TARGET_RE = /^\s*(?:CREATE\s+TABLE(?:\s+IF\s+NOT\s+EXISTS)?|ALTER\s+TABLE|DROP\s+TABLE(?:\s+IF\s+EXISTS)?|DROP\s+INDEX(?:\s+IF\s+EXISTS)?)\s+(?:["`[]?[A-Za-z_][A-Za-z0-9_]*["`\]]?\s*\.\s*)?["`[]?([A-Za-z_][A-Za-z0-9_]*)/i;
+function ddlTargetsReservedIdentifier(sql) {
+  const indexTargets = CREATE_INDEX_TARGETS_RE.exec(sql);
+  if (indexTargets !== null) {
+    return isReservedIdentifier(indexTargets[1]) || isReservedIdentifier(indexTargets[2]);
+  }
+  const target = DDL_TARGET_RE.exec(sql);
+  if (target !== null) return isReservedIdentifier(target[1]);
+  return false;
+}
 function validateDdlSafety(sql) {
+  if (ddlTargetsReservedIdentifier(sql)) return false;
   if (!SAFE_DDL_RE.test(sql)) return false;
   if (sql.includes(";")) return false;
   if (/\bAS\s+SELECT\b/i.test(sql)) return false;

package/dist/{chunk-7R4ER4FB.mjs → chunk-6CMCO7S4.mjs}

@@ -166,6 +166,13 @@ var SAFE_INT_BOUND_TEXT = "9007199254740991";
 var SAFE_INT_BOUND = 9007199254740991n;
 var HEX_BYTES_RE = /^[0-9a-fA-F]*$/;
 var INT_PAYLOAD_RE = /^-?\d{1,19}$/;
+var MILLISECONDS_PER_SECOND = 1e3;
+function changedAtToEventTimestamp(changedAt) {
+  return Math.round(changedAt * MILLISECONDS_PER_SECOND);
+}
+function eventTimestampToChangedAt(timestamp) {
+  return timestamp / MILLISECONDS_PER_SECOND;
+}
 function encodeTaggedValues(value) {
   if (typeof value === "bigint" || isBinaryValue(value)) {
     return encodeTaggedLeaf(value);
@@ -268,4 +275,4 @@ function decodeHexBytes(hex) {
   return bytes;
 }
 
-export { APPLIED_CHANGES_TABLE, CDC_TRIGGER_PREFIX, CHANGES_TABLE, COLUMN_VERSIONS_TABLE, DEVICE_CURSORS_TABLE, INTERNAL_TABLE_PREFIX, LIVE_PROBE_TABLE_PREFIX, META_TABLE, MIGRATIONS_TABLE, PEER_STATE_TABLE, SAFE_INT_BOUND_TEXT, STAGED_CHANGES_TABLE, SYNC_STATE_TABLE, assertSqlAllowed, decodeTaggedValues, encodeTaggedValues, encodeWireRowsInPlace, isReservedIdentifier };
+export { APPLIED_CHANGES_TABLE, CDC_TRIGGER_PREFIX, CHANGES_TABLE, COLUMN_VERSIONS_TABLE, DEVICE_CURSORS_TABLE, INTERNAL_TABLE_PREFIX, LIVE_PROBE_TABLE_PREFIX, META_TABLE, MIGRATIONS_TABLE, PEER_STATE_TABLE, SAFE_INT_BOUND_TEXT, STAGED_CHANGES_TABLE, SYNC_STATE_TABLE, assertSqlAllowed, changedAtToEventTimestamp, decodeTaggedValues, encodeTaggedValues, encodeWireRowsInPlace, eventTimestampToChangedAt, isReservedIdentifier };

package/dist/{chunk-OJQHM4MT.mjs → chunk-ASEZCQNA.mjs}

@@ -1,13 +1,13 @@
 import { verifyBackupRecord } from './chunk-7SC2TZAS.mjs';
-import { BackupManager, BackupScheduler, DEFAULT_PIECE_BYTES, sendFileInPieces } from './chunk-DXXCLTFF.mjs';
+import { BackupManager, BackupScheduler, DEFAULT_PIECE_BYTES, sendFileInPieces } from './chunk-JQWGHSEH.mjs';
 import { DEFAULT_BACKUP_NAME_PREFIX, defaultStagingDir, DEFAULT_CAPTURE_INTERVAL_MS, DEFAULT_FULL_COPY_INTERVAL_MS } from './chunk-LXCGPZPA.mjs';
-import { WORKER_CANCELLED_CODE, deserializeError } from './chunk-YLAVDZCS.mjs';
-import { readCycleState, writeCycleState, removeCycleState, stagedCapturePath, captureAndCheckpointTurn } from './chunk-W77EEVOT.mjs';
+import { WORKER_CANCELLED_CODE, WORKER_COPY_STOPPED_CODE, deserializeError } from './chunk-MVSES6MS.mjs';
+import { readCycleState, writeCycleState, removeCycleState, stagedCapturePath, captureAndCheckpointTurn } from './chunk-KDAHYFW7.mjs';
 import { checkpointLog } from './chunk-U445A3C4.mjs';
-import { logPathFor } from './chunk-2QCPVE67.mjs';
-import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS } from './chunk-DVS4QSIZ.mjs';
+import { logPathFor } from './chunk-E6IMX7RS.mjs';
+import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS, reportQuietly } from './chunk-GYCEJNU4.mjs';
 import { DEFAULT_CHAIN_NAME, readBackupChains, appendChainRecord, appendChainHead, readChainHeadAt, readChainHeads } from './chunk-YVF2ZJTE.mjs';
-import { randomHex } from './chunk-V5FUJEYY.mjs';
+import { randomHex } from './chunk-QBBLSQHQ.mjs';
 import { SirannonError, ExtensionError } from './chunk-PBRXXISQ.mjs';
 import { Worker } from 'worker_threads';
 import { existsSync } from 'fs';
@@ -180,12 +180,16 @@ var WriterWorker = class _WriterWorker {
     if (res.error.code === WORKER_CANCELLED_CODE) {
       entry.reject(
         new SirannonError(
-          `The writer worker could not take this operation within ${this.timeoutMs}ms; it was not applied and is safe to retry`,
+          `The writer worker could not take this operation within ${entry.deadlineMs}ms; it was not applied and is safe to retry`,
           "WRITE_OVERLOADED"
         )
       );
       return;
     }
+    if (res.error.code === WORKER_COPY_STOPPED_CODE) {
+      entry.reject(this.unresponsiveError(entry.deadlineMs, entry.kind));
+      return;
+    }
     entry.reject(deserializeError(res.error));
   }
   onCopyStep(id, step) {
@@ -193,7 +197,7 @@ var WriterWorker = class _WriterWorker {
     if (!entry) return;
     if (entry.timer) {
       clearTimeout(entry.timer);
-      entry.timer = this.timeoutMs > 0 ? setTimeout(() => this.onDeadline(id), this.timeoutMs) : null;
+      entry.timer = entry.deadlineMs > 0 ? setTimeout(() => this.onDeadline(id), entry.deadlineMs) : null;
       entry.timer?.unref?.();
     }
     try {
@@ -236,18 +240,18 @@ var WriterWorker = class _WriterWorker {
     if (!entry) return;
     const worker = this.worker;
     if (!entry.cancellable || !worker) {
-      this.rejectPending(id, this.unresponsiveError(this.timeoutMs, entry.kind));
+      this.rejectPending(id, this.unresponsiveError(entry.deadlineMs, entry.kind));
       return;
     }
     try {
       worker.postMessage({ kind: "cancel", id });
     } catch {
-      this.rejectPending(id, this.unresponsiveError(this.timeoutMs, entry.kind));
+      this.rejectPending(id, this.unresponsiveError(entry.deadlineMs, entry.kind));
       return;
     }
     entry.graceTimer = setTimeout(() => {
-      this.rejectPending(id, this.unresponsiveError(this.timeoutMs * 2, entry.kind));
-    }, this.timeoutMs);
+      this.rejectPending(id, this.unresponsiveError(entry.deadlineMs * 2, entry.kind));
+    }, entry.deadlineMs);
     entry.graceTimer.unref?.();
   }
   fault(errLike) {
@@ -291,10 +295,11 @@ var WriterWorker = class _WriterWorker {
     }
     const id = this.nextId++;
     const message = { ...request, id };
+    const deadlineMs = copyStallDeadline(request) ?? this.timeoutMs;
     return new Promise((resolve2, reject) => {
       let timer = null;
-      if (this.timeoutMs > 0) {
-        timer = setTimeout(() => this.onDeadline(id), this.timeoutMs);
+      if (deadlineMs > 0) {
+        timer = setTimeout(() => this.onDeadline(id), deadlineMs);
         timer.unref?.();
       }
       const cancellable = request.kind !== "open" && request.kind !== "close" && request.kind !== "loadExtension";
@@ -303,6 +308,7 @@ var WriterWorker = class _WriterWorker {
         reject,
         timer,
         graceTimer: null,
+        deadlineMs,
         cancellable,
         kind: request.kind,
         ...onStep ? { onStep } : {}
@@ -352,7 +358,12 @@ var WriterWorker = class _WriterWorker {
       }),
       copyRunsOffCallerThread: true,
       copyDatabase: (request) => this.request(
-        { kind: "copyDatabase", destPath: request.destPath, pagesPerStep: request.pagesPerStep },
+        {
+          kind: "copyDatabase",
+          destPath: request.destPath,
+          pagesPerStep: request.pagesPerStep,
+          ...request.stallTimeoutMs === void 0 ? {} : { stallTimeoutMs: request.stallTimeoutMs }
+        },
         request.onStep
       ),
       loadExtension: async (extensionPath) => {
@@ -403,6 +414,9 @@ var WriterWorker = class _WriterWorker {
     this.pending.clear();
   }
 };
+function copyStallDeadline(request) {
+  return request.kind === "copyDatabase" ? request.stallTimeoutMs : void 0;
+}
 function clearPendingTimers(entry) {
   if (entry.timer) clearTimeout(entry.timer);
   if (entry.graceTimer) clearTimeout(entry.graceTimer);
@@ -544,15 +558,6 @@ async function chainLostFromList(request, chainName, state) {
   return chainMissingFromList(request.destination, chainName, state.chainId, request.databaseId, state.headIndex);
 }
 
-// src/core/backup/cycle-callbacks.ts
-function reportQuietly(callback, value) {
-  if (!callback) return;
-  try {
-    callback(value);
-  } catch {
-  }
-}
-
 // src/core/backup/cycle-status.ts
 var BackupCycleStatusRecorder = class {
   turnRunning = false;

package/dist/{chunk-2QCPVE67.mjs → chunk-E6IMX7RS.mjs}

@@ -1,4 +1,4 @@
-import { LOG_HEADER_BYTES, readLogHeader, logFrameOffset, readValidLogFrame } from './chunk-DVS4QSIZ.mjs';
+import { LOG_HEADER_BYTES, readLogHeader, logFrameOffset, readValidLogFrame } from './chunk-GYCEJNU4.mjs';
 import { SirannonError } from './chunk-PBRXXISQ.mjs';
 import { open } from 'fs/promises';
 

package/dist/{chunk-63VBFSCS.mjs → chunk-E7Q7HE46.mjs}

@@ -1,8 +1,8 @@
 import { planBackupRestore } from './chunk-YNTDOFTN.mjs';
 import { listStoredFilePieces, fetchStoredFile, checkpointLog } from './chunk-U445A3C4.mjs';
-import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS, LOG_HEADER_BYTES, LOG_FRAME_HEADER_BYTES, readLogHeader, foldLogChecksum, MAGIC_WITH_LITTLE_ENDIAN_CONTENT, LOG_FORMAT_VERSION } from './chunk-DVS4QSIZ.mjs';
+import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS, reportQuietly, LOG_HEADER_BYTES, LOG_FRAME_HEADER_BYTES, readLogHeader, foldLogChecksum, MAGIC_WITH_LITTLE_ENDIAN_CONTENT, LOG_FORMAT_VERSION } from './chunk-GYCEJNU4.mjs';
 import { readBackupChains, DEFAULT_CHAIN_NAME } from './chunk-YVF2ZJTE.mjs';
-import { randomHex } from './chunk-V5FUJEYY.mjs';
+import { randomHex } from './chunk-QBBLSQHQ.mjs';
 import { SirannonError } from './chunk-PBRXXISQ.mjs';
 import { rename, open, rm, stat } from 'fs/promises';
 
@@ -457,7 +457,7 @@ async function restoreBackup(options) {
   let changesApplied = 0;
   let framesApplied = 0;
   const batches = batchesOf(plan.changes, batchSize);
-  const reportProgress = (phase) => options.onProgress?.({
+  const reportProgress = (phase) => reportQuietly(options.onProgress, {
     phase,
     piecesFetched,
     bytesFetched,

package/dist/{chunk-3UHAPQBW.mjs → chunk-EVA2RWPP.mjs}

@@ -9,6 +9,33 @@ var RemoteError = class extends Error {
   }
 };
 
+// src/core/caller-callbacks.ts
+function isThenable(value) {
+  return value != null && typeof value.then === "function";
+}
+function toError(reason) {
+  return reason instanceof Error ? reason : new Error(String(reason));
+}
+function reportCallerFailure(onFailure, reason) {
+  if (!onFailure) return;
+  try {
+    onFailure(toError(reason));
+  } catch {
+  }
+}
+function invokeCallerCallback(callback, onFailure) {
+  let returned;
+  try {
+    returned = callback();
+  } catch (err) {
+    reportCallerFailure(onFailure, err);
+    return;
+  }
+  if (isThenable(returned)) {
+    Promise.resolve(returned).then(void 0, (reason) => reportCallerFailure(onFailure, reason));
+  }
+}
+
 // src/client/remote-live-query.ts
 var RemoteLiveQuery = class _RemoteLiveQuery {
   state = { status: "pending" };
@@ -16,9 +43,11 @@ var RemoteLiveQuery = class _RemoteLiveQuery {
   listeners = /* @__PURE__ */ new Set();
   subscription = null;
   closed = false;
+  onError;
   /** @internal */
-  static async open(subscribe) {
+  static async open(subscribe, onError) {
     const query = new _RemoteLiveQuery();
+    query.onError = onError;
     try {
       query.subscription = await subscribe(query.handlers());
     } catch (err) {
@@ -104,10 +133,7 @@ var RemoteLiveQuery = class _RemoteLiveQuery {
   publish(next, update) {
     this.state = next;
     for (const listener of [...this.listeners]) {
-      try {
-        listener(update);
-      } catch {
-      }
+      invokeCallerCallback(() => listener(update), this.onError);
     }
   }
 };
@@ -172,10 +198,11 @@ var RemoteDatabase = class {
     await this.capabilities.assertSqlAccepted();
     return this.transport.execute(operation, params);
   }
-  async live(operation, args) {
+  async live(operation, args, options) {
     const name = typeof operation === "string" ? operation : operation.name;
     return RemoteLiveQuery.open(
-      (handlers) => this.transport.liveSubscribe(name, args, handlers, (refresh) => this.capabilities.registryDigest(refresh))
+      (handlers) => this.transport.liveSubscribe(name, args, handlers, (refresh) => this.capabilities.registryDigest(refresh)),
+      options?.onError
     );
   }
   /**
@@ -855,22 +882,19 @@ function applySubscribedMessage(sub, msg) {
   }
   if (msg.resync) {
     sub.lastSeq = baseline;
-    try {
-      sub.onReset?.();
-    } catch {
-    }
+    invokeCallerCallback(() => sub.onReset?.(), sub.onError);
   } else if (sub.lastSeq === void 0 && baseline !== void 0) {
     sub.lastSeq = baseline;
   }
-  try {
-    sub.onSubscribed?.({
+  invokeCallerCallback(
+    () => sub.onSubscribed?.({
       seq: baseline,
       epoch: sub.epoch,
       resync: msg.resync === true,
       maxUnacknowledgedChanges: msg.maxUnacknowledgedChanges
-    });
-  } catch {
-  }
+    }),
+    sub.onError
+  );
 }
 function deliverChangeMessage(sub, msg) {
   deliverWireEvent(sub, msg.event);
@@ -882,8 +906,9 @@ function deliverChangesMessage(sub, msg) {
   }
 }
 function deliverWireEvent(sub, wire) {
+  let event;
   try {
-    const event = {
+    event = {
       type: wire.type,
       table: wire.table,
       row: decodeTaggedValues(wire.row),
@@ -896,12 +921,14 @@ function deliverWireEvent(sub, wire) {
       ...wire.txId !== void 0 ? { txId: wire.txId } : {},
       ...wire.txEnd === true ? { txEnd: true } : {}
     };
-    if (sub.lastSeq === void 0 || event.seq > sub.lastSeq) {
-      sub.lastSeq = event.seq;
-    }
-    sub.callback(event);
-  } catch {
+  } catch (err) {
+    reportCallerFailure(sub.onError, err);
+    return;
+  }
+  if (sub.lastSeq === void 0 || event.seq > sub.lastSeq) {
+    sub.lastSeq = event.seq;
   }
+  invokeCallerCallback(() => sub.callback(event), sub.onError);
 }
 function buildResubscribeMessage(id, sub) {
   const resumeFrom = sub.resumeSeq === void 0 ? sub.lastSeq : sub.resumeSeq();
@@ -1245,6 +1272,7 @@ var WebSocketTransport = class {
       table,
       filter,
       callback,
+      onError: options?.onError,
       onReset: options?.onReset,
       onSubscribed: options?.onSubscribed,
       deviceId: options?.deviceId,
@@ -1470,4 +1498,4 @@ var DatabaseClient = class {
   }
 };
 
-export { DEFAULT_HTTP_REQUEST_TIMEOUT_MS, DatabaseClient, HttpTransport, RemoteDatabase, RemoteError, RemoteLiveQuery, RemoteSubscriptionBuilderImpl, SQL_REFUSED_MESSAGE, STAGED_STREAM_CAPABILITY, ServerCapabilities, WebSocketTransport, assertWebSocketCredentials, createEndpointTransport, decodeTaggedValues, encodeTaggedValues, postJson, toBaseUrl, toServerBaseUrl, toWsUrl, unrefTimer, verifyDeviceSyncCapabilities };
+export { DEFAULT_HTTP_REQUEST_TIMEOUT_MS, DatabaseClient, HttpTransport, RemoteDatabase, RemoteError, RemoteLiveQuery, RemoteSubscriptionBuilderImpl, SQL_REFUSED_MESSAGE, STAGED_STREAM_CAPABILITY, ServerCapabilities, WebSocketTransport, assertWebSocketCredentials, createEndpointTransport, decodeTaggedValues, encodeTaggedValues, invokeCallerCallback, postJson, toBaseUrl, toServerBaseUrl, toWsUrl, unrefTimer, verifyDeviceSyncCapabilities };

package/dist/{chunk-DVS4QSIZ.mjs → chunk-GYCEJNU4.mjs}

@@ -1,5 +1,12 @@
+import { invokeCallerCallback } from './chunk-QBBLSQHQ.mjs';
 import { SirannonError } from './chunk-PBRXXISQ.mjs';
 
+// src/core/backup/cycle-callbacks.ts
+function reportQuietly(callback, value) {
+  if (!callback) return;
+  invokeCallerCallback(() => callback(value));
+}
+
 // src/core/backup/destination-deadline.ts
 var DEFAULT_DESTINATION_TIMEOUT_MS = 6e5;
 var LONGEST_DEADLINE_MS = 2147483647;
@@ -121,4 +128,4 @@ function logFrameOffset(frameNumber, frameBytes) {
   return LOG_HEADER_BYTES + (frameNumber - 1) * frameBytes;
 }
 
-export { DEFAULT_DESTINATION_TIMEOUT_MS, LOG_FORMAT_VERSION, LOG_FRAME_HEADER_BYTES, LOG_HEADER_BYTES, MAGIC_WITH_LITTLE_ENDIAN_CONTENT, assertDeadline, destinationWithDeadline, foldLogChecksum, logFrameOffset, readLogHeader, readValidLogFrame, withinDeadline };
+export { DEFAULT_DESTINATION_TIMEOUT_MS, LOG_FORMAT_VERSION, LOG_FRAME_HEADER_BYTES, LOG_HEADER_BYTES, MAGIC_WITH_LITTLE_ENDIAN_CONTENT, assertDeadline, destinationWithDeadline, foldLogChecksum, logFrameOffset, readLogHeader, readValidLogFrame, reportQuietly, withinDeadline };

package/dist/{chunk-DXXCLTFF.mjs → chunk-JQWGHSEH.mjs}

@@ -1,7 +1,7 @@
 import { startCopyWithoutHoldingWriter } from './chunk-W67A4H2E.mjs';
-import { readLogPosition } from './chunk-2QCPVE67.mjs';
-import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS, assertDeadline, withinDeadline } from './chunk-DVS4QSIZ.mjs';
-import { randomHex } from './chunk-V5FUJEYY.mjs';
+import { readLogPosition } from './chunk-E6IMX7RS.mjs';
+import { destinationWithDeadline, DEFAULT_DESTINATION_TIMEOUT_MS, assertDeadline, withinDeadline, reportQuietly } from './chunk-GYCEJNU4.mjs';
+import { randomHex, invokeCallerCallback } from './chunk-QBBLSQHQ.mjs';
 import { BackupError, SirannonError } from './chunk-PBRXXISQ.mjs';
 import { existsSync, mkdirSync, statSync, readdirSync, lstatSync, rmSync } from 'fs';
 import { resolve, dirname, join, basename, extname } from 'path';
@@ -155,6 +155,7 @@ async function copyDatabaseStepwise(conn, options) {
   const copy = conn.copyDatabase({
     destPath: options.destPath,
     pagesPerStep,
+    stallTimeoutMs,
     onStep: (step) => {
       if (stopped) throw stopped;
       armStall();
@@ -216,7 +217,7 @@ async function copyToDestinationStaged(conn, request) {
   const stagedPath = join(stagingRoot, STAGED_FILE_NAME);
   let firstStepSeen = false;
   let copyLeftRunning = null;
-  const emit = (progress) => request.onProgress?.({ runId, ...progress });
+  const emit = (progress) => reportQuietly(request.onProgress, { runId, ...progress });
   try {
     const pageSize = await readPageSize(conn);
     const copyStartedAt = Date.now();
@@ -567,7 +568,7 @@ async function copyToDestinationStreamed(conn, request, support) {
   let remainingPages = 0;
   let restarts = 0;
   let pumpFailure = null;
-  const emit = (progress) => request.onProgress?.({ runId, ...progress });
+  const emit = (progress) => reportQuietly(request.onProgress, { runId, ...progress });
   const pump = async () => {
     for (; ; ) {
       const piece = await host.take(streamId);
@@ -1252,10 +1253,7 @@ var BackupScheduler = class {
     let tickState = INITIAL_TICK_STATE;
     const announce = (err) => {
       if (!onError) return;
-      try {
-        onError(toError(err));
-      } catch {
-      }
+      invokeCallerCallback(() => onError(toError(err)));
     };
     let source = null;
     const runBackup = async () => {

package/dist/{chunk-W77EEVOT.mjs → chunk-KDAHYFW7.mjs}

@@ -1,8 +1,8 @@
 import { checkpointLog } from './chunk-U445A3C4.mjs';
-import { readLogFileHeader, sameLog, cursorChecksum, scanLogFrames, copyLogRange } from './chunk-2QCPVE67.mjs';
-import { logFrameOffset } from './chunk-DVS4QSIZ.mjs';
+import { readLogFileHeader, sameLog, cursorChecksum, scanLogFrames, copyLogRange } from './chunk-E6IMX7RS.mjs';
+import { logFrameOffset } from './chunk-GYCEJNU4.mjs';
 import { isBackupChainPosition } from './chunk-YVF2ZJTE.mjs';
-import { randomHex } from './chunk-V5FUJEYY.mjs';
+import { randomHex } from './chunk-QBBLSQHQ.mjs';
 import { SirannonError } from './chunk-PBRXXISQ.mjs';
 import { readFile, mkdir, writeFile, rename, rm, readdir } from 'fs/promises';
 import { dirname, join } from 'path';

package/dist/{chunk-P2VJYRVY.mjs → chunk-KXTYR2OQ.mjs}

@@ -1,7 +1,7 @@
-import { query, execute, executeBatch } from './chunk-HCCGEIZ2.mjs';
-import { ensureMetaTable, selectMetaValue, IDENTIFIER_RE, selectAppliedSourceSeqsInRange, prepareInsertAppliedChange, validateDdlSafety, extractDroppedTable, selectMaxChangeSeq, updateChangeStampsAfterSeqSql, selectOutboundChangesSql, selectNodeChangesAfterSeqSql, prepareDeleteRowColumnVersionsUpToHlc, canonicaliseForChecksum, prepareUpsertNewerColumnVersion, upsertMetaValue, selectMaxColumnVersionHlcForRow, selectMaxRowChangeHlc, validateIdentifier, prepareDeleteRowColumnVersions, prepareUpsertColumnVersion } from './chunk-7FQRQH5Z.mjs';
+import { query, execute, executeBatch } from './chunk-MYNI2WFS.mjs';
+import { ensureMetaTable, selectMetaValue, IDENTIFIER_RE, selectAppliedSourceSeqsInRange, prepareInsertAppliedChange, validateDdlSafety, extractDroppedTable, selectMaxChangeSeq, updateChangeStampsAfterSeqSql, selectOutboundChangesSql, selectNodeChangesAfterSeqSql, prepareDeleteRowColumnVersionsUpToHlc, canonicaliseForChecksum, prepareUpsertNewerColumnVersion, upsertMetaValue, selectMaxColumnVersionHlcForRow, selectMaxRowChangeHlc, validateIdentifier, prepareDeleteRowColumnVersions, prepareUpsertColumnVersion } from './chunk-45MKELYA.mjs';
 import { ReplicationError, BatchValidationError } from './chunk-2QLXDHAP.mjs';
-import { CHANGES_TABLE, decodeTaggedValues } from './chunk-7R4ER4FB.mjs';
+import { CHANGES_TABLE, isReservedIdentifier, decodeTaggedValues } from './chunk-6CMCO7S4.mjs';
 import { sha256Hex } from './chunk-GVCNMPOS.mjs';
 
 // src/core/transaction.ts
@@ -363,7 +363,7 @@ var BatchApplier = class {
     }
     for (const change of batch.changes) {
       if (change.operation !== "ddl") {
-        if (!IDENTIFIER_RE.test(change.table)) {
+        if (!IDENTIFIER_RE.test(change.table) || isReservedIdentifier(change.table)) {
           throw new BatchValidationError(`Invalid table name: ${change.table}`);
         }
       }
@@ -482,7 +482,7 @@ var BatchApplier = class {
           if (change.operation === "ddl") {
             throw new BatchValidationError("A staged device transaction cannot carry a DDL change");
           }
-          if (!IDENTIFIER_RE.test(change.table)) {
+          if (!IDENTIFIER_RE.test(change.table) || isReservedIdentifier(change.table)) {
             throw new BatchValidationError(`Invalid table name: ${change.table}`);
           }
           if (!sawFirst) {
@@ -510,6 +510,9 @@ var BatchApplier = class {
     });
   }
   async applyDataChange(tx, change, resolver, tally) {
+    if (isReservedIdentifier(change.table)) {
+      throw new BatchValidationError(`Invalid table name: ${change.table}`);
+    }
     const existingRow = await this.rows.findExistingRow(tx, change);
     if (existingRow === void 0) {
       if (change.operation === "insert" && change.newData) {

package/dist/{chunk-ECEGYTVF.mjs → chunk-M2BEAH5I.mjs}

@@ -1,7 +1,7 @@
-import { tableColumnNames, tablePkColumns, selectMinChangeSeqSql, selectMaxChangeSeq, deleteChangesBeforeUpToSeqSql, deleteChangesBeforeSql, selectTableExists, ensureChangesTable, ensureMetaTable, insertMetaValueIfAbsent, selectMetaValue, selectChangesAfterSeqSql, selectTablesChangesInRangeSql } from './chunk-7FQRQH5Z.mjs';
-import { CHANGES_TABLE, isReservedIdentifier, CDC_TRIGGER_PREFIX, encodeTaggedValues, decodeTaggedValues, SAFE_INT_BOUND_TEXT } from './chunk-7R4ER4FB.mjs';
+import { tableColumnNames, tablePkColumns, selectMinChangeSeqSql, selectMaxChangeSeq, deleteChangesBeforeUpToSeqSql, deleteChangesBeforeSql, selectTableExists, ensureChangesTable, ensureMetaTable, insertMetaValueIfAbsent, selectMetaValue, selectChangesAfterSeqSql, selectTablesChangesInRangeSql } from './chunk-45MKELYA.mjs';
+import { CHANGES_TABLE, isReservedIdentifier, CDC_TRIGGER_PREFIX, encodeTaggedValues, changedAtToEventTimestamp, decodeTaggedValues, SAFE_INT_BOUND_TEXT } from './chunk-6CMCO7S4.mjs';
 import { synchronousPragmaValue } from './chunk-OUSWVNWT.mjs';
-import { randomHex } from './chunk-V5FUJEYY.mjs';
+import { randomHex, invokeCallerCallback, reportCallerFailure, toError } from './chunk-QBBLSQHQ.mjs';
 import { SirannonError, ForbiddenSqlError, CDCError, MigrationError } from './chunk-PBRXXISQ.mjs';
 
 // src/core/bulk-load.ts
@@ -68,7 +68,7 @@ function rowToEvent(row) {
     row: row.new_data ? decodeTaggedValues(JSON.parse(row.new_data)) : {},
     oldRow: row.old_data ? decodeTaggedValues(JSON.parse(row.old_data)) : void 0,
     seq: BigInt(row.seq),
-    timestamp: row.changed_at,
+    timestamp: changedAtToEventTimestamp(row.changed_at),
     rowId: String(row.row_id),
     ...row.node_id ? { origin: row.node_id } : {},
     ...row.hlc ? { hlc: row.hlc } : {},
@@ -568,9 +568,9 @@ var SubscriptionManager = class {
   subscriptions = /* @__PURE__ */ new Map();
   byTable = /* @__PURE__ */ new Map();
   batchEndListeners = /* @__PURE__ */ new Set();
-  subscribe(table, filter, callback) {
+  subscribe(table, filter, callback, options) {
     const id = this.nextId++;
-    this.subscriptions.set(id, { id, table, filter, callback });
+    this.subscriptions.set(id, { id, table, filter, callback, onError: options?.onError });
     let tableSet = this.byTable.get(table);
     if (!tableSet) {
       tableSet = /* @__PURE__ */ new Set();
@@ -599,13 +599,15 @@ var SubscriptionManager = class {
         if (!sub) continue;
         const delivered = sub.filter === void 0 ? event : filteredChange(event, sub.filter);
         if (delivered === null) continue;
-        try {
-          sub.callback(delivered);
-        } catch {
-        }
+        invokeCallerCallback(() => sub.callback(delivered), sub.onError);
       }
     }
   }
+  reportError(error) {
+    for (const sub of this.subscriptions.values()) {
+      reportCallerFailure(sub.onError, error);
+    }
+  }
   addBatchEndListener(listener) {
     this.batchEndListeners.add(listener);
     return () => {
@@ -614,10 +616,7 @@ var SubscriptionManager = class {
   }
   endBatch(atTxBoundary) {
     for (const listener of this.batchEndListeners) {
-      try {
-        listener(atTxBoundary);
-      } catch {
-      }
+      invokeCallerCallback(() => listener(atTxBoundary));
     }
   }
   get size() {
@@ -637,8 +636,8 @@ var SubscriptionBuilderImpl = class {
     this.conditions = { ...this.conditions, ...conditions };
     return this;
   }
-  subscribe(callback) {
-    return this.manager.subscribe(this.table, this.conditions, callback);
+  subscribe(callback, options) {
+    return this.manager.subscribe(this.table, this.conditions, callback, options);
   }
 };
 function startPolling(conn, tracker, manager, intervalMs, onError, runExclusive) {
@@ -666,11 +665,13 @@ function startPolling(conn, tracker, manager, intervalMs, onError, runExclusive)
       }
     } catch (err) {
       consecutiveErrors++;
+      const failure = toError(err);
       if (onError) {
-        onError(err instanceof Error ? err : new Error(String(err)));
+        onError(failure);
       }
       if (consecutiveErrors >= MAX_CONSECUTIVE_ERRORS) {
         stop();
+        manager.reportError(failure);
       }
     } finally {
       polling = false;

package/dist/{chunk-YLAVDZCS.mjs → chunk-MVSES6MS.mjs}

@@ -1,6 +1,6 @@
 // src/core/worker/protocol.ts
 var WORKER_CANCELLED_CODE = "WRITER_WORKER_CANCELLED";
-var WORKER_COPY_ABORTED_CODE = "BACKUP_ABORTED";
+var WORKER_COPY_STOPPED_CODE = "WRITER_WORKER_COPY_STOPPED";
 function serializeError(err) {
   if (err instanceof Error) {
     const code = err.code;
@@ -19,4 +19,4 @@ function deserializeError(error) {
   return err;
 }
 
-export { WORKER_CANCELLED_CODE, WORKER_COPY_ABORTED_CODE, deserializeError, serializeError };
+export { WORKER_CANCELLED_CODE, WORKER_COPY_STOPPED_CODE, deserializeError, serializeError };