@fuzdev/fuz_app 0.132.1 → 0.134.0

package/dist/db/CLAUDE.md

@@ -1,6 +1,6 @@
 # db/
 
-> Database layer: the `Db` abstraction over pg + PGlite, the migration
+> Database layer: the `Db` abstraction over pg, PGlite and pglet, the migration
 > runner, and the cell content-primitive schema + queries.
 
 For server assembly, `QueryDeps`, and migration-runner contract see the
@@ -12,20 +12,23 @@ the code.
 
 ## Generic db infrastructure
 
-- `db.ts` — `Db` abstraction over pg + PGlite, `query` / `query_one` /
+- `db.ts` — `Db` abstraction over pg, PGlite and pglet, `query` / `query_one` /
   `transaction`, `no_nested_transaction` guard.
 - `create_db.ts` — URL-based driver auto-detection (`postgres` /
-  `pglite-file` / `pglite-memory`).
-- `db_pg.ts` / `db_pglite.ts` — driver adapters. `db_pg.ts` also exports
-  `register_pg_type_parsers`, the shared int8→number coercion (so
+  `pglite-file` for `file://` / `pglet-memory` for `memory://`, over
+  `@fuzdev/pglet-wasm`). An in-memory PGlite is `create_pglite_db(new PGlite())`.
+- `db_pg.ts` / `db_pglite.ts` / `db_pglet.ts` — driver adapters. `db_pg.ts` also
+  exports `register_pg_type_parsers`, the shared int8→number coercion (so
   `BIGSERIAL` columns read as JS numbers, matching PGlite) — called by both
   `create_db` and the test pg factory (`testing/db.ts`) so prod and tests
-  read the same wire shape from one registration site.
+  read the same wire shape from one registration site. `db_pglet.ts`'s
+  `PGLET_COERCION` is pglet's half of the same convention, which every pglet
+  instance fuz_app creates is given.
 - `migrate.ts` — advisory-lock migration runner (`run_migrations`,
   `baseline`), `Migration` / `MigrationNamespace` / `MigrationError`.
 - `query_deps.ts` — `QueryDeps = {db}`, the first param to every `query_*`.
 - `assert_row.ts` — `assert_row(row, context)` for INSERT … RETURNING.
-- `pg_error.ts` — `pg_error_code` (SQLSTATE extractor for `pg`/PGlite errors), `is_pg_unique_violation` (Postgres `23505`).
+- `pg_error.ts` — `pg_error_code` (SQLSTATE extractor for `pg`/PGlite/pglet errors), `is_pg_unique_violation` (Postgres `23505`).
 - `sql_identifier.ts` — `assert_valid_sql_identifier`.
 - `sql_columns.ts` — `columns_sql` / `qualify_columns` / `omit_columns`,
   the derivation helpers every `*_COLUMNS` projection const's variants
@@ -178,7 +181,7 @@ DO NOTHING`), `_put_fact_refs`, `_get_fact` / `_get_fact_meta` / `_has_fact`
   `fsync`ed before the rename publishes it (twins the Rust `fuz_fact` §fsync
   posture: data-sync before rename, parent-dir fsync waived) — the serve path
   streams the file without re-hashing, so write-time durability is the guard.
-- **`fact_store_errors.ts`** — `PayloadTooLargeError` / `StorageFullError` (+
+- **`fact_store_errors.ts`** — `FactPayloadTooLargeError` / `FactStorageFullError` (+
   `is_enospc_error`) thrown by `put_stream`, for a consumer route's 413 / 507.
 - The HTTP serving plumbing lives under `server/` (`serve_fact_route.ts`,
   `x_accel.ts`).

package/dist/db/create_db.d.ts

@@ -4,11 +4,12 @@
  * Selects the appropriate database driver based on `database_url`:
  * - `postgres://` or `postgresql://` — uses `pg` (PostgreSQL)
  * - `file://` — uses `@electric-sql/pglite` (file-based)
- * - `memory://` — uses `@electric-sql/pglite` (in-memory)
+ * - `memory://` — uses `@fuzdev/pglet-wasm` (in-memory)
  *
- * Both `pg` and `@electric-sql/pglite` are optional peer dependencies,
- * dynamically imported only when needed. For direct driver construction
- * without auto-detection, use `db/db_pg.ts` or `db/db_pglite.ts`.
+ * `pg`, `@electric-sql/pglite` and `@fuzdev/pglet-wasm` are optional peer
+ * dependencies, dynamically imported only when needed. For direct driver
+ * construction without auto-detection, use `db/db_pg.ts`, `db/db_pglite.ts`
+ * or `db/db_pglet.ts` — an in-memory PGlite is `create_pglite_db(new PGlite())`.
  *
  * @module
  */
@@ -28,12 +29,13 @@ export interface CreateDbResult {
  * know which driver is in use.
  *
  * For direct driver construction without URL routing, import
- * `create_pg_db` from `db/db_pg.ts` or `create_pglite_db` from `db/db_pglite.ts`.
+ * `create_pg_db` from `db/db_pg.ts`, `create_pglite_db` from `db/db_pglite.ts`
+ * or `create_pglet_db_driver` from `db/db_pglet.ts`.
  *
  * @param database_url - connection URL (`postgres://`, `postgresql://`, `file://`, or `memory://`)
  * @returns database instance, close callback, type, and display name
  * @throws Error if `database_url` uses an unsupported scheme. Driver
- *   construction (`pg.Pool` or `PGlite`) may also throw on bad connection
+ *   construction (`pg.Pool`, `PGlite` or pglet) may also throw on bad connection
  *   parameters or missing peer-dependency packages.
  */
 export declare const create_db: (database_url: string) => Promise<CreateDbResult>;

package/dist/db/create_db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create_db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/create_db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAI1C,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,iFAAiF;IACjF,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,GAAU,cAAc,MAAM,KAAG,OAAO,CAAC,cAAc,CAmC5E,CAAC"}
+{"version":3,"file":"create_db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/create_db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAK1C,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,iFAAiF;IACjF,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,SAAS,GAAU,cAAc,MAAM,KAAG,OAAO,CAAC,cAAc,CAiC5E,CAAC"}

package/dist/db/create_db.js

@@ -4,16 +4,18 @@
  * Selects the appropriate database driver based on `database_url`:
  * - `postgres://` or `postgresql://` — uses `pg` (PostgreSQL)
  * - `file://` — uses `@electric-sql/pglite` (file-based)
- * - `memory://` — uses `@electric-sql/pglite` (in-memory)
+ * - `memory://` — uses `@fuzdev/pglet-wasm` (in-memory)
  *
- * Both `pg` and `@electric-sql/pglite` are optional peer dependencies,
- * dynamically imported only when needed. For direct driver construction
- * without auto-detection, use `db/db_pg.ts` or `db/db_pglite.ts`.
+ * `pg`, `@electric-sql/pglite` and `@fuzdev/pglet-wasm` are optional peer
+ * dependencies, dynamically imported only when needed. For direct driver
+ * construction without auto-detection, use `db/db_pg.ts`, `db/db_pglite.ts`
+ * or `db/db_pglet.ts` — an in-memory PGlite is `create_pglite_db(new PGlite())`.
  *
  * @module
  */
 import { create_pg_db, register_pg_type_parsers } from './db_pg.js';
 import { create_pglite_db } from './db_pglite.js';
+import { create_pglet_db_driver, create_pglet_instance } from './db_pglet.js';
 /**
  * Create a database connection based on a URL.
  *
@@ -21,12 +23,13 @@ import { create_pglite_db } from './db_pglite.js';
  * know which driver is in use.
  *
  * For direct driver construction without URL routing, import
- * `create_pg_db` from `db/db_pg.ts` or `create_pglite_db` from `db/db_pglite.ts`.
+ * `create_pg_db` from `db/db_pg.ts`, `create_pglite_db` from `db/db_pglite.ts`
+ * or `create_pglet_db_driver` from `db/db_pglet.ts`.
  *
  * @param database_url - connection URL (`postgres://`, `postgresql://`, `file://`, or `memory://`)
  * @returns database instance, close callback, type, and display name
  * @throws Error if `database_url` uses an unsupported scheme. Driver
- *   construction (`pg.Pool` or `PGlite`) may also throw on bad connection
+ *   construction (`pg.Pool`, `PGlite` or pglet) may also throw on bad connection
  *   parameters or missing peer-dependency packages.
  */
 export const create_db = async (database_url) => {
@@ -43,10 +46,8 @@ export const create_db = async (database_url) => {
         };
     }
     if (database_url.startsWith('memory://')) {
-        const { PGlite } = await import('@electric-sql/pglite');
-        const pglite = new PGlite(database_url);
-        const { db, close } = create_pglite_db(pglite);
-        return { db, close, db_type: 'pglite-memory', db_name: '(memory)' };
+        const { db, close } = create_pglet_db_driver(await create_pglet_instance());
+        return { db, close, db_type: 'pglet-memory', db_name: '(memory)' };
     }
     if (database_url.startsWith('file://')) {
         const path = new URL(database_url).pathname;

package/dist/db/db.d.ts

@@ -2,17 +2,17 @@
  * Database wrapper with duck-typed interface.
  *
  * Accepts any client with a query(text, values) method.
- * Both `pg.Pool` and `@electric-sql/pglite` satisfy this interface.
+ * `pg.Pool`, `@electric-sql/pglite` and `@fuzdev/pglet-wasm` all satisfy this interface.
  *
  * Transaction safety is provided by an injected `transaction` callback —
- * the driver adapters (`db/db_pg.ts`, `db/db_pglite.ts`) supply the driver-appropriate
+ * the driver adapters (`db/db_pg.ts`, `db/db_pglite.ts`, `db/db_pglet.ts`) supply the driver-appropriate
  * implementation. Close is handled externally (returned alongside the `Db`
  * as `DbDriverResult`), not as a method on this class.
  *
  * @module
  */
 /**
- * Minimal interface that both pg and pglite satisfy.
+ * Minimal interface that pg, pglite and pglet satisfy.
  */
 export interface DbClient {
     query: <T = unknown>(text: string, values?: Array<unknown>) => Promise<{
@@ -25,6 +25,7 @@ export interface DbClient {
  * `transaction` is injected by `create_db` which knows the driver.
  * For `pg`: acquires a dedicated pool client per transaction.
  * For PGlite: delegates to `pglite.transaction()`.
+ * For pglet: delegates to the adapter's `transaction()`.
  */
 export interface DbDeps {
     client: DbClient;
@@ -33,7 +34,7 @@ export interface DbDeps {
 /**
  * Result of constructing a driver-specific `Db`.
  *
- * Returned by `create_pg_db()` and `create_pglite_db()`.
+ * Returned by `create_pg_db()`, `create_pglite_db()` and `create_pglet_db_driver()`.
  * The `close` callback is bound to the actual driver — callers
  * never need to know which driver is in use.
  */
@@ -43,7 +44,7 @@ export interface DbDriverResult {
     close: () => Promise<void>;
 }
 /** Database driver type. */
-export type DbType = 'postgres' | 'pglite-file' | 'pglite-memory';
+export type DbType = 'postgres' | 'pglite-file' | 'pglet-memory';
 /**
  * Sentinel transaction function for transaction-scoped `Db` instances.
  *
@@ -56,8 +57,9 @@ export declare const no_nested_transaction: DbDeps['transaction'];
 /**
  * Database wrapper providing a consistent query and transaction interface.
  *
- * Construct via `create_pg_db()` from `db/db_pg.ts` or `create_pglite_db()` from
- * `db/db_pglite.ts` for proper transaction support, or via `create_db()` for
+ * Construct via `create_pg_db()` from `db/db_pg.ts`, `create_pglite_db()` from
+ * `db/db_pglite.ts` or `create_pglet_db_driver()` from `db/db_pglet.ts` for proper
+ * transaction support, or via `create_db()` for
  * URL-based auto-detection.
  *
  * @example

package/dist/db/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,KAAK,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC,CAAC;CAC3F;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACtB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,iFAAiF;IACjF,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,4BAA4B;AAC5B,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,aAAa,CAEvD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,EAAE;;IACd,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAId,OAAO,EAAE,MAAM;IAK3B;;;;;;OAMG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAKxE;;;;;;OAMG;IACG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAKjF;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAG/D"}
+{"version":3,"file":"db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,KAAK,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC,CAAC;CAC3F;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,MAAM;IACtB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,iFAAiF;IACjF,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,4BAA4B;AAC5B,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,CAAC;AAEjE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,aAAa,CAEvD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,EAAE;;IACd,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAId,OAAO,EAAE,MAAM;IAK3B;;;;;;OAMG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAKxE;;;;;;OAMG;IACG,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAKjF;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAG/D"}

package/dist/db/db.js

@@ -2,10 +2,10 @@
  * Database wrapper with duck-typed interface.
  *
  * Accepts any client with a query(text, values) method.
- * Both `pg.Pool` and `@electric-sql/pglite` satisfy this interface.
+ * `pg.Pool`, `@electric-sql/pglite` and `@fuzdev/pglet-wasm` all satisfy this interface.
  *
  * Transaction safety is provided by an injected `transaction` callback —
- * the driver adapters (`db/db_pg.ts`, `db/db_pglite.ts`) supply the driver-appropriate
+ * the driver adapters (`db/db_pg.ts`, `db/db_pglite.ts`, `db/db_pglet.ts`) supply the driver-appropriate
  * implementation. Close is handled externally (returned alongside the `Db`
  * as `DbDriverResult`), not as a method on this class.
  *
@@ -25,8 +25,9 @@ export const no_nested_transaction = () => {
 /**
  * Database wrapper providing a consistent query and transaction interface.
  *
- * Construct via `create_pg_db()` from `db/db_pg.ts` or `create_pglite_db()` from
- * `db/db_pglite.ts` for proper transaction support, or via `create_db()` for
+ * Construct via `create_pg_db()` from `db/db_pg.ts`, `create_pglite_db()` from
+ * `db/db_pglite.ts` or `create_pglet_db_driver()` from `db/db_pglet.ts` for proper
+ * transaction support, or via `create_db()` for
  * URL-based auto-detection.
  *
  * @example

package/dist/db/db_pglet.d.ts

@@ -0,0 +1,43 @@
+/**
+ * pglet driver adapter for `Db`.
+ *
+ * Provides `create_pglet_instance()`, which loads `@fuzdev/pglet-wasm` on
+ * demand and creates an in-memory instance with `PGLET_COERCION`, the value
+ * coercion every fuz_app pglet instance is created with, and
+ * `create_pglet_db_driver()` to construct a `Db` backed by one. The package is
+ * imported dynamically, so it stays an optional peer.
+ *
+ * @module
+ */
+import type { CoercionOptions, PgletDb } from '@fuzdev/pglet-wasm';
+import { type DbDriverResult } from './db.js';
+/**
+ * The value coercion fuz_app creates every pglet instance with.
+ *
+ * The adapter defaults int8 to `bigint`; fuz_app reads int8 as a JS number on
+ * every driver (`register_pg_type_parsers` for `pg`, PGlite's own default), so
+ * `AuditLogEvent.seq` and friends validate identically across drivers.
+ */
+export declare const PGLET_COERCION: CoercionOptions;
+/**
+ * Create an in-memory pglet instance with `PGLET_COERCION`.
+ *
+ * Loads `@fuzdev/pglet-wasm` on demand and awaits its `init()` — a no-op on the
+ * package's Node entry, where the wasm loads at import; the browser entry loads
+ * it here.
+ *
+ * @returns a fresh, empty instance; wrap it with `create_pglet_db_driver`
+ */
+export declare const create_pglet_instance: () => Promise<PgletDb>;
+/**
+ * Create a `Db` backed by a pglet instance.
+ *
+ Named `_driver` to stay clear of `@fuzdev/pglet-wasm`'s own `create_pglet_db`,
+ * which creates the instance this wraps. Create it with `create_pglet_instance`
+ * (or with `PGLET_COERCION`) so it reads values as the other drivers do.
+ *
+ * @param pglet - a `@fuzdev/pglet-wasm` instance
+ * @returns the `Db` instance and a `close` callback bound to `pglet.close()`
+ */
+export declare const create_pglet_db_driver: (pglet: PgletDb) => DbDriverResult;
+//# sourceMappingURL=db_pglet.d.ts.map

package/dist/db/db_pglet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db_pglet.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/db_pglet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EAA6B,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,eAAoC,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,QAAa,OAAO,CAAC,OAAO,CAI7D,CAAC;AAaF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,cAGtD,CAAC"}

package/dist/db/db_pglet.js

@@ -0,0 +1,55 @@
+/**
+ * pglet driver adapter for `Db`.
+ *
+ * Provides `create_pglet_instance()`, which loads `@fuzdev/pglet-wasm` on
+ * demand and creates an in-memory instance with `PGLET_COERCION`, the value
+ * coercion every fuz_app pglet instance is created with, and
+ * `create_pglet_db_driver()` to construct a `Db` backed by one. The package is
+ * imported dynamically, so it stays an optional peer.
+ *
+ * @module
+ */
+import { Db, no_nested_transaction } from './db.js';
+/**
+ * The value coercion fuz_app creates every pglet instance with.
+ *
+ * The adapter defaults int8 to `bigint`; fuz_app reads int8 as a JS number on
+ * every driver (`register_pg_type_parsers` for `pg`, PGlite's own default), so
+ * `AuditLogEvent.seq` and friends validate identically across drivers.
+ */
+export const PGLET_COERCION = { int8: 'number' };
+/**
+ * Create an in-memory pglet instance with `PGLET_COERCION`.
+ *
+ * Loads `@fuzdev/pglet-wasm` on demand and awaits its `init()` — a no-op on the
+ * package's Node entry, where the wasm loads at import; the browser entry loads
+ * it here.
+ *
+ * @returns a fresh, empty instance; wrap it with `create_pglet_db_driver`
+ */
+export const create_pglet_instance = async () => {
+    const pglet_wasm = await import('@fuzdev/pglet-wasm');
+    await pglet_wasm.init();
+    return pglet_wasm.create_pglet_db({ coercion: PGLET_COERCION });
+};
+/**
+ * Create a transaction implementation for pglet.
+ *
+ * Delegates to the adapter's single-flight `transaction()` (`BEGIN` / `COMMIT`,
+ * `ROLLBACK` on throw).
+ */
+const create_pglet_transaction = (pglet) => async (fn) => pglet.transaction(async (tx) => fn(new Db({ client: tx, transaction: no_nested_transaction })));
+/**
+ * Create a `Db` backed by a pglet instance.
+ *
+ Named `_driver` to stay clear of `@fuzdev/pglet-wasm`'s own `create_pglet_db`,
+ * which creates the instance this wraps. Create it with `create_pglet_instance`
+ * (or with `PGLET_COERCION`) so it reads values as the other drivers do.
+ *
+ * @param pglet - a `@fuzdev/pglet-wasm` instance
+ * @returns the `Db` instance and a `close` callback bound to `pglet.close()`
+ */
+export const create_pglet_db_driver = (pglet) => ({
+    db: new Db({ client: pglet, transaction: create_pglet_transaction(pglet) }),
+    close: () => pglet.close()
+});

package/dist/db/fact_disk_storage.d.ts

@@ -78,12 +78,12 @@ export interface StreamFactToDiskResult {
  *   `facts_dir`), the buffer + remaining chunks spill to `<facts_dir>/.tmp/…`,
  *   then `rename` into `<facts_dir>/<shard>/<rest>` once the hash is known —
  *   `{kind: 'disk'}`. A body over the threshold with `facts_dir === undefined`
- *   throws `PayloadTooLargeError` (matches `PgFactStore.put`).
- * - **Cap enforcement.** Aborts with `PayloadTooLargeError` the moment the
+ *   throws `FactPayloadTooLargeError` (matches `PgFactStore.put`).
+ * - **Cap enforcement.** Aborts with `FactPayloadTooLargeError` the moment the
  *   running byte count passes `max_bytes` — the mid-stream backstop for a
  *   chunked or mis-declared `Content-Length`.
  * - **Disk-full.** An `ENOSPC` from the temp-file write surfaces as
- *   `StorageFullError`.
+ *   `FactStorageFullError`.
  *
  * @mutates `facts_dir` filesystem
  */

package/dist/db/fact_disk_storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_disk_storage.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_disk_storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAIN,KAAK,WAAW,EAChB,MAAM,oBAAoB,CAAC;AAG5B,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,GACnF,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,GAC9D,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,GACvC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,IAAI,CACT,mBAAmB,EACnB,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,GAAG,MAAM,CACtE,EACD,WAAW,MAAM,GAAG,SAAS,EAC7B,QAAQ,cAAc,CAAC,UAAU,CAAC,EAClC,WAAW,MAAM,EACjB,oBAAoB,MAAM,KACxB,OAAO,CAAC,sBAAsB,CA8GhC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,GACpC,MAAM,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC,EAChG,WAAW,MAAM,EACjB,MAAM,QAAQ,EACd,OAAO,UAAU,KACf,OAAO,CAAC,WAAW,CAgBrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAC5C,WAAW,MAAM,EACjB,KAAK,MAAM,KACT,OAAO,CAAC,UAAU,CAIpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC9B,MAAM,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC9D,WAAW,MAAM,EACjB,UAAU;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAC3D,OAAO,CAAC,MAAM,CA0BhB,CAAC"}
+{"version":3,"file":"fact_disk_storage.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_disk_storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAIN,KAAK,WAAW,EAChB,MAAM,oBAAoB,CAAC;AAO5B,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,GACnF,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,GAC9D,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,GACvC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,IAAI,CACT,mBAAmB,EACnB,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,GAAG,MAAM,CACtE,EACD,WAAW,MAAM,GAAG,SAAS,EAC7B,QAAQ,cAAc,CAAC,UAAU,CAAC,EAClC,WAAW,MAAM,EACjB,oBAAoB,MAAM,KACxB,OAAO,CAAC,sBAAsB,CA8GhC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,GACpC,MAAM,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC,EAChG,WAAW,MAAM,EACjB,MAAM,QAAQ,EACd,OAAO,UAAU,KACf,OAAO,CAAC,WAAW,CAgBrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAC5C,WAAW,MAAM,EACjB,KAAK,MAAM,KACT,OAAO,CAAC,UAAU,CAIpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC9B,MAAM,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC9D,WAAW,MAAM,EACjB,UAAU;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAC3D,OAAO,CAAC,MAAM,CA0BhB,CAAC"}

package/dist/db/fact_disk_storage.js

@@ -36,7 +36,7 @@ import { to_hex } from '@fuzdev/fuz_util/hex.ts';
 import { FACT_HASH_PREFIX } from '@fuzdev/fuz_util/hash_schemas.ts';
 import { generate_random_base64url } from '../crypto.js';
 import { fact_disk_path, mint_file_fact_url, parse_file_fact_url } from './file_fact_url.js';
-import { is_enospc_error, PayloadTooLargeError, StorageFullError } from './fact_store_errors.js';
+import { is_enospc_error, FactPayloadTooLargeError, FactStorageFullError } from './fact_store_errors.js';
 /** Subdirectory under `facts_dir` for in-flight atomic temp files. */
 export const FACT_TMP_DIRNAME = '.tmp';
 /** Default age (1 hour) past which a `.tmp/*` file is considered orphaned. */
@@ -54,12 +54,12 @@ export const FACT_TMP_ORPHAN_MAX_AGE_MS = 60 * 60 * 1000;
  *   `facts_dir`), the buffer + remaining chunks spill to `<facts_dir>/.tmp/…`,
  *   then `rename` into `<facts_dir>/<shard>/<rest>` once the hash is known —
  *   `{kind: 'disk'}`. A body over the threshold with `facts_dir === undefined`
- *   throws `PayloadTooLargeError` (matches `PgFactStore.put`).
- * - **Cap enforcement.** Aborts with `PayloadTooLargeError` the moment the
+ *   throws `FactPayloadTooLargeError` (matches `PgFactStore.put`).
+ * - **Cap enforcement.** Aborts with `FactPayloadTooLargeError` the moment the
  *   running byte count passes `max_bytes` — the mid-stream backstop for a
  *   chunked or mis-declared `Content-Length`.
  * - **Disk-full.** An `ENOSPC` from the temp-file write surfaces as
- *   `StorageFullError`.
+ *   `FactStorageFullError`.
  *
  * @mutates `facts_dir` filesystem
  */
@@ -76,7 +76,7 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
     const hash_and_count = (chunk) => {
         size += chunk.length;
         if (size > max_bytes)
-            throw new PayloadTooLargeError(size, max_bytes);
+            throw new FactPayloadTooLargeError(size, max_bytes);
         blake3.update(chunk);
         sha256.update(chunk);
     };
@@ -111,7 +111,7 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
         if (facts_dir === undefined) {
             // Over the embedded threshold with nowhere to spill — same shape as the
             // `PgFactStore.put` oversize-without-disk_root reject.
-            throw new PayloadTooLargeError(size, embedded_threshold);
+            throw new FactPayloadTooLargeError(size, embedded_threshold);
         }
         // Phase 2: spill. A combined stream emits the already-hashed buffered
         // chunks, then continues pulling from `reader`, hashing each remaining
@@ -154,8 +154,8 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
         catch (err) {
             await deps.remove(tmp_path).catch(() => undefined);
             if (is_enospc_error(err))
-                throw new StorageFullError(err);
-            throw err; // includes a mid-stream PayloadTooLargeError surfaced via the stream
+                throw new FactStorageFullError(err);
+            throw err; // includes a mid-stream FactPayloadTooLargeError surfaced via the stream
         }
         const hash = (FACT_HASH_PREFIX + to_hex(blake3.finalize()));
         const { shard, rest } = await commit_temp_to_cas(deps, tmp_path, facts_dir, hash);
@@ -197,7 +197,7 @@ export const write_fact_bytes_to_disk = async (deps, facts_dir, hash, bytes) =>
     catch (err) {
         await deps.remove(tmp_path).catch(() => undefined);
         if (is_enospc_error(err))
-            throw new StorageFullError(err);
+            throw new FactStorageFullError(err);
         throw err;
     }
     const { shard, rest } = await commit_temp_to_cas(deps, tmp_path, facts_dir, hash);
@@ -273,7 +273,7 @@ export const sweep_orphan_temps = async (deps, facts_dir, options) => {
  * the file without re-hashing, so the bytes must be stable before they become
  * the canonical body), then either drop the temp (byte-identical content already
  * present — idempotent dedup) or atomically `rename` it into place. On any
- * failure the temp is unlinked and an `ENOSPC` is surfaced as `StorageFullError`.
+ * failure the temp is unlinked and an `ENOSPC` is surfaced as `FactStorageFullError`.
  * The single commit path shared by both writers above — twins the Rust `fuz_fact`
  * `SpillFile::rename_into_cas` (data-sync before rename; parent-dir fsync waived).
  *
@@ -295,7 +295,7 @@ const commit_temp_to_cas = async (deps, tmp_path, facts_dir, hash) => {
     catch (err) {
         await deps.remove(tmp_path).catch(() => undefined);
         if (is_enospc_error(err))
-            throw new StorageFullError(err);
+            throw new FactStorageFullError(err);
         throw err;
     }
     return { shard, rest };

package/dist/db/fact_store.d.ts

@@ -24,7 +24,7 @@
  * oversize `put` throws. `put_stream` needs `fs` for a body of any size — with
  * none it throws before reading the stream — and `disk_root` for the
  * over-threshold spill: with none, a body that passes the threshold throws
- * `PayloadTooLargeError`.
+ * `FactPayloadTooLargeError`.
  *
  * Every `external_url` the store writes is a `file:<shard>/<rest>` URL into its
  * own disk CAS, and that CAS is the only place `get` reads external bytes from
@@ -58,7 +58,7 @@ export declare const FACT_EMBEDDED_THRESHOLD_DEFAULT: number;
  * reads disk-backed facts from it. When either is unset the store writes
  * embedded rows only and `get` returns `null` for an external row: an oversize
  * `put` throws; `put_stream` throws for a body of any size when `fs` is unset,
- * and with `fs` but no `disk_root` throws `PayloadTooLargeError` for a body
+ * and with `fs` but no `disk_root` throws `FactPayloadTooLargeError` for a body
  * that passes the threshold. `log` is optional — its call sites are the
  * warnings on the paths where `get` returns `null` for an external row.
  */
@@ -91,8 +91,8 @@ export declare class PgFactStore implements FactStore {
      * BLAKE3 + SHA-256 in one pass, buffer to the embedded threshold, spill to the
      * disk CAS), then inserts the `fact` row by placement — embedded bytes go to
      * the PG `bytes` column, disk-spilled bytes record the `file:` `external_url`.
-     * The cap is enforced mid-stream (`PayloadTooLargeError`); a disk-full mid-
-     * stream throws `StorageFullError`.
+     * The cap is enforced mid-stream (`FactPayloadTooLargeError`); a disk-full mid-
+     * stream throws `FactStorageFullError`.
      *
      * Refs: explicit `options.refs` are recorded; JSON auto-extraction is NOT
      * attempted (it would need a buffered re-read, defeating the bounded-memory

package/dist/db/fact_store.js

@@ -24,7 +24,7 @@
  * oversize `put` throws. `put_stream` needs `fs` for a body of any size — with
  * none it throws before reading the stream — and `disk_root` for the
  * over-threshold spill: with none, a body that passes the threshold throws
- * `PayloadTooLargeError`.
+ * `FactPayloadTooLargeError`.
  *
  * Every `external_url` the store writes is a `file:<shard>/<rest>` URL into its
  * own disk CAS, and that CAS is the only place `get` reads external bytes from
@@ -100,8 +100,8 @@ export class PgFactStore {
      * BLAKE3 + SHA-256 in one pass, buffer to the embedded threshold, spill to the
      * disk CAS), then inserts the `fact` row by placement — embedded bytes go to
      * the PG `bytes` column, disk-spilled bytes record the `file:` `external_url`.
-     * The cap is enforced mid-stream (`PayloadTooLargeError`); a disk-full mid-
-     * stream throws `StorageFullError`.
+     * The cap is enforced mid-stream (`FactPayloadTooLargeError`); a disk-full mid-
+     * stream throws `FactStorageFullError`.
      *
      * Refs: explicit `options.refs` are recorded; JSON auto-extraction is NOT
      * attempted (it would need a buffered re-read, defeating the bounded-memory

package/dist/db/fact_store_errors.d.ts

@@ -14,7 +14,7 @@
  * mis-declared `Content-Length` that the cheap header pre-check can't catch.
  * A consumer route maps this to `413`.
  */
-export declare class PayloadTooLargeError extends Error {
+export declare class FactPayloadTooLargeError extends Error {
     /** Bytes read before the cap tripped (may exceed `max_bytes` by one chunk). */
     readonly bytes_read: number;
     readonly max_bytes: number;
@@ -26,13 +26,13 @@ export declare class PayloadTooLargeError extends Error {
  * a best-effort free-space preflight can't promise (chunked uploads, TOCTOU
  * races). A consumer route maps this to `507`.
  */
-export declare class StorageFullError extends Error {
+export declare class FactStorageFullError extends Error {
     constructor(cause?: unknown);
 }
 /**
  * Whether a thrown value is a Node filesystem `ENOSPC` (no space left on
  * device). Used by the streaming disk write to translate the raw FS error
- * into a `StorageFullError`.
+ * into a `FactStorageFullError`.
  */
 export declare const is_enospc_error: (err: unknown) => boolean;
 //# sourceMappingURL=fact_store_errors.d.ts.map

package/dist/db/fact_store_errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_store_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_store_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAMjD;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC9B,KAAK,CAAC,EAAE,OAAO;CAI3B;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,KAAG,OAID,CAAC"}
+{"version":3,"file":"fact_store_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_store_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAMjD;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBAClC,KAAK,CAAC,EAAE,OAAO;CAI3B;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,KAAG,OAID,CAAC"}

package/dist/db/fact_store_errors.js

@@ -14,13 +14,13 @@
  * mis-declared `Content-Length` that the cheap header pre-check can't catch.
  * A consumer route maps this to `413`.
  */
-export class PayloadTooLargeError extends Error {
+export class FactPayloadTooLargeError extends Error {
     /** Bytes read before the cap tripped (may exceed `max_bytes` by one chunk). */
     bytes_read;
     max_bytes;
     constructor(bytes_read, max_bytes) {
         super(`payload too large: read ${bytes_read} bytes, exceeds ${max_bytes} byte limit`);
-        this.name = 'PayloadTooLargeError';
+        this.name = 'FactPayloadTooLargeError';
         this.bytes_read = bytes_read;
         this.max_bytes = max_bytes;
     }
@@ -31,16 +31,16 @@ export class PayloadTooLargeError extends Error {
  * a best-effort free-space preflight can't promise (chunked uploads, TOCTOU
  * races). A consumer route maps this to `507`.
  */
-export class StorageFullError extends Error {
+export class FactStorageFullError extends Error {
     constructor(cause) {
         super('storage_full', cause === undefined ? undefined : { cause });
-        this.name = 'StorageFullError';
+        this.name = 'FactStorageFullError';
     }
 }
 /**
  * Whether a thrown value is a Node filesystem `ENOSPC` (no space left on
  * device). Used by the streaming disk write to translate the raw FS error
- * into a `StorageFullError`.
+ * into a `FactStorageFullError`.
  */
 export const is_enospc_error = (err) => typeof err === 'object' &&
     err !== null &&