@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/app-storage/collection-sql.d.ts

@@ -0,0 +1,39 @@
+import type { AppReplicaScope } from "../app-host/owner.js";
+import type { AppSqlLifetime } from "../app-host/wasm-runtime.js";
+export interface AppCollectionSqlOptions {
+    readonly wasmSha256: string;
+    readonly maxWasmBytes: number;
+    loadWasm(options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array>;
+    /** Bundled official sqlite-wasm initializer; only verified bytes and silent
+     * logging are supplied. This is trusted Worker code, not an app-message port. */
+    initialize(options: {
+        wasmBinary: Uint8Array;
+        print(): void;
+        printErr(): void;
+    }): Promise<unknown>;
+}
+/** Write-ledger rows in the replica database's host table (`_mdbn_host`, keys
+ * `w:<mutation>`), outside the store's schema. Synchronous, Worker only. */
+export interface AppLedgerRows {
+    /** Values, oldest key first, at most `maxBytes` of them in total. */
+    list(maxBytes: number): string[];
+    put(mutationId: string, value: string): void;
+    remove(mutationId: string): void;
+}
+export interface AppOpenedCollectionSql {
+    readonly sql: AppSqlLifetime;
+    readonly ledger?: AppLedgerRows;
+    readonly opened: "fresh" | "existing" | "unclean";
+    readonly sqliteVersion: number;
+    close(): Promise<void>;
+}
+export declare class AppCollectionSqlError extends Error {
+    readonly reason: "binding" | "unsupported" | "fenced" | "unavailable";
+    constructor(reason: "binding" | "unsupported" | "fenced" | "unavailable");
+}
+export declare function createAppCollectionSql(source: AppCollectionSqlOptions): (input: {
+    scope: Readonly<AppReplicaScope>;
+    signal: AbortSignal;
+}) => Promise<AppOpenedCollectionSql>;

package/dist/app-storage/collection-sql.js

@@ -0,0 +1,93 @@
+/** Concrete SAME-Worker SQL intake for AppWebCloudCopyHost.openCollectionSql.
+ * The BUILD supplies its pinned initializer/bytes, never a discovered runtime.
+ * SQL/VFS close belongs to the native host, after native shutdown. */
+import { appPoolNames, openAppSahpoolIndex } from "./app-sqlite-index.js";
+import { AppBinaryIndexHost, appSqlHost } from "./app-binary-index.js";
+export class AppCollectionSqlError extends Error {
+    reason;
+    constructor(reason) {
+        super(`app collection SQL: ${reason}`);
+        this.reason = reason;
+        this.name = "AppCollectionSqlError";
+    }
+}
+const fail = (reason) => new AppCollectionSqlError(reason);
+export function createAppCollectionSql(source) {
+    const options = Object.freeze({ ...source });
+    if (!/^[0-9a-f]{64}$/.test(options.wasmSha256) || !Number.isSafeInteger(options.maxWasmBytes)
+        || options.maxWasmBytes < 1 || options.maxWasmBytes > 4 * 1024 * 1024
+        || typeof options.loadWasm !== "function" || typeof options.initialize !== "function")
+        throw fail("binding");
+    return async ({ scope, signal }) => {
+        const original = Object.freeze({ account: scope.account, installation: scope.installation, collection: scope.collection });
+        appPoolNames(original); // validate exact physical scope BEFORE initializer/storage IO
+        const check = () => {
+            if (signal.aborted || Object.entries(original).some(([key, value]) => scope[key] !== value))
+                throw fail("fenced");
+        };
+        check();
+        const WorkerScope = globalThis.WorkerGlobalScope;
+        if (typeof WorkerScope !== "function" || !(globalThis instanceof WorkerScope))
+            throw fail("unsupported");
+        const supplied = await options.loadWasm({ signal });
+        check();
+        if (!(supplied instanceof Uint8Array) || supplied.byteLength < 1 || supplied.byteLength > options.maxWasmBytes)
+            throw fail("binding");
+        const bytes = new Uint8Array(supplied);
+        const hash = new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
+        check();
+        if (Array.from(hash, value => value.toString(16).padStart(2, "0")).join("") !== options.wasmSha256)
+            throw fail("binding");
+        const sqlite = await options.initialize({ wasmBinary: bytes, print() { }, printErr() { } });
+        check();
+        const opened = await openAppSahpoolIndex(sqlite, original);
+        const index = opened.index;
+        const binary = new AppBinaryIndexHost(index);
+        const sql = {
+            import: exports => appSqlHost(binary, exports),
+            fence: () => binary.fence(),
+            get needsRecovery() { return binary.needsRecovery; },
+        };
+        const text = (value) => ({ kind: "Text", value });
+        const ledger = Object.freeze({
+            list(maxBytes) {
+                const [result] = index.run({ mode: "Autocommit", stmts: [{ sql: "SELECT v FROM _mdbn_host WHERE k >= 'w:' AND k < 'w;' ORDER BY k LIMIT 1024", params: [] }] });
+                const out = [];
+                let bytes = 0;
+                for (const value of result?.values ?? []) {
+                    if (value.kind !== "Text")
+                        continue;
+                    bytes += value.value.length;
+                    if (bytes > maxBytes)
+                        break;
+                    out.push(value.value);
+                }
+                return out;
+            },
+            put(mutationId, value) {
+                index.run({ mode: "Autocommit", stmts: [{ sql: "INSERT OR REPLACE INTO _mdbn_host(k, v) VALUES (?, ?)", params: [text(`w:${mutationId}`), text(value)] }] });
+            },
+            remove(mutationId) {
+                index.run({ mode: "Autocommit", stmts: [{ sql: "DELETE FROM _mdbn_host WHERE k = ?", params: [text(`w:${mutationId}`)] }] });
+            },
+        });
+        let closing = null;
+        const close = () => closing ??= Promise.resolve().then(async () => {
+            try {
+                index.close();
+                await opened.pool.pauseVfs();
+            }
+            catch {
+                binary.fence();
+                throw fail("unavailable");
+            }
+        });
+        // After acquisition return cleanup EVEN if cancellation arrived while opening.
+        // Host retains this result before its current-scope check, so it closes SQL
+        // LAST. Throwing here would orphan SQL outside the host's failed-stop custody.
+        if (signal.aborted || Object.entries(original).some(([key, value]) => scope[key] !== value))
+            binary.fence();
+        return Object.freeze({ sql, opened: { Fresh: "fresh", Existing: "existing", Unclean: "unclean" }[index.info.opened], sqliteVersion: index.info.sqliteVersion, ledger, close });
+    };
+}
+//# sourceMappingURL=collection-sql.js.map

package/dist/app-storage/collection-sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-sql.js","sourceRoot":"","sources":["../../src/app-storage/collection-sql.ts"],"names":[],"mappings":"AAAA;;sEAEsE;AACtE,OAAO,EAAkB,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AA2BvE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACzB;IAArB,YAAqB,MAA4D;QAC/E,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QADpB,WAAM,GAAN,MAAM,CAAsD;QACvC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IAC9E,CAAC;CACF;AACD,MAAM,IAAI,GAAG,CAAC,MAAuC,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAE5F,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IAGpE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC;WACxF,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;WAClE,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU;QAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/G,OAAO,KAAK,EAAE,EAAC,KAAK,EAAE,MAAM,EAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAC,CAAC,CAAC;QACzH,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,8DAA8D;QACtF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAA4B,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7I,CAAC,CAAC;QACF,KAAK,EAAE,CAAC;QACR,MAAM,WAAW,GAAI,UAAyE,CAAC,iBAAiB,CAAC;QACjH,IAAI,OAAO,WAAW,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,YAAY,WAAW,CAAC;YAAE,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,YAAY;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACnF,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAC,UAAU,EAAE,KAAK,EAAE,KAAK,KAAI,CAAC,EAAE,QAAQ,KAAI,CAAC,EAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAmB,MAAM,CAAC,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAmB;YAC1B,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;YAC9C,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;YAC3B,IAAI,aAAa,KAAK,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;SACrD,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAC,IAAI,EAAE,MAAe,EAAE,KAAK,EAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAkB,MAAM,CAAC,MAAM,CAAC;YAC1C,IAAI,CAAC,QAAgB;gBACnB,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,EAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAC,GAAG,EAAE,6EAA6E,EAAE,MAAM,EAAE,EAAE,EAAC,CAAC,EAAC,CAAC,CAAC;gBAC5J,MAAM,GAAG,GAAa,EAAE,CAAC;gBACzB,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;wBAAE,SAAS;oBACpC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,IAAI,KAAK,GAAG,QAAQ;wBAAE,MAAM;oBAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,GAAG,CAAC,UAAkB,EAAE,KAAa;gBACnC,KAAK,CAAC,GAAG,CAAC,EAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAC,GAAG,EAAE,uDAAuD,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,CAAC,UAAkB;gBACvB,KAAK,CAAC,GAAG,CAAC,EAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAC,GAAG,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC;YAC3H,CAAC;SACF,CAAC,CAAC;QACH,IAAI,OAAO,GAAyB,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChE,IAAI,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,CAAC;YACpD,MAAM,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,+EAA+E;QAC/E,4EAA4E;QAC5E,+EAA+E;QAC/E,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAA4B,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACrI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,EAAE,MAAM,EAAG,EAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC,CAAC;IACxL,CAAC,CAAC;AACJ,CAAC"}

package/dist/app-storage/index.d.ts

@@ -0,0 +1,10 @@
+/** Trusted same-Worker native SQL engine; no account/installation authority,
+ * vault/editor coupling, in-memory fallback or physical-durability claim. */
+export { SqliteIndex, IndexError, classifyError } from "./sqlite-index.js";
+export type { SqlValue, Stmt, Batch, StmtResult, IndexResultLimits, IndexInfo, IndexErrorKind } from "./sqlite-index.js";
+export { AppSqliteIndex, appPoolNames, openAppSahpoolIndex } from "./app-sqlite-index.js";
+export type { AppStorageScope } from "./app-sqlite-index.js";
+export { APP_INDEX_LIMITS, AppBinaryIndexHost, appSqlHost } from "./app-binary-index.js";
+export type { AppSqlWasmExports } from "./app-binary-index.js";
+export { createAppCollectionSql, AppCollectionSqlError } from "./collection-sql.js";
+export type { AppCollectionSqlOptions, AppOpenedCollectionSql } from "./collection-sql.js";

package/dist/app-storage/index.js

@@ -0,0 +1,7 @@
+/** Trusted same-Worker native SQL engine; no account/installation authority,
+ * vault/editor coupling, in-memory fallback or physical-durability claim. */
+export { SqliteIndex, IndexError, classifyError } from "./sqlite-index.js";
+export { AppSqliteIndex, appPoolNames, openAppSahpoolIndex } from "./app-sqlite-index.js";
+export { APP_INDEX_LIMITS, AppBinaryIndexHost, appSqlHost } from "./app-binary-index.js";
+export { createAppCollectionSql, AppCollectionSqlError } from "./collection-sql.js";
+//# sourceMappingURL=index.js.map

package/dist/app-storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/app-storage/index.ts"],"names":[],"mappings":"AAAA;6EAC6E;AAC7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/app-storage/sqlite-index.d.ts

@@ -0,0 +1,95 @@
+/** Canonical synchronous SQLite batch engine for trusted native Worker hosts.
+ * Moved unchanged from obsidian-runtime: statement cache, exact i64 values,
+ * error classification, bounded results and original _mdbn_host clean flag.
+ * Callers choose their original VFS/database and NORMAL or FULL profile.
+ * The index remains Disposable; pragmas are not physical-durability proof. */
+/** `SqlValue`. Integers are `bigint` (SQLite's 64-bit range). */
+export type SqlValue = {
+    readonly kind: "Null";
+} | {
+    readonly kind: "Integer";
+    readonly value: bigint;
+} | {
+    readonly kind: "Real";
+    readonly value: number;
+} | {
+    readonly kind: "Text";
+    readonly value: string;
+} | {
+    readonly kind: "Blob";
+    readonly value: Uint8Array;
+};
+/** `Stmt`. */
+export interface Stmt {
+    readonly sql: string;
+    readonly params: readonly SqlValue[];
+}
+/** `Batch`. */
+export interface Batch {
+    readonly mode: "Transaction" | "Autocommit";
+    readonly stmts: readonly Stmt[];
+}
+/** `StmtResult`. */
+export interface StmtResult {
+    readonly columns: number;
+    readonly values: SqlValue[];
+    readonly changes: bigint;
+    readonly lastInsertRowid: bigint;
+}
+/** Optional app binary transport result envelope; enforced during row iteration. */
+export interface IndexResultLimits {
+    readonly maxBytes: number;
+    readonly maxRows: number;
+    readonly maxValues: number;
+    readonly maxColumns: number;
+}
+/** `IndexErrorKind`. */
+export type IndexErrorKind = "Corrupt" | "Full" | "Busy" | "Sql" | "Other";
+/** `IndexError`. */
+export declare class IndexError extends Error {
+    readonly kind: IndexErrorKind;
+    readonly detail: string;
+    readonly stmt: number | null;
+    constructor(kind: IndexErrorKind, detail: string, stmt?: number | null);
+}
+/** `IndexInfo`. */
+export interface IndexInfo {
+    readonly durability: "Durable" | "Disposable";
+    readonly opened: "Fresh" | "Existing" | "Unclean";
+    readonly sqliteVersion: number;
+    /** `navigator.storage.estimate()` reported implausible usage (quota sanity check). */
+    readonly quotaSuspect: boolean;
+}
+type Sqlite3 = any;
+type DB = any;
+/** Map an exception from sqlite-wasm (or OPFS) to an `IndexError`. */
+export declare function classifyError(e: unknown, stmt?: number | null): IndexError;
+/** One open index database. Synchronous, as `IndexStorage` is. */
+export declare class SqliteIndex {
+    private readonly sqlite3;
+    private readonly db;
+    readonly info: IndexInfo;
+    private readonly cache;
+    private closed;
+    constructor(sqlite3: Sqlite3, db: DB, info: IndexInfo);
+    /**
+     * Open `db` (already constructed on the right VFS): apply the pragmas, read and
+     * set the clean-shutdown flag.
+     */
+    static open(sqlite3: Sqlite3, db: DB, opts?: {
+        pragmas?: boolean;
+        quotaSuspect?: boolean;
+        synchronous?: "NORMAL" | "FULL";
+        verifyPragmas?: boolean;
+    }): SqliteIndex;
+    private prepare;
+    private bind;
+    private column;
+    /** `IndexStorage::run`. */
+    run(batch: Batch, limits?: IndexResultLimits): StmtResult[];
+    /** Finalize statements and close. A fenced/uncertain handle must not be marked clean. */
+    close(opts?: {
+        markClean?: boolean;
+    }): void;
+}
+export {};

package/dist/app-storage/sqlite-index.js

@@ -0,0 +1,280 @@
+/** Canonical synchronous SQLite batch engine for trusted native Worker hosts.
+ * Moved unchanged from obsidian-runtime: statement cache, exact i64 values,
+ * error classification, bounded results and original _mdbn_host clean flag.
+ * Callers choose their original VFS/database and NORMAL or FULL profile.
+ * The index remains Disposable; pragmas are not physical-durability proof. */
+/** `IndexError`. */
+export class IndexError extends Error {
+    kind;
+    detail;
+    stmt;
+    constructor(kind, detail, stmt = null) {
+        super(`${kind}${stmt === null ? "" : `@${stmt}`}(${detail})`);
+        this.kind = kind;
+        this.detail = detail;
+        this.stmt = stmt;
+        this.name = "IndexError";
+    }
+}
+const SQLITE_INTEGER = 1;
+const SQLITE_FLOAT = 2;
+const SQLITE_TEXT = 3;
+const SQLITE_BLOB = 4;
+const SQLITE_NULL = 5;
+/** Map an exception from sqlite-wasm (or OPFS) to an `IndexError`. */
+export function classifyError(e, stmt = null) {
+    if (e instanceof IndexError)
+        return e;
+    const name = e?.name ?? "";
+    const msg = e instanceof Error ? e.message : String(e);
+    const rc = e?.resultCode;
+    const primary = typeof rc === "number" ? rc & 0xff : null;
+    if (name === "QuotaExceededError" || /quota/i.test(msg) || primary === 13)
+        return new IndexError("Full", msg, stmt);
+    if (primary === 11 || primary === 26 || /malformed|not a database|SQLITE_CORRUPT|SQLITE_NOTADB/i.test(msg))
+        return new IndexError("Corrupt", msg, stmt);
+    if (name === "NoModificationAllowedError" || primary === 5 || primary === 6 || /SQLITE_BUSY|SQLITE_LOCKED|NoModificationAllowed/i.test(msg))
+        return new IndexError("Busy", msg, stmt);
+    if (primary === 1 || primary === 19 || primary === 20 || primary === 25 || /SQLITE_ERROR|SQLITE_CONSTRAINT|syntax/i.test(msg))
+        return new IndexError("Sql", msg, stmt);
+    return new IndexError("Other", msg, stmt);
+}
+/** Never turn an already-rounded JS number into a purported exact SQLite integer. */
+function exactInteger(value) {
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "number" && Number.isSafeInteger(value))
+        return BigInt(value);
+    throw new IndexError("Other", "SQLite integer is not losslessly represented");
+}
+/** Host bookkeeping, outside the store's schema: the clean-shutdown flag. */
+const HOST_TABLE = "CREATE TABLE IF NOT EXISTS _mdbn_host(k TEXT PRIMARY KEY, v) WITHOUT ROWID";
+/** One open index database. Synchronous, as `IndexStorage` is. */
+export class SqliteIndex {
+    sqlite3;
+    db;
+    info;
+    cache = new Map();
+    closed = false;
+    constructor(sqlite3, db, info) {
+        this.sqlite3 = sqlite3;
+        this.db = db;
+        this.info = info;
+    }
+    /**
+     * Open `db` (already constructed on the right VFS): apply the pragmas, read and
+     * set the clean-shutdown flag.
+     */
+    static open(sqlite3, db, opts = {}) {
+        try {
+            const synchronous = opts.synchronous ?? "NORMAL";
+            if (synchronous !== "NORMAL" && synchronous !== "FULL")
+                throw new IndexError("Other", "unsupported synchronous profile");
+            if (opts.pragmas !== false) {
+                db.exec("PRAGMA locking_mode=EXCLUSIVE");
+                db.exec("PRAGMA journal_mode=WAL");
+                db.exec(`PRAGMA synchronous=${synchronous}`);
+            }
+            if (opts.verifyPragmas && (String(db.selectValue("PRAGMA locking_mode")).toLowerCase() !== "exclusive" ||
+                String(db.selectValue("PRAGMA journal_mode")).toLowerCase() !== "wal" ||
+                db.selectValue("PRAGMA synchronous") !== (synchronous === "FULL" ? 2 : 1)))
+                throw new IndexError("Other", "SQLite did not apply the requested storage profile");
+            const hadHost = db.selectValue("SELECT count(*) FROM sqlite_master WHERE name='_mdbn_host'") > 0;
+            const tables = db.selectValue("SELECT count(*) FROM sqlite_master");
+            db.exec(HOST_TABLE);
+            let opened = "Fresh";
+            if (hadHost) {
+                const clean = db.selectValue("SELECT v FROM _mdbn_host WHERE k='clean'");
+                opened = clean === 1 ? "Existing" : "Unclean";
+            }
+            else if (tables > 0) {
+                opened = "Unclean"; // tables but no flag: treat as untrusted
+            }
+            db.exec("INSERT OR REPLACE INTO _mdbn_host(k, v) VALUES ('clean', 0)");
+            return new SqliteIndex(sqlite3, db, {
+                durability: "Disposable",
+                opened,
+                sqliteVersion: sqlite3.capi.sqlite3_libversion_number(),
+                quotaSuspect: opts.quotaSuspect ?? false,
+            });
+        }
+        catch (e) {
+            throw classifyError(e);
+        }
+    }
+    prepare(sql) {
+        let st = this.cache.get(sql);
+        if (!st) {
+            st = this.db.prepare(sql);
+            this.cache.set(sql, st);
+        }
+        return st;
+    }
+    bind(st, params) {
+        st.clearBindings();
+        params.forEach((p, i) => {
+            const idx = i + 1;
+            switch (p.kind) {
+                case "Null":
+                    st.bind(idx, null);
+                    break;
+                case "Integer":
+                    st.bind(idx, p.value);
+                    break;
+                case "Real":
+                    st.bind(idx, p.value);
+                    break;
+                case "Text":
+                    st.bind(idx, p.value);
+                    break;
+                case "Blob":
+                    st.bindAsBlob(idx, p.value);
+                    break;
+            }
+        });
+    }
+    column(st, i) {
+        const capi = this.sqlite3.capi;
+        switch (capi.sqlite3_column_type(st.pointer, i)) {
+            case SQLITE_NULL:
+                return { kind: "Null" };
+            case SQLITE_INTEGER: {
+                const v = capi.sqlite3_column_int64(st.pointer, i);
+                return { kind: "Integer", value: exactInteger(v) };
+            }
+            case SQLITE_FLOAT:
+                return { kind: "Real", value: capi.sqlite3_column_double(st.pointer, i) };
+            case SQLITE_TEXT:
+                return { kind: "Text", value: st.getString(i) };
+            case SQLITE_BLOB:
+                return { kind: "Blob", value: st.getBlob(i) ?? new Uint8Array(0) };
+            default:
+                return { kind: "Null" };
+        }
+    }
+    /** `IndexStorage::run`. */
+    run(batch, limits) {
+        if (this.closed)
+            throw new IndexError("Other", "index closed");
+        const capi = this.sqlite3.capi;
+        const tx = batch.mode === "Transaction";
+        const out = [];
+        let rows = 0, valueCount = 0, bytes = 13;
+        const addBytes = (n) => {
+            if (!limits)
+                return;
+            if (!Number.isSafeInteger(n) || n < 0 || n > limits.maxBytes - bytes)
+                throw new IndexError("Full", "index reply byte budget exceeded");
+            bytes += n;
+        };
+        if (limits && ([limits.maxBytes, limits.maxRows, limits.maxValues, limits.maxColumns].some((n) => !Number.isSafeInteger(n) || n < 0) || limits.maxBytes < bytes)) {
+            throw new IndexError("Full", "invalid index reply budget");
+        }
+        if (tx) {
+            try {
+                this.db.exec("BEGIN IMMEDIATE");
+            }
+            catch (e) {
+                throw classifyError(e);
+            }
+        }
+        for (let i = 0; i < batch.stmts.length; i++) {
+            const s = batch.stmts[i];
+            try {
+                const st = this.prepare(s.sql);
+                try {
+                    this.bind(st, s.params);
+                    const columns = st.columnCount;
+                    if (limits && (!Number.isSafeInteger(columns) || columns < 0 || columns > limits.maxColumns)) {
+                        throw new IndexError("Full", "index reply column budget exceeded");
+                    }
+                    addBytes(24);
+                    const values = [];
+                    while (st.step()) {
+                        if (limits && ++rows > limits.maxRows)
+                            throw new IndexError("Full", "index reply row budget exceeded");
+                        for (let c = 0; c < columns; c++) {
+                            if (limits) {
+                                if (++valueCount > limits.maxValues)
+                                    throw new IndexError("Full", "index reply value budget exceeded");
+                                const tag = capi.sqlite3_column_type(st.pointer, c);
+                                if (tag === SQLITE_TEXT || tag === SQLITE_BLOB) {
+                                    // Check native byte length BEFORE copying a large string/blob into JS.
+                                    addBytes(5);
+                                    addBytes(capi.sqlite3_column_bytes(st.pointer, c));
+                                }
+                                else if (tag === SQLITE_INTEGER || tag === SQLITE_FLOAT)
+                                    addBytes(9);
+                                else if (tag === SQLITE_NULL)
+                                    addBytes(1);
+                                else
+                                    throw new IndexError("Other", "unknown SQLite value type");
+                            }
+                            values.push(this.column(st, c));
+                        }
+                    }
+                    out.push({
+                        columns,
+                        values,
+                        changes: exactInteger(capi.sqlite3_changes(this.db.pointer)),
+                        lastInsertRowid: exactInteger(capi.sqlite3_last_insert_rowid(this.db.pointer)),
+                    });
+                }
+                finally {
+                    st.reset();
+                }
+            }
+            catch (e) {
+                if (tx) {
+                    try {
+                        this.db.exec("ROLLBACK");
+                    }
+                    catch {
+                        /* already rolled back */
+                    }
+                }
+                throw classifyError(e, i);
+            }
+        }
+        if (tx) {
+            try {
+                this.db.exec("COMMIT");
+            }
+            catch (e) {
+                try {
+                    this.db.exec("ROLLBACK");
+                }
+                catch {
+                    /* ignore */
+                }
+                throw classifyError(e);
+            }
+        }
+        return out;
+    }
+    /** Finalize statements and close. A fenced/uncertain handle must not be marked clean. */
+    close(opts = {}) {
+        if (this.closed)
+            return;
+        this.closed = true;
+        for (const st of this.cache.values()) {
+            try {
+                st.finalize();
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        this.cache.clear();
+        if (opts.markClean !== false) {
+            try {
+                this.db.exec("INSERT OR REPLACE INTO _mdbn_host(k, v) VALUES ('clean', 1)");
+            }
+            catch {
+                /* best effort: next open reports Unclean */
+            }
+        }
+        this.db.close();
+    }
+}
+//# sourceMappingURL=sqlite-index.js.map

package/dist/app-storage/sqlite-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-index.js","sourceRoot":"","sources":["../../src/app-storage/sqlite-index.ts"],"names":[],"mappings":"AAAA;;;;8EAI8E;AAyC9E,oBAAoB;AACpB,MAAM,OAAO,UAAW,SAAQ,KAAK;IAExB;IACA;IACA;IAHX,YACW,IAAoB,EACpB,MAAc,EACd,OAAsB,IAAI;QAEnC,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC;QAJrD,SAAI,GAAJ,IAAI,CAAgB;QACpB,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAsB;QAGnC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAkBD,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,OAAsB,IAAI;IAClE,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,IAAI,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,EAAE,GAAI,CAA6B,EAAE,UAAU,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,IAAI,KAAK,oBAAoB,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpH,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,IAAI,wDAAwD,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxJ,IAAI,IAAI,KAAK,4BAA4B,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,kDAAkD,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtL,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,IAAI,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACvK,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;AAChF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,GAAG,4EAA4E,CAAC;AAEhG,kEAAkE;AAClE,MAAM,OAAO,WAAW;IAKH;IACA;IACR;IANM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAgB,EAChB,EAAM,EACd,IAAe;QAFP,YAAO,GAAP,OAAO,CAAS;QAChB,OAAE,GAAF,EAAE,CAAI;QACd,SAAI,GAAJ,IAAI,CAAW;IACvB,CAAC;IAEJ;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,OAAgB,EAAE,EAAM,EAAE,OAAgH,EAAE;QACtJ,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC;YACjD,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;YACzH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC3B,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBACzC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACnC,EAAE,CAAC,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,IAAI,CACxB,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW;gBAC3E,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;gBACrE,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1E;gBAAE,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;YACvF,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,4DAA4D,CAAC,GAAG,CAAC,CAAC;YACjG,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,oCAAoC,CAAW,CAAC;YAC9E,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpB,IAAI,MAAM,GAAwB,OAAO,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;gBACzE,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,CAAC;iBAAM,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,SAAS,CAAC,CAAC,yCAAyC;YAC/D,CAAC;YACD,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YACvE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE;gBAClC,UAAU,EAAE,YAAY;gBACxB,MAAM;gBACN,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBACvD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAW;QACzB,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,IAAI,CAAC,EAAgB,EAAE,MAA2B;QACxD,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAClB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,KAAK,SAAS;oBACZ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,MAAM;oBACT,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,MAAM;oBACT,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,MAAM;oBACT,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC5B,MAAM;YACV,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,EAAgB,EAAE,CAAS;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,QAAQ,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YAChD,KAAK,WAAW;gBACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,CAAC;YACD,KAAK,YAAY;gBACf,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5E,KAAK,WAAW;gBACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,WAAW;gBACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE;gBACE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,GAAG,CAAC,KAAY,EAAE,MAA0B;QAC1C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;QACxC,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,IAAI,IAAI,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAQ,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;YACvI,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,CAAC;QACF,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;YACjK,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;oBACxB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAqB,CAAC;oBACzC,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC7F,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;oBACrE,CAAC;oBACD,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACb,MAAM,MAAM,GAAe,EAAE,CAAC;oBAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;wBACjB,IAAI,MAAM,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,OAAO;4BAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;wBACvG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;4BACjC,IAAI,MAAM,EAAE,CAAC;gCACX,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,SAAS;oCAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;gCACvG,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gCACpD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;oCAC/C,uEAAuE;oCACvE,QAAQ,CAAC,CAAC,CAAC,CAAC;oCACZ,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gCACrD,CAAC;qCAAM,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,YAAY;oCAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;qCAClE,IAAI,GAAG,KAAK,WAAW;oCAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;;oCACrC,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;4BAClE,CAAC;4BACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;wBAClC,CAAC;oBACH,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC;wBACP,OAAO;wBACP,MAAM;wBACN,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;wBAC5D,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;qBAC/E,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,EAAE,EAAE,CAAC;oBACP,IAAI,CAAC;wBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3B,CAAC;oBAAC,MAAM,CAAC;wBACP,yBAAyB;oBAC3B,CAAC;gBACH,CAAC;gBACD,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;gBACD,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,OAAgC,EAAE;QACtC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,EAAE,CAAC,QAAQ,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/application/asset-loader.d.ts

@@ -0,0 +1,22 @@
+/** SDK build/packaging input only, not an application declaration option.
+ * Hash integrity does NOT authenticate this descriptor or the release context. */
+export interface ApplicationAsset {
+    readonly url: string;
+    readonly sha256: string;
+    readonly bytes: number;
+    readonly maxBytes: number;
+}
+export interface ApplicationAssetHost {
+    readonly origin: string;
+    readonly platform?: "native";
+    readonly environment: "lab" | "staging" | "production" | "local";
+    readonly fetch?: typeof fetch;
+}
+/** Private same-artifact transport. The SDK release generator supplies immutable
+ * URLs/digests/byte counts from authenticated packaging, never the app or CP.
+ * Persists verified public artifact bytes for offline reopen (HTTP caching alone
+ * is not reliable on WebKit). Every read still passes the packaged size/digest
+ * checks; a different release is never a fallback. Owns IO until work drains. */
+export declare function applicationAssetLoader(input: ApplicationAsset, source: ApplicationAssetHost): (options: {
+    signal: AbortSignal;
+}) => Promise<Uint8Array>;