@minnowdb/core 0.6.5 → 0.6.7

package/dist/plan/model.js

@@ -1 +1,29 @@
-export {};
+/**
+ * A cross join rides the nested-loop inner-join path with a condition every row pair satisfies:
+ * 1 = 1 over null literal key expressions. Producers build the shape with crossJoinPlan and
+ * consumers recognize it with isCrossJoinPlan, so the encoding lives in exactly one place.
+ */
+export function crossJoinPlan(source) {
+    return {
+        ...source,
+        kind: "inner",
+        left: { kind: "literal", value: null },
+        right: { kind: "literal", value: null },
+        on: {
+            kind: "condition",
+            operator: "=",
+            left: { kind: "literal", value: 1 },
+            right: { kind: "literal", value: 1 },
+        },
+    };
+}
+export function isCrossJoinPlan(join) {
+    const condition = join.on;
+    return (join.kind === "inner" &&
+        condition?.kind === "condition" &&
+        condition.operator === "=" &&
+        condition.left.kind === "literal" &&
+        condition.left.value === 1 &&
+        condition.right.kind === "literal" &&
+        condition.right.value === 1);
+}

package/dist/storage/indexeddb.js

@@ -1,4 +1,4 @@
-import { CompactionJobConflictError, assertCompactionOutputProvenance, compactionOutputSegmentIds, CompactionBacklogError, createManifest, createGarbageCollectionJobRecord, storeNames, advanceGarbageCollectionJobRecord as advanceGarbageCollectionJobRecordUnchecked, BlockReadBatchTooLargeError, activePostingStorageColumnIds, assertTempRunPageBatchLimits, assertStorageBulkReadItems, assertTransactionArtifactBatchLimits, assertTransactionArtifactJournalLimits, boundedMaintenanceBatchItems, canonicalManifestChangedTableIds, catalogRecordRetainedBytes, manifestRecordRetainedReservationBytes, segmentRecordRetainedBytes, collectFtsPostings, ftsPostingQueryMatches, invalidateUncoveredFtsColumns, invalidateUncoveredSecondaryIndexes, GarbageCollectionJobConflictError, LeaseConflictError, LeaseExpiredError, LeaseOwnerConflictError, MAX_FTS_CANDIDATE_ROW_IDS, MAX_ACTIVE_UNIQUE_KEY_BUILDS, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES_TOTAL, MAX_UNIQUE_KEY_BUILD_CHUNK_BYTES, MAX_UNIQUE_KEY_BUILD_TOKENS_PER_CHUNK, MAX_UNIQUE_KEY_BUILD_TTL_MS, MAX_FTS_BASE_CHUNKS, MAX_FTS_DELTA_CHUNKS, MAX_FTS_POSTINGS_PER_CHUNK, MAX_FTS_POSTING_ROW_IDS_PER_CHUNK, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_FTS_TOKENS_PER_DOCUMENT, MAX_FTS_ORDERED_READ_BYTES, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_MANIFEST_RECORDS, MAX_MANIFEST_RETAINED_BYTES, MAX_BLOCK_READ_BATCH_BYTES, MAX_STORAGE_ID_CHARACTERS, MAX_LEASE_TTL_MS, MAX_ACTIVE_LEASES, MAX_ACTIVE_TRANSACTIONS, MAX_GLOBAL_STAGED_ARTIFACT_BYTES, MAX_GLOBAL_STAGED_BLOCKS, MAX_GLOBAL_STAGED_SEGMENTS, MAX_RETIRED_HISTORY_BYTES, MAX_PINNED_MANIFEST_VERSION_LAG, MAX_PINNED_RETIRED_BLOCKS, MAX_PINNED_RETIRED_BYTES, MAX_TERMINAL_TRANSACTION_RECORDS, MAX_ACTIVE_COMPACTION_JOBS, MAX_ACTIVE_GARBAGE_COLLECTION_JOBS, MAX_TERMINAL_COMPACTION_JOB_RECORDS, MAX_COMPLETED_GARBAGE_COLLECTION_JOB_RECORDS, MAX_CATALOG_RECORDS, MAX_CATALOG_RETAINED_BYTES, MAX_SEGMENT_RECORDS, MAX_SEGMENT_RETAINED_BYTES, MAX_ACTIVE_FTS_BASE_BUILDS, MAX_ACTIVE_SECONDARY_INDEX_BUILDS, MAX_ACCELERATOR_BUILD_STAGED_BYTES_TOTAL, MAX_ACCELERATOR_BUILD_STAGED_ENTRIES_TOTAL, MAX_POSTING_BUILD_TTL_MS, MAX_SNAPSHOT_SESSION_TTL_MS, MAX_SNAPSHOT_FRAME_BATCH_BYTES, MAX_SNAPSHOT_FRAME_BATCH_ITEMS, MAX_SNAPSHOT_METADATA_BATCH_BYTES, MAX_SNAPSHOT_METADATA_FRAME_BYTES, SNAPSHOT_FRAME_KINDS, MAX_LEVEL_ZERO_SEGMENTS, MAX_AUTO_INCREMENT_EXCLUSIVE_END, MAX_ROW_ID, MAX_ROW_ID_EXCLUSIVE_END, StorageCorruptionError, StorageFormatVersionError, IndexedDbSchemaUpgradeBlockedError, StorageResourceLimitError, SnapshotManifestMissingError, SnapshotImportConflictError, PostingBuildConflictError, validateTableForeignKey, TableInUseError, TableRecordConflictError, TempOwnerConflictError, MAX_TEMP_OWNER_TTL_MS, MAX_ACTIVE_TEMP_OWNERS, MAX_TEMP_RUNS_PER_OWNER, MAX_TEMP_PAGES_PER_OWNER, MAX_TEMP_RUNS_TOTAL, MAX_TEMP_PAGES_TOTAL, MAX_TEMP_BYTES_PER_OWNER, MAX_TEMP_BYTES_TOTAL, TransactionRecordConflictError, UniqueKeyConflictError, UniqueKeyBuildConflictError, UniqueIndexCoverageError, SchemaConflictError, normalizeCompactionJobRecord, normalizeGarbageCollectionJobRecord, normalizeSegmentRecord, updateCompactionJobRecord as updateCompactionJobRecordUnchecked, updateGarbageCollectionPlanningRecord, updateTransactionRecord as updateTransactionRecordUnchecked, validateColumnDefault, validateCatalogName, validateCanonicalManifestChangedTableIds, validateEnumValues, validateFtsOrderedReadLimits, validateFtsPostingQueries, validateStorageId, validateStorageDatabaseName, validateTableColumns, validateSecondaryIndexes, validateTableRecordBounds, secondaryIndexColumnIds, secondaryIndexWriteContractChanged, secondaryUniqueKeyNamespace, transactionCommitDeltaRetainedBytes, uniqueKeyBuildChunkRetainedBytes, WriteConflictError, } from "./types.js";
+import { CompactionJobConflictError, assertCompactionOutputProvenance, compactionOutputSegmentIds, CompactionBacklogError, createManifest, createGarbageCollectionJobRecord, storeNames, advanceGarbageCollectionJobRecord as advanceGarbageCollectionJobRecordUnchecked, BlockReadBatchTooLargeError, activePostingStorageColumnIds, assertTempRunPageBatchLimits, assertStorageBulkReadItems, assertTransactionArtifactBatchLimits, assertTransactionArtifactJournalLimits, boundedMaintenanceBatchItems, canonicalManifestChangedTableIds, catalogRecordRetainedBytes, manifestRecordRetainedReservationBytes, segmentRecordRetainedBytes, collectFtsPostings, ftsPostingQueryMatches, invalidateUncoveredFtsColumns, invalidateUncoveredSecondaryIndexes, GarbageCollectionJobConflictError, LeaseConflictError, LeaseExpiredError, LeaseOwnerConflictError, MAX_FTS_CANDIDATE_ROW_IDS, MAX_ACTIVE_UNIQUE_KEY_BUILDS, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES_TOTAL, MAX_UNIQUE_KEY_BUILD_CHUNK_BYTES, MAX_UNIQUE_KEY_BUILD_TOKENS_PER_CHUNK, MAX_UNIQUE_KEY_BUILD_TTL_MS, MAX_FTS_BASE_CHUNKS, MAX_FTS_DELTA_CHUNKS, MAX_FTS_POSTINGS_PER_CHUNK, MAX_FTS_POSTING_ROW_IDS_PER_CHUNK, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_FTS_TOKENS_PER_DOCUMENT, MAX_FTS_ORDERED_READ_BYTES, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_MANIFEST_RECORDS, MAX_MANIFEST_RETAINED_BYTES, MAX_BLOCK_READ_BATCH_BYTES, MAX_STORAGE_ID_CHARACTERS, MAX_LEASE_TTL_MS, MAX_ACTIVE_LEASES, MAX_ACTIVE_TRANSACTIONS, MAX_GLOBAL_STAGED_ARTIFACT_BYTES, MAX_GLOBAL_STAGED_BLOCKS, MAX_GLOBAL_STAGED_SEGMENTS, MAX_RETIRED_HISTORY_BYTES, MAX_PINNED_MANIFEST_VERSION_LAG, MAX_PINNED_RETIRED_BLOCKS, MAX_PINNED_RETIRED_BYTES, MAX_TERMINAL_TRANSACTION_RECORDS, MAX_ACTIVE_COMPACTION_JOBS, MAX_ACTIVE_GARBAGE_COLLECTION_JOBS, MAX_TERMINAL_COMPACTION_JOB_RECORDS, MAX_COMPLETED_GARBAGE_COLLECTION_JOB_RECORDS, MAX_CATALOG_RECORDS, MAX_CATALOG_RETAINED_BYTES, MAX_SEGMENT_RECORDS, MAX_SEGMENT_RETAINED_BYTES, MAX_ACTIVE_FTS_BASE_BUILDS, MAX_ACTIVE_SECONDARY_INDEX_BUILDS, MAX_ACCELERATOR_BUILD_STAGED_BYTES_TOTAL, MAX_ACCELERATOR_BUILD_STAGED_ENTRIES_TOTAL, MAX_POSTING_BUILD_TTL_MS, MAX_SNAPSHOT_SESSION_TTL_MS, MAX_SNAPSHOT_FRAME_BATCH_BYTES, MAX_SNAPSHOT_FRAME_BATCH_ITEMS, MAX_SNAPSHOT_METADATA_BATCH_BYTES, MAX_SNAPSHOT_METADATA_FRAME_BYTES, SNAPSHOT_FRAME_KINDS, MAX_LEVEL_ZERO_SEGMENTS, MAX_AUTO_INCREMENT_EXCLUSIVE_END, MAX_ROW_ID, MAX_ROW_ID_EXCLUSIVE_END, StorageCorruptionError, StorageFormatVersionError, IndexedDbSchemaUpgradeBlockedError, StorageResourceLimitError, SnapshotManifestMissingError, SnapshotImportConflictError, PostingBuildConflictError, validateTableForeignKey, TableInUseError, TableRecordConflictError, TempOwnerConflictError, MAX_TEMP_OWNER_TTL_MS, MAX_ACTIVE_TEMP_OWNERS, MAX_TEMP_RUNS_PER_OWNER, MAX_TEMP_PAGES_PER_OWNER, MAX_TEMP_RUNS_TOTAL, MAX_TEMP_PAGES_TOTAL, MAX_TEMP_BYTES_PER_OWNER, MAX_TEMP_BYTES_TOTAL, TransactionRecordConflictError, UniqueKeyConflictError, UniqueKeyBuildConflictError, UniqueIndexCoverageError, SchemaConflictError, normalizeCompactionJobRecord, normalizeGarbageCollectionJobRecord, normalizeSegmentRecord, updateCompactionJobRecord as updateCompactionJobRecordUnchecked, updateGarbageCollectionPlanningRecord, updateTransactionRecord as updateTransactionRecordUnchecked, validateColumnDefault, validateCatalogName, validateCanonicalManifestChangedTableIds, validateEnumValues, validateFtsCandidateLimit, validateFtsOrderedReadLimits, validateFtsReadVersion, validateFtsPostingQueries, validateStorageId, validateStorageDatabaseName, validateTableColumns, validateSecondaryIndexes, validateTableRecordBounds, secondaryIndexColumnIds, secondaryIndexWriteContractChanged, secondaryUniqueKeyNamespace, transactionCommitDeltaRetainedBytes, uniqueKeyBuildChunkRetainedBytes, WriteConflictError, } from "./types.js";
 import { crc32, verifyStoredBlock } from "../block-format/index.js";
 import { dateIsoString } from "../date-value.js";
 import { decodeSnapshotMetadataItems, encodeSnapshotMetadataPage, extendSnapshotFrameStreamChecksum, prepareSnapshotFrameStreamHeader, snapshotFrameEnvelopeParts, snapshotFrameStreamHeaderIdentity, } from "./snapshot-stream.js";
@@ -1769,11 +1769,8 @@ export class IndexedDbBlockStore {
         validateId(tableId, "Table ID");
         validateId(columnId, "Column ID");
         validateFtsPostingQueries(terms);
-        if (!Number.isSafeInteger(maxRowIds) ||
-            maxRowIds < 1 ||
-            maxRowIds > MAX_FTS_CANDIDATE_ROW_IDS) {
-            throw new RangeError(`Full-text candidate limit must be between 1 and ${String(MAX_FTS_CANDIDATE_ROW_IDS)}`);
-        }
+        validateFtsReadVersion(upToVersion);
+        validateFtsCandidateLimit(maxRowIds);
         const transaction = this.#transaction("catalog", "readonly");
         const store = transaction.objectStore("catalog");
         const [rawToc, rawDeltaIndex] = await Promise.all([
@@ -1870,9 +1867,7 @@ export class IndexedDbBlockStore {
     async readFtsPostings(tableId, columnId, upToVersion, maxRowIds = MAX_FTS_CANDIDATE_ROW_IDS, maxRetainedBytes = MAX_FTS_ORDERED_READ_BYTES) {
         validateId(tableId, "Table ID");
         validateId(columnId, "Column ID");
-        if (!Number.isSafeInteger(upToVersion) || upToVersion < 0) {
-            throw new RangeError("Full-text snapshot version must be a non-negative safe integer");
-        }
+        validateFtsReadVersion(upToVersion);
         validateFtsOrderedReadLimits(maxRowIds, maxRetainedBytes);
         const transaction = this.#transaction("catalog", "readonly");
         const store = transaction.objectStore("catalog");
@@ -6983,20 +6978,15 @@ function createCurrentIndexedDbSchema(database, upgrade) {
     for (const storeName of storeNames)
         database.createObjectStore(storeName);
     database.createObjectStore(SNAPSHOT_HEADER_STORE);
-    upgrade.objectStore("segments").createIndex(SEGMENT_TABLE_INDEX, "tableId");
-    upgrade.objectStore("leases").createIndex(LEASE_EXPIRY_INDEX, ["expiresAt", "id"]);
-    upgrade.objectStore("transactions").createIndex(TRANSACTION_STATUS_INDEX, "status");
-    upgrade.objectStore("temp").createIndex(TEMP_OWNER_EXPIRY_INDEX, ["expiresAt", "ownerId"]);
-    upgrade.objectStore("catalog").createIndex(CATALOG_FTS_BUILD_UPDATED_INDEX, "updatedAt");
-    upgrade.objectStore("catalog").createIndex(CATALOG_FTS_BUILD_EXPIRY_INDEX, "ftsBuildExpiry");
-    upgrade
-        .objectStore("catalog")
-        .createIndex(CATALOG_FTS_RETIREMENT_UPDATED_INDEX, "retirementUpdatedAt");
-    upgrade.objectStore("catalog").createIndex(UNIQUE_KEY_BUILD_ACTIVE_INDEX, "activeBuildState");
-    upgrade.objectStore("catalog").createIndex(UNIQUE_KEY_BUILD_EXPIRY_INDEX, "activeExpiry");
-    upgrade.objectStore("catalog").createIndex(MANIFEST_BLOCK_ID_INDEX, "blockId", {
-        unique: true,
-    });
+    // Creation is driven by the same declaration validateCurrentIndexedDbSchema verifies
+    // against, so the two can never disagree about what the current schema is.
+    for (const [storeName, indexes] of Object.entries(indexedDbIndexSchema)) {
+        const store = upgrade.objectStore(storeName);
+        for (const index of indexes) {
+            const keyPath = typeof index.keyPath === "string" ? index.keyPath : [...index.keyPath];
+            store.createIndex(index.name, keyPath, { unique: index.unique ?? false });
+        }
+    }
     upgrade.objectStore("gc").add(emptyMaintenanceQuota(), MAINTENANCE_QUOTA_KEY);
     upgrade.objectStore("statistics").add(emptyResourceLedger(), RESOURCE_LEDGER_KEY);
     upgrade.objectStore("statistics").add(emptyCatalogResourceLedger(), CATALOG_RESOURCE_LEDGER_KEY);

package/dist/storage/opfs/leader.d.ts

@@ -4,8 +4,6 @@ import { type Placement } from "../toolkit/extents.js";
 /** A failed checkpoint may defer compaction, but the recovery log itself stays bounded. */
 export declare const MAX_OPFS_WAL_BYTES: number;
 export declare const MAX_OPFS_CHECKPOINT_BYTES: number;
-/** Failed physical reclamation cannot permit byte-growing work forever. */
-export declare const MAX_OPFS_CLEANUP_DEBT_BYTES: number;
 interface IdPlacement {
     id: string;
     placement: Placement;
@@ -459,6 +457,4 @@ export declare class OpfsLeader {
 export declare function assertBlockReadBatchByteLimit(placements: ReadonlyArray<{
     length: number;
 } | undefined>): void;
-/** Conservative retained-heap model for one decoded postings chunk and its nested arrays. */
-export declare function modeledFtsChunkBytes(chunk: readonly FtsPosting[]): number;
 export {};

package/dist/storage/opfs/leader.js

@@ -1,4 +1,4 @@
-import { activePostingStorageColumnIds, assertStorageBulkReadItems, assertTempRunPageBatchLimits, BlockReadBatchTooLargeError, collectFtsPostingsBounded, ftsPostingQueryMatches, MAX_BLOCK_READ_BATCH_BYTES, MAX_FTS_BASE_CHUNKS, MAX_POSTING_BUILD_TTL_MS, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_STORAGE_ID_CHARACTERS, MAX_TEMP_RUN_PAGE_BYTES, MAX_TEMP_RUN_PAGES_PER_BATCH, MAX_TEMP_RUN_BATCH_BYTES, MAX_TEMP_RUNS_PER_OWNER, MAX_TEMP_PAGES_PER_OWNER, MAX_TEMP_RUNS_TOTAL, MAX_TEMP_PAGES_TOTAL, MAX_TEMP_BYTES_PER_OWNER, MAX_TEMP_BYTES_TOTAL, MAX_ACTIVE_FTS_BASE_BUILDS, MAX_ACTIVE_SECONDARY_INDEX_BUILDS, MAX_ACCELERATOR_BUILD_STAGED_BYTES_TOTAL, MAX_ACCELERATOR_BUILD_STAGED_ENTRIES_TOTAL, MAX_FTS_CANDIDATE_ROW_IDS, MAX_FTS_ORDERED_READ_BYTES, MAX_SNAPSHOT_SESSION_TTL_MS, MAX_SNAPSHOT_FRAME_BATCH_BYTES, MAX_SNAPSHOT_FRAME_BATCH_ITEMS, MAX_SNAPSHOT_METADATA_BATCH_BYTES, SNAPSHOT_FRAME_KINDS, MAX_TRANSACTION_STAGE_BLOCKS, MAX_TRANSACTION_STAGE_SEGMENTS, SnapshotImportConflictError, PostingBuildConflictError, StorageResourceLimitError, StorageCorruptionError, StorageFormatVersionError, validateFtsPostingQueries, validateFtsOrderedReadLimits, uniqueKeyBuildChunkRetainedBytes, } from "../types.js";
+import { activePostingStorageColumnIds, assertStorageBulkReadItems, assertTempRunPageBatchLimits, BlockReadBatchTooLargeError, collectFtsPostingsBounded, ftsPostingQueryMatches, MAX_BLOCK_READ_BATCH_BYTES, MAX_FTS_BASE_CHUNKS, MAX_POSTING_BUILD_TTL_MS, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_STORAGE_ID_CHARACTERS, MAX_TEMP_RUN_PAGE_BYTES, MAX_TEMP_RUN_PAGES_PER_BATCH, MAX_TEMP_RUN_BATCH_BYTES, MAX_TEMP_RUNS_PER_OWNER, MAX_TEMP_PAGES_PER_OWNER, MAX_TEMP_RUNS_TOTAL, MAX_TEMP_PAGES_TOTAL, MAX_TEMP_BYTES_PER_OWNER, MAX_TEMP_BYTES_TOTAL, MAX_ACTIVE_FTS_BASE_BUILDS, MAX_ACTIVE_SECONDARY_INDEX_BUILDS, MAX_ACCELERATOR_BUILD_STAGED_BYTES_TOTAL, MAX_ACCELERATOR_BUILD_STAGED_ENTRIES_TOTAL, MAX_FTS_CANDIDATE_ROW_IDS, MAX_FTS_ORDERED_READ_BYTES, MAX_SNAPSHOT_SESSION_TTL_MS, MAX_SNAPSHOT_FRAME_BATCH_BYTES, MAX_SNAPSHOT_FRAME_BATCH_ITEMS, MAX_SNAPSHOT_METADATA_BATCH_BYTES, SNAPSHOT_FRAME_KINDS, MAX_TRANSACTION_STAGE_BLOCKS, MAX_TRANSACTION_STAGE_SEGMENTS, SnapshotImportConflictError, PostingBuildConflictError, StorageResourceLimitError, StorageCorruptionError, StorageFormatVersionError, validateFtsPostingQueries, validateFtsCandidateLimit, validateFtsOrderedReadLimits, validateFtsReadVersion, uniqueKeyBuildChunkRetainedBytes, } from "../types.js";
 import { dateIsoString } from "../../date-value.js";
 import { decodeSnapshotMetadataItems, encodeSnapshotMetadataPage, extendSnapshotFrameStreamChecksum, prepareSnapshotFrameStreamHeader, snapshotFrameEnvelopeParts, snapshotFrameStreamHeaderIdentity, } from "../snapshot-stream.js";
 import { RecordCore, validateBeginTransactionInput, validateBlockWriteBytes, validateFtsBaseInput, validateFtsPostingChunks, validateId, validateTempRunPage, validateTempRunPageIdentity, } from "../toolkit/record-core.js";
@@ -17,7 +17,7 @@ const CHECKPOINT_ENTRIES = 1024;
 export const MAX_OPFS_WAL_BYTES = 256 * 1024 * 1024;
 export const MAX_OPFS_CHECKPOINT_BYTES = 256 * 1024 * 1024;
 /** Failed physical reclamation cannot permit byte-growing work forever. */
-export const MAX_OPFS_CLEANUP_DEBT_BYTES = 64 * 1024 * 1024;
+const MAX_OPFS_CLEANUP_DEBT_BYTES = 64 * 1024 * 1024;
 /** Decoded full-text base cache: bounded primarily by modeled retained heap, count secondarily. */
 const FTS_CHUNK_CACHE_BYTES = 16 * 1024 * 1024;
 const FTS_CHUNK_CACHE_SIZE = 64;
@@ -2485,9 +2485,7 @@ export class OpfsLeader {
         validateId(tableId);
         validateId(columnId);
         validateFtsPostingQueries(terms);
-        if (!Number.isSafeInteger(upToVersion) || upToVersion < -1) {
-            throw new RangeError("Full-text query version must be a safe integer at least -1");
-        }
+        validateFtsReadVersion(upToVersion);
         validateFtsCandidateLimit(maxRowIds);
         return this.#run(async () => {
             // Unlike immutable table blocks, derived-index extents are not protected by reader leases:
@@ -2553,9 +2551,7 @@ export class OpfsLeader {
     async readFtsPostings(tableId, columnId, upToVersion, maxRowIds = MAX_FTS_CANDIDATE_ROW_IDS, maxRetainedBytes = MAX_FTS_ORDERED_READ_BYTES) {
         validateId(tableId);
         validateId(columnId);
-        if (!Number.isSafeInteger(upToVersion) || upToVersion < -1) {
-            throw new RangeError("Full-text query version must be a safe integer at least -1");
-        }
+        validateFtsReadVersion(upToVersion);
         validateFtsOrderedReadLimits(maxRowIds, maxRetainedBytes);
         return this.#run(async () => {
             const key = postingStorageKey(tableId, columnId);
@@ -4041,11 +4037,6 @@ function requireCoverageVersion(value, label) {
     if (!Number.isSafeInteger(value) || value < -1)
         throw new Error(`Invalid ${label}`);
 }
-function validateFtsCandidateLimit(value) {
-    if (!Number.isSafeInteger(value) || value < 1 || value > MAX_FTS_CANDIDATE_ROW_IDS) {
-        throw new RangeError(`Full-text candidate limit must be between 1 and ${String(MAX_FTS_CANDIDATE_ROW_IDS)}`);
-    }
-}
 function requirePositiveInteger(value, label) {
     if (!Number.isSafeInteger(value) || value < 1)
         throw new Error(`Invalid ${label}`);
@@ -5035,7 +5026,7 @@ function samePlacement(left, right) {
         left.checksum === right.checksum);
 }
 /** Conservative retained-heap model for one decoded postings chunk and its nested arrays. */
-export function modeledFtsChunkBytes(chunk) {
+function modeledFtsChunkBytes(chunk) {
     let bytes = 64;
     for (const posting of chunk) {
         bytes += 64 + posting.term.length * 2 + posting.rowIds.length * 40;

package/dist/storage/opfs/snapshot-ledger.d.ts

@@ -1,8 +1,8 @@
 import { type SnapshotFrame, type SnapshotFrameKind } from "../types.js";
 import { type Placement } from "../toolkit/extents.js";
 import { OpfsTree } from "./files.js";
-export type SnapshotLedgerKind = "export" | "import" | "completed";
-export interface SnapshotLedgerRecord {
+type SnapshotLedgerKind = "export" | "import" | "completed";
+interface SnapshotLedgerRecord {
     readonly sequence: number;
     readonly kind: SnapshotFrameKind;
     readonly itemCount: number;
@@ -38,3 +38,4 @@ export declare class SnapshotFrameLedger {
     adoptLength(length: number): void;
     close(): void;
 }
+export {};

package/dist/storage/toolkit/index.d.ts

@@ -26,4 +26,4 @@ export { readFully, writeFully, type SyncFileHandle } from "./sync-file.js";
 export { RecordCore, type PhysicalBlocks, type RecordCoreState } from "./record-core.js";
 export { MAX_WAL_FRAME_BYTES, WalWriter, iterateWalFrames, replayWalFrames, type ReplayedWalFrame, } from "./wal.js";
 export { ExtentPool, assertValidExtentMeta, assertValidPlacement, extentPath, validPlacement, type ExtentBatchMark, type ExtentFiles, type ExtentMeta, type ExtentPoolOptions, type Placement, } from "./extents.js";
-export { LOG_FORMAT_VERSION, decodeChunk, decodePostingChunk, decodeRecordJson, decodeSyncCheckpoint, encodeChunk, encodePostingChunk, encodeRecordJson, encodeSyncCheckpoint, } from "./wire.js";
+export { LOG_FORMAT_VERSION, decodeChunk, decodePostingChunk, decodeRecordJson, decodeSyncCheckpoint, encodeChunk, encodePostingChunk, encodeRecordJson, encodeSyncCheckpoint, type PostingChunkEntry, } from "./wire.js";

package/dist/storage/toolkit/record-core.d.ts

@@ -373,7 +373,6 @@ export declare function validateFtsPostingChunks(chunks: unknown, label: string)
 export declare function validateSegmentRuntimeRecord(value: unknown, label: string): SegmentRecord;
 export declare function validateAutoIncrementReservation(count: number, atLeast: bigint | undefined): void;
 export declare function validateBeginTransactionInput(input: BeginTransactionInput): void;
-export declare function validateLeaseExpiration(expiresAt: string): void;
 export declare function validateTempRunPage(page: TempRunPage): void;
 export declare function validateTempRunPageIdentity(ownerId: string, runId: string, pageIndex: number): void;
 export {};

package/dist/storage/toolkit/record-core.js

@@ -1,4 +1,4 @@
-import { CompactionBacklogError, CompactionJobConflictError, assertCompactionOutputProvenance, compactionOutputSegmentIds, createManifest, createGarbageCollectionJobRecord, advanceGarbageCollectionJobRecord, collectFtsCandidates, collectFtsPostingsBounded, activePostingStorageColumnIds, invalidateUncoveredFtsColumns, invalidateUncoveredSecondaryIndexes, GarbageCollectionJobConflictError, LeaseConflictError, LeaseExpiredError, LeaseOwnerConflictError, MAX_LEASE_TTL_MS, MAX_ACTIVE_LEASES, MAX_ACTIVE_TEMP_OWNERS, MAX_ACTIVE_COMPACTION_JOBS, MAX_ACTIVE_UNIQUE_KEY_BUILDS, MAX_ACTIVE_TRANSACTIONS, MAX_TERMINAL_TRANSACTION_RECORDS, MAX_TERMINAL_COMPACTION_JOB_RECORDS, MAX_COMPLETED_GARBAGE_COLLECTION_JOB_RECORDS, MAX_PINNED_MANIFEST_VERSION_LAG, MAX_PINNED_RETIRED_BLOCKS, MAX_PINNED_RETIRED_BYTES, MAX_RETIRED_HISTORY_BYTES, MAX_GLOBAL_STAGED_ARTIFACT_BYTES, MAX_GLOBAL_STAGED_BLOCKS, MAX_GLOBAL_STAGED_SEGMENTS, MAX_TEMP_OWNER_TTL_MS, MAX_ROW_ID, MAX_ROW_ID_EXCLUSIVE_END, MAX_AUTO_INCREMENT_EXCLUSIVE_END, MAX_LEVEL_ZERO_SEGMENTS, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_STORAGE_ID_CHARACTERS, MAX_CATALOG_RECORDS, MAX_CATALOG_RETAINED_BYTES, MAX_MANIFEST_RECORDS, MAX_MANIFEST_RETAINED_BYTES, MAX_SEGMENT_RECORDS, MAX_SEGMENT_RETAINED_BYTES, MAX_FTS_CANDIDATE_ROW_IDS, MAX_FTS_POSTINGS_PER_CHUNK, MAX_FTS_POSTING_ROW_IDS_PER_CHUNK, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_FTS_TOKENS_PER_DOCUMENT, MAX_FTS_BASE_CHUNKS, MAX_FTS_DELTA_CHUNKS, SnapshotManifestMissingError, StorageResourceLimitError, TableInUseError, TableRecordConflictError, TempOwnerConflictError, TransactionRecordConflictError, UniqueKeyConflictError, UniqueKeyBuildConflictError, UniqueIndexCoverageError, assertTransactionArtifactBatchLimits, assertTransactionArtifactJournalLimits, assertTempRunPageBatchLimits, assertStorageBulkReadItems, boundedMaintenanceBatchItems, normalizeCompactionJobRecord, normalizeGarbageCollectionJobRecord, normalizeSegmentRecord, updateCompactionJobRecord, updateTransactionRecord, updateGarbageCollectionPlanningRecord, validateTableColumns, validateTableForeignKey, validateSecondaryIndexes, secondaryIndexColumnIds, secondaryIndexWriteContractChanged, secondaryUniqueKeyNamespace, transactionCommitDeltaRetainedBytes, uniqueKeyBuildChunkRetainedBytes, MAX_UNIQUE_KEY_BUILD_TTL_MS, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES_TOTAL, MAX_UNIQUE_KEY_BUILD_TOKENS_PER_CHUNK, validateFtsPostingQueries, validateCanonicalManifestChangedTableIds, catalogRecordRetainedBytes, manifestRecordRetainedReservationBytes, segmentRecordRetainedBytes, snapshotAcceleratorItemRetainedUsage, assertSnapshotImportAcceleratorUsage, SchemaConflictError, WriteConflictError, } from "../types.js";
+import { CompactionBacklogError, CompactionJobConflictError, assertCompactionOutputProvenance, compactionOutputSegmentIds, createManifest, createGarbageCollectionJobRecord, advanceGarbageCollectionJobRecord, collectFtsCandidates, collectFtsPostingsBounded, validateFtsCandidateLimit, validateFtsReadVersion, activePostingStorageColumnIds, invalidateUncoveredFtsColumns, invalidateUncoveredSecondaryIndexes, GarbageCollectionJobConflictError, LeaseConflictError, LeaseExpiredError, LeaseOwnerConflictError, MAX_LEASE_TTL_MS, MAX_ACTIVE_LEASES, MAX_ACTIVE_TEMP_OWNERS, MAX_ACTIVE_COMPACTION_JOBS, MAX_ACTIVE_UNIQUE_KEY_BUILDS, MAX_ACTIVE_TRANSACTIONS, MAX_TERMINAL_TRANSACTION_RECORDS, MAX_TERMINAL_COMPACTION_JOB_RECORDS, MAX_COMPLETED_GARBAGE_COLLECTION_JOB_RECORDS, MAX_PINNED_MANIFEST_VERSION_LAG, MAX_PINNED_RETIRED_BLOCKS, MAX_PINNED_RETIRED_BYTES, MAX_RETIRED_HISTORY_BYTES, MAX_GLOBAL_STAGED_ARTIFACT_BYTES, MAX_GLOBAL_STAGED_BLOCKS, MAX_GLOBAL_STAGED_SEGMENTS, MAX_TEMP_OWNER_TTL_MS, MAX_ROW_ID, MAX_ROW_ID_EXCLUSIVE_END, MAX_AUTO_INCREMENT_EXCLUSIVE_END, MAX_LEVEL_ZERO_SEGMENTS, MAX_MANIFEST_BLOCK_PRESENCE_IDS, MAX_STORAGE_ID_CHARACTERS, MAX_CATALOG_RECORDS, MAX_CATALOG_RETAINED_BYTES, MAX_MANIFEST_RECORDS, MAX_MANIFEST_RETAINED_BYTES, MAX_SEGMENT_RECORDS, MAX_SEGMENT_RETAINED_BYTES, MAX_FTS_CANDIDATE_ROW_IDS, MAX_FTS_POSTINGS_PER_CHUNK, MAX_FTS_POSTING_ROW_IDS_PER_CHUNK, MAX_FTS_POSTING_TERM_CHARACTERS, MAX_FTS_TOKENS_PER_DOCUMENT, MAX_FTS_BASE_CHUNKS, MAX_FTS_DELTA_CHUNKS, SnapshotManifestMissingError, StorageResourceLimitError, TableInUseError, TableRecordConflictError, TempOwnerConflictError, TransactionRecordConflictError, UniqueKeyConflictError, UniqueKeyBuildConflictError, UniqueIndexCoverageError, assertTransactionArtifactBatchLimits, assertTransactionArtifactJournalLimits, assertTempRunPageBatchLimits, assertStorageBulkReadItems, boundedMaintenanceBatchItems, normalizeCompactionJobRecord, normalizeGarbageCollectionJobRecord, normalizeSegmentRecord, updateCompactionJobRecord, updateTransactionRecord, updateGarbageCollectionPlanningRecord, validateTableColumns, validateTableForeignKey, validateSecondaryIndexes, secondaryIndexColumnIds, secondaryIndexWriteContractChanged, secondaryUniqueKeyNamespace, transactionCommitDeltaRetainedBytes, uniqueKeyBuildChunkRetainedBytes, MAX_UNIQUE_KEY_BUILD_TTL_MS, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES, MAX_UNIQUE_KEY_BUILD_STAGED_BYTES_TOTAL, MAX_UNIQUE_KEY_BUILD_TOKENS_PER_CHUNK, validateFtsPostingQueries, validateCanonicalManifestChangedTableIds, catalogRecordRetainedBytes, manifestRecordRetainedReservationBytes, segmentRecordRetainedBytes, snapshotAcceleratorItemRetainedUsage, assertSnapshotImportAcceleratorUsage, SchemaConflictError, WriteConflictError, } from "../types.js";
 import { dateIsoString } from "../../date-value.js";
 import { assertWellFormedString, crc32, MAX_STORED_BLOCK_BYTE_LENGTH, } from "../../block-format/index.js";
 /**
@@ -1729,9 +1729,7 @@ export class RecordCore {
         validateId(tableId);
         validateId(columnId);
         validateFtsPostingQueries(terms);
-        if (!Number.isSafeInteger(upToVersion) || upToVersion < -1) {
-            throw new RangeError("Full-text query version must be a safe integer at least -1");
-        }
+        validateFtsReadVersion(upToVersion);
         validateFtsCandidateLimit(maxRowIds);
         const key = `${tableId}/${columnId}`;
         const base = this.#ftsBases.get(key);
@@ -1834,9 +1832,7 @@ export class RecordCore {
     readFtsPostings(tableId, columnId, upToVersion, maxRowIds = MAX_FTS_CANDIDATE_ROW_IDS, maxRetainedBytes) {
         validateId(tableId);
         validateId(columnId);
-        if (!Number.isSafeInteger(upToVersion) || upToVersion < -1) {
-            throw new RangeError("Full-text query version must be a safe integer at least -1");
-        }
+        validateFtsReadVersion(upToVersion);
         const base = this.#ftsBases.get(`${tableId}/${columnId}`);
         const coversVersion = base?.coversVersion ?? -1;
         const delta = this.readFtsDeltas(tableId, columnId, coversVersion, upToVersion);
@@ -6382,13 +6378,6 @@ function validateTempOwnerRecord(record) {
         throw new RangeError("Temp owner record must be created at revision zero");
     }
 }
-export function validateLeaseExpiration(expiresAt) {
-    if (typeof expiresAt !== "string" ||
-        expiresAt.length === 0 ||
-        !Number.isFinite(Date.parse(expiresAt))) {
-        throw new TypeError("Lease expiration must be valid");
-    }
-}
 function isCanonicalTimestamp(value) {
     const timestamp = Date.parse(value);
     return Number.isFinite(timestamp) && dateIsoString(new Date(timestamp)) === value;
@@ -6496,11 +6485,6 @@ function sortedVersionInInterval(versions, addedVersion, removedVersion) {
     const version = versions[low];
     return version !== undefined && (removedVersion === null || version < removedVersion);
 }
-function validateFtsCandidateLimit(value) {
-    if (!Number.isSafeInteger(value) || value < 1 || value > MAX_FTS_CANDIDATE_ROW_IDS) {
-        throw new RangeError(`Full-text candidate limit must be between 1 and ${String(MAX_FTS_CANDIDATE_ROW_IDS)}`);
-    }
-}
 function varuintByteLength(value) {
     let length = 1;
     while (value >= 0x80n) {

package/dist/storage/types.d.ts

@@ -534,8 +534,6 @@ export interface CompactionJobCursor {
     sourceSegmentIndex: number;
     sourceBlockIndex: number;
 }
-export declare const compactionRewritePlanKinds: readonly ["copy-v1", "rechunk-v1", "merge-v1"];
-export type CompactionRewritePlanKind = (typeof compactionRewritePlanKinds)[number];
 export interface CopyCompactionRewritePlan {
     readonly kind: "copy-v1";
 }
@@ -1669,6 +1667,10 @@ export declare function ftsPostingQueryMatches(term: string, query: FtsPostingQu
  * never drift between backends — pruning would silently differ per store.
  */
 export declare function collectFtsCandidates(chunkLists: Iterable<readonly FtsPosting[]>, terms: readonly FtsPostingQuery[], maxRowIds?: number): FtsCandidates;
+/** Validates the snapshot bound of one full-text read; -1 selects the base view alone. */
+export declare function validateFtsReadVersion(upToVersion: number): void;
+/** Validates the candidate row-ID ceiling accepted by one full-text candidate read. */
+export declare function validateFtsCandidateLimit(maxRowIds: number): void;
 /** Validates the fixed memory ceilings accepted by one ordered postings read. */
 export declare function validateFtsOrderedReadLimits(maxRowIds?: number, maxRetainedBytes?: number): void;
 /**
@@ -2422,7 +2424,6 @@ export declare function createManifest(input: CreateManifestInput): Manifest;
 export declare function normalizeSegmentRecord(record: SegmentRecord): SegmentRecord;
 export declare function updateTransactionRecord(record: TransactionRecord, update: TransactionRecordUpdate): TransactionRecord;
 export declare function createGarbageCollectionJobRecord(input: CreateGarbageCollectionJobInput): GarbageCollectionJobRecord;
-export declare function normalizeGarbageCollectionDiscovery(discovery: GarbageCollectionDiscovery): GarbageCollectionDiscovery;
 export declare function updateGarbageCollectionPlanningRecord(record: GarbageCollectionJobRecord, input: UpdateGarbageCollectionPlanningInput): GarbageCollectionJobRecord;
 export declare function normalizeGarbageCollectionJobRecord(record: GarbageCollectionJobRecord): GarbageCollectionJobRecord;
 export declare function advanceGarbageCollectionJobRecord(record: GarbageCollectionJobRecord, accounting: GarbageCollectionStepAccounting): GarbageCollectionJobRecord;

package/dist/storage/types.js

@@ -726,7 +726,6 @@ export const compactionJobStates = [
     "cancelled",
     "aborted",
 ];
-export const compactionRewritePlanKinds = ["copy-v1", "rechunk-v1", "merge-v1"];
 export const compactionOutputCompressions = ["raw", "gzip"];
 /** Every segment ID owned by a compaction job, including merge partition outputs. */
 export function compactionOutputSegmentIds(job) {
@@ -1427,6 +1426,18 @@ export function collectFtsCandidates(chunkLists, terms, maxRowIds = MAX_FTS_CAND
         overflow: false,
     };
 }
+/** Validates the snapshot bound of one full-text read; -1 selects the base view alone. */
+export function validateFtsReadVersion(upToVersion) {
+    if (!Number.isSafeInteger(upToVersion) || upToVersion < -1) {
+        throw new RangeError("Full-text query version must be a safe integer at least -1");
+    }
+}
+/** Validates the candidate row-ID ceiling accepted by one full-text candidate read. */
+export function validateFtsCandidateLimit(maxRowIds) {
+    if (!Number.isSafeInteger(maxRowIds) || maxRowIds < 1 || maxRowIds > MAX_FTS_CANDIDATE_ROW_IDS) {
+        throw new RangeError(`Full-text candidate limit must be between 1 and ${String(MAX_FTS_CANDIDATE_ROW_IDS)}`);
+    }
+}
 /** Validates the fixed memory ceilings accepted by one ordered postings read. */
 export function validateFtsOrderedReadLimits(maxRowIds = MAX_FTS_CANDIDATE_ROW_IDS, maxRetainedBytes = MAX_FTS_ORDERED_READ_BYTES) {
     if (!Number.isSafeInteger(maxRowIds) || maxRowIds < 1 || maxRowIds > MAX_FTS_CANDIDATE_ROW_IDS) {
@@ -1940,7 +1951,7 @@ export function createGarbageCollectionJobRecord(input) {
         ...(discovery === undefined ? {} : { discovery }),
     };
 }
-export function normalizeGarbageCollectionDiscovery(discovery) {
+function normalizeGarbageCollectionDiscovery(discovery) {
     const runtime = discovery;
     if (typeof runtime !== "object" || runtime === null) {
         throw new TypeError("Garbage collection discovery must be an object");

package/dist/testing/block-store-conformance.js

@@ -1008,6 +1008,34 @@ export function blockStoreConformanceCases() {
                     { term: "minnows", rowIds: [2n], tf: [1] },
                     { term: "shark", rowIds: [4n], tf: [1] },
                 ], "ordered postings must merge into canonical term and row-ID order");
+                // The read-argument contract is uniform across adapters: -1 selects the base view
+                // alone, anything below it (or non-integral) is refused, and the candidate limit is
+                // validated on every read path.
+                const baseOnly = await store.readFtsPostings("table-t", "col-v", -1);
+                check(baseOnly.hasBase && baseOnly.postings.length === 3, "an upToVersion of -1 must serve the base view alone");
+                for (const version of [-2, Number.NaN, 1.5]) {
+                    try {
+                        await store.readFtsCandidates("table-t", "col-v", [{ term: "minnow", prefix: false }], version);
+                        throw new Error(`candidate read accepted invalid version ${String(version)}`);
+                    }
+                    catch (error) {
+                        check(error instanceof RangeError, "invalid candidate versions must throw RangeError");
+                    }
+                    try {
+                        await store.readFtsPostings("table-t", "col-v", version);
+                        throw new Error(`postings read accepted invalid version ${String(version)}`);
+                    }
+                    catch (error) {
+                        check(error instanceof RangeError, "invalid postings versions must throw RangeError");
+                    }
+                }
+                try {
+                    await store.readFtsCandidates("table-t", "col-v", [{ term: "minnow", prefix: false }], 10, 0);
+                    throw new Error("candidate read accepted a zero row-ID limit");
+                }
+                catch (error) {
+                    check(error instanceof RangeError, "invalid candidate limits must throw RangeError");
+                }
                 store.close();
             },
         },

package/dist/testing/opfs-shim.d.ts

@@ -21,7 +21,7 @@
  * toolkit's `SyncFileHandle` surface, in plain vitest, with crashes and quota failures on tap.
  */
 export type WriteFault = (path: string, phase: "create" | "write" | "flush") => void;
-export type DeleteFault = (path: string) => void;
+type DeleteFault = (path: string) => void;
 export type TransferLimit = (path: string, operation: "read" | "write", requestedBytes: number, at: number) => number | undefined;
 export declare class MemoryOpfs {
     #private;
@@ -43,3 +43,4 @@ export declare class MemoryOpfs {
     /** Test-side in-place corruption: existing sync handles observe the changed byte. */
     corruptFileByte(path: string, offset: number): void;
 }
+export {};

package/dist/testing/simulator.js

@@ -572,6 +572,9 @@ function summarizeCollection(result) {
         retainedTransactions: result.retainedTransactionCount,
     };
 }
+// Stream-identical copy of `mulberry32` in ./seeds.ts. This module ships in the tarball and
+// seeds.ts does not (it reads MINNOW_SEED and the unpublished regression-seeds.json), so the
+// published simulator cannot import the canonical copy.
 function mulberry32(seed) {
     let state = seed >>> 0;
     return () => {

package/dist/worker-protocol/index.d.ts

@@ -1,38 +1,6 @@
 export declare const protocolVersion: 3;
 /** Outstanding request/response pairs retained by either side of one database RPC connection. */
 export declare const MAX_DATABASE_RPC_IN_FLIGHT = 256;
-export type WorkerOperation = "benchmark" | "cancelBenchmark" | "memorySample" | "datasetList" | "datasetCreate" | "datasetDelete" | "runQuery" | "suiteReference" | "suiteWrite" | "suiteFeatureMatrix" | "suiteLive";
-export interface WorkerRequest<T = unknown> {
-    version: typeof protocolVersion;
-    requestId: string;
-    operation: WorkerOperation;
-    payload: T;
-}
-export interface SuccessResponse<T = unknown> {
-    version: typeof protocolVersion;
-    requestId: string;
-    kind: "success";
-    result: T;
-}
-export interface FailureResponse {
-    version: typeof protocolVersion;
-    requestId: string;
-    kind: "failure";
-    error: {
-        name: string;
-        message: string;
-    };
-}
-export interface ProgressResponse<T = unknown> {
-    version: typeof protocolVersion;
-    requestId: string;
-    kind: "progress";
-    progress: T;
-}
-export type WorkerResponse<T = unknown> = SuccessResponse<T> | FailureResponse | ProgressResponse;
-export declare function parseRequest(value: unknown): WorkerRequest;
-export declare function success<T>(requestId: string, result: T): SuccessResponse<T>;
-export declare function failure(requestId: string, error: unknown): FailureResponse;
 export type RpcRequest = {
     version: typeof protocolVersion;
     requestId: string;

package/dist/worker-protocol/index.js

@@ -1,31 +1,6 @@
 export const protocolVersion = 3;
 /** Outstanding request/response pairs retained by either side of one database RPC connection. */
 export const MAX_DATABASE_RPC_IN_FLIGHT = 256;
-export function parseRequest(value) {
-    if (typeof value !== "object" || value === null)
-        throw new TypeError("Request must be an object");
-    const candidate = value;
-    if (candidate.version !== protocolVersion)
-        throw new Error("Unsupported protocol version");
-    if (typeof candidate.requestId !== "string" || candidate.requestId.length === 0) {
-        throw new TypeError("Request ID must be a non-empty string");
-    }
-    if (!isOperation(candidate.operation))
-        throw new Error("Unsupported worker operation");
-    return candidate;
-}
-export function success(requestId, result) {
-    return { version: protocolVersion, requestId, kind: "success", result };
-}
-export function failure(requestId, error) {
-    const normalized = error instanceof Error ? error : new Error(String(error));
-    return {
-        version: protocolVersion,
-        requestId,
-        kind: "failure",
-        error: { name: normalized.name, message: normalized.message },
-    };
-}
 export function serializeError(error) {
     if (!(error instanceof Error)) {
         return { name: "Error", message: String(error) };
@@ -101,18 +76,3 @@ export function parseRpcResponse(value) {
         throw new Error("Unsupported protocol version");
     return candidate;
 }
-function isOperation(value) {
-    return [
-        "benchmark",
-        "cancelBenchmark",
-        "memorySample",
-        "datasetList",
-        "datasetCreate",
-        "datasetDelete",
-        "runQuery",
-        "suiteReference",
-        "suiteWrite",
-        "suiteFeatureMatrix",
-        "suiteLive",
-    ].includes(String(value));
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnowdb/core",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "A columnar SQL database for the browser: PostgreSQL-style SQL over durable IndexedDB or OPFS data, with no server or WebAssembly module.",
   "license": "MIT",
   "author": "Eric Wilhite",
@@ -125,6 +125,7 @@
     "!dist/storage/fixture-shape.*",
     "!dist/engine/storage-test-helpers.*",
     "!dist/testing/seeds.*",
+    "!dist/testing/oracle.*",
     "!dist/*.tsbuildinfo",
     "sql-feature-matrix.json",
     "postgres-feature-profile.json"

package/postgres-feature-profile.json

@@ -111,7 +111,7 @@
     {
       "id": "function.string-extended",
       "classification": "different",
-      "reason": "The bundled form includes INSTR; PostgreSQL spells that function strpos with reversed arguments."
+      "reason": "The bundled form includes INSTR; PostgreSQL has no INSTR and spells the same (string, substring) lookup STRPOS, with the arguments in the same order."
     },
     {
       "id": "function.trim-multi-character",
@@ -134,10 +134,15 @@
       "classification": "different",
       "reason": "Both engines accept the correlated JSON aggregate and agree on its JSON value, but Minnow returns JSON text while PostgreSQL returns a native JSON value."
     },
+    {
+      "id": "literal.scientific",
+      "classification": "different",
+      "reason": "PostgreSQL types every scientific-notation constant NUMERIC and renders it as text. Minnow evaluates it exactly but returns a number whenever the value reads back identically from one, keeping ordinary constants number-typed at the JavaScript boundary; a constant that stays exact renders fully expanded, as PostgreSQL renders it."
+    },
     {
       "id": "type.exact-numeric",
       "classification": "different",
-      "reason": "Minnow preserves exact decimals at the JavaScript boundary as strings; PGlite's default decoder returns this NUMERIC value as a number. A declared scale renders at exactly that scale as PostgreSQL does; a bare NUMERIC column, a derived arithmetic result, and a value cast or concatenated to text render canonically, without the trailing fractional zeros PostgreSQL preserves. A non-terminating AVG quotient renders at Minnow's internal precision, which keeps more fractional digits than PostgreSQL's rounding; the value agrees to every digit PostgreSQL renders."
+      "reason": "Minnow preserves exact decimals at the JavaScript boundary as strings, as PGlite's default decoder also does. A declared scale renders at exactly that scale as PostgreSQL does; a bare NUMERIC column, a derived arithmetic result, and a value cast or concatenated to text render canonically, without the trailing fractional zeros PostgreSQL preserves. Division and AVG select their result scale the way PostgreSQL does, so quotient digits agree — including AVG over a column whose declared scale exceeds the selection. The canonical encoding does drop a stored value's display scale, so an explicit arithmetic quotient (such as SUM(v) / COUNT(v)) over a column declared with more than about twenty fractional digits can carry fewer digits than PostgreSQL, which floors the selection at the operand's display scale. An arithmetic or comparison expression mixing a float column with a constant Float64 cannot represent stays exact, where PostgreSQL casts the constant to float8 and rounds it before evaluating."
     },
     {
       "id": "type.json-jsonb",
@@ -182,7 +187,7 @@
     {
       "id": "json.array",
       "classification": "different",
-      "reason": "The JSON value agrees, but Minnow returns compact JSON text while PostgreSQL's text rendering includes spaces."
+      "reason": "Minnow defaults JSON_ARRAY to NULL ON NULL, so a NULL argument becomes a JSON null where PostgreSQL's ABSENT ON NULL default drops it; Minnow also returns compact JSON text while PostgreSQL's rendering includes spaces."
     },
     {
       "id": "trigger.create-after",