@quereus/quereus 4.7.0 → 4.8.0

package/dist/src/vtab/test-support/commit-stall.js

@@ -0,0 +1,73 @@
+/**
+ * Installs a commit gate on `db` by wrapping every connection the database
+ * registers, so the connection's `commit()` first awaits the gate. Disarmed
+ * (the default), commits pass through untouched.
+ *
+ * Works for any module that registers its write connections with
+ * `Database.registerConnection` — which a module must do for the engine to drive
+ * its transactions, and which a wrapper module cannot intercept on the target's
+ * behalf. A module that commits without ever registering needs its own stall;
+ * pass whatever `stallCommit` you can build, or none at all (the conformance
+ * harness then reports `observedCommitOverlap: false`).
+ *
+ * TEST SUPPORT ONLY: the patch is permanent for the life of `db` and there is no
+ * uninstall. Use a database you own.
+ */
+export function installCommitStall(db) {
+    let gate = null;
+    let releaseGate = null;
+    let enteredResolve = null;
+    const original = db.registerConnection.bind(db);
+    db.registerConnection =
+        async (conn) => {
+            const realCommit = conn.commit.bind(conn);
+            conn.commit = async () => {
+                if (gate) {
+                    enteredResolve?.();
+                    enteredResolve = null;
+                    await gate;
+                }
+                await realCommit();
+            };
+            return original(conn);
+        };
+    const stall = {
+        arm() {
+            // Re-arming must not orphan a commit already parked on the previous gate:
+            // `release()` only resolves the CURRENT one, so an un-released predecessor
+            // would hang forever.
+            stall.release();
+            const entered = new Promise(resolve => {
+                enteredResolve = resolve;
+            });
+            gate = new Promise(resolve => {
+                releaseGate = resolve;
+            });
+            return entered;
+        },
+        release() {
+            gate = null;
+            releaseGate?.();
+            releaseGate = null;
+            enteredResolve = null;
+        },
+        asStallCommit() {
+            const entered = stall.arm();
+            return { entered, release: () => stall.release() };
+        },
+    };
+    return stall;
+}
+/**
+ * Yield the event loop `macrotasks` times, so anything already pending has a fair
+ * chance to run: a commit to reach the gate, or a read to settle. Used to pin
+ * "this did NOT complete" without inventing a wall-clock timeout.
+ *
+ * `setTimeout` rather than `setImmediate` — the latter is Node-only.
+ */
+export async function settleMacrotasks(macrotasks = 20) {
+    for (let i = 0; i < macrotasks; i++) {
+        await new Promise(resolve => setTimeout(resolve, 0));
+    }
+}
+//# sourceMappingURL=commit-stall.js.map

package/dist/src/vtab/test-support/commit-stall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-stall.js","sourceRoot":"","sources":["../../../../src/vtab/test-support/commit-stall.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAY;IAC9C,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,IAAI,cAAc,GAAwB,IAAI,CAAC;IAE/C,MAAM,QAAQ,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/C,EAAsE,CAAC,kBAAkB;QACzF,KAAK,EAAE,IAA4B,EAAE,EAAE;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAwC,CAAC,MAAM,GAAG,KAAK,IAAI,EAAE;gBAC7D,IAAI,IAAI,EAAE,CAAC;oBACV,cAAc,EAAE,EAAE,CAAC;oBACnB,cAAc,GAAG,IAAI,CAAC;oBACtB,MAAM,IAAI,CAAC;gBACZ,CAAC;gBACD,MAAM,UAAU,EAAE,CAAC;YACpB,CAAC,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAgB;QAC1B,GAAG;YACF,0EAA0E;YAC1E,2EAA2E;YAC3E,sBAAsB;YACtB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAC3C,cAAc,GAAG,OAAO,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAClC,WAAW,GAAG,OAAO,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,OAAO;YACN,IAAI,GAAG,IAAI,CAAC;YACZ,WAAW,EAAE,EAAE,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,cAAc,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,aAAa;YACZ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,CAAC;KACD,CAAC;IACF,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAU,GAAG,EAAE;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;AACF,CAAC"}

package/dist/src/vtab/test-support/committed-read-conformance.d.ts

@@ -0,0 +1,96 @@
+import type { Database } from '../../core/database.js';
+import { type CommitStallHandle } from './commit-stall.js';
+/**
+ * Conformance check for the committed-snapshot obligation a virtual-table module
+ * takes on by declaring `VirtualTableModule.readCommittedSnapshot`. See
+ * `docs/module-authoring.md` § "Committed-Snapshot Reads (`_readCommitted`)" for
+ * the obligation itself.
+ *
+ * Framework-agnostic on purpose: it throws a descriptive `Error` on failure and
+ * returns a result object on success, so it drops into Mocha, Vitest, or a plain
+ * script without pulling an assertion library in. It ships in the published
+ * package because an out-of-tree module author needs it at runtime; nothing in
+ * the engine imports it.
+ */
+export interface CommittedReadConformanceOptions {
+    /** Database with the module under test registered and the table created. */
+    db: Database;
+    /**
+     * Table name to exercise, qualified or not. Used verbatim in SQL, so pass it
+     * exactly as you would write it in a query (already quoted if it needs to be).
+     * The table must be EMPTY on entry — the harness owns its contents for the run
+     * and deletes what it wrote on the way out.
+     */
+    table: string;
+    /**
+     * Primary-key column — seeded with integers and used to drive an index-driven
+     * access path. Used verbatim in SQL, like {@link table}.
+     */
+    keyColumn: string;
+    /**
+     * A non-key column the writer mutates; must accept text and be readable in a
+     * `select`. Used verbatim in SQL, like {@link table}. Any OTHER column on the
+     * table must be nullable or defaulted — the harness writes only these two.
+     */
+    valueColumn: string;
+    /**
+     * Optional: park the module mid-commit so the read provably overlaps the
+     * publish window. Called immediately BEFORE the harness issues its writer —
+     * arm your gate here. The returned handle is released once the concurrent
+     * reads have completed (including on failure). Without it the check is
+     * best-effort — a module that commits in one synchronous step may leave no
+     * window to observe — and the result reports `observedCommitOverlap: false`.
+     */
+    stallCommit?: () => CommitStallHandle;
+    /** Rows to seed. Default 200 — enough that a torn publish is observable. */
+    rowCount?: number;
+    /**
+     * How long to wait for a concurrent read to complete while the writer is
+     * parked, before declaring that the engine did not route it concurrently.
+     * Only applies when `stallCommit` is supplied. Default 5000ms.
+     */
+    stallTimeoutMs?: number;
+}
+export interface CommittedReadConformanceResult {
+    /**
+     * True only when a `stallCommit` was supplied AND the writer was still parked
+     * for the whole duration of the concurrent reads. False means "no evidence the
+     * read overlapped a commit" — NOT "conformant": with no provable overlap the
+     * harness cannot insist on the pre-write snapshot (the writer may legitimately
+     * have landed first), so it only checks that each read returned one WHOLE
+     * state rather than a mix, and it does not compare the two legs against each
+     * other.
+     */
+    observedCommitOverlap: boolean;
+    /** Rows returned by the full scan. */
+    fullScanRows: number;
+    /** Rows returned by the index-driven path; 0 when that leg was skipped. */
+    indexDrivenRows: number;
+    /**
+     * Present when the index-driven leg did NOT run, with the reason. The leg is
+     * skipped rather than silently degraded into a second full scan, so a module
+     * with no seek plan cannot claim index coverage it never had.
+     */
+    indexDrivenSkippedReason?: string;
+}
+/**
+ * Runs the committed-snapshot conformance check against `options.table`.
+ *
+ * Shape of the run:
+ *  1. refuse unless the table's module declares `readCommittedSnapshot`;
+ *  2. seed `rowCount` rows and commit;
+ *  3. start an unawaited writer that rewrites EVERY seeded row's value and
+ *     appends new rows, parked mid-commit via `stallCommit` if supplied;
+ *  4. while it is parked, read the table twice with `readConcurrency: 'committed'`
+ *     — a full scan and an index-driven path over `keyColumn`;
+ *  5. assert both reads return exactly the seeded snapshot and agree row-for-row.
+ *     Without a provable park the bar drops to "each read equals ONE whole state,
+ *     pre- or post-write" — a mix is still a failure, but a writer that landed
+ *     before the read is not;
+ *  6. release, await the writer, and assert a fresh read now sees the post-write
+ *     state (so a module that serves permanently stale data fails too).
+ *
+ * @throws Error with the specific divergence on any failure.
+ */
+export declare function runCommittedReadConformance(options: CommittedReadConformanceOptions): Promise<CommittedReadConformanceResult>;
+//# sourceMappingURL=committed-read-conformance.d.ts.map

package/dist/src/vtab/test-support/committed-read-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"committed-read-conformance.d.ts","sourceRoot":"","sources":["../../../../src/vtab/test-support/committed-read-conformance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAKvD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE7E;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,+BAA+B;IAC/C,4EAA4E;IAC5E,EAAE,EAAE,QAAQ,CAAC;IACb;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,iBAAiB,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC9C;;;;;;;;OAQG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAClC;AAmJD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,+BAA+B,GACtC,OAAO,CAAC,8BAA8B,CAAC,CAuBzC"}

package/dist/src/vtab/test-support/committed-read-conformance.js

@@ -0,0 +1,364 @@
+import { TableReferenceNode } from '../../planner/nodes/reference.js';
+import { getModuleReadCommittedSnapshot } from '../concurrency.js';
+import { settleMacrotasks } from './commit-stall.js';
+const KEY_ALIAS = '__crc_key';
+const VALUE_ALIAS = '__crc_value';
+/** Stable, type-independent identity for a key cell (integers may arrive as bigint). */
+function keyToString(value) {
+    return typeof value === 'bigint' ? value.toString() : String(value);
+}
+function seedValue(key) {
+    return `crc-seed-${key}`;
+}
+function postValue(key) {
+    return `crc-post-${key}`;
+}
+/**
+ * Every module reachable from `select * from <table>`. Uses the planner's own
+ * name resolution rather than re-parsing the caller's table name.
+ */
+function resolveTableModules(db, table) {
+    let root;
+    try {
+        root = db.getPlan(`select * from ${table}`);
+    }
+    catch (e) {
+        throw new Error(`committed-read conformance: could not plan 'select * from ${table}' — pass the table name exactly as it would appear in a query. Cause: ${String(e)}`);
+    }
+    const found = [];
+    const stack = [root];
+    while (stack.length > 0) {
+        const node = stack.pop();
+        if (node instanceof TableReferenceNode)
+            found.push(node);
+        for (const child of node.getChildren())
+            stack.push(child);
+    }
+    return found;
+}
+/**
+ * Step 1: refuse up front unless the table's module declares the flag. The
+ * harness exists to test modules that CLAIM the guarantee; running it against one
+ * that declines would fail on the engine's own (correct) fallback to the
+ * serialized path, which is a confusing way to report "you never opted in".
+ */
+function assertModuleDeclaresSnapshot(db, table) {
+    const refs = resolveTableModules(db, table);
+    if (refs.length === 0) {
+        throw new Error(`committed-read conformance: '${table}' resolved to no base table (a view over a table-valued function, perhaps). The harness needs a real table.`);
+    }
+    for (const ref of refs) {
+        if (!getModuleReadCommittedSnapshot(ref.vtabModule)) {
+            throw new Error(`committed-read conformance: module '${ref.tableSchema.vtabModuleName}' backing '${table}' does not declare readCommittedSnapshot, so the engine will always serialize reads of it. ` +
+                `This harness only applies to modules that declare the flag — see docs/module-authoring.md § "Committed-Snapshot Reads (_readCommitted)".`);
+        }
+    }
+}
+async function collectSnapshot(db, sql, options) {
+    const rows = [];
+    const iter = options?.readCommitted
+        ? db.eval(sql, undefined, { readConcurrency: 'committed' })
+        : db.eval(sql);
+    for await (const row of iter) {
+        rows.push({ key: keyToString(row[KEY_ALIAS]), value: row[VALUE_ALIAS] });
+    }
+    rows.sort((a, b) => Number(a.key) - Number(b.key));
+    return rows;
+}
+/** Plan operators for `sql`, via the public `query_plan()` table-valued function. */
+async function planOperators(db, sql) {
+    const ops = [];
+    for await (const row of db.eval('select op from query_plan(?)', [sql])) {
+        ops.push(String(row.op));
+    }
+    return ops;
+}
+/** Render up to `limit` divergences as `key: expected -> actual`. */
+function describeDivergences(expected, actual, limit = 5) {
+    const byKey = new Map(actual.map(r => [r.key, r.value]));
+    const parts = [];
+    for (const row of expected) {
+        if (!byKey.has(row.key)) {
+            parts.push(`${row.key}: expected ${JSON.stringify(row.value)}, row missing`);
+        }
+        else if (byKey.get(row.key) !== row.value) {
+            parts.push(`${row.key}: expected ${JSON.stringify(row.value)}, got ${JSON.stringify(byKey.get(row.key))}`);
+        }
+        if (parts.length >= limit)
+            break;
+    }
+    if (parts.length < limit) {
+        const expectedKeys = new Set(expected.map(r => r.key));
+        for (const row of actual) {
+            if (!expectedKeys.has(row.key)) {
+                parts.push(`${row.key}: unexpected row ${JSON.stringify(row.value)}`);
+                if (parts.length >= limit)
+                    break;
+            }
+        }
+    }
+    return parts.length > 0 ? parts.join('; ') : '(no per-row divergence — the row sets match)';
+}
+/**
+ * Reject after `ms` with a message that names the likely cause.
+ *
+ * NOTE: the timed-out read is abandoned, not cancelled — it drains on its own once
+ * the stall is released (which the run always does), and its rejection is already
+ * handled here. If the harness ever gains a mode that keeps running on the same
+ * database after a timeout, give it a real cancellation instead.
+ */
+function withStallTimeout(work, ms, what) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new Error(`committed-read conformance: ${what} did not complete within ${ms}ms while the writer was parked mid-commit. ` +
+                `The read was queued behind the writer instead of running concurrently — check that the statement is eligible ` +
+                `(read-only, autocommit, no open explicit transaction) and that the module really declares readCommittedSnapshot.`));
+        }, ms);
+        work.then(value => { clearTimeout(timer); resolve(value); }, error => { clearTimeout(timer); reject(error); });
+    });
+}
+/**
+ * Runs the committed-snapshot conformance check against `options.table`.
+ *
+ * Shape of the run:
+ *  1. refuse unless the table's module declares `readCommittedSnapshot`;
+ *  2. seed `rowCount` rows and commit;
+ *  3. start an unawaited writer that rewrites EVERY seeded row's value and
+ *     appends new rows, parked mid-commit via `stallCommit` if supplied;
+ *  4. while it is parked, read the table twice with `readConcurrency: 'committed'`
+ *     — a full scan and an index-driven path over `keyColumn`;
+ *  5. assert both reads return exactly the seeded snapshot and agree row-for-row.
+ *     Without a provable park the bar drops to "each read equals ONE whole state,
+ *     pre- or post-write" — a mix is still a failure, but a writer that landed
+ *     before the read is not;
+ *  6. release, await the writer, and assert a fresh read now sees the post-write
+ *     state (so a module that serves permanently stale data fails too).
+ *
+ * @throws Error with the specific divergence on any failure.
+ */
+export async function runCommittedReadConformance(options) {
+    const { db, table, keyColumn, valueColumn, rowCount = 200 } = options;
+    if (!Number.isInteger(rowCount) || rowCount < 2) {
+        throw new Error(`committed-read conformance: rowCount must be an integer >= 2, got ${rowCount}`);
+    }
+    assertModuleDeclaresSnapshot(db, table);
+    const plan = buildRunPlan(table, keyColumn, valueColumn, rowCount);
+    await assertTableEmpty(db, table, plan.projection);
+    // From here on the table holds the harness's rows, so every exit path — thrown
+    // assertion, thrown engine error, or success — has to clear them.
+    await db.exec(plan.seedSql);
+    try {
+        const result = await runAgainstSeededTable(options, plan);
+        await cleanup(db, table, undefined);
+        return result;
+    }
+    catch (e) {
+        await cleanup(db, table, e);
+        throw e;
+    }
+}
+function buildRunPlan(table, keyColumn, valueColumn, rowCount) {
+    // Seeded band is 1..rowCount; the writer appends rowCount+1..highKey.
+    const appendCount = Math.max(1, Math.floor(rowCount / 10));
+    const highKey = rowCount + appendCount;
+    const keys = (count) => Array.from({ length: count }, (_, i) => i + 1);
+    const tuples = (count, value) => keys(count).map(k => `(${k}, '${value(k)}')`).join(', ');
+    // Both legs project identically; only the predicate differs. The range covers
+    // the appended keys too, so an index-driven read of a torn publish is short or
+    // long in exactly the way the full scan is.
+    const projection = `select ${keyColumn} as ${KEY_ALIAS}, ${valueColumn} as ${VALUE_ALIAS} from ${table}`;
+    return {
+        projection,
+        indexDrivenSql: `${projection} where ${keyColumn} >= 1 and ${keyColumn} <= ${highKey}`,
+        seedSql: `insert into ${table} (${keyColumn}, ${valueColumn}) values ${tuples(rowCount, seedValue)}`,
+        // A single statement, so it commits once: `or replace` rewrites every seeded
+        // row's value AND appends new keys. A torn publish therefore shows up two
+        // ways — as a mix of old and new values, and as a longer result set.
+        writerSql: `insert or replace into ${table} (${keyColumn}, ${valueColumn}) values ${tuples(highKey, postValue)}`,
+        keyColumn,
+        highKey,
+        rowCount,
+        expectedPre: keys(rowCount).map(k => ({ key: String(k), value: seedValue(k) })),
+        expectedPost: keys(highKey).map(k => ({ key: String(k), value: postValue(k) })),
+    };
+}
+/** The harness owns the table's contents for the run, so it refuses to share it. */
+async function assertTableEmpty(db, table, projection) {
+    const existing = await collectSnapshot(db, projection);
+    if (existing.length > 0) {
+        throw new Error(`committed-read conformance: '${table}' must be empty on entry (found ${existing.length} rows). ` +
+            `The harness owns the table's contents for the run and deletes what it wrote on the way out.`);
+    }
+}
+/** Steps 3–6, with the seeded rows already committed. Always throws or returns; never cleans up. */
+async function runAgainstSeededTable(options, plan) {
+    const { db, valueColumn, stallCommit, stallTimeoutMs = 5000 } = options;
+    const { seekPlanned, indexDrivenSkippedReason } = await probeIndexPath(db, plan);
+    const handle = stallCommit?.();
+    try {
+        const writer = startWriter(db, plan.writerSql);
+        let outcome;
+        let readError;
+        try {
+            outcome = await observeConcurrentReads({
+                db, plan, valueColumn, handle, writer, seekPlanned, stallTimeoutMs,
+            });
+        }
+        catch (e) {
+            readError = e;
+        }
+        handle?.release();
+        try {
+            await writer.promise;
+        }
+        catch (e) {
+            if (readError === undefined)
+                readError = e;
+        }
+        if (readError !== undefined)
+            throw readError;
+        if (!outcome)
+            throw new Error('committed-read conformance: internal error — the reads produced no outcome');
+        await assertAdvancesAfterCommit(db, plan);
+        return {
+            observedCommitOverlap: outcome.parked,
+            fullScanRows: outcome.fullScan.length,
+            indexDrivenRows: outcome.indexDriven.length,
+            ...(indexDrivenSkippedReason !== undefined ? { indexDrivenSkippedReason } : {}),
+        };
+    }
+    finally {
+        // Idempotent by contract. Covers the paths that throw before the explicit
+        // release above — an armed gate left behind would park the cleanup delete
+        // and hang the caller instead of reporting the real failure.
+        handle?.release();
+    }
+}
+/**
+ * Does the planner really seek for the index-driven leg? Probed BEFORE anything
+ * parks — `query_plan()` is an ordinary statement and would queue behind the
+ * stalled writer.
+ */
+async function probeIndexPath(db, plan) {
+    const ops = await planOperators(db, plan.indexDrivenSql);
+    if (ops.includes('INDEXSEEK'))
+        return { seekPlanned: true };
+    return {
+        seekPlanned: false,
+        indexDrivenSkippedReason: `the planner did not choose a seek for a range predicate on '${plan.keyColumn}' (plan operators: ${ops.join(', ')}); ` +
+            `the index-driven leg was skipped rather than run as a second full scan`,
+    };
+}
+function startWriter(db, sql) {
+    let settled = false;
+    const promise = db.exec(sql).then(() => { settled = true; }, error => { settled = true; throw error; });
+    // Keep an unhandled rejection from escaping before the awaited join below.
+    promise.catch(() => { });
+    return { promise, settled: () => settled };
+}
+/** Steps 4–5: read twice while the writer is parked, and judge what came back. */
+async function observeConcurrentReads(args) {
+    const { db, plan, valueColumn, handle, writer, seekPlanned, stallTimeoutMs } = args;
+    if (handle) {
+        if (handle.entered) {
+            // Deterministic: proceed once a commit is provably inside the gate. If the
+            // writer finished first there was no window at all.
+            await Promise.race([handle.entered, writer.promise]);
+        }
+        else {
+            await settleMacrotasks();
+        }
+    }
+    let parked = handle !== undefined && !writer.settled();
+    const guard = (work, what) => parked ? withStallTimeout(work, stallTimeoutMs, what) : work;
+    const fullScan = await guard(collectSnapshot(db, plan.projection, { readCommitted: true }), 'the full-scan read');
+    const indexDriven = seekPlanned
+        ? await guard(collectSnapshot(db, plan.indexDrivenSql, { readCommitted: true }), 'the index-driven read')
+        : [];
+    if (parked && writer.settled()) {
+        // The writer landed while we were reading, so neither read is evidence of
+        // anything: the "committed snapshot" they saw may simply be the new state.
+        parked = false;
+    }
+    // Parked: the commit provably had NOT landed, so the pre-write snapshot is the
+    // only correct answer. Not parked: the writer may have committed before either
+    // read began, and serving the post-write state is then equally correct — so
+    // accept either whole state, but never a mix of the two (that is a tear no
+    // interleaving excuses).
+    const acceptable = parked ? [plan.expectedPre] : [plan.expectedPre, plan.expectedPost];
+    assertCoherent('full scan', fullScan, acceptable, valueColumn, parked);
+    if (seekPlanned) {
+        assertCoherent('index-driven read', indexDriven, acceptable, valueColumn, parked);
+        // Only meaningful while the writer is parked: unparked, the two legs run at
+        // different times and may legitimately straddle the commit.
+        if (parked)
+            assertLegsAgree(fullScan, indexDriven);
+    }
+    return { fullScan, indexDriven, parked };
+}
+/** Row-for-row equality, in key order. */
+function matches(actual, expected) {
+    return actual.length === expected.length
+        && expected.every((row, i) => actual[i].key === row.key && actual[i].value === row.value);
+}
+/**
+ * `actual` must equal ONE of the `acceptable` whole states. Anything else — a
+ * short result set, or a mix of pre- and post-write values — is a torn read.
+ */
+function assertCoherent(leg, actual, acceptable, valueColumn, parked) {
+    if (acceptable.some(expected => matches(actual, expected)))
+        return;
+    const [primary] = acceptable;
+    const alternative = acceptable.length > 1
+        ? ` (the post-write state would also have been accepted — the writer was not provably parked — but this is neither.)`
+        : '';
+    throw new Error(`committed-read conformance: the ${leg}${parked ? " taken during another connection's commit" : ''} did not return a coherent committed snapshot. ` +
+        `Expected ${primary.length} rows, each with '${valueColumn}' at its pre-write value; got ${actual.length} rows.${alternative} ` +
+        `Divergences — ${describeDivergences(primary, actual)}. ` +
+        `A module declaring readCommittedSnapshot must pin the state it serves for the life of the scan.`);
+}
+function assertLegsAgree(fullScan, indexDriven) {
+    if (matches(indexDriven, fullScan))
+        return;
+    throw new Error(`committed-read conformance: the full scan and the index-driven read disagree (${fullScan.length} vs ${indexDriven.length} rows). ` +
+        `Divergences — ${describeDivergences(fullScan, indexDriven)}. ` +
+        `The obligation requires an index-driven plan and a full scan of one connection to agree, so base rows and index entries ` +
+        `must become visible together.`);
+}
+/**
+ * Step 6: a module that pins a snapshot but never advances it would pass every
+ * check above. After the writer lands, a fresh read must see the new state.
+ */
+async function assertAdvancesAfterCommit(db, plan) {
+    const after = await collectSnapshot(db, plan.projection);
+    if (after.length !== plan.highKey) {
+        throw new Error(`committed-read conformance: after the writer committed, a fresh read returned ${after.length} rows, expected ${plan.highKey}. ` +
+            `The module is serving a stale snapshot to ordinary reads.`);
+    }
+    const stale = after.filter(row => row.value !== postValue(Number(row.key)));
+    if (stale.length > 0) {
+        throw new Error(`committed-read conformance: after the writer committed, ${stale.length} of ${after.length} rows still held their pre-write value ` +
+            `(first: key ${stale[0].key} = ${JSON.stringify(stale[0].value)}). A pinned snapshot must advance once the commit lands ` +
+            `— seeding was ${plan.rowCount} rows.`);
+    }
+}
+/**
+ * The harness entered on an empty table, so removing everything removes exactly
+ * what it wrote. A cleanup failure never masks the real error.
+ */
+async function cleanup(db, table, pendingError) {
+    try {
+        await db.exec(`delete from ${table}`);
+    }
+    catch (e) {
+        if (pendingError === undefined) {
+            throw new Error(`committed-read conformance: passed, but cleaning up '${table}' failed: ${String(e)}`);
+        }
+        // A cleanup failure after a real failure is a symptom, not the cause, so it
+        // must not displace the thrown error. `console.error` rather than the
+        // package's debug-namespaced logger: this runs under a test runner, where
+        // the note has to be visible without anyone enabling a debug namespace.
+        console.error(`committed-read conformance: cleanup of '${table}' also failed:`, e);
+    }
+}
+//# sourceMappingURL=committed-read-conformance.js.map

package/dist/src/vtab/test-support/committed-read-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"committed-read-conformance.js","sourceRoot":"","sources":["../../../../src/vtab/test-support/committed-read-conformance.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAA0B,MAAM,mBAAmB,CAAC;AAoF7E,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,wFAAwF;AACxF,SAAS,WAAW,CAAC,KAAe;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC7B,OAAO,YAAY,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC7B,OAAO,YAAY,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,EAAY,EAAE,KAAa;IACvD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACJ,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,6DAA6D,KAAK,yEAAyE,MAAM,CAAC,CAAC,CAAC,EAAE,CACtJ,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAe,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC1B,IAAI,IAAI,YAAY,kBAAkB;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,EAAY,EAAE,KAAa;IAChE,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACd,gCAAgC,KAAK,6GAA6G,CAClJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACd,uCAAuC,GAAG,CAAC,WAAW,CAAC,cAAc,cAAc,KAAK,6FAA6F;gBACrL,0IAA0I,CAC1I,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,EAAY,EACZ,GAAW,EACX,OAAqC;IAErC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,EAAE,aAAa;QAClC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,aAAa,CAAC,EAAY,EAAE,GAAW;IACrD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAC3B,QAAgC,EAChC,MAA8B,EAC9B,KAAK,GAAG,CAAC;IAET,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,oBAAoB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACtE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;oBAAE,MAAM;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC;AAC7F,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAI,IAAgB,EAAE,EAAU,EAAE,IAAY;IACtE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,KAAK,CACf,+BAA+B,IAAI,4BAA4B,EAAE,6CAA6C;gBAC9G,+GAA+G;gBAC/G,kHAAkH,CAClH,CAAC,CAAC;QACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,IAAI,CAAC,IAAI,CACR,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjD,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAwC;IAExC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC;IAEtE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,qEAAqE,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,4BAA4B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAEnD,+EAA+E;IAC/E,kEAAkE;IAClE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC;IACT,CAAC;AACF,CAAC;AAeD,SAAS,YAAY,CAAC,KAAa,EAAE,SAAiB,EAAE,WAAmB,EAAE,QAAgB;IAC5F,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAA4B,EAAE,EAAE,CAC9D,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1D,8EAA8E;IAC9E,+EAA+E;IAC/E,4CAA4C;IAC5C,MAAM,UAAU,GAAG,UAAU,SAAS,OAAO,SAAS,KAAK,WAAW,OAAO,WAAW,SAAS,KAAK,EAAE,CAAC;IAEzG,OAAO;QACN,UAAU;QACV,cAAc,EAAE,GAAG,UAAU,UAAU,SAAS,aAAa,SAAS,OAAO,OAAO,EAAE;QACtF,OAAO,EAAE,eAAe,KAAK,KAAK,SAAS,KAAK,WAAW,YAAY,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QACpG,6EAA6E;QAC7E,0EAA0E;QAC1E,qEAAqE;QACrE,SAAS,EAAE,0BAA0B,KAAK,KAAK,SAAS,KAAK,WAAW,YAAY,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;QAChH,SAAS;QACT,OAAO;QACP,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/E,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,gBAAgB,CAAC,EAAY,EAAE,KAAa,EAAE,UAAkB;IAC9E,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,gCAAgC,KAAK,mCAAmC,QAAQ,CAAC,MAAM,UAAU;YACjG,6FAA6F,CAC7F,CAAC;IACH,CAAC;AACF,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,qBAAqB,CACnC,OAAwC,EACxC,IAAa;IAEb,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAExE,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,WAAW,EAAE,EAAE,CAAC;IAC/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAgC,CAAC;QACrC,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,sBAAsB,CAAC;gBACtC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc;aAClE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,SAAS,GAAG,CAAC,CAAC;QACf,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAE5G,MAAM,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAE1C,OAAO;YACN,qBAAqB,EAAE,OAAO,CAAC,MAAM;YACrC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;YACrC,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;YAC3C,GAAG,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IACH,CAAC;YAAS,CAAC;QACV,0EAA0E;QAC1E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,EAAE,OAAO,EAAE,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC5B,EAAY,EACZ,IAAa;IAEb,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5D,OAAO;QACN,WAAW,EAAE,KAAK;QAClB,wBAAwB,EACvB,+DAA+D,IAAI,CAAC,SAAS,sBAAsB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACtH,wEAAwE;KACzE,CAAC;AACH,CAAC;AAQD,SAAS,WAAW,CAAC,EAAY,EAAE,GAAW;IAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAChC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,EACzB,KAAK,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,2EAA2E;IAC3E,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAkD,CAAC,CAAC,CAAC;IACxE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;AAC5C,CAAC;AAmBD,kFAAkF;AAClF,KAAK,UAAU,sBAAsB,CAAC,IAAiB;IACtD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEpF,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,2EAA2E;YAC3E,oDAAoD;YACpD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,MAAM,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,CAAI,IAAgB,EAAE,IAAY,EAAc,EAAE,CAC/D,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAClH,MAAM,WAAW,GAAG,WAAW;QAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,uBAAuB,CAAC;QACzG,CAAC,CAAC,EAAE,CAAC;IACN,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAChC,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,GAAG,KAAK,CAAC;IAChB,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,yBAAyB;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvF,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,WAAW,EAAE,CAAC;QACjB,cAAc,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAClF,4EAA4E;QAC5E,4DAA4D;QAC5D,IAAI,MAAM;YAAE,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,0CAA0C;AAC1C,SAAS,OAAO,CAAC,MAA8B,EAAE,QAAgC;IAChF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;WACpC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACtB,GAAW,EACX,MAA8B,EAC9B,UAA+C,EAC/C,WAAmB,EACnB,MAAe;IAEf,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO;IACnE,MAAM,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC;IAC7B,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,mHAAmH;QACrH,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,IAAI,KAAK,CACd,mCAAmC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE,iDAAiD;QACnJ,YAAY,OAAO,CAAC,MAAM,qBAAqB,WAAW,iCAAiC,MAAM,CAAC,MAAM,SAAS,WAAW,GAAG;QAC/H,iBAAiB,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;QACzD,iGAAiG,CACjG,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgC,EAAE,WAAmC;IAC7F,IAAI,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC;QAAE,OAAO;IAC3C,MAAM,IAAI,KAAK,CACd,iFAAiF,QAAQ,CAAC,MAAM,OAAO,WAAW,CAAC,MAAM,UAAU;QACnI,iBAAiB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI;QAC/D,0HAA0H;QAC1H,+BAA+B,CAC/B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB,CAAC,EAAY,EAAE,IAAa;IACnE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,iFAAiF,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,OAAO,IAAI;YAChI,2DAA2D,CAC3D,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,2DAA2D,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,yCAAyC;YACnI,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0DAA0D;YACzH,iBAAiB,IAAI,CAAC,QAAQ,QAAQ,CACtC,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAC,EAAY,EAAE,KAAa,EAAE,YAAqB;IACxE,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wDAAwD,KAAK,aAAa,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,4EAA4E;QAC5E,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,CAAC,KAAK,CAAC,2CAA2C,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quereus/quereus",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "type": "module",
   "description": "Pure TypeScript SQL engine — no WASM, no native bindings. Runs in browsers, Node.js, React Native, edge workers, and anywhere JS runs.",
   "keywords": [
@@ -71,9 +71,9 @@
     "mutation:subsystem": "node mutation-subsystem.mjs"
   },
   "devDependencies": {
-    "@quereus/plugin-leveldb": "^4.7.0",
+    "@quereus/plugin-leveldb": "^4.8.0",
     "@quereus/plugin-loader": "*",
-    "@quereus/store": "^4.7.0",
+    "@quereus/store": "^4.8.0",
     "@stryker-mutator/core": "^9.6.1",
     "@stryker-mutator/mocha-runner": "^9.6.1",
     "@stryker-mutator/typescript-checker": "^9.6.1",