@reddb-io/browser 0.0.0-stage → 0.1.0-alpha.0

package/LICENSE

@@ -0,0 +1,111 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             RedDB.io <hello@reddb.io>
+
+Licensed Work:        RedDB
+                      The Licensed Work is (c) 2026 RedDB.io
+
+Additional Use Grant: You may make use of the Licensed Work, provided that
+                      you do not use the Licensed Work for a Database
+                      Service.
+
+                      A "Database Service" is a commercial offering that
+                      allows third parties (other than your employees and
+                      individual contractors) to access the functionality
+                      of the Licensed Work by creating tables, documents,
+                      graphs, vectors, key-value entries, queues, or
+                      time-series whose schemas and/or data are determined
+                      by those third parties, or by querying, storing, or
+                      retrieving data determined by those third parties,
+                      whether as a hosted, managed, "as-a-service",
+                      database-as-a-service (DBaaS), platform-as-a-service
+                      (PaaS), software-as-a-service (SaaS), or cloud
+                      database product.
+
+                      For clarity, the Additional Use Grant permits, among
+                      other things, the following uses, none of which
+                      constitute a Database Service: personal use; internal
+                      use within your own organization; research and
+                      educational use; development and testing; use in
+                      open source projects; and self-hosting the Licensed
+                      Work for your own organization's own data.
+
+Change Date:          2030-06-22
+
+Change License:       GNU Affero General Public License version 3.0
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact hello@reddb.io.
+
+Notice
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

package/README.md

@@ -1,3 +1,261 @@
-# Temporary Holding Version
+# RedDB Browser — experimental persistence and query engine
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+This experimental package is the first distribution of RedDB Browser. It runs the
+canonical Rust `.rdb` artifact publication/recovery code, RQL parser and shared
+scalar evaluator in a dedicated WebAssembly worker, persisting through a real
+OPFS sync access handle.
+It requires a secure context, module workers, OPFS and Web Locks.
+
+The target is a fully offline local database with a JavaScript/TypeScript API.
+The Rust/WASM engine ships with the package; local operation must not require a
+RedDB server, account, CDN or external API. Applications bundle the JS, worker
+and WASM assets and make them available locally or through their own offline
+application cache. Sync is optional and must never gate local reads or writes.
+
+**It is not a database SDK yet.** It executes storage-free scalar SELECTs;
+queries over stored data, five-model local transactions, synchronization,
+conflict resolution and forwarding between tabs remain pending. It is published on the `experimental` npm channel and does not replace the remote `@reddb-io/client`.
+
+## Use from JS/TS
+
+See the [application guide](https://github.com/reddb-io/reddb/blob/main/docs/clients/browser.md) for installation,
+Vite/React/Vue/Svelte, plain JavaScript, Worker ownership and offline assets.
+
+```sh
+npm add @reddb-io/browser@experimental
+```
+
+```ts
+import { openArtifact } from '@reddb-io/browser'
+import RedDBWorker from '@reddb-io/browser/worker?worker'
+
+const artifact = await openArtifact({ name: 'my-app', worker: new RedDBWorker() })
+try {
+  console.log(await artifact.executeScalar('SELECT 42 AS answer'))
+} finally {
+  await artifact.close()
+}
+```
+
+Consumers receive built JS/Worker/WASM assets and TypeScript declarations; they
+need no Rust toolchain. The commands below are for engine/package contributors.
+
+## Build and verify
+
+Install the repository-pinned Rust toolchain, its `wasm32-unknown-unknown` target,
+and `wasm-bindgen-cli` **0.2.120**. Install workspace dependencies with pnpm.
+
+```sh
+pnpm --filter @reddb-io/browser build
+pnpm --filter @reddb-io/browser exec playwright install --with-deps chromium firefox webkit
+pnpm --filter @reddb-io/browser test
+cargo test --locked -p reddb-io-file
+cargo test --locked -p reddb-io-engine
+```
+
+The `WASM_BINDGEN` environment variable can point at the pinned CLI executable.
+`REDDB_BROWSER_BROWSERS=chromium` restricts the local browser test matrix; CI runs all
+three engines. Generated JS/WASM bindings are ignored and rebuilt from Rust.
+
+The tests probe the browser's actual native APIs. If a port lacks synchronous
+OPFS (currently Playwright's WPE WebKit runner), its persistence tests explicitly
+report skips; the unsupported-browser error path still runs. I/O or format
+failures never cause a skip. Chromium and Firefox exercise persistence and
+cross-tab ownership. WebKit persistence and real Safari/iOS qualification remain
+pending; a green CI run does not imply that coverage.
+
+The conformance tests compile a separate test-only WASM artifact and execute the same
+assertions as the native engine tests: scalar goldens/errors, compiled row
+filtering/sorting/projection, joins, aggregation, windows, set operations and
+cancellation. These do not require OPFS, so they run even on browser ports
+without synchronous storage. The same worker also checks the shared 16 KiB page
+layout, checksum corruption detection, freelist trunk recovery, pinned-page
+eviction and dirty writeback. Native unit tests for these primitives run from
+`reddb-engine`; native module paths retain the same types, with pager restart
+coverage. The native pager now shares byte I/O, sealed superblock writes and
+in-file double-write staging/recovery over `VfsFile` with WASM. Shared fixtures
+interrupt each write/flush in page publication, root publication and recovery,
+and check short reads, checksums and bounded frames. A test-only OPFS worker
+recovers a torn page after a full browser restart with networking disabled
+and the HTTP host disconnected.
+Those fixtures are excluded from the production SDK. Pager orchestration now
+also lives in `reddb-engine`: cached I/O, deferred reclamation, freelist and
+allocation fences, physical-tail reservation and checkpoint markers. The native
+adapter supplies file locks, encryption and its WAL writer through a synchronous
+barrier; portable pagers without a WAL reject nonzero page LSNs. Shared native/WASM
+fixtures cover failed allocation fences and WAL barriers. The OPFS restart fixture
+uses this complete pager and verifies checkpoint completion through another fresh
+pager. The production JS/TS API is unchanged: storage-backed queries, local
+transactions, runtime WAL/MVCC integration and encryption qualification remain pending.
+Native differential tests additionally compare
+the scalar corpus to actual `RedDBRuntime` query results.
+
+The shared core also owns the native B-tree/cursor, compressed value layout and
+overflow chains. Native APIs alias these implementations through a page-access
+contract; the browser executes them in test-only WASM fixtures. Conformance covers
+splits, scans, seeks, updates/deletes, large values and reclamation. An additional
+OPFS test mutates a native-created tree, restarts the browser with the HTTP host
+stopped, and reopens the exported file natively. The fixture includes native
+encoded entities as well as opaque B-tree values. These lower-level records do
+not supply runtime collection schemas or atomic database transactions. No raw
+tree API is added to the production SDK.
+
+## Current query contract
+
+```js
+const artifact = await openArtifact({ name: 'example' })
+await artifact.executeScalar('SELECT 2 + 3 * 4 AS answer')
+// { columns: ['answer'], rows: [[14]] }
+await artifact.close()
+```
+
+`executeScalar` uses the shared Rust evaluator, built-in type/operator/function
+catalogs and output labels. It accepts storage-free scalar SELECT expressions
+and literal LIMIT/OFFSET; unsupported clauses and stored-data queries fail
+explicitly. It never reads or changes the artifact. Integer values outside JS's
+safe range retain canonical `$int`/`$uint` tags instead of rounding. This small
+entrypoint is an execution milestone, not the full RQL/storage runtime.
+
+## Current storage contract
+
+`openArtifact({ name })` opens or creates `reddb-browser/<name>.rdb` inside the
+origin's private filesystem. It exposes `append`, `readWal`, `checkpoint`,
+`readSnapshot`, `generation`, `validateQuery` and `close`. These are artifact
+primitives: WAL payloads are native binary records, and checkpoint images are
+complete native store snapshots. Passing arbitrary SQL as a payload does not
+execute it. The caller must incorporate committed WAL into a checkpoint image.
+
+The browser and native file authority share the same format codecs and write
+ordering. Acknowledgement follows both the WAL flush and root publication flush.
+After a storage operation fails, that Rust handle rejects further I/O until it
+is reopened and recovered. Existing corrupt files are preserved and reported;
+they are never silently replaced. A second open returns `FILE_BUSY`; closing or
+terminating the owning worker releases the lock. Invalid input and parse errors
+do not invalidate the storage handle.
+
+The host must provide exclusive ownership when using Rust's `EmbeddedRdbFile`
+directly. The browser wrapper enforces this with Web Locks and OPFS's default
+exclusive access handle. The prototype does not use relaxed/read-write-unsafe
+access, emulate file locks, or require `SharedArrayBuffer` or isolation headers.
+
+OPFS is subject to origin quota, storage eviction and explicit site-data clearing.
+Applications can request persistent storage through `navigator.storage.persist()`;
+these primitives do not promise that a browser will grant it or sync after closing.
+
+## Offline asset loading
+
+The SDK does not register a service worker or control application updates. A
+PWA should include `index.js`, `worker.js`, `wasm/reddb_wasm.js` and
+`wasm/reddb_wasm_bg.wasm` from `src/` in its own versioned application cache,
+along with its application shell. Those assets must remain available together
+after installation. A locally packaged host can serve the same assets locally.
+HTTPS or a trusted localhost context is required for OPFS and Web Locks.
+
+The browser suite includes a test host's service worker and restarts the entire
+browser with networking disabled. It reloads the JS/worker/WASM assets, recovers
+OPFS data, writes again and executes a scalar query without reaching the HTTP
+host. This verifies the current artifact/scalar surface offline; storage-backed
+queries and application transactions still require the engine work below.
+
+## Shared transaction state
+
+The canonical native MVCC snapshot manager, visibility predicate, serializable
+read/write conflict tracking and per-connection transaction state now live in
+`reddb-engine::transaction`. The server uses the same types and algorithms.
+Native/WASM fixtures cover snapshot versus read-committed reads, aborted writers,
+savepoint sub-XIDs, failed commit preparation, publication-guard lifetime,
+retained vacuum horizons, checkpoint exclusions, unique-key reservations and
+serializable row/vault predicates with tenant separation. On Chromium/Firefox,
+the test host also caches this separate conformance artifact and reruns the suite
+after a full offline browser restart with the HTTP listener stopped.
+
+These are volatile engine assertions in a test-only WASM artifact. They do not
+expose transactions through the JS/TS SDK or qualify durable browser transaction
+recovery. Storage-backed dispatch, write conflict validation, WAL publication and
+recovery still require the runtime integration below.
+
+## Shared entities and read visibility
+
+The native `UnifiedEntity` model (rows/documents, graph, vectors, time series,
+queues and auxiliary references/embeddings) now lives in
+`reddb-engine::storage::entity`. Native paths re-export those same types.
+Entity timestamps retain Unix **seconds**; WASM obtains the host wall clock from
+`Date.now`, while query timing continues to use the monotonic performance clock.
+The browser test worker independently checks entity/embedding/reference timestamps
+against JS time, including after the offline restart.
+
+`SnapshotContext`, own/aborted subtransaction visibility, logical-ID SSI read
+tracking and table-row version selection are also shared. The native store
+supplies candidates through `TableRowVersionStore`; its existing dispatch,
+auth/tenant/moderation gates and statement-frame lifetime remain in the host.
+Native persisted-row tests cover both dump and paged reopen through the shared
+entity/visibility selector. Six new native/WASM cases exercise the representation
+and read rules, repeated offline on Chromium/Firefox. They use in-memory fixtures
+in WASM, not browser-persisted collections.
+
+Native value tags, checked decoding and Zstd compression now have one owner in
+`reddb-file::native_value`; the logical entity adapter lives in
+`reddb-engine::storage::entity_codec`. Native dump, paged-record and WAL paths
+use that same adapter. A frozen corpus produced by the original native writer
+checks all store versions V1–V12 and all value variants, including exact integers,
+compressed text/blob values, document bodies, MVCC fields and auxiliary data.
+Four native/WASM conformance cases compare the original bytes and reject
+truncated values, invalid lengths/tags, inconsistent compressed lengths and
+excessive array nesting. Arrays use a checked cursor and an explicit decoding
+stack bounded by the existing JSON nesting limit. This is not a general
+browser memory-budget qualification.
+
+The OPFS tree fixture now imports eight encoded native entities, decodes and
+updates their sequence/timestamps in WASM, restarts the browser offline with the
+HTTP host stopped, and exports for native verification. It retains opaque
+metadata bytes without interpreting native metadata policy. A separate native
+dump test checks the complete entity corpus and actual native metadata. These
+remain test-only records without application collection schemas or transactional
+publication. Storage-backed execution and durable runtime transaction/WAL
+integration are still needed before JS/TS can query collections. No file bytes,
+format versions or public application APIs change.
+
+## Shared query records and materialization
+
+`reddb-engine::query::unified` now owns the native `UnifiedRecord`/`UnifiedResult`
+representation, interned system keys, matched graph records/paths and query
+statistics. Native module paths re-export the exact same types. Native stored
+graph nodes retain their conversion through `From<&StoredNode>`; their storage
+and graph executor remain native.
+
+`reddb-engine::query::records` owns the existing full/lean/projected/universal
+entity materializers, by value and by reference, including catalog-schema
+fallback, binary-document field promotion, managed timestamps, logical `rid`,
+KV/document capabilities, graph endpoints, typed time-series tags and identity
+hints. The native runtime calls these same functions. Representation does not
+supply authorization, tenancy, visibility, secret handling, catalog discovery or
+transaction publication; those policies remain with the caller/runtime.
+
+A frozen pre-extraction native oracle checks 112 results (eight paths over
+14 entity shapes), preserving existing differences between materialization
+paths. Six relocated native record-layout property tests and four shared
+native/WASM cases cover schema overwrite/overflow, projections, document bodies,
+typed tags, graph representation and identities. The offline OPFS fixture now
+materializes full/projected records from its persisted entities after restart
+and verifies their fields before native export. Native integration compares
+shared records with actual stored-data query results after dump and paged reopen.
+
+These are internal/test-only engine paths. The public JS/TS API still exposes
+artifact operations and storage-free scalar SELECTs; stored-data dispatch,
+durable runtime transactions/WAL and application collection catalogs remain
+unfinished. No file format, wire envelope or public browser API changes here.
+
+## Remaining work toward the approved Browser design
+
+1. Extract the remaining storage-coupled executor/runtime into the shared portable engine and
+   preserve native query/transaction semantics for tables, documents, KV, graph
+   and vectors. Port clocks, crypto randomness and task scheduling.
+2. Build the application-facing SDK, local transaction/outbox atomicity, change
+   observation, and one-owner request forwarding between tabs.
+3. Implement versioned, policy-filtered snapshot and resumable change protocols
+   in `reddb-wire` and the server. Revalidate normal authorization/RLS on upload;
+   preserve transaction grouping, idempotency, stable graph references and deletes.
+4. Add explicit conflict resolution, expired-cursor rebootstrap without losing
+   pending intent, identity separation, offline assets and the storage-status UI.
+5. Validate two-device sync and engine conformance, Safari/iOS on real devices,
+   quota/failure cases, bundle size, startup, memory and query performance.

package/package.json

@@ -1,6 +1,44 @@
 {
   "name": "@reddb-io/browser",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-alpha.0",
+  "private": false,
+  "type": "module",
+  "description": "Experimental RedDB browser persistence and shared scalar execution; stored-data queries and sync remain pending.",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "import": "./src/index.js"
+    },
+    "./worker": "./src/worker.js",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "test": "node scripts/build-test.mjs && node --test test/browser.test.mjs",
+    "prepack": "node scripts/verify-dist.mjs",
+    "test:distribution": "node --test test/distribution.test.mjs"
+  },
+  "devDependencies": {
+    "playwright": "1.61.1",
+    "vite": "8.3.5",
+    "typescript": "7.0.2"
+  },
+  "license": "BUSL-1.1",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/reddb-io/reddb.git",
+    "directory": "packages/browser"
+  },
+  "homepage": "https://github.com/reddb-io/reddb/tree/main/packages/browser",
+  "types": "./src/index.d.ts",
+  "files": [
+    "src/",
+    "scripts/verify-dist.mjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "experimental"
+  }
+}

package/scripts/verify-dist.mjs

@@ -0,0 +1,12 @@
+import { readFileSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const directory = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+for (const path of ['src/index.js', 'src/index.d.ts', 'src/worker.js', 'src/wasm/reddb_wasm.js', 'LICENSE']) {
+  if (!readFileSync(resolve(directory, path)).length) throw new Error(`Missing browser distribution file: ${path}`)
+}
+const wasm = readFileSync(resolve(directory, 'src/wasm/reddb_wasm_bg.wasm'))
+if (wasm.length < 8 || !wasm.subarray(0, 8).equals(Buffer.from([0, 97, 115, 109, 1, 0, 0, 0]))) {
+  throw new Error('Build the browser WASM before packing: pnpm --filter @reddb-io/browser build')
+}

package/src/index.d.ts

@@ -0,0 +1,27 @@
+/** Experimental persistence and scalar execution; stored-data queries and sync remain pending. */
+export class BrowserError extends Error {
+  readonly code: string
+  constructor(code: string, message: string)
+}
+
+export interface Artifact {
+  /** Parse with the canonical RQL front-end; does not execute the statement. */
+  validateQuery(sql: string): Promise<void>
+  /** Storage-free scalar SELECT only; does not read or mutate the artifact. */
+  executeScalar(sql: string): Promise<{ columns: string[]; rows: unknown[][] }>
+  generation(): Promise<string>
+  readWal(): Promise<Uint8Array[]>
+  readSnapshot(): Promise<Uint8Array | undefined>
+  /** Low-level native WAL payloads, not SQL commands. */
+  append(payloads: Uint8Array[]): Promise<void>
+  /** Complete native store snapshot; the caller must fold in the committed WAL. */
+  checkpoint(snapshot: Uint8Array, minWalBytes?: number): Promise<void>
+  close(): Promise<void>
+}
+
+/** Open/create an exclusively owned OPFS .rdb file. Another owner returns FILE_BUSY. */
+export function openArtifact(options: {
+  name: string
+  /** Fresh module Worker supplied by a bundler (e.g. Vite ?worker). The artifact owns its lifetime. */
+  worker?: Worker
+}): Promise<Artifact>

package/src/index.js

@@ -0,0 +1,79 @@
+/** Experimental artifact storage and storage-free scalar execution. */
+
+export class BrowserError extends Error {
+  constructor(code, message) {
+    super(message)
+    this.name = 'BrowserError'
+    this.code = code
+  }
+}
+
+/** Open an exclusively owned, canonical .rdb artifact in an OPFS worker. */
+export async function openArtifact({ name, worker: suppliedWorker } = {}) {
+  if (typeof name !== 'string' || !/^[a-zA-Z0-9_-][a-zA-Z0-9_.-]{0,79}$/.test(name)) {
+    throw new BrowserError('INVALID_NAME', 'Artifact names must contain 1–80 letters, digits, dots, underscores or hyphens')
+  }
+  if (!globalThis.isSecureContext || !globalThis.Worker || !globalThis.navigator?.storage?.getDirectory || !globalThis.navigator?.locks) {
+    throw new BrowserError('STORAGE_UNSUPPORTED', 'RedDB Browser requires HTTPS, module Workers, OPFS and Web Locks')
+  }
+
+  if (suppliedWorker !== undefined && !(suppliedWorker instanceof Worker)) {
+    throw new BrowserError('INVALID_ARGUMENT', 'worker must be a dedicated Worker instance')
+  }
+  const worker = suppliedWorker ?? new Worker(new URL('./worker.js', import.meta.url), { type: 'module' })
+  const pending = new Map()
+  let sequence = 0
+  let closed = false
+
+  function fail(error) {
+    closed = true
+    for (const request of pending.values()) request.reject(error)
+    pending.clear()
+    worker.terminate()
+  }
+
+  worker.onmessage = ({ data }) => {
+    const request = pending.get(data.id)
+    if (!request) return
+    pending.delete(data.id)
+    if (data.error) request.reject(new BrowserError(data.error.code, data.error.message))
+    else request.resolve(data.result)
+  }
+  worker.onerror = (event) => fail(new BrowserError('WORKER_FAILED', event.message || 'RedDB storage worker failed'))
+  worker.onmessageerror = () => fail(new BrowserError('WORKER_FAILED', 'Unable to decode a storage worker response'))
+
+  function call(method, params = {}) {
+    if (closed) return Promise.reject(new BrowserError('CLOSED', 'This artifact handle is closed'))
+    const id = ++sequence
+    return new Promise((resolve, reject) => {
+      pending.set(id, { resolve, reject })
+      try { worker.postMessage({ id, method, params }) }
+      catch (error) { pending.delete(id); reject(error) }
+    })
+  }
+
+  try { await call('open', { name }) }
+  catch (error) { fail(error); throw error }
+
+  let closing
+  return {
+    validateQuery: (sql) => call('validateQuery', { sql }),
+    executeScalar: (sql) => call('executeScalar', { sql }),
+    generation: () => call('generation'),
+    readWal: () => call('readWal'),
+    readSnapshot: () => call('readSnapshot'),
+    append: (payloads) => call('append', { payloads }),
+    checkpoint: (snapshot, minWalBytes = 0) => call('checkpoint', { snapshot, minWalBytes }),
+    close() {
+      if (!closing) {
+        closing = closed ? Promise.resolve() : call('close').finally(() => {
+          closed = true
+          worker.terminate()
+        })
+        // Reject calls issued after close(), including calls in the same turn.
+        closed = true
+      }
+      return closing
+    },
+  }
+}

package/src/wasm/reddb_wasm.d.ts

@@ -0,0 +1,83 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * Canonical `.rdb` artifact I/O. The worker owns and closes the underlying
+ * exclusive access handle; freeing this wrapper never unlocks it early.
+ */
+export class BrowserArtifact {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    append(payloads: Array<any>): void;
+    checkpoint(snapshot: Uint8Array, min_wal_bytes: number): void;
+    static create(handle: any, name: string, created_at_unix_ms: number): BrowserArtifact;
+    /**
+     * String-valued counters preserve all u64 bits across JavaScript.
+     */
+    generation(): string;
+    static open(handle: any, name: string): BrowserArtifact;
+    readSnapshot(): Uint8Array | undefined;
+    readWal(): Array<any>;
+}
+
+/**
+ * Experimental storage-free execution, using the native scalar evaluator.
+ */
+export function executeScalar(sql: string): any;
+
+export function validateQuery(sql: string): void;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly __wbg_browserartifact_free: (a: number, b: number) => void;
+    readonly browserartifact_append: (a: number, b: any) => [number, number];
+    readonly browserartifact_checkpoint: (a: number, b: number, c: number, d: number) => [number, number];
+    readonly browserartifact_create: (a: any, b: number, c: number, d: number) => [number, number, number];
+    readonly browserartifact_generation: (a: number) => [number, number, number, number];
+    readonly browserartifact_open: (a: any, b: number, c: number) => [number, number, number];
+    readonly browserartifact_readSnapshot: (a: number) => [number, number, number, number];
+    readonly browserartifact_readWal: (a: number) => [number, number, number];
+    readonly executeScalar: (a: number, b: number) => [number, number, number];
+    readonly validateQuery: (a: number, b: number) => [number, number];
+    readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
+    readonly rust_zstd_wasm_shim_free: (a: number) => void;
+    readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
+    readonly rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
+    readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
+    readonly __wbindgen_malloc: (a: number, b: number) => number;
+    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_exn_store: (a: number) => void;
+    readonly __externref_table_alloc: () => number;
+    readonly __wbindgen_externrefs: WebAssembly.Table;
+    readonly __externref_table_dealloc: (a: number) => void;
+    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+    readonly __wbindgen_start: () => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/src/wasm/reddb_wasm.js

@@ -0,0 +1,485 @@
+/* @ts-self-types="./reddb_wasm.d.ts" */
+
+/**
+ * Canonical `.rdb` artifact I/O. The worker owns and closes the underlying
+ * exclusive access handle; freeing this wrapper never unlocks it early.
+ */
+export class BrowserArtifact {
+    static __wrap(ptr) {
+        const obj = Object.create(BrowserArtifact.prototype);
+        obj.__wbg_ptr = ptr;
+        BrowserArtifactFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        BrowserArtifactFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_browserartifact_free(ptr, 0);
+    }
+    /**
+     * @param {Array<any>} payloads
+     */
+    append(payloads) {
+        const ret = wasm.browserartifact_append(this.__wbg_ptr, payloads);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+    /**
+     * @param {Uint8Array} snapshot
+     * @param {number} min_wal_bytes
+     */
+    checkpoint(snapshot, min_wal_bytes) {
+        const ptr0 = passArray8ToWasm0(snapshot, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.browserartifact_checkpoint(this.__wbg_ptr, ptr0, len0, min_wal_bytes);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
+    /**
+     * @param {any} handle
+     * @param {string} name
+     * @param {number} created_at_unix_ms
+     * @returns {BrowserArtifact}
+     */
+    static create(handle, name, created_at_unix_ms) {
+        const ptr0 = passStringToWasm0(name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.browserartifact_create(handle, ptr0, len0, created_at_unix_ms);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return BrowserArtifact.__wrap(ret[0]);
+    }
+    /**
+     * String-valued counters preserve all u64 bits across JavaScript.
+     * @returns {string}
+     */
+    generation() {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const ret = wasm.browserartifact_generation(this.__wbg_ptr);
+            var ptr1 = ret[0];
+            var len1 = ret[1];
+            if (ret[3]) {
+                ptr1 = 0; len1 = 0;
+                throw takeFromExternrefTable0(ret[2]);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        }
+    }
+    /**
+     * @param {any} handle
+     * @param {string} name
+     * @returns {BrowserArtifact}
+     */
+    static open(handle, name) {
+        const ptr0 = passStringToWasm0(name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.browserartifact_open(handle, ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return BrowserArtifact.__wrap(ret[0]);
+    }
+    /**
+     * @returns {Uint8Array | undefined}
+     */
+    readSnapshot() {
+        const ret = wasm.browserartifact_readSnapshot(this.__wbg_ptr);
+        if (ret[3]) {
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        let v1;
+        if (ret[0] !== 0) {
+            v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+            wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+        }
+        return v1;
+    }
+    /**
+     * @returns {Array<any>}
+     */
+    readWal() {
+        const ret = wasm.browserartifact_readWal(this.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+}
+if (Symbol.dispose) BrowserArtifact.prototype[Symbol.dispose] = BrowserArtifact.prototype.free;
+
+/**
+ * Experimental storage-free execution, using the native scalar evaluator.
+ * @param {string} sql
+ * @returns {any}
+ */
+export function executeScalar(sql) {
+    const ptr0 = passStringToWasm0(sql, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.executeScalar(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
+/**
+ * @param {string} sql
+ */
+export function validateQuery(sql) {
+    const ptr0 = passStringToWasm0(sql, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.validateQuery(ptr0, len0);
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg___wbindgen_string_get_965592073e5d848c: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_9c75d47bf9e7731e: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_flush_8a925e51a05f983d: function() { return handleError(function (arg0) {
+            arg0.flush();
+        }, arguments); },
+        __wbg_getSize_ef1f7ad2400c4958: function() { return handleError(function (arg0) {
+            const ret = arg0.getSize();
+            return ret;
+        }, arguments); },
+        __wbg_get_unchecked_be562b1421656321: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_instanceof_Error_5e21755e9d9cbee5: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Error;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_57d77acd50e4c44d: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_length_0a6ce016dc1460b0: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_ba3c032602efe310: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_message_d5628ca19de920d3: function(arg0) {
+            const ret = arg0.message;
+            return ret;
+        },
+        __wbg_new_3baa8d9866155c79: function() {
+            const ret = new Array();
+            return ret;
+        },
+        __wbg_new_c9ea13ea803a692e: function(arg0, arg1) {
+            const ret = new Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_new_from_slice_5a173c243af2e823: function(arg0, arg1) {
+            const ret = new Uint8Array(getArrayU8FromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_parse_342d5616e14beccc: function() { return handleError(function (arg0, arg1) {
+            const ret = JSON.parse(getStringFromWasm0(arg0, arg1));
+            return ret;
+        }, arguments); },
+        __wbg_prototypesetcall_fd4050e806e1d519: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_push_60a5366c0bb22a7d: function(arg0, arg1) {
+            const ret = arg0.push(arg1);
+            return ret;
+        },
+        __wbg_readAt_38b95ee3bea009e0: function() { return handleError(function (arg0, arg1, arg2, arg3) {
+            const ret = arg0.readAt(getArrayU8FromWasm0(arg1, arg2), arg3);
+            return ret;
+        }, arguments); },
+        __wbg_set_5337f8ac82364a3f: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = Reflect.set(arg0, arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_truncate_d9e55b46e14f9493: function() { return handleError(function (arg0, arg1) {
+            arg0.truncate(arg1);
+        }, arguments); },
+        __wbg_writeAt_1aacc9360d02366e: function() { return handleError(function (arg0, arg1, arg2, arg3) {
+            const ret = arg0.writeAt(getArrayU8FromWasm0(arg1, arg2), arg3);
+            return ret;
+        }, arguments); },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./reddb_wasm_bg.js": import0,
+    };
+}
+
+const BrowserArtifactFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_browserartifact_free(ptr, 1));
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    wasm.__wbindgen_start();
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = module.ok && expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('reddb_wasm_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/src/wasm/reddb_wasm_bg.wasm.d.ts

@@ -0,0 +1,29 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const __wbg_browserartifact_free: (a: number, b: number) => void;
+export const browserartifact_append: (a: number, b: any) => [number, number];
+export const browserartifact_checkpoint: (a: number, b: number, c: number, d: number) => [number, number];
+export const browserartifact_create: (a: any, b: number, c: number, d: number) => [number, number, number];
+export const browserartifact_generation: (a: number) => [number, number, number, number];
+export const browserartifact_open: (a: any, b: number, c: number) => [number, number, number];
+export const browserartifact_readSnapshot: (a: number) => [number, number, number, number];
+export const browserartifact_readWal: (a: number) => [number, number, number];
+export const executeScalar: (a: number, b: number) => [number, number, number];
+export const validateQuery: (a: number, b: number) => [number, number];
+export const rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
+export const rust_zstd_wasm_shim_free: (a: number) => void;
+export const rust_zstd_wasm_shim_malloc: (a: number) => number;
+export const rust_zstd_wasm_shim_memcmp: (a: number, b: number, c: number) => number;
+export const rust_zstd_wasm_shim_memcpy: (a: number, b: number, c: number) => number;
+export const rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
+export const rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
+export const rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_exn_store: (a: number) => void;
+export const __externref_table_alloc: () => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __wbindgen_start: () => void;

package/src/worker.js

@@ -0,0 +1,106 @@
+import init, { BrowserArtifact, validateQuery, executeScalar } from './wasm/reddb_wasm.js'
+
+let artifact
+let access
+let release
+let ownership
+let queue = Promise.resolve()
+
+function error(code, message) {
+  return Object.assign(new Error(message), { code })
+}
+
+function synchronous(value) {
+  if (value && typeof value.then === 'function') {
+    value.catch(() => {})
+    throw error('STORAGE_UNSUPPORTED', 'This browser implements asynchronous OPFS access; synchronous access is required')
+  }
+  return value
+}
+
+async function open(name) {
+  await init()
+  await new Promise((resolve, reject) => {
+    ownership = navigator.locks.request(`reddb-browser:${name}`, { ifAvailable: true }, async (lock) => {
+      if (!lock) throw error('FILE_BUSY', 'This artifact is already open in another worker or tab')
+      try {
+        const root = await navigator.storage.getDirectory()
+        const directory = await root.getDirectoryHandle('reddb-browser', { create: true })
+        const file = await directory.getFileHandle(`${name}.rdb`, { create: true })
+        if (typeof file.createSyncAccessHandle !== 'function') {
+          throw error('STORAGE_UNSUPPORTED', 'This browser does not support synchronous OPFS access in a dedicated worker')
+        }
+        access = await file.createSyncAccessHandle()
+        const fileIo = {
+          readAt: (buffer, offset) => synchronous(access.read(buffer, { at: offset })),
+          writeAt: (buffer, offset) => synchronous(access.write(buffer, { at: offset })),
+          getSize: () => synchronous(access.getSize()),
+          truncate: (size) => synchronous(access.truncate(size)),
+          flush: () => synchronous(access.flush()),
+        }
+        artifact = fileIo.getSize() === 0
+          ? BrowserArtifact.create(fileIo, name, Date.now())
+          : BrowserArtifact.open(fileIo, name)
+        const lifetime = new Promise((resolveRelease) => { release = resolveRelease })
+        resolve()
+        await lifetime
+      } catch (failure) {
+        reject(failure)
+        throw failure
+      } finally {
+        artifact?.free()
+        artifact = undefined
+        if (access) synchronous(access.close())
+        access = undefined
+      }
+    })
+    // Observe early lock/open failures, including ifAvailable returning null.
+    ownership.catch(reject)
+  })
+}
+
+function bytes(value) {
+  if (!(value instanceof Uint8Array)) throw error('INVALID_ARGUMENT', 'Expected a Uint8Array')
+  return value
+}
+
+async function execute(method, params) {
+  if (method === 'open') return open(params.name)
+  if (!artifact) throw error('CLOSED', 'The artifact is not open')
+  switch (method) {
+    case 'validateQuery':
+      if (typeof params.sql !== 'string') throw error('INVALID_ARGUMENT', 'Expected an RQL string')
+      return validateQuery(params.sql)
+    case 'executeScalar':
+      if (typeof params.sql !== 'string') throw error('INVALID_ARGUMENT', 'Expected an RQL string')
+      return executeScalar(params.sql)
+    case 'generation': return artifact.generation()
+    case 'readWal': return artifact.readWal()
+    case 'readSnapshot': return artifact.readSnapshot()
+    case 'append':
+      if (!Array.isArray(params.payloads)) throw error('INVALID_ARGUMENT', 'Expected an array of WAL payloads')
+      return artifact.append(params.payloads.map(bytes))
+    case 'checkpoint':
+      if (!Number.isInteger(params.minWalBytes) || params.minWalBytes < 0 || params.minWalBytes > 0xffffffff) {
+        throw error('INVALID_ARGUMENT', 'WAL capacity must be an unsigned 32-bit integer')
+      }
+      return artifact.checkpoint(bytes(params.snapshot), params.minWalBytes)
+    case 'close':
+      release()
+      await ownership
+      return
+    default: throw error('INVALID_ARGUMENT', `Unknown artifact operation: ${method}`)
+  }
+}
+
+self.onmessage = ({ data: { id, method, params } }) => {
+  // Opening is asynchronous; all following operations wait for ownership.
+  queue = queue.then(async () => {
+    try {
+      const result = await execute(method, params)
+      self.postMessage({ id, result })
+    } catch (failure) {
+      self.postMessage({ id, error: { code: failure.code || 'ARTIFACT_ERROR', message: failure.message || String(failure) } })
+    }
+  })
+}