@taladb/web 0.8.4 → 0.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taladb/web",
-  "version": "0.8.4",
+  "version": "0.9.1",
   "description": "TalaDB WASM bindings — document queries and vector search in the browser",
   "main": "pkg/taladb_web.js",
   "types": "pkg/taladb_web.d.ts",

package/pkg/package.json

@@ -5,7 +5,7 @@
     "thinkgrid-labs"
   ],
   "description": "TalaDB browser WASM bindings (wasm-bindgen + OPFS) and Cloudflare Workers",
-  "version": "0.8.4",
+  "version": "0.9.1",
   "license": "MIT",
   "files": [
     "taladb_web_bg.wasm",

package/pkg/taladb_web.d.ts

@@ -14,6 +14,10 @@ export class CollectionWasm {
      * Count documents matching the filter.
      */
     count(filter: any): number;
+    /**
+     * Create a compound index. `fields_json` is a JSON array of field names.
+     */
+    createCompoundIndex(fields_json: string): void;
     /**
      * Create a secondary index on a field.
      */
@@ -36,6 +40,10 @@ export class CollectionWasm {
      * Delete the first matching document. Returns true if deleted.
      */
     deleteOne(filter: any): boolean;
+    /**
+     * Drop a compound index by its ordered field list (`fields_json`).
+     */
+    dropCompoundIndex(fields_json: string): void;
     /**
      * Drop a secondary index.
      */
@@ -110,6 +118,11 @@ export class TalaDBWasm {
      * database via Last-Write-Wins. Returns the number of documents changed.
      */
     importChanges(changeset_json: string): number;
+    /**
+     * User collection names (reserved `_`-prefixed collections excluded).
+     * Backs the sync orchestration's "sync all collections" default.
+     */
+    listCollectionNames(): string[];
     /**
      * Open an in-memory database (suitable for tests and environments without OPFS).
      */
@@ -169,6 +182,10 @@ export class WorkerDB {
      * Count matching documents.
      */
     count(collection: string, filter_json: string): number;
+    /**
+     * Create a compound index. `fields_json` is a JSON array of field names.
+     */
+    createCompoundIndex(collection: string, fields_json: string): void;
     createFtsIndex(collection: string, field: string): void;
     createIndex(collection: string, field: string): void;
     /**
@@ -188,6 +205,10 @@ export class WorkerDB {
      * Delete the first matching document. Returns `true` / `false`.
      */
     deleteOne(collection: string, filter_json: string): boolean;
+    /**
+     * Drop a compound index by its ordered field list (`fields_json`).
+     */
+    dropCompoundIndex(collection: string, fields_json: string): void;
     dropFtsIndex(collection: string, field: string): void;
     dropIndex(collection: string, field: string): void;
     /**
@@ -272,7 +293,7 @@ export class WorkerDB {
      * const db = WorkerDB.openWithConfigAndOpfs(handle, JSON.stringify(config));
      * ```
      */
-    static openWithConfigAndOpfs(sync_handle: FileSystemSyncAccessHandle, config_json?: string | null): WorkerDB;
+    static openWithConfigAndOpfs(sync_handle: FileSystemSyncAccessHandle, config_json?: string | null, passphrase?: string | null, salt?: Uint8Array | null): WorkerDB;
     /**
      * Open a database from an optional snapshot with HTTP push sync config.
      *
@@ -307,6 +328,8 @@ export class WorkerDB {
      * ```
      */
     static openWithSnapshot(data?: Uint8Array | null): WorkerDB;
+    syncPending(): bigint;
+    syncStatus(): string;
     /**
      * Update all matching documents. Returns the count updated.
      */
@@ -382,11 +405,13 @@ export interface InitOutput {
     readonly workerdb_compact: (a: number) => [number, number];
     readonly workerdb_compactTombstones: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly workerdb_count: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly workerdb_createCompoundIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_createFtsIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_createIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_createVectorIndex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number];
     readonly workerdb_deleteMany: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
     readonly workerdb_deleteOne: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly workerdb_dropCompoundIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_dropFtsIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_dropIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
     readonly workerdb_dropVectorIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
@@ -401,10 +426,12 @@ export interface InitOutput {
     readonly workerdb_listCollections: (a: number) => [number, number, number, number];
     readonly workerdb_listIndexes: (a: number, b: number, c: number) => [number, number, number, number];
     readonly workerdb_openInMemory: () => [number, number, number];
-    readonly workerdb_openWithConfigAndOpfs: (a: any, b: number, c: number) => [number, number, number];
+    readonly workerdb_openWithConfigAndOpfs: (a: any, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
     readonly workerdb_openWithConfigAndSnapshot: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly workerdb_openWithOpfs: (a: any) => [number, number, number];
     readonly workerdb_openWithSnapshot: (a: number, b: number) => [number, number, number];
+    readonly workerdb_syncPending: (a: number) => bigint;
+    readonly workerdb_syncStatus: (a: number) => [number, number];
     readonly workerdb_updateMany: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
     readonly workerdb_updateOne: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
     readonly workerdb_upgradeVectorIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
@@ -412,10 +439,12 @@ export interface InitOutput {
     readonly __wbg_taladbwasm_free: (a: number, b: number) => void;
     readonly collectionwasm_aggregate: (a: number, b: any) => [number, number, number];
     readonly collectionwasm_count: (a: number, b: any) => [number, number, number];
+    readonly collectionwasm_createCompoundIndex: (a: number, b: number, c: number) => [number, number];
     readonly collectionwasm_createIndex: (a: number, b: number, c: number) => [number, number];
     readonly collectionwasm_createVectorIndex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number];
     readonly collectionwasm_deleteMany: (a: number, b: any) => [number, number, number];
     readonly collectionwasm_deleteOne: (a: number, b: any) => [number, number, number];
+    readonly collectionwasm_dropCompoundIndex: (a: number, b: number, c: number) => [number, number];
     readonly collectionwasm_dropIndex: (a: number, b: number, c: number) => [number, number];
     readonly collectionwasm_dropVectorIndex: (a: number, b: number, c: number) => [number, number];
     readonly collectionwasm_find: (a: number, b: any) => [number, number, number];
@@ -430,16 +459,17 @@ export interface InitOutput {
     readonly taladbwasm_exportChanges: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly taladbwasm_exportSnapshot: (a: number) => [number, number, number, number];
     readonly taladbwasm_importChanges: (a: number, b: number, c: number) => [number, number, number];
+    readonly taladbwasm_listCollectionNames: (a: number) => [number, number, number, number];
     readonly taladbwasm_openInMemory: () => [number, number, number];
     readonly taladbwasm_openWithSnapshot: (a: number, b: number) => [number, number, number];
     readonly init: () => void;
-    readonly idb_load_snapshot: (a: number, b: number) => any;
-    readonly idb_save_snapshot: (a: number, b: number, c: number, d: number) => any;
     readonly opfs_open_backend: (a: number, b: number) => any;
     readonly is_opfs_available: () => any;
     readonly opfs_delete_snapshot: (a: number, b: number) => any;
     readonly opfs_flush_snapshot: (a: number, b: number, c: number, d: number) => any;
     readonly opfs_load_snapshot: (a: number, b: number) => any;
+    readonly idb_load_snapshot: (a: number, b: number) => any;
+    readonly idb_save_snapshot: (a: number, b: number, c: number, d: number) => any;
     readonly wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut_____Output_______: (a: number, b: number) => void;
     readonly wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output___core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_60ce93de3f474933___JsError___: (a: number, b: number) => void;
     readonly wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output_______: (a: number, b: number) => void;
@@ -454,6 +484,7 @@ export interface InitOutput {
     readonly __wbindgen_externrefs: WebAssembly.Table;
     readonly __wbindgen_free: (a: number, b: number, c: number) => void;
     readonly __externref_table_dealloc: (a: number) => void;
+    readonly __externref_drop_slice: (a: number, b: number) => void;
     readonly __wbindgen_start: () => void;
 }
 

package/pkg/taladb_web.js

@@ -43,6 +43,18 @@ export class CollectionWasm {
         }
         return ret[0] >>> 0;
     }
+    /**
+     * Create a compound index. `fields_json` is a JSON array of field names.
+     * @param {string} fields_json
+     */
+    createCompoundIndex(fields_json) {
+        const ptr0 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.collectionwasm_createCompoundIndex(this.__wbg_ptr, ptr0, len0);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
     /**
      * Create a secondary index on a field.
      * @param {string} field
@@ -106,6 +118,18 @@ export class CollectionWasm {
         }
         return ret[0] !== 0;
     }
+    /**
+     * Drop a compound index by its ordered field list (`fields_json`).
+     * @param {string} fields_json
+     */
+    dropCompoundIndex(fields_json) {
+        const ptr0 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.collectionwasm_dropCompoundIndex(this.__wbg_ptr, ptr0, len0);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
     /**
      * Drop a secondary index.
      * @param {string} field
@@ -346,6 +370,20 @@ export class TalaDBWasm {
         }
         return ret[0] >>> 0;
     }
+    /**
+     * User collection names (reserved `_`-prefixed collections excluded).
+     * Backs the sync orchestration's "sync all collections" default.
+     * @returns {string[]}
+     */
+    listCollectionNames() {
+        const ret = wasm.taladbwasm_listCollectionNames(this.__wbg_ptr);
+        if (ret[3]) {
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
     /**
      * Open an in-memory database (suitable for tests and environments without OPFS).
      * @returns {TalaDBWasm}
@@ -490,6 +528,21 @@ export class WorkerDB {
         }
         return ret[0] >>> 0;
     }
+    /**
+     * Create a compound index. `fields_json` is a JSON array of field names.
+     * @param {string} collection
+     * @param {string} fields_json
+     */
+    createCompoundIndex(collection, fields_json) {
+        const ptr0 = passStringToWasm0(collection, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.workerdb_createCompoundIndex(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
     /**
      * @param {string} collection
      * @param {string} field
@@ -581,6 +634,21 @@ export class WorkerDB {
         }
         return ret[0] !== 0;
     }
+    /**
+     * Drop a compound index by its ordered field list (`fields_json`).
+     * @param {string} collection
+     * @param {string} fields_json
+     */
+    dropCompoundIndex(collection, fields_json) {
+        const ptr0 = passStringToWasm0(collection, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.workerdb_dropCompoundIndex(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+        if (ret[1]) {
+            throw takeFromExternrefTable0(ret[0]);
+        }
+    }
     /**
      * @param {string} collection
      * @param {string} field
@@ -917,12 +985,18 @@ export class WorkerDB {
      * ```
      * @param {FileSystemSyncAccessHandle} sync_handle
      * @param {string | null} [config_json]
+     * @param {string | null} [passphrase]
+     * @param {Uint8Array | null} [salt]
      * @returns {WorkerDB}
      */
-    static openWithConfigAndOpfs(sync_handle, config_json) {
+    static openWithConfigAndOpfs(sync_handle, config_json, passphrase, salt) {
         var ptr0 = isLikeNone(config_json) ? 0 : passStringToWasm0(config_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         var len0 = WASM_VECTOR_LEN;
-        const ret = wasm.workerdb_openWithConfigAndOpfs(sync_handle, ptr0, len0);
+        var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(salt) ? 0 : passArray8ToWasm0(salt, wasm.__wbindgen_malloc);
+        var len2 = WASM_VECTOR_LEN;
+        const ret = wasm.workerdb_openWithConfigAndOpfs(sync_handle, ptr0, len0, ptr1, len1, ptr2, len2);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
@@ -993,6 +1067,28 @@ export class WorkerDB {
         }
         return WorkerDB.__wrap(ret[0]);
     }
+    /**
+     * @returns {bigint}
+     */
+    syncPending() {
+        const ret = wasm.workerdb_syncPending(this.__wbg_ptr);
+        return BigInt.asUintN(64, ret);
+    }
+    /**
+     * @returns {string}
+     */
+    syncStatus() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.workerdb_syncStatus(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
     /**
      * Update all matching documents. Returns the count updated.
      * @param {string} collection
@@ -1291,6 +1387,10 @@ function __wbg_get_imports() {
             const ret = arg0.createWritable();
             return ret;
         },
+        __wbg_crypto_38df2bab126b63dc: function(arg0) {
+            const ret = arg0.crypto;
+            return ret;
+        },
         __wbg_done_08ce71ee07e3bd17: function(arg0) {
             const ret = arg0.done;
             return ret;
@@ -1340,6 +1440,9 @@ function __wbg_get_imports() {
         __wbg_getRandomValues_3f44b700395062e5: function() { return handleError(function (arg0, arg1) {
             globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
         }, arguments); },
+        __wbg_getRandomValues_c44a50d8cfdaebeb: function() { return handleError(function (arg0, arg1) {
+            arg0.getRandomValues(arg1);
+        }, arguments); },
         __wbg_getSize_0a16c5e2524d34aa: function() { return handleError(function (arg0) {
             const ret = arg0.getSize();
             return ret;
@@ -1498,6 +1601,10 @@ function __wbg_get_imports() {
             const ret = arg0.length;
             return ret;
         },
+        __wbg_msCrypto_bd5a034af96bcba6: function(arg0) {
+            const ret = arg0.msCrypto;
+            return ret;
+        },
         __wbg_navigator_9cebf56f28aa719b: function(arg0) {
             const ret = arg0.navigator;
             return ret;
@@ -1586,6 +1693,10 @@ function __wbg_get_imports() {
             const ret = arg0.next;
             return ret;
         },
+        __wbg_node_84ea875411254db1: function(arg0) {
+            const ret = arg0.node;
+            return ret;
+        },
         __wbg_now_16f0c993d5dd6c27: function() {
             const ret = Date.now();
             return ret;
@@ -1594,6 +1705,10 @@ function __wbg_get_imports() {
             const ret = Array.of(arg0, arg1);
             return ret;
         },
+        __wbg_process_44c7a14e11e9f69e: function(arg0) {
+            const ret = arg0.process;
+            return ret;
+        },
         __wbg_prototypesetcall_d62e5099504357e6: function(arg0, arg1, arg2) {
             Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
         },
@@ -1608,10 +1723,17 @@ function __wbg_get_imports() {
         __wbg_queueMicrotask_a082d78ce798393e: function(arg0) {
             queueMicrotask(arg0);
         },
+        __wbg_randomFillSync_6c25eac9869eb53c: function() { return handleError(function (arg0, arg1) {
+            arg0.randomFillSync(arg1);
+        }, arguments); },
         __wbg_removeEntry_b2a4d6d0ee2040c5: function(arg0, arg1, arg2) {
             const ret = arg0.removeEntry(getStringFromWasm0(arg1, arg2));
             return ret;
         },
+        __wbg_require_b4edbdcf3e2a1ef0: function() { return handleError(function () {
+            const ret = module.require;
+            return ret;
+        }, arguments); },
         __wbg_resolve_ae8d83246e5bcc12: function(arg0) {
             const ret = Promise.resolve(arg0);
             return ret;
@@ -1697,6 +1819,10 @@ function __wbg_get_imports() {
             const ret = JSON.stringify(arg0);
             return ret;
         }, arguments); },
+        __wbg_subarray_a068d24e39478a8a: function(arg0, arg1, arg2) {
+            const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
+            return ret;
+        },
         __wbg_then_098abe61755d12f6: function(arg0, arg1) {
             const ret = arg0.then(arg1);
             return ret;
@@ -1719,18 +1845,22 @@ function __wbg_get_imports() {
             const ret = arg0.value;
             return ret;
         },
+        __wbg_versions_276b2795b1c6a219: function(arg0) {
+            const ret = arg0.versions;
+            return ret;
+        },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { dtor_idx: 208, function: Function { arguments: [], shim_idx: 209, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { dtor_idx: 215, function: Function { arguments: [], shim_idx: 216, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut_____Output_______, wasm_bindgen_60ce93de3f474933___convert__closures_____invoke_______true_);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { dtor_idx: 647, function: Function { arguments: [Externref], shim_idx: 648, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { dtor_idx: 692, function: Function { arguments: [Externref], shim_idx: 693, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output___core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_60ce93de3f474933___JsError___, wasm_bindgen_60ce93de3f474933___convert__closures_____invoke___wasm_bindgen_60ce93de3f474933___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_60ce93de3f474933___JsError___true_);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { dtor_idx: 83, function: Function { arguments: [Externref], shim_idx: 84, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { dtor_idx: 71, function: Function { arguments: [Externref], shim_idx: 72, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm.wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output_______, wasm_bindgen_60ce93de3f474933___convert__closures_____invoke___wasm_bindgen_60ce93de3f474933___JsValue______true_);
             return ret;
         },
@@ -1745,16 +1875,21 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000006: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(Slice(U8)) -> NamedExternref("Uint8Array")`.
+            const ret = getArrayU8FromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_cast_0000000000000007: function(arg0, arg1) {
             // Cast intrinsic for `Ref(String) -> Externref`.
             const ret = getStringFromWasm0(arg0, arg1);
             return ret;
         },
-        __wbindgen_cast_0000000000000007: function(arg0) {
+        __wbindgen_cast_0000000000000008: function(arg0) {
             // Cast intrinsic for `U64 -> Externref`.
             const ret = BigInt.asUintN(64, arg0);
             return ret;
         },
-        __wbindgen_cast_0000000000000008: function(arg0, arg1) {
+        __wbindgen_cast_0000000000000009: function(arg0, arg1) {
             var v0 = getArrayU8FromWasm0(arg0, arg1).slice();
             wasm.__wbindgen_free(arg0, arg1 * 1, 1);
             // Cast intrinsic for `Vector(U8) -> Externref`.
@@ -1889,6 +2024,17 @@ function debugString(val) {
     return className;
 }
 
+function getArrayJsValueFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    const mem = getDataViewMemory0();
+    const result = [];
+    for (let i = ptr; i < ptr + 4 * len; i += 4) {
+        result.push(wasm.__wbindgen_externrefs.get(mem.getUint32(i, true)));
+    }
+    wasm.__externref_drop_slice(ptr, len);
+    return result;
+}
+
 function getArrayU8FromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);

package/pkg/taladb_web_bg.wasm.d.ts

@@ -6,11 +6,13 @@ export const workerdb_aggregate: (a: number, b: number, c: number, d: number, e:
 export const workerdb_compact: (a: number) => [number, number];
 export const workerdb_compactTombstones: (a: number, b: number, c: number, d: number) => [number, number, number];
 export const workerdb_count: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+export const workerdb_createCompoundIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_createFtsIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_createIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_createVectorIndex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number];
 export const workerdb_deleteMany: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
 export const workerdb_deleteOne: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+export const workerdb_dropCompoundIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_dropFtsIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_dropIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
 export const workerdb_dropVectorIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
@@ -25,10 +27,12 @@ export const workerdb_insertMany: (a: number, b: number, c: number, d: number, e
 export const workerdb_listCollections: (a: number) => [number, number, number, number];
 export const workerdb_listIndexes: (a: number, b: number, c: number) => [number, number, number, number];
 export const workerdb_openInMemory: () => [number, number, number];
-export const workerdb_openWithConfigAndOpfs: (a: any, b: number, c: number) => [number, number, number];
+export const workerdb_openWithConfigAndOpfs: (a: any, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
 export const workerdb_openWithConfigAndSnapshot: (a: number, b: number, c: number, d: number) => [number, number, number];
 export const workerdb_openWithOpfs: (a: any) => [number, number, number];
 export const workerdb_openWithSnapshot: (a: number, b: number) => [number, number, number];
+export const workerdb_syncPending: (a: number) => bigint;
+export const workerdb_syncStatus: (a: number) => [number, number];
 export const workerdb_updateMany: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
 export const workerdb_updateOne: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number];
 export const workerdb_upgradeVectorIndex: (a: number, b: number, c: number, d: number, e: number) => [number, number];
@@ -36,10 +40,12 @@ export const __wbg_collectionwasm_free: (a: number, b: number) => void;
 export const __wbg_taladbwasm_free: (a: number, b: number) => void;
 export const collectionwasm_aggregate: (a: number, b: any) => [number, number, number];
 export const collectionwasm_count: (a: number, b: any) => [number, number, number];
+export const collectionwasm_createCompoundIndex: (a: number, b: number, c: number) => [number, number];
 export const collectionwasm_createIndex: (a: number, b: number, c: number) => [number, number];
 export const collectionwasm_createVectorIndex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number];
 export const collectionwasm_deleteMany: (a: number, b: any) => [number, number, number];
 export const collectionwasm_deleteOne: (a: number, b: any) => [number, number, number];
+export const collectionwasm_dropCompoundIndex: (a: number, b: number, c: number) => [number, number];
 export const collectionwasm_dropIndex: (a: number, b: number, c: number) => [number, number];
 export const collectionwasm_dropVectorIndex: (a: number, b: number, c: number) => [number, number];
 export const collectionwasm_find: (a: number, b: any) => [number, number, number];
@@ -54,16 +60,17 @@ export const taladbwasm_collection: (a: number, b: number, c: number) => [number
 export const taladbwasm_exportChanges: (a: number, b: number, c: number, d: number) => [number, number, number, number];
 export const taladbwasm_exportSnapshot: (a: number) => [number, number, number, number];
 export const taladbwasm_importChanges: (a: number, b: number, c: number) => [number, number, number];
+export const taladbwasm_listCollectionNames: (a: number) => [number, number, number, number];
 export const taladbwasm_openInMemory: () => [number, number, number];
 export const taladbwasm_openWithSnapshot: (a: number, b: number) => [number, number, number];
 export const init: () => void;
-export const idb_load_snapshot: (a: number, b: number) => any;
-export const idb_save_snapshot: (a: number, b: number, c: number, d: number) => any;
 export const opfs_open_backend: (a: number, b: number) => any;
 export const is_opfs_available: () => any;
 export const opfs_delete_snapshot: (a: number, b: number) => any;
 export const opfs_flush_snapshot: (a: number, b: number, c: number, d: number) => any;
 export const opfs_load_snapshot: (a: number, b: number) => any;
+export const idb_load_snapshot: (a: number, b: number) => any;
+export const idb_save_snapshot: (a: number, b: number, c: number, d: number) => any;
 export const wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut_____Output_______: (a: number, b: number) => void;
 export const wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output___core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_60ce93de3f474933___JsError___: (a: number, b: number) => void;
 export const wasm_bindgen_60ce93de3f474933___closure__destroy___dyn_core_7d5f0a2ba6a62c33___ops__function__FnMut__wasm_bindgen_60ce93de3f474933___JsValue____Output_______: (a: number, b: number) => void;
@@ -78,4 +85,5 @@ export const __externref_table_alloc: () => number;
 export const __wbindgen_externrefs: WebAssembly.Table;
 export const __wbindgen_free: (a: number, b: number, c: number) => void;
 export const __externref_table_dealloc: (a: number) => void;
+export const __externref_drop_slice: (a: number, b: number) => void;
 export const __wbindgen_start: () => void;

package/worker/taladb.worker.js

@@ -162,14 +162,26 @@ let broadcastChannel = null;
  */
 let idbFallback = false;
 
+/** Whether this worker is allowed to publish the authoritative IDB snapshot. */
+let snapshotWriter = false;
+
+/**
+ * True when the database is opened with a passphrase (encrypted at rest in the
+ * OPFS file). Encrypted databases NEVER write a snapshot to IndexedDB — an
+ * exported snapshot is decrypted plaintext, so persisting it would defeat
+ * encryption. Encrypted mode therefore requires exclusive OPFS and is
+ * single-tab: the multi-tab IDB-snapshot fallback is refused, not silently
+ * downgraded to plaintext.
+ * @type {boolean}
+ */
+let encrypted = false;
+
 /**
  * Timestamp (ms) of the last changeset we exported and broadcast to the
  * primary tab.  Used as `sinceMs` for the next export so we only send the
  * delta, not the entire database on every write.
  * @type {number}
  */
-let lastSecondaryPushMs = 0;
-
 // ---------------------------------------------------------------------------
 // IndexedDB helpers (used only when OPFS is unavailable)
 // ---------------------------------------------------------------------------
@@ -260,10 +272,11 @@ async function flushSnapshot() {
   clearTimeout(snapshotTimer);
   snapshotTimer = null;
   lastSnapshotMs = Date.now();
-  if (db && activeDbName) {
+  if (db && activeDbName && snapshotWriter) {
     try {
       const bytes = db.exportSnapshot();
       await idbSaveSnapshot(activeDbName, bytes);
+      broadcastChannel?.postMessage('taladb:snapshot-ready');
     } catch { /* best-effort — ignore failures */ }
   }
 }
@@ -300,11 +313,13 @@ function pushChangesetToPrimary() {
     // Collect all collection names from the current in-memory state.
     // exportChangeset accepts a JSON array of collection names.
     const collections = db.listCollections();
-    const changeset = db.exportChangeset(collections, lastSecondaryPushMs);
+    // Wall-clock timestamps are not safe incremental cursors: a write can be
+    // stamped before an export but commit after its snapshot. Replay is
+    // idempotent under LWW and cannot skip such a write.
+    const changeset = db.exportChangeset(collections, 0);
     // Only broadcast if there is actually something to send.
     const parsed = JSON.parse(changeset);
     if (parsed.length === 0) return;
-    lastSecondaryPushMs = Date.now();
     broadcastChannel.postMessage({ type: 'taladb:secondary-write', token: SESSION_TOKEN, changeset });
     log(`Broadcast ${parsed.length} change(s) to primary tab`);
   } catch (err) {
@@ -323,7 +338,7 @@ function onWriteCommitted() {
   pushChangesetToPrimary();
   // Debounced IDB flush — keeps other tabs' fallback instances in sync via
   // BroadcastChannel + snapshotDirty reload without writing to IDB on every op.
-  scheduleSnapshot();
+  if (snapshotWriter) scheduleSnapshot();
 }
 
 // ---------------------------------------------------------------------------
@@ -366,7 +381,7 @@ async function dispatch(op, args) {
   }
 
   if (op === 'init') {
-    const { dbName, configJson } = args;
+    const { dbName, configJson, passphrase } = args;
 
     if (activeDbName !== null && activeDbName !== dbName) {
       throw new Error(
@@ -378,7 +393,7 @@ async function dispatch(op, args) {
     if (!initPromises.has(dbName)) {
       activeDbName = dbName;
       activeConfigJson = configJson ?? null;
-      initPromises.set(dbName, doInit(dbName, configJson ?? null));
+      initPromises.set(dbName, doInit(dbName, configJson ?? null, passphrase ?? null));
     }
     await initPromises.get(dbName);
     return null;
@@ -443,6 +458,14 @@ async function dispatch(op, args) {
       db.dropIndex(args.collection, args.field);
       return null;
 
+    case 'createCompoundIndex':
+      db.createCompoundIndex(args.collection, args.fieldsJson);
+      return null;
+
+    case 'dropCompoundIndex':
+      db.dropCompoundIndex(args.collection, args.fieldsJson);
+      return null;
+
     case 'createFtsIndex':
       db.createFtsIndex(args.collection, args.field);
       return null;
@@ -491,6 +514,17 @@ async function dispatch(op, args) {
       db.compact();
       return null;
 
+    case 'syncStatus':
+      return db.syncStatus();
+
+    case 'flushSync': {
+      const deadline = Date.now() + (args.timeoutMs ?? 5000);
+      while (db.syncPending() > 0 && Date.now() < deadline) {
+        await new Promise(resolve => setTimeout(resolve, 20));
+      }
+      return db.syncPending() === 0;
+    }
+
     case 'compactTombstones':
       // Prune tombstones older than beforeMs from a collection.
       // Returns the count of tombstones removed.
@@ -510,6 +544,13 @@ async function dispatch(op, args) {
     }
 
     case 'close':
+      // Give accepted HTTP push events a bounded opportunity to finish.
+      {
+        const deadline = Date.now() + 5000;
+        while (db.syncPending() > 0 && Date.now() < deadline) {
+          await new Promise(resolve => setTimeout(resolve, 20));
+        }
+      }
       // Flush any pending debounced snapshot before releasing the lock so
       // no writes are lost when the tab closes or navigates away.
       await flushSnapshot();
@@ -518,6 +559,7 @@ async function dispatch(op, args) {
       broadcastChannel?.close();
       broadcastChannel = null;
       idbFallback = false;
+      snapshotWriter = false;
       db = null;
       return null;
 
@@ -526,26 +568,58 @@ async function dispatch(op, args) {
   }
 }
 
+/**
+ * Load the 16-byte key-derivation salt from an OPFS sidecar file, or create it
+ * on first open. The salt is not secret (it defends against precomputed-hash
+ * attacks) but must be stable across opens, so it lives beside the DB file.
+ * @returns {Promise<Uint8Array>} the 16-byte salt
+ */
+async function loadOrCreateSalt(root, saltFileName) {
+  const fh = await root.getFileHandle(saltFileName, { create: true });
+  const h = await fh.createSyncAccessHandle();
+  try {
+    const size = h.getSize();
+    if (size === 16) {
+      const salt = new Uint8Array(16);
+      h.read(salt, { at: 0 });
+      return salt;
+    }
+    if (size === 0) {
+      const salt = new Uint8Array(16);
+      self.crypto.getRandomValues(salt);
+      h.write(salt, { at: 0 });
+      h.flush();
+      return salt;
+    }
+    throw new Error(`invalid TalaDB salt file (${size} bytes, expected 16)`);
+  } finally {
+    h.close();
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Initialisation — load WASM, acquire lock, open OPFS file
 // ---------------------------------------------------------------------------
 
-async function doInit(dbName, configJson) {
+async function doInit(dbName, configJson, passphrase = null) {
   const wasm = await import(/* @vite-ignore */ '../pkg/taladb_web.js');
   await wasm.default();
 
   // Hoist to module scope so snapshot reloads in dispatch() can use it.
   WorkerDB = wasm.WorkerDB;
 
+  encrypted = typeof passphrase === 'string' && passphrase.length > 0;
+
   // Open the BroadcastChannel now that we know the db name.
   if (typeof BroadcastChannel !== 'undefined') {
     broadcastChannel = new BroadcastChannel(`taladb:${dbName}`);
     broadcastChannel.onmessage = async (e) => {
       if (e.data === 'taladb:changed' && idbFallback) {
-        // Fallback tab: primary tab wrote — reload snapshot before next read.
-        snapshotDirty = true;
-      } else if (e.data === 'taladb:request-snapshot' && !idbFallback && db && activeDbName) {
+        // Wait for snapshot-ready: changed is emitted before the primary's
+        // asynchronous IDB transaction has committed.
+      } else if (e.data === 'taladb:request-snapshot' && !idbFallback && !encrypted && db && activeDbName) {
         // Primary (OPFS) tab: a new tab asked for a snapshot — export and save it.
+        // Never for encrypted DBs: an exported snapshot is decrypted plaintext.
         try {
           const bytes = db.exportSnapshot();
           await idbSaveSnapshot(activeDbName, bytes);
@@ -557,8 +631,15 @@ async function doInit(dbName, configJson) {
         const resolve = pendingSnapshotResolve;
         pendingSnapshotResolve = null;
         resolve();
-      } else if (e.data?.type === 'taladb:secondary-write' && typeof e.data.token === 'string' && e.data.token.length > 0 && !idbFallback && db) {
-        // Primary (OPFS) tab: a secondary tab made a write — merge it in via LWW.
+      } else if (e.data === 'taladb:snapshot-ready' && idbFallback) {
+        snapshotDirty = true;
+      } else if (e.data?.type === 'taladb:secondary-write' && typeof e.data.token === 'string' && e.data.token.length > 0 && db && !encrypted) {
+        // `!encrypted`: encrypted databases are single-tab, so there are no
+        // legitimate secondary-tab writes — accepting them would let any
+        // same-origin script inject documents into an encrypted DB without
+        // knowing the passphrase.
+        // Merge peer writes in every mode. This also makes multiple tabs
+        // converge when OPFS is entirely unavailable and every tab uses IDB.
         // The token requirement rejects unauthenticated injection attempts that
         // omit the SESSION_TOKEN field (not a guarantee against same-origin attackers
         // who observe the token, but defence-in-depth against naive injection).
@@ -583,17 +664,27 @@ async function doInit(dbName, configJson) {
     if (configJson) return WorkerDB.openWithConfigAndSnapshot(snapshot, configJson);
     return WorkerDB.openWithSnapshot(snapshot);
   }
+  // Salt for key derivation, loaded/created in an OPFS sidecar (encrypted mode
+  // only). Passed to the WASM open so the derived key is stable across opens.
+  let salt = null;
   function openWithOpfs(syncHandle) {
-    if (configJson) return WorkerDB.openWithConfigAndOpfs(syncHandle, configJson);
-    return WorkerDB.openWithOpfs(syncHandle);
+    // openWithConfigAndOpfs(handle, configJson, passphrase?, salt?)
+    return WorkerDB.openWithConfigAndOpfs(syncHandle, configJson ?? null, passphrase, salt);
   }
 
   const opfsAvailable = await checkOpfs();
   if (!opfsAvailable) {
+    if (encrypted) {
+      throw new Error(
+        'TalaDB encryption requires OPFS, which is unavailable in this browser context. ' +
+        'Refusing to open — the in-memory/IndexedDB fallback cannot encrypt at rest.'
+      );
+    }
     warn('OPFS unavailable — falling back to IndexedDB-backed in-memory');
     const snapshot = await idbLoadSnapshot(dbName);
     db = openWithSnapshot(snapshot);
     idbFallback = true;
+    snapshotWriter = true;
     if (snapshot) {
       log(`Restored from IndexedDB snapshot (${snapshot.byteLength} bytes)`);
     } else {
@@ -606,11 +697,26 @@ async function doInit(dbName, configJson) {
   const fileName = `taladb_${dbName.replaceAll(/[/\\:]/g, '_')}.redb`;
   const fileHandle = await root.getFileHandle(fileName, { create: true });
 
+  // Encrypted mode: the 16-byte key-derivation salt lives in an OPFS sidecar
+  // file next to the DB. It is loaded/created only AFTER this tab has won the
+  // exclusive lock (or determined no locking applies), so two tabs racing to
+  // open never collide on the salt file's exclusive access handle.
+
   if (!('locks' in navigator)) {
     // Web Locks not available — open directly (single-tab safe only).
     warn('Web Locks unavailable — multi-tab write safety disabled');
+    if (encrypted) salt = await loadOrCreateSalt(root, `${fileName}.salt`);
     const syncHandle = await fileHandle.createSyncAccessHandle();
-    db = openWithOpfs(syncHandle);
+    try {
+      db = openWithOpfs(syncHandle);
+    } catch (e) {
+      // A failed open (e.g. wrong passphrase) must release the exclusive OPFS
+      // access handle, or every retry fails with "Access Handles cannot be
+      // created" until the page reloads.
+      try { syncHandle.close(); } catch { /* best-effort */ }
+      throw e;
+    }
+    snapshotWriter = !encrypted; // encrypted DBs never write a plaintext IDB snapshot
     log(`Opened "${fileName}" via OPFS`);
     return;
   }
@@ -625,7 +731,18 @@ async function doInit(dbName, configJson) {
   await new Promise((resolve, reject) => {
     navigator.locks.request(lockName, { ifAvailable: true }, async (lock) => {
       if (lock === null) {
-        // Lock is held by another tab — use IDB snapshot so this tab loads immediately.
+        // Lock is held by another tab.
+        if (encrypted) {
+          // The IDB-snapshot fallback stores decrypted plaintext, so it's
+          // refused for encrypted databases — they're single-tab. Reject
+          // rather than downgrade.
+          reject(new Error(
+            'This encrypted TalaDB database is already open in another tab. ' +
+            'Encrypted browser databases are single-tab (the multi-tab fallback would store plaintext).'
+          ));
+          return;
+        }
+        // Unencrypted: use IDB snapshot so this tab loads immediately.
         warn('OPFS lock held by another tab — falling back to IndexedDB snapshot (live-sync via BroadcastChannel)');
         let snapshot = await idbLoadSnapshot(dbName);
 
@@ -642,6 +759,7 @@ async function doInit(dbName, configJson) {
 
         db = openWithSnapshot(snapshot ?? null);
         idbFallback = true;
+        snapshotWriter = false;
         if (snapshot) {
           log(`Restored from IDB snapshot (${snapshot.byteLength} bytes)`);
         } else {
@@ -652,9 +770,12 @@ async function doInit(dbName, configJson) {
       }
 
       // Acquired the lock — use OPFS.
+      let syncHandle = null;
       try {
-        const syncHandle = await fileHandle.createSyncAccessHandle();
+        if (encrypted) salt = await loadOrCreateSalt(root, `${fileName}.salt`);
+        syncHandle = await fileHandle.createSyncAccessHandle();
         db = openWithOpfs(syncHandle);
+        snapshotWriter = !encrypted; // encrypted DBs never write a plaintext IDB snapshot
         log(`Opened "${fileName}" via OPFS (Web Locks)`);
         resolve(); // signal doInit complete — caller can proceed
 
@@ -665,6 +786,13 @@ async function doInit(dbName, configJson) {
         syncHandle.close();
         db = null;
       } catch (e) {
+        // A failed open (e.g. wrong passphrase) must release the exclusive
+        // OPFS access handle, or every retry fails with "Access Handles
+        // cannot be created" until the page reloads. Returning from this
+        // callback also releases the Web Lock.
+        if (syncHandle) {
+          try { syncHandle.close(); } catch { /* best-effort */ }
+        }
         reject(e);
       }
     });