orez 0.2.19 → 0.2.24

package/dist/worker/browser-embed.d.ts

@@ -1,4 +1,6 @@
+import type { HttpRequest, HttpResponse } from './browser-admin.js';
 import type { PGlite } from '@electric-sql/pglite';
+export type { HttpRequest, HttpResponse } from './browser-admin.js';
 export interface ZeroCacheEmbedBrowserOptions {
     /** PGlite instance */
     pglite: PGlite;
@@ -16,17 +18,16 @@ export interface ZeroCacheEmbedBrowserOptions {
     env?: Record<string, string>;
     /** timeout in ms waiting for zero-cache ready (default: 30000) */
     readyTimeout?: number;
-}
-export interface HttpRequest {
-    method: string;
-    url: string;
-    headers?: Record<string, string>;
-    body?: string | null;
-}
-export interface HttpResponse {
-    status: number;
-    headers: Record<string, string>;
-    body: string;
+    /**
+     * intercept browser-mode orez admin routes before they reach zero-cache.
+     *
+     * browser embeds do not run the node admin dashboard or log store. leaving
+     * `/__orez/*` to fall through to zero-cache makes disabled admin look like
+     * an app/zero route miss. keep the contract explicit by returning empty
+     * admin responses for the small read-only surface and 404 for the rest.
+     * default: true.
+     */
+    disableAdminApi?: boolean;
 }
 /** WebSocket-like object — matches CF WebSocket, browser WebSocket, or MessagePort adapter */
 interface WsLike {
@@ -54,5 +55,4 @@ export interface ZeroCacheEmbedBrowser {
     stop(): Promise<void>;
 }
 export declare function startZeroCacheEmbedBrowser(opts: ZeroCacheEmbedBrowserOptions): Promise<ZeroCacheEmbedBrowser>;
-export {};
 //# sourceMappingURL=browser-embed.d.ts.map

package/dist/worker/browser-embed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-embed.d.ts","sourceRoot":"","sources":["../../src/worker/browser-embed.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAOlD,MAAM,WAAW,4BAA4B;IAC3C,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAA;IAEd;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE5B,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;CACb;AAED,8FAA8F;AAC9F,UAAU,MAAM;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,IAAI,CAAA;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAA;IACnE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAA;CACvE;AAED,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IAEvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAEvD,sBAAsB;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,qBAAqB,CAAC,CA6NhC"}
+{"version":3,"file":"browser-embed.d.ts","sourceRoot":"","sources":["../../src/worker/browser-embed.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAElD,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAOnE,MAAM,WAAW,4BAA4B;IAC3C,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAA;IAEd;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE5B,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,8FAA8F;AAC9F,UAAU,MAAM;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,IAAI,CAAA;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAA;IACnE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAA;CACvE;AAED,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IAEvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAE/C;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAEvD,sBAAsB;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAmOhC"}

package/dist/worker/browser-embed.js

@@ -32,11 +32,13 @@ import EventEmitter from 'node:events';
 // static import so the bundler can follow the dependency tree.
 // @ts-expect-error — internal zero-cache module, no type declarations
 import { runWorker as _runWorker } from '@rocicorp/zero/out/zero-cache/src/server/runner/run-worker.js';
+import { handleDisabledBrowserAdminRequest } from './browser-admin.js';
 const runWorkerFn = _runWorker;
 export async function startZeroCacheEmbedBrowser(opts) {
     const appId = opts.appId || 'zero';
     const publications = opts.publications?.join(',') || `orez_${appId}_public`;
     const readyTimeout = opts.readyTimeout ?? 30000;
+    const disableAdminApi = opts.disableAdminApi ?? true;
     // set up sqlite storage from sql.js or in-memory
     if (opts.sqlite) {
         // consumer provided a sql.js Database — create adapter
@@ -196,6 +198,11 @@ export async function startZeroCacheEmbedBrowser(opts) {
             }
         },
         async handleHttp(request) {
+            if (disableAdminApi) {
+                const adminResponse = handleDisabledBrowserAdminRequest(request);
+                if (adminResponse)
+                    return adminResponse;
+            }
             if (!isReady || !fastifyInstance?.inject) {
                 return { status: 503, headers: {}, body: 'not ready' };
             }

package/dist/worker/browser-embed.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-embed.js","sourceRoot":"","sources":["../../src/worker/browser-embed.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,YAAY,MAAM,aAAa,CAAA;AAEtC,+DAA+D;AAC/D,sEAAsE;AACtE,OAAO,EAAE,SAAS,IAAI,UAAU,EAAE,MAAM,+DAA+D,CAAA;AAIvG,MAAM,WAAW,GAAG,UAGF,CAAA;AAqElB,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAkC;IAElC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAA;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAA;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK,CAAA;IAE/C,iDAAiD;IACjD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,uDAAuD;QACvD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CACvE;QAAC,UAAkB,CAAC,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAa,CAAC,CAAA;IAChF,CAAC;SAAM,IAAI,CAAE,UAAkB,CAAC,gBAAgB,EAAE,CAAC;QACjD,0CAA0C;QAC1C,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAC1E;QAAC,UAAkB,CAAC,gBAAgB,GAAG,qBAAqB,EAAE,CAAA;IACjE,CAAC;IAED,kCAAkC;IAClC,CAAC;IAAC,UAAkB,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAG/C;IAAC,UAAkB,CAAC,OAAO,KAAK,EAAE,CAClC;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CACtC;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CACrC;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CACvC;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,GAAE,CAAC,CAG7C;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CACpD;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAA;IAEzD,+DAA+D;IAC/D,MAAM,MAAM,GAAG,IAAI,YAAY,EAI9B,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,YAAY,EAAE,CAAA;IAExC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE;QACjC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACtC,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,EAAE;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAA;IAEd,oBAAoB;IACpB,MAAM,QAAQ,GAAI,UAAkB,CAAC,OAAO,CAAC,IAAI,CAChD;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,CAAA;IAChC,CAAC,CAAA;IAED,2BAA2B;IAC3B,MAAM,GAAG,GAA2B;QAClC,GAAK,UAAkB,CAAC,OAAO,CAAC,GAA8B;QAC9D,cAAc,EAAE,GAAG;QACnB,QAAQ,EAAE,aAAa;QACvB,gBAAgB,EAAE,6BAA6B;QAC/C,WAAW,EAAE,6BAA6B;QAC1C,cAAc,EAAE,6BAA6B;QAC7C,iBAAiB,EAAE,kBAAkB;QACrC,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,KAAK;QAClB,qBAAqB,EAAE,YAAY;QACnC,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,MAAM;QAClD,qBAAqB,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,IAAI,GAAG;QAC7D,yBAAyB,EAAE,OAAO;QAClC,GAAG,IAAI,CAAC,GAAG;KACZ,CAAA;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE;QACtC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAY,EAAE,OAA+B,EAAE,EAAE;oBACvD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE;wBACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;wBAClB,CAAC;oBACH,CAAC,CAAC,CAAA;oBACF,OAAO,QAAQ,CAAA;gBACjB,CAAC,CAAA;YACH,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAY,EAAE,OAA+B,EAAE,EAAE;oBACvD,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,EAAE;wBACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BACjE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;4BAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;wBAClB,CAAC;oBACH,CAAC,CAAA;oBACD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;oBAC9B,OAAO,QAAQ,CAAA;gBACjB,CAAC,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC5C,CAAC;KACF,CAAC,CAAA;IAEF,QAAQ;IACR,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,gBAAgB,GAAyB,IAAI,CAAA;IACjD,IAAI,eAAe,GAAQ,IAAI,CAAA;IAE/B,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CACJ,IAAI,KAAK,CACP,+DAA+D,YAAY,IAAI,CAChF,CACF,CAAA;QACH,CAAC,EAAE,YAAY,CAAC,CAAA;QAEhB,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC7C,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,mBAAmB;IACnB,gBAAgB,GAAG,WAAW,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,YAAY,CAAA;IAElB,4EAA4E;IAC5E,8DAA8D;IAC9D,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;IAC7D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3C,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;YAC7D,IAAI,eAAe;gBAAE,MAAK;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,KAAK;YACP,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,GAAG,GAAG,GAAG,EAAE,OAAgC;YAC3E,6EAA6E;YAC7E,kEAAkE;YAClE,uEAAuE;YACvE,IAAI,SAAS,GAAU,EAAE,CAAA;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,SAAS,GAAI,UAAkB,CAAC,wBAAwB,IAAI,EAAE,CAAA;gBAC9D,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;gBAC7D,qEAAqE;gBACrE,kFAAkF;gBAClF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC9E,MAAK;gBACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC7C,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAM;YAEpB,MAAM,UAAU,GAAG;gBACjB,OAAO,EAAE;oBACP,GAAG;oBACH,OAAO,EAAE,OAAO,IAAI,EAAE;oBACtB,MAAM,EAAE,KAAK;iBACd;gBACD,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;aACxB,CAAA;YAED,gEAAgE;YAChE,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACvC,OAAO,GAAG,IAAI,CAAA;oBACd,MAAK;gBACP,CAAC;YACH,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,MAAM,EAAE,CAAC;gBACxC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAoB;YACnC,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YACxD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;gBAC9B,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,UAAU;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAA;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,OAAO,GAAG,KAAK,CAAA;YACf,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7B,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,CAAC;gBAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAA;YAC9C,CAAC;YACD,OAAQ,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QACvD,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"browser-embed.js","sourceRoot":"","sources":["../../src/worker/browser-embed.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,YAAY,MAAM,aAAa,CAAA;AAEtC,+DAA+D;AAC/D,sEAAsE;AACtE,OAAO,EAAE,SAAS,IAAI,UAAU,EAAE,MAAM,+DAA+D,CAAA;AAEvG,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAA;AAOtE,MAAM,WAAW,GAAG,UAGF,CAAA;AAmElB,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAkC;IAElC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAA;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAA;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK,CAAA;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAA;IAEpD,iDAAiD;IACjD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,uDAAuD;QACvD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CACvE;QAAC,UAAkB,CAAC,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAa,CAAC,CAAA;IAChF,CAAC;SAAM,IAAI,CAAE,UAAkB,CAAC,gBAAgB,EAAE,CAAC;QACjD,0CAA0C;QAC1C,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAC1E;QAAC,UAAkB,CAAC,gBAAgB,GAAG,qBAAqB,EAAE,CAAA;IACjE,CAAC;IAED,kCAAkC;IAClC,CAAC;IAAC,UAAkB,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAG/C;IAAC,UAAkB,CAAC,OAAO,KAAK,EAAE,CAClC;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CACtC;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CACrC;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CACvC;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,GAAE,CAAC,CAG7C;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CACpD;IAAC,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAA;IAEzD,+DAA+D;IAC/D,MAAM,MAAM,GAAG,IAAI,YAAY,EAI9B,CAAA;IAED,MAAM,aAAa,GAAG,IAAI,YAAY,EAAE,CAAA;IAExC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE;QACjC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACtC,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,EAAE;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAA;IAEd,oBAAoB;IACpB,MAAM,QAAQ,GAAI,UAAkB,CAAC,OAAO,CAAC,IAAI,CAChD;IAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,CAAA;IAChC,CAAC,CAAA;IAED,2BAA2B;IAC3B,MAAM,GAAG,GAA2B;QAClC,GAAK,UAAkB,CAAC,OAAO,CAAC,GAA8B;QAC9D,cAAc,EAAE,GAAG;QACnB,QAAQ,EAAE,aAAa;QACvB,gBAAgB,EAAE,6BAA6B;QAC/C,WAAW,EAAE,6BAA6B;QAC1C,cAAc,EAAE,6BAA6B;QAC7C,iBAAiB,EAAE,kBAAkB;QACrC,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,KAAK;QAClB,qBAAqB,EAAE,YAAY;QACnC,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,MAAM;QAClD,qBAAqB,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,IAAI,GAAG;QAC7D,yBAAyB,EAAE,OAAO;QAClC,GAAG,IAAI,CAAC,GAAG;KACZ,CAAA;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE;QACtC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAY,EAAE,OAA+B,EAAE,EAAE;oBACvD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE;wBACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;wBAClB,CAAC;oBACH,CAAC,CAAC,CAAA;oBACF,OAAO,QAAQ,CAAA;gBACjB,CAAC,CAAA;YACH,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAY,EAAE,OAA+B,EAAE,EAAE;oBACvD,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,EAAE;wBACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BACjE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;4BAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;wBAClB,CAAC;oBACH,CAAC,CAAA;oBACD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;oBAC9B,OAAO,QAAQ,CAAA;gBACjB,CAAC,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC5C,CAAC;KACF,CAAC,CAAA;IAEF,QAAQ;IACR,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,gBAAgB,GAAyB,IAAI,CAAA;IACjD,IAAI,eAAe,GAAQ,IAAI,CAAA;IAE/B,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CACJ,IAAI,KAAK,CACP,+DAA+D,YAAY,IAAI,CAChF,CACF,CAAA;QACH,CAAC,EAAE,YAAY,CAAC,CAAA;QAEhB,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC7C,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,mBAAmB;IACnB,gBAAgB,GAAG,WAAW,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,YAAY,CAAA;IAElB,4EAA4E;IAC5E,8DAA8D;IAC9D,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;IAC7D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3C,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;YAC7D,IAAI,eAAe;gBAAE,MAAK;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,KAAK;YACP,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,GAAG,GAAG,GAAG,EAAE,OAAgC;YAC3E,6EAA6E;YAC7E,kEAAkE;YAClE,uEAAuE;YACvE,IAAI,SAAS,GAAU,EAAE,CAAA;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,SAAS,GAAI,UAAkB,CAAC,wBAAwB,IAAI,EAAE,CAAA;gBAC9D,eAAe,GAAI,UAAkB,CAAC,uBAAuB,CAAA;gBAC7D,qEAAqE;gBACrE,kFAAkF;gBAClF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC9E,MAAK;gBACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC7C,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAM;YAEpB,MAAM,UAAU,GAAG;gBACjB,OAAO,EAAE;oBACP,GAAG;oBACH,OAAO,EAAE,OAAO,IAAI,EAAE;oBACtB,MAAM,EAAE,KAAK;iBACd;gBACD,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;aACxB,CAAA;YAED,gEAAgE;YAChE,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACvC,OAAO,GAAG,IAAI,CAAA;oBACd,MAAK;gBACP,CAAC;YACH,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,MAAM,EAAE,CAAC;gBACxC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAoB;YACnC,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,aAAa,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAA;gBAChE,IAAI,aAAa;oBAAE,OAAO,aAAa,CAAA;YACzC,CAAC;YAED,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YACxD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;gBAC9B,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,UAAU;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAA;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,OAAO,GAAG,KAAK,CAAA;YACf,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC7B,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,CAAC;gBAAC,UAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAA;YAC9C,CAAC;YACD,OAAQ,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QACvD,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orez",
-  "version": "0.2.19",
+  "version": "0.2.24",
   "description": "PGlite-powered zero-sync development backend. No Docker required.",
   "type": "module",
   "license": "MIT",
@@ -63,12 +63,23 @@
     "test:chat": "bun scripts/test-chat-integration.ts",
     "test:chat:smoke": "bun scripts/test-chat-integration.ts --smoke",
     "test:chat:e2e": "bun scripts/test-chat-e2e.ts",
-    "release": "bun scripts/release.ts"
+    "release": "bun scripts/release.ts",
+    "perf:load": "bun run perf/load/harness.ts",
+    "perf:memory": "bun run perf/memory/profile.ts",
+    "perf:bench": "bun run perf/scripts/bench-all.ts",
+    "perf:overhead": "bun run perf/scripts/bench-proxy-overhead.ts",
+    "perf:soak": "bun run perf/stability/soak.ts",
+    "perf:crash": "bun run perf/stability/crash-recovery.ts",
+    "perf:correctness": "bun test perf/stability/correctness.test.ts",
+    "perf:diagnose": "bun run perf/scripts/diagnose.ts",
+    "perf:quick": "bun run perf/scripts/quick-check.ts",
+    "perf:all": "bun run perf:bench && bun run perf:overhead && bun run perf:correctness && bun run perf:crash",
+    "perf:ci": "bun run perf:bench -- --output=perf/reports/bench.json && bun run perf:overhead && bun run perf:correctness"
   },
   "dependencies": {
     "@electric-sql/pglite": "0.4.1",
     "@electric-sql/pglite-tools": "^0.3.1",
-    "bedrock-sqlite": "0.2.19",
+    "bedrock-sqlite": "0.2.24",
     "citty": "^0.2.0",
     "pg-gateway": "0.3.0-beta.4",
     "pgsql-parser": "^17.9.11",

package/src/browser.ts

@@ -35,6 +35,12 @@ export interface OrezBrowserConfig {
 
   /** log level */
   logLevel?: string
+
+  /**
+   * intercept browser-mode orez admin routes before they reach zero-cache.
+   * default: true.
+   */
+  disableAdminApi?: boolean
 }
 
 export interface OrezBrowserInstance {
@@ -157,6 +163,7 @@ export async function startOrezBrowser(
     pglite: pgPostgres as unknown as PGlite,
     appId,
     publications: config.publications,
+    disableAdminApi: config.disableAdminApi ?? true,
     env: {
       ZERO_LOG_LEVEL: config.logLevel || 'info',
     },

package/src/pg-proxy.ts

@@ -45,6 +45,17 @@ const SCHEMA_CACHE_TTL_MS = 30_000
 // performance tracking
 const proxyStats = { totalWaitMs: 0, totalExecMs: 0, count: 0, batches: 0 }
 
+// query classification cache — avoids re-running regex on every repeated query.
+// keys are trimmed+lowercased original query texts (before rewrites).
+// entries are invalidated on DDL (schema changes may affect classification).
+interface QueryClass {
+  isWrite: boolean
+  isDDL: boolean
+  isCacheable: boolean
+}
+const queryClassCache = new Map<string, QueryClass>()
+const QUERY_CLASS_CACHE_MAX = 500
+
 // query classification helpers — operate on pre-normalized (trimmed+lowercased) query strings
 const SCHEMA_QUERY_MARKERS = [
   'information_schema.',
@@ -86,6 +97,33 @@ function isDDLNormalized(q: string): boolean {
   return false
 }
 
+/**
+ * classify a query and cache the result.
+ * repeated queries (common in app workloads) hit the cache and skip all regex.
+ * invalidated on DDL (schema changes may reclassify queries).
+ */
+function classifyQuery(q: string): QueryClass {
+  const cached = queryClassCache.get(q)
+  if (cached) return cached
+
+  const result: QueryClass = {
+    isWrite: isWriteNormalized(q),
+    isDDL: isDDLNormalized(q),
+    isCacheable: isCacheableNormalized(q),
+  }
+
+  // LRU-ish eviction: clear oldest half when full
+  if (queryClassCache.size >= QUERY_CLASS_CACHE_MAX) {
+    const keys = [...queryClassCache.keys()]
+    for (let i = 0; i < Math.floor(keys.length / 2); i++) {
+      queryClassCache.delete(keys[i])
+    }
+  }
+
+  queryClassCache.set(q, result)
+  return result
+}
+
 function extractQueryText(data: Uint8Array): string | null {
   if (data[0] === 0x51) {
     const view = new DataView(data.buffer, data.byteOffset, data.byteLength)
@@ -100,6 +138,7 @@ function extractQueryText(data: Uint8Array): string | null {
 
 function invalidateSchemaCache() {
   schemaQueryCache.clear()
+  queryClassCache.clear()
 }
 
 // abort previous replication handler when a new one starts
@@ -300,22 +339,6 @@ function interceptQuery(data: Uint8Array): Uint8Array {
   return data
 }
 
-/**
- * check if a query should be intercepted as a no-op.
- */
-function isNoopQuery(data: Uint8Array): boolean {
-  let query: string | null = null
-  if (data[0] === 0x51) {
-    const view = new DataView(data.buffer, data.byteOffset, data.byteLength)
-    const len = view.getInt32(1)
-    query = textDecoder.decode(data.subarray(5, 1 + len - 1)).replace(/\0$/, '')
-  } else if (data[0] === 0x50) {
-    query = extractParseQuery(data)
-  }
-  if (!query) return false
-  return NOOP_QUERY_PATTERNS.some((p) => p.test(query!))
-}
-
 /**
  * build a synthetic "SET" command complete response.
  */
@@ -495,6 +518,7 @@ function extractNoticeCode(
 /**
  * single-pass response message filter. strips ReadyForQuery messages (when
  * stripRfq=true) and benign transaction state warnings in one scan.
+ * returns the original buffer unchanged when nothing was stripped.
  */
 function stripResponseMessages(data: Uint8Array, stripRfq: boolean): Uint8Array {
   if (data.length === 0) return data
@@ -837,43 +861,50 @@ export async function startPgProxy(
 
           // Simple Query (0x51) or standalone Sync — per-message mutex
 
-          // fast-path for ping queries (SELECT 1, SELECT 2, etc.)
-          // zero-cache fires these in parallel during warmup — bypass mutex entirely
+          // extract query text ONCE for all checks (ping, noop, classification, caching)
+          let queryText: string | null = null
+          let queryClass: QueryClass | null = null
+          // cache/dedup key — the rewritten query when a rewrite applies, else
+          // the original. read and write paths MUST use the same key.
+          let schemaCacheKey: string | null = null
           if (msgType === 0x51) {
-            const queryText = extractQueryText(data)
+            queryText = extractQueryText(data)
             if (queryText) {
+              // fast-path: ping queries — bypass mutex entirely
               const pingMatch = queryText.match(PING_QUERY_RE)
               if (pingMatch) {
                 return buildSelectIntResponse(pingMatch[1])
               }
-            }
-          }
 
-          // check for no-op queries (only SimpleQuery has queries worth intercepting)
-          if (isNoopQuery(data)) {
-            if (msgType === 0x51) {
-              return buildSetCompleteResponse()
-            }
-          }
-
-          // intercept and rewrite queries
-          data = interceptQuery(data)
-
-          // normalize query once for all classification checks
-          const isSimpleQuery = msgType === 0x51
-          const queryText = isSimpleQuery ? extractQueryText(data) : null
-          const queryNorm = queryText ? queryText.trimStart().toLowerCase() : null
-          const cacheable = queryNorm && isCacheableNormalized(queryNorm)
+              // fast-path: no-op queries — synthetic response, no mutex
+              if (NOOP_QUERY_PATTERNS.some((p) => p.test(queryText!))) {
+                return buildSetCompleteResponse()
+              }
 
-          // cache Simple Query schema queries
-          if (cacheable) {
-            const cached = schemaQueryCache.get(queryText!)
-            if (cached && Date.now() < cached.expiresAt) {
-              return stripResponseMessages(cached.result, false)
-            }
-            const inflight = schemaQueryInFlight.get(queryText!)
-            if (inflight) {
-              return stripResponseMessages(await inflight, false)
+              // normalize once, classify once (cached for repeated queries)
+              queryClass = classifyQuery(queryText.trimStart().toLowerCase())
+
+              // schema query cache: identical information_schema queries deduplicated
+              if (queryClass.isCacheable) {
+                // apply rewrites before caching (version() etc. change the query)
+                const rewritten = applyRewrites(queryText)
+                schemaCacheKey = rewritten !== queryText ? rewritten : queryText
+                const cached = schemaQueryCache.get(schemaCacheKey)
+                if (cached && Date.now() < cached.expiresAt) {
+                  return stripResponseMessages(cached.result, false)
+                }
+                const inflight = schemaQueryInFlight.get(schemaCacheKey)
+                if (inflight) {
+                  return stripResponseMessages(await inflight, false)
+                }
+                // rewrite data for execution
+                if (rewritten !== queryText) {
+                  data = rebuildSimpleQuery(rewritten)
+                }
+              } else {
+                // apply query rewrites for non-cacheable queries
+                data = interceptQuery(data)
+              }
             }
           }
 
@@ -914,21 +945,22 @@ export async function startPgProxy(
           }
 
           let result: Uint8Array
-          if (cacheable) {
+          const cacheable = queryClass?.isCacheable ?? false
+          if (cacheable && schemaCacheKey) {
             const promise = execute()
-            schemaQueryInFlight.set(queryText!, promise)
+            schemaQueryInFlight.set(schemaCacheKey, promise)
             try {
               result = await promise
-              schemaQueryCache.set(queryText!, {
+              schemaQueryCache.set(schemaCacheKey, {
                 result,
                 expiresAt: Date.now() + SCHEMA_CACHE_TTL_MS,
               })
             } finally {
-              schemaQueryInFlight.delete(queryText!)
+              schemaQueryInFlight.delete(schemaCacheKey)
             }
           } else {
             result = await execute()
-            if (queryNorm && isDDLNormalized(queryNorm)) {
+            if (queryClass?.isDDL) {
               invalidateSchemaCache()
             }
           }
@@ -937,7 +969,7 @@ export async function startPgProxy(
           result = stripResponseMessages(result, stripRfq)
 
           // signal replication handler on postgres writes for instant sync
-          if (dbName === 'postgres' && queryNorm && isWriteNormalized(queryNorm)) {
+          if (dbName === 'postgres' && queryClass?.isWrite) {
             signalReplicationChange()
           }
 

package/src/pglite-manager.ts

@@ -115,7 +115,6 @@ async function ensurePublication(db: {
   }
 }
 
-// pglite startParams replaces defaults, so always include required flags
 const PGLITE_BASE_FLAGS = [
   '--single',
   '-F',
@@ -127,6 +126,27 @@ const PGLITE_BASE_FLAGS = [
   'exit_on_error=false',
   '-c',
   'log_checkpoints=false',
+  '-c',
+  'jit=off',
+  '-c',
+  'max_connections=5',
+  '-c',
+  'temp_buffers=1MB',
+]
+
+// main instance: tuned for development (matching soot browser config)
+const MAIN_START_PARAMS = [
+  ...PGLITE_BASE_FLAGS,
+  '-c',
+  'shared_buffers=1MB',
+  '-c',
+  'wal_buffers=64kB',
+  '-c',
+  'work_mem=1MB',
+  '-c',
+  'maintenance_work_mem=4MB',
+  '-c',
+  'effective_cache_size=16MB',
 ]
 
 // cvr/cdb are just zero-cache bookkeeping — minimal fixed memory
@@ -135,13 +155,15 @@ const ZERO_START_PARAMS = [
   '-c',
   'shared_buffers=128kB',
   '-c',
-  'wal_buffers=64kB',
+  'wal_buffers=32kB',
   '-c',
   'work_mem=64kB',
   '-c',
-  'maintenance_work_mem=1MB',
+  'maintenance_work_mem=512kB',
+  '-c',
+  'temp_buffers=400kB',
   '-c',
-  'temp_buffers=800kB',
+  'max_connections=1',
 ]
 
 // create a single pglite instance with given dataDir suffix
@@ -176,18 +198,12 @@ async function createInstance(
       dataDir: dataPath,
       debug: config.logLevel === 'debug' ? 1 : 0,
       relaxedDurability: true,
-      initialMemory: isMain ? 32 * 1024 * 1024 : 16 * 1024 * 1024,
+      initialMemory: isMain ? 16 * 1024 * 1024 : 8 * 1024 * 1024,
       ...(isMain ? {} : { startParams: ZERO_START_PARAMS }),
       // main instance: user overrides via pgliteOptions, zero instances: fixed
       ...(isMain
         ? {
-            startParams: [
-              ...PGLITE_BASE_FLAGS,
-              '-c',
-              'shared_buffers=4MB',
-              '-c',
-              'wal_buffers=1MB',
-            ],
+            startParams: MAIN_START_PARAMS,
             ...userOpts,
             extensions: userOpts.extensions || {
               vector,
@@ -211,14 +227,8 @@ async function createInstance(
 
     if (isMain) {
       await db.exec(`
-        SET work_mem = '4MB';
-        SET maintenance_work_mem = '16MB';
-        SET effective_cache_size = '64MB';
         SET random_page_cost = 1.1;
-        SET jit = off;
       `)
-    } else {
-      await db.exec(`SET jit = off;`)
     }
 
     log.debug.pglite(`${name} ready`)

package/src/worker/browser-admin.ts

@@ -0,0 +1,52 @@
+export interface HttpRequest {
+  method: string
+  url: string
+  headers?: Record<string, string>
+  body?: string | null
+}
+
+export interface HttpResponse {
+  status: number
+  headers: Record<string, string>
+  body: string
+}
+
+const ADMIN_HEADERS = {
+  'access-control-allow-origin': '*',
+  'access-control-allow-methods': 'GET, OPTIONS',
+  'access-control-allow-headers': '*',
+  'content-type': 'application/json',
+}
+
+function jsonResponse(status: number, body: unknown): HttpResponse {
+  return {
+    status,
+    headers: ADMIN_HEADERS,
+    body: JSON.stringify(body),
+  }
+}
+
+export function handleDisabledBrowserAdminRequest(
+  request: HttpRequest
+): HttpResponse | null {
+  const url = new URL(request.url, 'http://localhost')
+  if (!url.pathname.startsWith('/__orez/')) return null
+
+  const method = request.method.toUpperCase()
+  if (method === 'OPTIONS') {
+    return { status: 200, headers: ADMIN_HEADERS, body: '' }
+  }
+  if (method !== 'GET') {
+    return jsonResponse(405, { error: 'method not allowed', admin: 'disabled' })
+  }
+
+  if (url.pathname === '/__orez/api/logs') {
+    return jsonResponse(200, { entries: [], cursor: 0, admin: 'disabled' })
+  }
+
+  if (url.pathname === '/__orez/api/status') {
+    return jsonResponse(200, { ready: true, admin: 'disabled' })
+  }
+
+  return jsonResponse(404, { error: 'not found', admin: 'disabled' })
+}

package/src/worker/browser-embed-admin.test.ts

@@ -0,0 +1,75 @@
+import { describe, expect, it } from 'vitest'
+
+import { handleDisabledBrowserAdminRequest } from './browser-admin.js'
+
+describe('disabled browser admin api', () => {
+  it('ignores non-admin routes', () => {
+    expect(
+      handleDisabledBrowserAdminRequest({
+        method: 'GET',
+        url: '/sync/v1/connect',
+      })
+    ).toBeNull()
+  })
+
+  it('serves empty logs for disabled browser admin', () => {
+    const response = handleDisabledBrowserAdminRequest({
+      method: 'GET',
+      url: '/__orez/api/logs?limit=100',
+    })
+
+    expect(response?.status).toBe(200)
+    expect(response?.headers['content-type']).toBe('application/json')
+    expect(JSON.parse(response?.body ?? '')).toEqual({
+      entries: [],
+      cursor: 0,
+      admin: 'disabled',
+    })
+  })
+
+  it('serves status for disabled browser admin', () => {
+    const response = handleDisabledBrowserAdminRequest({
+      method: 'GET',
+      url: 'http://localhost:7849/__orez/api/status',
+    })
+
+    expect(response?.status).toBe(200)
+    expect(JSON.parse(response?.body ?? '')).toEqual({
+      ready: true,
+      admin: 'disabled',
+    })
+  })
+
+  it('handles preflight and disallows writes', () => {
+    expect(
+      handleDisabledBrowserAdminRequest({
+        method: 'OPTIONS',
+        url: '/__orez/api/logs',
+      })?.status
+    ).toBe(200)
+
+    const response = handleDisabledBrowserAdminRequest({
+      method: 'POST',
+      url: '/__orez/api/actions/restart-zero',
+    })
+
+    expect(response?.status).toBe(405)
+    expect(JSON.parse(response?.body ?? '')).toEqual({
+      error: 'method not allowed',
+      admin: 'disabled',
+    })
+  })
+
+  it('keeps unknown admin routes explicit', () => {
+    const response = handleDisabledBrowserAdminRequest({
+      method: 'GET',
+      url: '/__orez/api/actions/restart-zero',
+    })
+
+    expect(response?.status).toBe(404)
+    expect(JSON.parse(response?.body ?? '')).toEqual({
+      error: 'not found',
+      admin: 'disabled',
+    })
+  })
+})

package/src/worker/browser-embed.ts

@@ -36,8 +36,13 @@ import EventEmitter from 'node:events'
 // @ts-expect-error — internal zero-cache module, no type declarations
 import { runWorker as _runWorker } from '@rocicorp/zero/out/zero-cache/src/server/runner/run-worker.js'
 
+import { handleDisabledBrowserAdminRequest } from './browser-admin.js'
+
+import type { HttpRequest, HttpResponse } from './browser-admin.js'
 import type { PGlite } from '@electric-sql/pglite'
 
+export type { HttpRequest, HttpResponse } from './browser-admin.js'
+
 const runWorkerFn = _runWorker as (
   parent: unknown,
   env: Record<string, string>
@@ -65,19 +70,17 @@ export interface ZeroCacheEmbedBrowserOptions {
 
   /** timeout in ms waiting for zero-cache ready (default: 30000) */
   readyTimeout?: number
-}
-
-export interface HttpRequest {
-  method: string
-  url: string
-  headers?: Record<string, string>
-  body?: string | null
-}
 
-export interface HttpResponse {
-  status: number
-  headers: Record<string, string>
-  body: string
+  /**
+   * intercept browser-mode orez admin routes before they reach zero-cache.
+   *
+   * browser embeds do not run the node admin dashboard or log store. leaving
+   * `/__orez/*` to fall through to zero-cache makes disabled admin look like
+   * an app/zero route miss. keep the contract explicit by returning empty
+   * admin responses for the small read-only surface and 404 for the rest.
+   * default: true.
+   */
+  disableAdminApi?: boolean
 }
 
 /** WebSocket-like object — matches CF WebSocket, browser WebSocket, or MessagePort adapter */
@@ -116,6 +119,7 @@ export async function startZeroCacheEmbedBrowser(
   const appId = opts.appId || 'zero'
   const publications = opts.publications?.join(',') || `orez_${appId}_public`
   const readyTimeout = opts.readyTimeout ?? 30000
+  const disableAdminApi = opts.disableAdminApi ?? true
 
   // set up sqlite storage from sql.js or in-memory
   if (opts.sqlite) {
@@ -303,6 +307,11 @@ export async function startZeroCacheEmbedBrowser(
     },
 
     async handleHttp(request: HttpRequest): Promise<HttpResponse> {
+      if (disableAdminApi) {
+        const adminResponse = handleDisabledBrowserAdminRequest(request)
+        if (adminResponse) return adminResponse
+      }
+
       if (!isReady || !fastifyInstance?.inject) {
         return { status: 503, headers: {}, body: 'not ready' }
       }