Computes a running SQLite WAL checksum over a byte slice. The slice length **must** be a multiple of 8 bytes (the function panics otherwise, matching

Overrides the lease TTL (default [`DEFAULT_LEASE_TTL`]).

Flush frames the output gate held: send each to its socket's task. Called from the actor thread once the gating write is proved durable.

Returns the ordered list of LTX files needed to restore the database at `txid` (`TXID(0)` = latest). Ported from `CalcRestorePlan` (replica.go:1419-1

A per-cell client over the shared store, keyed to the cell's epoch prefix. `cells/<cell>/ltx/e<epoch>` matches [`Self::db_path`]'s remote twin so the

Publish a fetch response when the handler settles, then keep driving the event region so waitUntil work can complete without delaying headers or a str

Returns a reference to the attached database, if any. Ported from `Replica.DB` (replica.go:89).

Runs `db_equal.sh <mode> <a> <b>`; returns Ok(()) on exit 0, else the captured stderr/stdout for the failure message. Requires `sqlite3` on PATH.

Reconstructs the full SQLite database image from a **snapshot** LTX file (every page `1..=commit`, with the lock page zero-filled). Ported from `Deco

Decode one stored row for JS. A stub-tagged row comes back as `[sentinel, tree]` (plus `true`), which only the storage wrapper — holder of the closure

Scheduled time and retry count for an alarm due at/before `now_ms`.

Encode a cell/service response for the JS side. A text body crosses as a JS string (cheap, lossless), binary as a byte array, and a streaming body by

Drives the WAL reader over one input and asserts no panic: construction, a bounded `read_frame` drain, the `page_map` aggregation, a `frame_salts_unti

As `fetch_and_reply`, but the request's signal is registered under `request_id` so an HTTP or service-binding caller that disconnects reaches the targ

A `file://<abs-path>` URL for the real binary's `file:` backend. The path must be absolute (litestream rejects a relative `file://` host segment).

Returns the set of unique frame salt pairs in the WAL, scanning until the `until` salt pair is seen or end-of-file is reached. Unlike frame reading,

Full-surface module source for a builtin: run the (guarded) setup, probe the backing object's enumerable keys, and re-export each one. Serves both `im

The output gate. The caller invokes this only for a request whose handler advanced the cell's committed position, so the response is held until the co

True if `bin` resolves on PATH.

True if `bin` resolves on PATH.

Size and etag, or `None` when the key does not exist.