[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_707":708,"_709":710},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_41":-7,"_146":-5,"_19":147,"_148":149,"_150":151,"_152":153,"_154":155,"_21":156,"_157":-5,"_158":-5,"_159":30,"_160":161,"_162":30,"_163":-5,"_164":-5,"_165":166},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":-5},"handle","nbbaier","name","townstash","branchName","main","path","docs/issues/sqliteclient-conformance-suite","project",{"_35":94,"_13":14,"_39":95,"_96":-5,"_97":30,"_98":99,"_100":99,"_101":102,"_103":-5,"_31":70,"_104":-5,"_105":30,"_106":-5,"_107":-5,"_108":109,"_43":44,"_110":111,"_112":113,"_114":115,"_116":-5,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_54":126,"_127":128,"_129":130,"_131":30},"file",{"_64":91,"_13":92,"_67":68,"_69":30,"_93":-5},"isDirectory",true,"page",0,"history",[32,33,34],"hasNext",false,"userId",{"_35":83,"_37":38,"_39":84,"_41":85,"_43":44,"_45":86,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":87,"_21":88,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":89},{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":76,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":77,"_21":78,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":79},{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62},"id","7944f36e-0683-4a24-80c6-91284b594afb","branchId","21ed0900-d0ad-4fc5-824e-172e390e2e47","createdAt",["D",1783955610279],"version",234,"orgId","5f80108f-7ca4-4327-b77b-089dbe4b5a82","parentId","fa22e282-a3bc-4ffd-9474-7583e4bfa213","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":66,"_67":68,"_69":30},"pull","merge","revert","multiple","commits",[63],{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5},"fileId","67fc1ac4-7ecd-11f1-8173-1607ee4eb77e","issues","fileType","directory","deleted","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","efaac1dc-3046-493c-ae35-46cc35ad3364",["D",1783955610561],236,"86b91d13-73b0-46b4-b0f6-12d8c4f4ed3f",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":81,"_13":82,"_67":21,"_69":30},[80],{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":76,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":77,"_21":78,"_57":-5,"_58":-5,"_59":-5},"68226df0-7ecd-11f1-8173-1607ee4eb77e","PRD.md","5f971f9c-3dbd-4fdb-b7bc-7716fae603e2",["D",1783956364489],249,"614d5cb8-481e-4f3e-9446-b3960a9323bf",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":81,"_13":82,"_67":21,"_69":30},[90],{"_35":83,"_37":38,"_39":84,"_41":85,"_43":44,"_45":86,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":87,"_21":88,"_57":-5,"_58":-5,"_59":-5},"67db1130-7ecd-11f1-a3e7-1607ee4eb77e","sqliteclient-conformance-suite","deletedAtVersion","b2638454-5153-40e9-ae39-aa50d9897819",["D",1783830414588],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Redis-style key/value storage for Val Town, backed by SQLite","imageUrl","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"tursoName","b2638454515340e9ae39aa50d9897819","tursoHostname","b2638454515340e9ae39aa50d9897819-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789526460011],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_145":72},"org",{"_11":12,"_141":-5,"_71":72,"_31":70,"_142":143,"_144":30},"branch",{"_41":132,"_13":16,"_35":38,"_133":94,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"isOwned",275,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":94,"_13":14,"_39":702,"_96":-5,"_97":30,"_98":99,"_100":99,"_101":102,"_103":-5,"_31":70,"_104":-5,"_105":30,"_106":-5,"_107":-5,"_108":109,"_43":44,"_110":111,"_112":113,"_114":703,"_116":-5,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_54":704,"_127":705,"_129":706,"_131":30},"tree",[196,239,245,246,247,248,249,250,251,252,253,254],"files",[196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254],"counts",{"_186":26,"_187":109,"_188":26,"_189":190,"_191":192},"contents",[177,178],{"_35":167,"_13":92,"_64":91,"_45":168,"_37":38,"_169":170,"_171":24,"_39":172,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_17":175},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"f3fa5e95-bf26-47a2-9bca-98e49476ba7c","3f61cf28-7dba-11f1-9bcf-1607ee4eb77e","branchVersion",233,"latest",["D",1783955610092],"content","label",[176,66,92],"docs",{"_35":183,"_13":66,"_64":65,"_45":91,"_37":38,"_169":42,"_171":24,"_39":184,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_17":185},{"_35":179,"_13":82,"_64":81,"_45":91,"_37":38,"_169":85,"_171":24,"_39":180,"_41":109,"_67":21,"_173":181,"_69":30,"_174":-5,"_17":182},"ee551864-b90b-4a9a-a9a9-b5e1549a483c",["D",1783956364489],"# SqliteClient conformance suite\n\nStatus: ready-for-agent\n\n## Problem Statement\n\nTownstash talks to SQLite through the `SqliteClient` seam, satisfied by two\nadapters: the local `node:sqlite` test adapter and Val Town's `std/sqlite`\n(`@libsql/client`). The core quietly relies on several adapter behaviours —\n`RETURNING` rows being surfaced (its only signal that a conditional write\nhappened), blob values coming back in a normalizable form (the two adapters\nreturn _different_ types here, and only production exercises one branch),\nnamed-parameter binding, bigint binding — but none of these invariants is\nwritten down, and the default test run only ever exercises the local adapter.\nThe test adapter even has to guess whether a statement returns rows by\nregex-sniffing the SQL for `RETURNING`. If the platform adapter ever behaves\ndifferently — after a client version bump, say — local tests stay green and\nproduction breaks. The existing type-level assignability test pins signatures\nonly; it cannot see behaviour.\n\n## Solution\n\nWrite the assumptions down and test them in both places. Each invariant becomes\na documentation comment on the `SqliteClient` interface and one small\nconformance case. The cases are written once, in a shared module, and run\nthrough both adapters: locally as ordinary `Deno.test` cases on every test run,\nand on Val Town as additional entries in the plain-script suite — no gating\nflag, on every run, because the cases only touch their own throwaway scratch\ntable and never approach production data. A weekly cron on the val runs the\nsuite and emails the maintainer on failure, so platform drift is caught within\ndays instead of at the next manual deploy. The interface's honest contract also\nlets the local test adapter drop its `RETURNING` regex guess entirely.\n\n## User Stories\n\n1. As a townstash maintainer, I want the adapter behaviours the core relies on\n written on the `SqliteClient` interface itself, so that the contract is\n documentation instead of tribal knowledge.\n2. As a townstash maintainer, I want each documented invariant verified by a\n test run against both adapters, so that \"both adapters behave identically\" is\n a checked fact rather than an assumption.\n3. As a townstash maintainer, I want the conformance cases written once and\n consumed by both test runners, so that the two legs cannot drift apart.\n4. As a townstash maintainer, I want the Val Town leg to run on every execution\n of the platform suite with no opt-in flag, so that coverage of the real\n adapter is the default rather than something to remember.\n5. As a townstash maintainer, I want a scheduled weekly run on the val that\n emails me on failure, so that platform changes underneath a quiet library\n surface within days, not at the next deploy.\n6. As a townstash maintainer, I want the conformance cases isolated to their own\n scratch table, so that no test run can ever touch stored production keys.\n7. As a future adapter author, I want a runnable definition of what my adapter\n must do, so that passing the conformance suite means the core can run on it.\n8. As a townstash maintainer, I want the local test adapter to stop guessing\n row-returning statements from SQL text, so that the adapter reflects the\n documented contract instead of encoding a heuristic.\n9. As a test author, I want blob round-trip behaviour exercised on the real\n platform, so that the byte-normalization branches that only production\n reaches are no longer untested by default.\n10. As a townstash user, I want no change to the `Stash` interface or any\n command behaviour, so that this lands invisibly.\n\n## Implementation Decisions\n\n- **Scope: adapter primitives, not the command set.** The conformance cases\n drive `execute` and `batch` directly with purpose-built SQL. Running the full\n behaviour suite through both adapters was rejected: command-level behaviour\n lives above the seam and does not vary by adapter, and the existing gated live\n workflow test already provides one end-to-end pass.\n- **The invariant checklist** (each becomes an interface doc comment plus one\n case):\n 1. `RETURNING` clauses surface rows through `execute`.\n 2. Statements without result rows resolve to an empty rows array, never\n undefined.\n 3. Named parameters bind from a record, including one name reused at multiple\n placeholders.\n 4. `bigint` values bind.\n 5. Stored blobs come back as bytes the core can normalize — `Uint8Array` or\n `ArrayBuffer` are both conformant (the byte-normalization helper exists\n precisely for this divergence).\n 6. Plain-string `execute` handles DDL (schema initialization relies on it).\n 7. `batch` is atomic: a failing statement rolls back the ones before it.\n- **Isolation: a dedicated scratch table.** Cases create a fixed-name\n conformance table at the start, exercise the invariants against it, and drop\n it in a `finally`. Reusing the core's key table was rejected: seam tests must\n not depend on the core's schema. Runs are sequential, so a fixed name with\n create-if-not-exists semantics also self-heals after a crashed run.\n- **One shared case module, two thin runners.** The cases are data — name plus a\n function taking a `SqliteClient` — consumed by the local `Deno.test` suite\n (against the `node:sqlite` adapter) and by the Val Town plain-script suite\n (against `std/sqlite`), per the existing split-by-runtime testing ADR. This\n module genuinely has two consumers, which is what justifies its existence as a\n separate file.\n- **No gating flag for the Val Town leg.** The existing live-integration flag\n protects production keys; conformance cases touch none, so they run\n unconditionally wherever the platform suite runs. Opt-in coverage is how the\n gap being fixed survived this long.\n- **Weekly cron with email alerting.** A cron-triggered file on the val runs the\n platform test suite on a weekly schedule and sends an email on failure, using\n the platform's standard email helper. This is the only mechanism that catches\n the platform changing underneath the library between manual deploys.\n- **The test adapter's `RETURNING` regex is deleted.** Verified: in Deno's\n `node:sqlite`, the row-returning prepared-statement call works for every\n statement kind, returning an empty array for row-less statements. The adapter\n always uses it, which both simplifies the adapter and stops it encoding a\n guess about the SQL.\n- **No new ADR.** The interface documentation comments are the record; the\n testing split follows the existing plain-script-tests ADR, and the\n named-parameter contract is already ADR-0005.\n\n## Testing Decisions\n\n- This change is itself tests, so the usual question inverts: the conformance\n cases must assert only externally observable adapter behaviour through the\n `SqliteClient` interface — statement in, rows out — never adapter internals.\n- A good conformance case is minimal and self-contained: it builds its own table\n state, asserts one invariant, and leaves nothing behind.\n- The existing behaviour suite must pass unchanged, including after the test\n adapter simplification (deleting the regex changes adapter internals only; any\n behavioural difference would surface as a suite failure).\n- Prior art: the plain-script `TestCase` list and runner in the Val Town suite;\n the existing in-memory adapter construction in the local suite.\n- Verification for landing: local `deno task check` and `deno task test` green,\n then one manual run of the platform suite on Val Town confirming the new cases\n pass against real `std/sqlite`, then confirm the cron is scheduled and sends\n mail on a forced failure.\n\n## Out of Scope\n\n- Running the full command behaviour suite through both adapters.\n- Any change to the `Stash` interface, command semantics, or the core's SQL.\n- New invariants beyond the checklist (e.g. concurrency or performance\n characteristics of adapters).\n- Changes to the gated live workflow test — it stays as-is, still behind its\n flag, as the end-to-end command-level smoke test.\n- Alerting beyond email (dashboards, retries, escalation).\n\n## Further Notes\n\n- Origin: candidate 3 of the 2026-07-12 architecture review (\"Make the\n SqliteClient interface honest\"), grilled to shared understanding on 2026-07-13\n after the named-args-bind-contract and absorb-prefix-wrapper specs landed.\n- The maintainer runs the platform suite manually today, with the\n live-integration flag set permanently in the val's environment; the weekly\n cron exists specifically to cover the stretches between those manual runs.\n- Fact verified during design: Deno's `node:sqlite` returns an empty array from\n the row-returning call on INSERT/UPDATE/DELETE/DDL statements, which is what\n licenses deleting the test adapter's regex.\n",[176,66,92,82],"a6e6d603-43dd-40cc-bdfb-b436912eef86",["D",1783955610279],[176,66,92,66],"pulls","branches","forks","envVars",{"_193":109,"_195":26},"connections",{"_193":26,"_194":26},"count","unfilledCount","emptyCount",{"_35":697,"_13":176,"_64":591,"_45":-5,"_37":38,"_169":698,"_171":24,"_39":699,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":700,"_17":701},{"_35":692,"_13":659,"_64":653,"_45":591,"_37":38,"_169":693,"_171":24,"_39":694,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":695,"_17":696},{"_35":684,"_13":685,"_64":686,"_45":653,"_37":38,"_169":687,"_171":24,"_39":688,"_41":109,"_67":21,"_173":689,"_69":30,"_174":-5,"_263":690,"_17":691},{"_35":676,"_13":677,"_64":678,"_45":653,"_37":38,"_169":679,"_171":24,"_39":680,"_41":109,"_67":21,"_173":681,"_69":30,"_174":-5,"_263":682,"_17":683},{"_35":668,"_13":669,"_64":670,"_45":653,"_37":38,"_169":671,"_171":24,"_39":672,"_41":109,"_67":21,"_173":673,"_69":30,"_174":-5,"_263":674,"_17":675},{"_35":660,"_13":661,"_64":662,"_45":653,"_37":38,"_169":663,"_171":24,"_39":664,"_41":109,"_67":21,"_173":665,"_69":30,"_174":-5,"_263":666,"_17":667},{"_35":650,"_13":651,"_64":652,"_45":653,"_37":38,"_169":654,"_171":24,"_39":655,"_41":26,"_67":21,"_173":656,"_69":30,"_174":-5,"_263":657,"_17":658},{"_35":645,"_13":628,"_64":622,"_45":591,"_37":38,"_169":646,"_171":24,"_39":647,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":648,"_17":649},{"_35":637,"_13":638,"_64":639,"_45":622,"_37":38,"_169":640,"_171":24,"_39":641,"_41":109,"_67":21,"_173":642,"_69":30,"_174":-5,"_263":643,"_17":644},{"_35":629,"_13":630,"_64":631,"_45":622,"_37":38,"_169":632,"_171":24,"_39":633,"_41":109,"_67":21,"_173":634,"_69":30,"_174":-5,"_263":635,"_17":636},{"_35":619,"_13":620,"_64":621,"_45":622,"_37":38,"_169":623,"_171":24,"_39":624,"_41":109,"_67":21,"_173":625,"_69":30,"_174":-5,"_263":626,"_17":627},{"_35":614,"_13":605,"_64":599,"_45":591,"_37":38,"_169":615,"_171":24,"_39":616,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":617,"_17":618},{"_35":606,"_13":607,"_64":608,"_45":599,"_37":38,"_169":609,"_171":24,"_39":610,"_41":26,"_67":21,"_173":611,"_69":30,"_174":-5,"_263":612,"_17":613},{"_35":596,"_13":597,"_64":598,"_45":599,"_37":38,"_169":600,"_171":24,"_39":601,"_41":26,"_67":21,"_173":602,"_69":30,"_174":-5,"_263":603,"_17":604},{"_35":590,"_13":66,"_64":168,"_45":591,"_37":38,"_169":592,"_171":24,"_39":593,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":594,"_17":595},{"_35":585,"_13":570,"_64":564,"_45":168,"_37":38,"_169":586,"_171":24,"_39":587,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":588,"_17":589},{"_35":580,"_13":66,"_64":574,"_45":564,"_37":38,"_169":581,"_171":24,"_39":582,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":583,"_17":584},{"_35":571,"_13":572,"_64":573,"_45":574,"_37":38,"_169":575,"_171":24,"_39":576,"_41":26,"_67":21,"_173":577,"_69":30,"_174":-5,"_263":578,"_17":579},{"_35":562,"_13":82,"_64":563,"_45":564,"_37":38,"_169":565,"_171":24,"_39":566,"_41":289,"_67":21,"_173":567,"_69":30,"_174":-5,"_263":568,"_17":569},{"_35":557,"_13":518,"_64":512,"_45":168,"_37":38,"_169":558,"_171":24,"_39":559,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":560,"_17":561},{"_35":552,"_13":66,"_64":522,"_45":512,"_37":38,"_169":553,"_171":24,"_39":554,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":555,"_17":556},{"_35":544,"_13":545,"_64":546,"_45":522,"_37":38,"_169":547,"_171":24,"_39":548,"_41":316,"_67":21,"_173":549,"_69":30,"_174":-5,"_263":550,"_17":551},{"_35":536,"_13":537,"_64":538,"_45":522,"_37":38,"_169":539,"_171":24,"_39":540,"_41":316,"_67":21,"_173":541,"_69":30,"_174":-5,"_263":542,"_17":543},{"_35":528,"_13":529,"_64":530,"_45":522,"_37":38,"_169":531,"_171":24,"_39":532,"_41":316,"_67":21,"_173":533,"_69":30,"_174":-5,"_263":534,"_17":535},{"_35":519,"_13":520,"_64":521,"_45":522,"_37":38,"_169":523,"_171":24,"_39":524,"_41":398,"_67":21,"_173":525,"_69":30,"_174":-5,"_263":526,"_17":527},{"_35":510,"_13":82,"_64":511,"_45":512,"_37":38,"_169":513,"_171":24,"_39":514,"_41":333,"_67":21,"_173":515,"_69":30,"_174":-5,"_263":516,"_17":517},{"_35":167,"_13":92,"_64":91,"_45":168,"_37":38,"_169":170,"_171":24,"_39":507,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":508,"_17":509},{"_35":183,"_13":66,"_64":65,"_45":91,"_37":38,"_169":42,"_171":24,"_39":504,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":505,"_17":506},{"_35":496,"_13":497,"_64":498,"_45":65,"_37":38,"_169":499,"_171":24,"_39":500,"_41":316,"_67":21,"_173":501,"_69":30,"_174":-5,"_263":502,"_17":503},{"_35":488,"_13":489,"_64":490,"_45":65,"_37":38,"_169":491,"_171":24,"_39":492,"_41":109,"_67":21,"_173":493,"_69":30,"_174":-5,"_263":494,"_17":495},{"_35":480,"_13":481,"_64":482,"_45":65,"_37":38,"_169":483,"_171":24,"_39":484,"_41":289,"_67":21,"_173":485,"_69":30,"_174":-5,"_263":486,"_17":487},{"_35":472,"_13":473,"_64":474,"_45":65,"_37":38,"_169":475,"_171":24,"_39":476,"_41":289,"_67":21,"_173":477,"_69":30,"_174":-5,"_263":478,"_17":479},{"_35":465,"_13":466,"_64":467,"_45":65,"_37":38,"_169":132,"_171":24,"_39":468,"_41":316,"_67":21,"_173":469,"_69":30,"_174":-5,"_263":470,"_17":471},{"_35":179,"_13":82,"_64":81,"_45":91,"_37":38,"_169":85,"_171":24,"_39":462,"_41":109,"_67":21,"_173":181,"_69":30,"_174":-5,"_263":463,"_17":464},{"_35":457,"_13":402,"_64":395,"_45":168,"_37":38,"_169":458,"_171":24,"_39":459,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":460,"_17":461},{"_35":452,"_13":66,"_64":406,"_45":395,"_37":38,"_169":453,"_171":24,"_39":454,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":455,"_17":456},{"_35":444,"_13":445,"_64":446,"_45":406,"_37":38,"_169":447,"_171":24,"_39":448,"_41":289,"_67":21,"_173":449,"_69":30,"_174":-5,"_263":450,"_17":451},{"_35":436,"_13":437,"_64":438,"_45":406,"_37":38,"_169":439,"_171":24,"_39":440,"_41":289,"_67":21,"_173":441,"_69":30,"_174":-5,"_263":442,"_17":443},{"_35":428,"_13":429,"_64":430,"_45":406,"_37":38,"_169":431,"_171":24,"_39":432,"_41":333,"_67":21,"_173":433,"_69":30,"_174":-5,"_263":434,"_17":435},{"_35":420,"_13":421,"_64":422,"_45":406,"_37":38,"_169":423,"_171":24,"_39":424,"_41":398,"_67":21,"_173":425,"_69":30,"_174":-5,"_263":426,"_17":427},{"_35":412,"_13":413,"_64":414,"_45":406,"_37":38,"_169":415,"_171":24,"_39":416,"_41":333,"_67":21,"_173":417,"_69":30,"_174":-5,"_263":418,"_17":419},{"_35":403,"_13":404,"_64":405,"_45":406,"_37":38,"_169":407,"_171":24,"_39":408,"_41":316,"_67":21,"_173":409,"_69":30,"_174":-5,"_263":410,"_17":411},{"_35":393,"_13":82,"_64":394,"_45":395,"_37":38,"_169":396,"_171":24,"_39":397,"_41":398,"_67":21,"_173":399,"_69":30,"_174":-5,"_263":400,"_17":401},{"_35":388,"_13":354,"_64":347,"_45":-5,"_37":38,"_169":389,"_171":24,"_39":390,"_41":26,"_67":68,"_173":-5,"_69":30,"_174":-5,"_263":391,"_17":392},{"_35":380,"_13":381,"_64":382,"_45":347,"_37":38,"_169":383,"_171":24,"_39":384,"_41":26,"_67":21,"_173":385,"_69":30,"_174":-5,"_263":386,"_17":387},{"_35":372,"_13":373,"_64":374,"_45":347,"_37":38,"_169":375,"_171":24,"_39":376,"_41":289,"_67":261,"_173":377,"_69":30,"_174":-5,"_263":378,"_17":379},{"_35":364,"_13":365,"_64":366,"_45":347,"_37":38,"_169":367,"_171":24,"_39":368,"_41":109,"_67":261,"_173":369,"_69":30,"_174":-5,"_263":370,"_17":371},{"_35":355,"_13":356,"_64":357,"_45":347,"_37":38,"_169":358,"_171":24,"_39":359,"_41":360,"_67":261,"_173":361,"_69":30,"_174":-5,"_263":362,"_17":363},{"_35":344,"_13":345,"_64":346,"_45":347,"_37":38,"_169":348,"_171":24,"_39":349,"_41":350,"_67":261,"_173":351,"_69":30,"_174":-5,"_263":352,"_17":353},{"_35":336,"_13":337,"_64":338,"_45":-5,"_37":38,"_169":339,"_171":24,"_39":340,"_41":26,"_67":21,"_173":341,"_69":30,"_174":-5,"_263":342,"_17":343},{"_35":328,"_13":329,"_64":330,"_45":-5,"_37":38,"_169":331,"_171":24,"_39":332,"_41":333,"_67":21,"_173":317,"_69":30,"_174":-5,"_263":334,"_17":335},{"_35":320,"_13":321,"_64":322,"_45":-5,"_37":38,"_169":323,"_171":24,"_39":324,"_41":26,"_67":21,"_173":325,"_69":30,"_174":-5,"_263":326,"_17":327},{"_35":311,"_13":312,"_64":313,"_45":-5,"_37":38,"_169":314,"_171":24,"_39":315,"_41":316,"_67":21,"_173":317,"_69":30,"_174":-5,"_263":318,"_17":319},{"_35":302,"_13":303,"_64":304,"_45":-5,"_37":38,"_169":305,"_171":24,"_39":306,"_41":307,"_67":21,"_173":308,"_69":30,"_174":-5,"_263":309,"_17":310},{"_35":294,"_13":295,"_64":296,"_45":-5,"_37":38,"_169":297,"_171":24,"_39":298,"_41":109,"_67":261,"_173":299,"_69":30,"_174":-5,"_263":300,"_17":301},{"_35":284,"_13":285,"_64":286,"_45":-5,"_37":38,"_169":287,"_171":24,"_39":288,"_41":289,"_67":290,"_173":291,"_69":30,"_174":-5,"_263":292,"_17":293},{"_35":275,"_13":276,"_64":277,"_45":-5,"_37":38,"_169":278,"_171":24,"_39":279,"_41":280,"_67":21,"_173":281,"_69":30,"_174":-5,"_263":282,"_17":283},{"_35":266,"_13":267,"_64":268,"_45":-5,"_37":38,"_169":269,"_171":24,"_39":270,"_41":271,"_67":261,"_173":272,"_69":30,"_174":-5,"_263":273,"_17":274},{"_35":255,"_13":256,"_64":257,"_45":-5,"_37":38,"_169":258,"_171":24,"_39":259,"_41":260,"_67":261,"_173":262,"_69":30,"_174":-5,"_263":264,"_17":265},"a569d4af-a6b3-4c1c-a9cb-39d7b6f7de15","main_test.ts","59f9b368-7e06-11f1-b945-1607ee4eb77e",261,["D",1783957547698],26,"script","import { runPlatformSuite } from \"./src/platform_suite.ts\";\n\nconst summary = await runPlatformSuite();\n\nif (summary.failed > 0) {\n throw new Error(`${summary.failed} test(s) failed`);\n}\n","children",[],[256],"ce436cb7-7198-47ac-a6eb-82c9a56a67b8","main.ts","1a013e48-7db6-11f1-b08c-1607ee4eb77e",239,["D",1783955610920],6,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nimport { createStash } from \"./src/stash.ts\";\n\nexport type { SetOptions, Stash, StashValue } from \"./src/stash.ts\";\nexport { toSafeNumber } from \"./src/stash.ts\";\n\n/** The ready-to-use Townstash client backed by this val's SQLite database. */\nexport const stash = createStash(sqlite);\n",[],[267],"0423b80f-f545-422e-aa21-8b9cb5c8e455","deno.json","36597c4a-7dac-11f1-8c55-1607ee4eb77e",269,["D",1783957547715],10,"{\n \"compilerOptions\": {\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ],\n \"noImplicitAny\": true,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"]\n },\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-sloppy-imports\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true\n },\n \"tasks\": {\n \"lint\": \"deno lint\",\n \"check\": \"deno fmt --check && deno task lint && deno check --allow-import main.ts main_test.ts src/stash.ts src/stash_test.ts src/platform_suite.ts cron_conformance_suite.ts\",\n \"test\": \"deno test --allow-all\"\n },\n \"lint\": {\n \"include\": [\n \"deno:/https/esm.town/**/*\",\n \"src/\",\n \"main.ts\",\n \"main_test.ts\",\n \"cron_conformance_suite.ts\"\n ],\n \"rules\": { \"exclude\": [\"no-explicit-any\", \"no-import-prefix\"] }\n },\n \"fmt\": { \"exclude\": [\".vt/\"] },\n \"lock\": false,\n \"nodeModulesDir\": \"auto\"\n}\n",[],[276],"4cff3b79-f067-479c-8afc-e43250aa101e","cron_conformance_suite.ts","eabb471a-7ed1-11f1-8173-1607ee4eb77e",272,["D",1783957640217],2,"interval","import { email } from \"https://esm.town/v/std/email\";\nimport { runPlatformSuite } from \"./src/platform_suite.ts\";\n\n/**\n * Weekly cron: runs the platform test suite (including the SqliteClient\n * conformance cases against the real std/sqlite adapter) and emails the\n * maintainer only when something fails, so platform drift between manual\n * deploys surfaces within days.\n */\nexport default async function (_interval: Interval) {\n const summary = await runPlatformSuite();\n\n if (summary.failed === 0) return;\n\n const alertEmail = Deno.env.get(\"TOWNSTASH_ALERT_EMAIL\");\n const lines = summary.failures.map(({ name, error }) =>\n `- ${name}\\n ${error instanceof Error ? error.message : String(error)}`\n );\n\n await email({\n ...(alertEmail ? { to: alertEmail } : {}),\n subject: `Townstash platform suite: ${summary.failed} failing`,\n text: `${summary.failed} of ${summary.total} platform test(s) failed:\\n\\n${\n lines.join(\"\\n\\n\")\n }`,\n });\n}\n",[],[285],"17553072-be04-411a-bc29-61f196428c83","bench.ts","e3eac08a-7e1f-11f1-b9f7-1607ee4eb77e",165,["D",1783881460722],"// Benchmark Townstash (val-scoped SQLite) against val-scoped blob storage.\n//\n// This is a plain-script val, not a Deno.test suite, because it must run on\n// Val Town to measure the real server->storage latency of each backend. See\n// docs/adr/0004-plain-script-tests-for-val-town.md. Run it as a one-shot val\n// (its own endpoint / \"Run\") and read the printed tables from the logs.\n//\n// Every op here is a network round trip, so numbers measured from a laptop are\n// meaningless — only the hosted run reflects reality. A unique key prefix keeps\n// runs isolated, and the finally block reclaims every key it created.\n//\n// Each latency figure is the MEDIAN across REPEATS independent runs (with the\n// per-run p50 min–max shown as spread), to smooth run-to-run tail variance.\n\nimport { stash } from \"./main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst ITERS = 50;\nconst WARMUP = 5;\nconst REPEATS = 3;\nconst WIDTHS = [1, 5, 10, 20, 50];\n\ntype Stats = { p50: number; p95: number; p99: number; mean: number };\ntype Agg = Stats & { p50min: number; p50max: number; runs: number };\n\nconst median = (xs: number[]): number => {\n const s = [...xs].sort((a, b) => a - b);\n return s[Math.floor(s.length / 2)];\n};\n\n/**\n * Time `fn` over `iters` samples after discarding `warmup` runs. `fn` receives\n * a monotonically increasing index (0..warmup-1 for warmup, then warmup..) so\n * callers that must not reuse state per call (e.g. delete) can key off it.\n */\nasync function measure(\n fn: (i: number) => Promise,\n iters = ITERS,\n warmup = WARMUP,\n): Promise {\n for (let i = 0; i < warmup; i++) await fn(i);\n const samples: number[] = [];\n for (let i = 0; i < iters; i++) {\n const start = performance.now();\n await fn(warmup + i);\n samples.push(performance.now() - start);\n }\n samples.sort((a, b) => a - b);\n const at = (p: number) =>\n samples[\n Math.min(samples.length - 1, Math.floor((p / 100) * samples.length))\n ];\n const mean = samples.reduce((a, b) => a + b, 0) / samples.length;\n return { p50: at(50), p95: at(95), p99: at(99), mean };\n}\n\n/** Run `measure` REPEATS times and report the median of each stat + p50 spread. */\nasync function aggregate(\n fn: (i: number) => Promise,\n iters = ITERS,\n warmup = WARMUP,\n): Promise {\n const runs: Stats[] = [];\n for (let r = 0; r < REPEATS; r++) runs.push(await measure(fn, iters, warmup));\n const p50s = runs.map((s) => s.p50);\n return {\n p50: median(p50s),\n p95: median(runs.map((s) => s.p95)),\n p99: median(runs.map((s) => s.p99)),\n mean: median(runs.map((s) => s.mean)),\n p50min: Math.min(...p50s),\n p50max: Math.max(...p50s),\n runs: REPEATS,\n };\n}\n\n/** Time one batch of `width` concurrent calls; report the batch's ops/sec. */\nasync function throughput(\n make: (i: number) => Promise,\n width: number,\n batches = 5,\n): Promise<{ opsPerSec: number; meanBatchMs: number; ops: number }> {\n await Promise.all(Array.from({ length: width }, (_, i) => make(i))); // warm\n const durations: number[] = [];\n for (let b = 0; b < batches; b++) {\n const start = performance.now();\n await Promise.all(\n Array.from({ length: width }, (_, i) => make((b + 1) * width + i)),\n );\n durations.push(performance.now() - start);\n }\n const meanBatchMs = durations.reduce((a, b) => a + b, 0) / durations.length;\n return {\n opsPerSec: (width / meanBatchMs) * 1000,\n meanBatchMs,\n ops: width * batches,\n };\n}\n\nconst fmt = (a: Agg) =>\n `p50 ${a.p50.toFixed(1)}ms [${a.p50min.toFixed(1)}–${\n a.p50max.toFixed(1)\n }] ` +\n `p95 ${a.p95.toFixed(1)}ms p99 ${a.p99.toFixed(1)}ms mean ${\n a.mean.toFixed(1)\n }ms ` +\n `(median of ${a.runs}×${ITERS})`;\n\nconst ns = `__townstash_bench__:${crypto.randomUUID()}:`;\nconst createdStashKeys = new Set();\nconst createdBlobKeys = new Set();\n\nasync function stashSet(key: string, value: string) {\n createdStashKeys.add(key);\n await stash.set(key, value);\n}\nasync function blobSet(key: string, value: string) {\n createdBlobKeys.add(key);\n await blob.set(key, value);\n}\n\nconst SIZES: Record = {\n small: 64,\n medium: 4_096,\n large: 262_144,\n};\n\nconsole.log(`Townstash vs blob benchmark (namespace ${ns})`);\nconsole.log(`config: iters=${ITERS} warmup=${WARMUP} repeats=${REPEATS}`);\nconsole.log(\"=\".repeat(72));\n\ntry {\n // --- Core set / get across payload sizes -------------------------------\n for (const [label, bytes] of Object.entries(SIZES)) {\n const value = \"x\".repeat(bytes);\n const sk = `${ns}core:s:${label}`;\n const bk = `${ns}core:b:${label}`;\n\n console.log(`\\n[set] ${label} (${bytes}B)`);\n console.log(` stash ${fmt(await aggregate(() => stashSet(sk, value)))}`);\n console.log(` blob ${fmt(await aggregate(() => blobSet(bk, value)))}`);\n\n console.log(`[get] ${label} (${bytes}B)`);\n console.log(` stash ${fmt(await aggregate(() => stash.get(sk)))}`);\n console.log(\n ` blob ${\n fmt(await aggregate(() => blob.get(bk).then((r) => r.text())))\n }`,\n );\n }\n\n // --- del (isolated: pre-seed keys, time the delete only) ---------------\n // Each repeat pre-seeds WARMUP+ITERS keys up front, so the timed section is a\n // pure single-key delete — not the set+del pair the first draft measured.\n console.log(\"\\n[del] (pre-seeded keys, delete only)\");\n const isolatedDelete = (\n seed: (k: string) => Promise,\n kill: (k: string) => Promise,\n tag: string,\n ) =>\n (async (): Promise => {\n const runs: Stats[] = [];\n for (let r = 0; r < REPEATS; r++) {\n const keys: string[] = [];\n for (let i = 0; i < WARMUP + ITERS; i++) {\n const k = `${ns}del:${tag}:${r}:${i}`;\n await seed(k);\n keys.push(k);\n }\n // Not registered for cleanup: the measured deletes remove them.\n runs.push(await measure((i) => kill(keys[i])));\n }\n const p50s = runs.map((s) => s.p50);\n return {\n p50: median(p50s),\n p95: median(runs.map((s) => s.p95)),\n p99: median(runs.map((s) => s.p99)),\n mean: median(runs.map((s) => s.mean)),\n p50min: Math.min(...p50s),\n p50max: Math.max(...p50s),\n runs: REPEATS,\n };\n })();\n console.log(\n ` stash ${\n fmt(\n await isolatedDelete(\n (k) => stash.set(k, \"v\"),\n (k) => stash.del(k),\n \"s\",\n ),\n )\n }`,\n );\n console.log(\n ` blob ${\n fmt(\n await isolatedDelete(\n (k) => blob.set(k, \"v\"),\n (k) => blob.delete(k),\n \"b\",\n ),\n )\n }`,\n );\n\n // --- JSON helpers ------------------------------------------------------\n const doc = {\n name: \"Ada\",\n roles: [\"admin\", \"editor\"],\n count: 42,\n nested: { ok: true },\n };\n const jsk = `${ns}json:s`;\n const jbk = `${ns}json:b`;\n createdStashKeys.add(jsk);\n createdBlobKeys.add(jbk);\n console.log(\"\\n[setJSON]\");\n console.log(\n ` stash ${fmt(await aggregate(() => stash.setJSON(jsk, doc)))}`,\n );\n console.log(` blob ${fmt(await aggregate(() => blob.setJSON(jbk, doc)))}`);\n console.log(\"[getJSON]\");\n console.log(` stash ${fmt(await aggregate(() => stash.getJSON(jsk)))}`);\n console.log(` blob ${fmt(await aggregate(() => blob.getJSON(jbk)))}`);\n\n // --- Counter: atomic incr vs blob read-modify-write --------------------\n // stash.incr is one atomic round trip. Blob has no counter primitive, so the\n // equivalent is get -> +1 -> set: two round trips AND racy under concurrency.\n const csk = `${ns}counter:s`;\n const cbk = `${ns}counter:b`;\n createdStashKeys.add(csk);\n createdBlobKeys.add(cbk);\n await stash.set(csk, \"0\");\n await blob.setJSON(cbk, 0);\n console.log(\"\\n[counter increment]\");\n console.log(\n ` stash.incr (atomic, 1 RT) ${\n fmt(await aggregate(() => stash.incr(csk)))\n }`,\n );\n console.log(\n ` blob RMW (racy, 2 RT) ${\n fmt(\n await aggregate(async () => {\n const n = (await blob.getJSON(cbk)) ?? 0;\n await blob.setJSON(cbk, n + 1);\n }),\n )\n }`,\n );\n\n // --- Concurrent throughput sweep (small set) ---------------------------\n // Maps where SQLite's single-writer wall hits relative to blob object storage.\n console.log(\"\\n[concurrent set throughput] width sweep, 5 batches each\");\n console.log(\" width stash ops/s blob ops/s ratio(blob/stash)\");\n for (const w of WIDTHS) {\n const st = await throughput(\n (i) => stashSet(`${ns}tput:s:${w}:${i}`, \"payload\"),\n w,\n );\n const bt = await throughput(\n (i) => blobSet(`${ns}tput:b:${w}:${i}`, \"payload\"),\n w,\n );\n console.log(\n ` ${String(w).padStart(5)} ${\n st.opsPerSec.toFixed(0).padStart(10)\n } ` +\n `${bt.opsPerSec.toFixed(0).padStart(10)} ${\n (bt.opsPerSec / st.opsPerSec).toFixed(2)\n }×`,\n );\n }\n} finally {\n // Reclaim everything this run created.\n if (createdStashKeys.size > 0) await stash.del(...createdStashKeys);\n await Promise.all(\n [...createdBlobKeys].map((k) => blob.delete(k).catch(() => {})),\n );\n console.log(\n `\\ncleanup: removed ${createdStashKeys.size} stash keys, ${createdBlobKeys.size} blob keys`,\n );\n}\n",[],[295],"3cfb36c8-3d38-4412-893e-8f0a6e29f20f","README.md","c298fd10-7e16-11f1-94c9-1607ee4eb77e",252,["D",1783956364609],18,"# Townstash\n\nTownstash is a Redis-inspired library for Val Town. It stores binary-safe string\nvalues in the SQLite database scoped to the library val and exports a\nready-to-use client named `stash`.\n\nTownstash is persistent application storage, not an in-memory Redis server. It\ndoes not expose RESP, accept connections from Redis clients, or promise Redis\nlatency, memory use, or distributed-system behavior.\n\n## Why Townstash over blob or raw SQLite\n\nVal Town gives every val two other scoped persistence options — `std/blob` and\n`std/sqlite`. Townstash competes with each on a different axis.\n\n### vs. `std/blob` (a performance argument)\n\nBoth are val-scoped key/value stores, so the comparison is speed. Benchmarks\n(see [`BENCHMARKS.md`](./BENCHMARKS.md)) show:\n\n- **Reads are ~3× faster** than blob at every payload size tested, up to 256 KB.\n- **Counters are ~2× faster and atomic** — `stash.incr` is one round trip, while\n the blob equivalent is a racy get→modify→set pair.\n- **Single writes and deletes are a tie** with blob.\n\nReach for blob instead when you need high concurrent write throughput (SQLite's\nsingle-writer model plateaus around 30–50 writes/sec, where blob scales 2–3×\nhigher) or are storing large opaque assets.\n\n### vs. `std/sqlite` (a convenience argument)\n\nTownstash _is_ a thin layer over `std/sqlite` — the same backend, so performance\nis essentially identical (there's nothing to benchmark). What it adds is a\nRedis-shaped key/value API over that backend so you don't hand-roll one:\n\n- Binary-safe get/set, JSON helpers, and canonical 64-bit counters over a flat\n keyspace — no schema, table, or migration to manage.\n- Existence-dependent operations decided **atomically at execution time**:\n conditional writes (`nx`/`xx`), `incr`/`decr`, and TTL expiration, instead of\n racy application-level read-then-write SQL.\n- Composable key prefixes for organizing the keyspace.\n\nReach for raw `std/sqlite` when your data is genuinely relational — multiple\ncolumns, joins, ad-hoc queries, secondary indexes — rather than values addressed\nby a single key.\n\nThe three are complementary: Townstash for keyed reads, counters, and small\nstructured values; blob for bulk writes and big files; raw SQLite when you need\nSQL.\n\n## Usage\n\nImport the canonical client from the `townstash` library val:\n\n```ts\nimport { stash } from \"townstash\";\n\nawait stash.set(\"greeting\", \"Hello, Val Town!\");\nconst greeting = await stash.get(\"greeting\"); // string | undefined\n\nconst bytes = new Uint8Array([0, 255, 128, 1]);\nawait stash.setBytes(\"payload\", bytes);\nconst storedBytes = await stash.getBytes(\"payload\");\n\nawait stash.setJSON(\"user:123\", { name: \"Ada\", roles: [\"admin\"] });\nconst user = await stash.getJSON<{ name: string; roles: string[] }>(\"user:123\");\n```\n\n`get` decodes a stored value as UTF-8 text. Use `getBytes` and `setBytes` when\nthe value is arbitrary binary data. JSON helpers use `JSON.stringify` and\n`JSON.parse` over the same string representation. A top-level value that\nserializes to `undefined` is rejected, and malformed stored JSON raises a\n`SyntaxError`.\n\n## Writes and key lifecycle\n\n`set` and `setBytes` return `true` when they write and `false` when a condition\nprevents the write:\n\n```ts\nconst claimed = await stash.set(\"job:123\", \"claimed\", {\n nx: true,\n ttlMs: 30_000,\n});\n\nawait stash.set(\"job:123\", \"finished\", { xx: true, keepTtl: true });\n\nawait stash.expire(\"job:123\", 60_000);\nawait stash.expireAt(\"job:123\", new Date(Date.now() + 60_000));\nconst remainingMs = await stash.ttl(\"job:123\");\nawait stash.persist(\"job:123\");\n```\n\n`nx` means only if absent and `xx` means only if present. They are mutually\nexclusive. `ttlMs` is relative to the timestamp sampled immediately before the\natomic database command executes; `expiresAt` is an absolute `Date`; the two\nexpiration forms are mutually exclusive. A normal replacement clears an existing\nexpiration unless `keepTtl` is supplied.\n\nExpiration is lazy. Every command that observes existence treats a key whose\nexpiration is at or before the current time as missing, even when its SQLite row\nhas not been cleaned up. `ttl` returns the remaining milliseconds for a visible\nexpiring key, `-1` for a visible persistent key, and `undefined` for a missing\nor expired key. `exists` returns a boolean, `type` returns `\"string\"` or\n`\"none\"`, and `del` returns the number of visible keys removed:\n\n```ts\nif (await stash.exists(\"job:123\")) {\n console.log(await stash.type(\"job:123\"));\n}\n\nconst removed = await stash.del(\"job:123\", \"job:missing\");\nawait stash.cleanup(); // storage reclamation; not required for correctness\n```\n\n## Counters and prefixes\n\nCounters are string values interpreted as canonical signed 64-bit integers.\nMissing and expired keys start at zero. `incr` and `decr` accept optional signed\n`number` or `bigint` amounts, preserve a visible expiration, and return the\nresult as an exact `bigint`:\n\n```ts\nconst visits = await stash.incr(\"visits\"); // 1n\nawait stash.incr(\"visits\", 4);\nawait stash.decr(\"visits\", 2n);\nawait stash.decr(\"visits\", -1); // increments by one\n```\n\n`bigint` is JavaScript's exact integer primitive, but it is a different type\nfrom `number`. Use bigint literals for arithmetic and strict comparisons, such\nas `visits + 1n` and `visits === 1n`. A consumer that requires a `number` can\nconvert with https://www.val.town/x/nbbaier/townstash/code/src/stash.ts#L440,\nwhich throws a `RangeError` instead of silently losing precision outside\nJavaScript's safe-integer range:\n\n```ts\nimport { toSafeNumber } from \"townstash\";\n\nconst visitsAsNumber = toSafeNumber(await stash.incr(\"visits\"));\n```\n\n`JSON.stringify` does not serialize `bigint` directly. Convert it to a decimal\nstring, or to a safely bounded `number`, before including it in JSON:\n\n```ts\nJSON.stringify({ visits: exactVisits.toString() });\n```\n\nNon-integer values, non-integer number amounts, out-of-range amounts, wrong-type\nvalues, and signed 64-bit overflow fail without mutating the stored value.\n\nPrefixes are transparent key helpers over one flat keyspace:\n\n```ts\nconst sessions = stash.withPrefix(\"session:\");\nawait sessions.set(\"abc\", \"payload\");\nawait stash.get(\"session:abc\");\n\nconst versioned = sessions.withPrefix(\"v1:\");\nawait versioned.set(\"abc\", \"next\"); // stores session:v1:abc\n```\n\nA prefix is not a persisted namespace, isolation boundary, or authorization\nmechanism. The complete prefixed key remains directly addressable through an\nunprefixed client.\n\n## v1 contract\n\n- The keyspace is flat. The v1 value type is a binary-safe byte sequence; text,\n JSON, and counters are conveniences or interpretations of that value.\n- Conditional writes, counter updates, and other existence-dependent commands\n determine their result atomically at SQLite execution time. Application-level\n read-then-write sequences are not part of the correctness guarantee.\n- Each library-val instance uses its own val-scoped SQLite database. Schema\n initialization is idempotent and preserves existing v1 rows when repeated. v1\n has no versioned migration path; future schema changes must add an explicit\n migration before they are supported.\n- `stash` includes string and byte reads/writes, JSON helpers, conditional\n writes, deletion, existence and type inspection, expiration management,\n cleanup, counters, and compositional prefixes.\n\nTownstash deliberately does not provide RESP or server compatibility, blocking\noperations, pub/sub, Lua or Redis Functions, replication, clustering, eviction\npolicies, distributed locks stronger than the documented atomic commands, or\nfirst-class hashes, sets, sorted sets, lists, and streams in v1. Those\ncollection types require dedicated storage and command semantics rather than\nmutable JSON strings.\n",[],[303],"a29aaa46-7975-4648-bf76-b5099f41643e","CLAUDE.md","3fe7f42c-7dba-11f1-adbf-1607ee4eb77e",157,["D",1783879967783],3,"## Agent skills\n\n### Issue tracker\n\nIssues and PRDs live as markdown files under `docs/issues//`. See\n`docs/agents/issue-tracker.md`.\n\n### Triage labels\n\nDefault label vocabulary (`needs-triage`, `needs-info`, `ready-for-agent`,\n`ready-for-human`, `wontfix`) used as-is. See `docs/agents/triage-labels.md`.\n\n### Domain docs\n\nSingle-context: one `CONTEXT.md` + `docs/adr/` at the repo root. See\n`docs/agents/domain.md`.\n\n## Testing\n\nTests split by where they run. Local unit tests (like `src/stash_test.ts`) use\n`Deno.test` and run with `deno test`. Tests that must run on Val Town (like\n`main_test.ts`) use a plain top-level script runner instead. See\n`docs/adr/0004-plain-script-tests-for-val-town.md`.\n",[],[312],"98f9c675-565b-4843-8c2d-06a1f6856412","BENCHMARKS.md","97477f04-7e22-11f1-af5c-1607ee4eb77e",169,["D",1783882245610],"# Townstash vs blob storage benchmarks\n\nTownstash and Val Town's `std/blob` are both val-scoped, network-backed\npersistence layers, so \"which is faster\" has a real answer for a given workload.\nThis document records that comparison. The harness is `bench.ts` at the repo\nroot; regenerate these numbers by running it on Val Town (not locally — every\noperation is a network round trip, so laptop measurements only time your own\nuplink, not the backend).\n\n## Method\n\n`bench.ts` is a plain-script val (see\n`docs/adr/0004-plain-script-tests-for-val-town.md`). For each operation it\ndiscards a warmup, times 50 samples, and repeats that 3 times, reporting the\n**median across runs** of p50/p95/p99/mean. Latency rows show a `[min–max]`\nbracket next to the median p50: the spread of the three runs' own p50s, so\nrun-to-run noise is visible rather than hidden behind a single number. Every key\nis written under a per-run UUID prefix and deleted in a `finally` block.\n\nOperations covered: core `set`/`get` at 64 B / 4 KB / 256 KB, isolated `del`\n(keys pre-seeded so only the delete is timed), JSON helpers, counter increment\n(atomic `stash.incr` vs a blob get→+1→set), and a concurrent-write throughput\nsweep at width 1/5/10/20/50.\n\nCaveats: single machine, single region, one sitting. The p95/p99 tails are noisy\n— treat them as order-of-magnitude, not precise. Rankings below hold only where\nthe `[min–max]` spread is tight; where it is wide (e.g. `setJSON`) the two\nbackends are effectively tied.\n\n## Results\n\nLatencies are median-of-3-runs p50, in milliseconds. Lower is better; **bold**\nmarks a clear winner (gap larger than the run-to-run spread).\n\n| Operation | stash (ms) | blob (ms) | Winner |\n| ----------------- | ---------: | --------: | ------------- |\n| set 64 B | 46.0 | 47.0 | tie |\n| get 64 B | **19.7** | 60.0 | **stash ~3×** |\n| set 4 KB | 39.9 | 48.9 | tie |\n| get 4 KB | **13.2** | 35.9 | **stash ~3×** |\n| set 256 KB | 42.5 | 48.1 | tie |\n| get 256 KB | **13.3** | 40.9 | **stash ~3×** |\n| del (isolated) | 27.3 | 26.1 | tie |\n| setJSON | 42.6 | 49.9 | tie (noisy) |\n| getJSON | **12.5** | 44.7 | **stash ~3×** |\n| counter increment | **45.8** | 101.9 | **stash ~2×** |\n\nConcurrent set throughput (ops/sec, higher is better):\n\n| Width | stash | blob | blob / stash |\n| ----: | ----: | ---: | -----------: |\n| 1 | 31 | 20 | 0.64× |\n| 5 | 30 | 62 | 2.08× |\n| 10 | 45 | 108 | 2.41× |\n| 20 | 48 | 78 | 1.64× |\n| 50 | 52 | 139 | 2.70× |\n\n(An earlier single-run pass showed the same shape — stash ahead at width 1, blob\n2–4× ahead by width 20+. The width-20 dip above is run noise, not a reversal.)\n\n## Findings\n\n- **Reads favor Townstash decisively — even for large values.** `get`/`getJSON`\n are ~3× faster across all payload sizes, including 256 KB (13 vs 41 ms).\n SQLite reads out of a warm val-scoped database beat an object-storage fetch at\n every size tested.\n- **Single writes are a tie.** `set` at all sizes lands within the run-to-run\n spread of blob. Neither backend is meaningfully faster for one write at a\n time.\n- **`del` is a tie** (~27 ms) once measured in isolation. (A combined set+del\n pass reads as ~2× that — don't mistake it for delete latency.)\n- **The atomic counter is ~2× faster and correct.** `stash.incr` is one atomic\n round trip; the blob equivalent is get→+1→set — two round trips _and_ racy\n under concurrency, so the latency gap understates the real difference.\n- **Blob wins concurrent write throughput.** Past ~5 concurrent writers blob\n pulls 2–3× ahead while Townstash plateaus around 30–52 ops/s. That ceiling is\n SQLite's single-writer model: concurrent writes serialize on one connection,\n whereas object storage fans them out. At width 1, stash's lower per-op latency\n still wins.\n\n**Bottom line:** reach for Townstash on read-heavy, counter-heavy, or\nlow-write-concurrency workloads; reach for blob when you need high concurrent\nwrite throughput or are storing large opaque assets. They are complementary, not\nsubstitutes.\n\nRaw run logs:\n\n- [`docs/benchmarks/2026-07-12-run-1-initial-draft.txt`](./docs/benchmarks/2026-07-12-run-1-initial-draft.txt)\n — first pass; single run, `del` measured as set+del.\n- [`docs/benchmarks/2026-07-12-run-2-tightened.txt`](./docs/benchmarks/2026-07-12-run-2-tightened.txt)\n — the run the tables above report.\n\nRe-run `bench.ts` on Val Town to reproduce.\n",[],[321],"2ce03feb-8f0e-4183-a643-10ab182431a1","AGENTS.md","3fda9822-7dba-11f1-a60b-1607ee4eb77e",159,["D",1783879967584],4,[],[329],"7529ead0-4fee-4931-9ae8-38a0877f8a58",".vtignore","365e30b4-7dac-11f1-904e-1607ee4eb77e",40,["D",1783831402416],".git\n.vscode\n.cursor\n.claude\n.DS_Store\nnode_modules\nvendor",[],[337],"5aba41c7-8266-46de-b146-966f5cb84da2","stash_test.ts","5a4ea65c-7e06-11f1-8f58-1607ee4eb77e","59dbb9bc-7e06-11f1-ae23-1607ee4eb77e",267,["D",1783957548393],12,"import { DatabaseSync } from \"node:sqlite\";\nimport type { Client, InStatement } from \"npm:@libsql/client@0.17.2\";\nimport {\n createStash,\n type SqliteClient,\n type SqlStatement,\n toSafeNumber,\n} from \"./stash.ts\";\nimport { sqliteClientConformanceCases } from \"./sqlite_conformance.ts\";\n\ntype Assert = T;\ntype IsAssignable = [From] extends [To] ? true : false;\n\n// Compile-time-only tests: these aliases are never referenced. They exist so\n// `deno check` fails if townstash's structural SqliteClient/SqlStatement types\n// drift from the real Val Town client (std/sqlite is @libsql/client).\ntype LibsqlClientMatchesSeam = Assert<\n IsAssignable\n>;\n\ntype TownstashStatementMatchesLibsql = Assert<\n IsAssignable\n>;\n\ntype NodeSqliteNamedArgs = Record<\n string,\n string | number | bigint | null | Uint8Array\n>;\n\nfunction sqliteAdapter(database: DatabaseSync): SqliteClient {\n const execute = (statement: string | SqlStatement) => {\n const { sql, args = [] } = typeof statement === \"string\"\n ? { sql: statement, args: [] }\n : statement;\n const prepared = database.prepare(sql);\n // The row-returning call works for every statement kind in node:sqlite,\n // returning an empty array for row-less statements (INSERT/UPDATE/DELETE/\n // DDL), so the adapter always takes it instead of sniffing the SQL text.\n const rows = Array.isArray(args)\n ? prepared.all(...(args as Parameters))\n : prepared.all(args as NodeSqliteNamedArgs);\n return Promise.resolve({ rows: rows as Record[] });\n };\n\n return {\n execute,\n async batch(statements) {\n database.exec(\"BEGIN\");\n try {\n for (const statement of statements) await execute(statement);\n database.exec(\"COMMIT\");\n } catch (error) {\n database.exec(\"ROLLBACK\");\n throw error;\n }\n },\n };\n}\n\nfunction assertEquals(actual: unknown, expected: unknown): void {\n const serialize = (value: unknown) =>\n typeof value === \"bigint\" ? `${value}n` : JSON.stringify(value);\n const equal = typeof actual === \"bigint\" || typeof expected === \"bigint\"\n ? actual === expected\n : serialize(actual) === serialize(expected);\n if (!equal) {\n throw new Error(\n `Expected ${serialize(expected)}, got ${serialize(actual)}`,\n );\n }\n}\n\nconst counterRejectionMessage =\n \"Townstash counter update rejected invalid state or signed 64-bit overflow\";\n\nasync function assertCounterRejected(\n operation: () => Promise,\n): Promise {\n try {\n await operation();\n } catch (error) {\n if (!(error instanceof Error)) throw error;\n assertEquals(error.message, counterRejectionMessage);\n return;\n }\n throw new Error(\"Expected counter update to be rejected\");\n}\n\nfunction testClient() {\n const database = new DatabaseSync(\":memory:\");\n return { database, stash: createStash(sqliteAdapter(database)) };\n}\n\nfunction controlledClient(start = 1_000) {\n const database = new DatabaseSync(\":memory:\");\n let now = start;\n const stash = createStash(sqliteAdapter(database), { now: () => now });\n return {\n database,\n stash,\n setNow(value: number) {\n now = value;\n },\n };\n}\n\nDeno.test(\"representative v1 workflow uses the public client on real SQLite\", async () => {\n const { stash } = controlledClient();\n const sessions = stash.withPrefix(\"release:\");\n\n assertEquals(\n await sessions.set(\"user:123\", \"Ada\", { nx: true, ttlMs: 60_000 }),\n true,\n );\n assertEquals(await sessions.get(\"user:123\"), \"Ada\");\n assertEquals(await stash.get(\"release:user:123\"), \"Ada\");\n assertEquals(await sessions.exists(\"user:123\"), true);\n assertEquals(await sessions.type(\"user:123\"), \"string\");\n assertEquals(await sessions.ttl(\"user:123\"), 60_000);\n\n assertEquals(await sessions.setJSON(\"profile:123\", { plan: \"pro\" }), true);\n assertEquals(await sessions.getJSON(\"profile:123\"), { plan: \"pro\" });\n\n assertEquals(await sessions.incr(\"visits\", 2), 2n);\n assertEquals(await sessions.decr(\"visits\", -1), 3n);\n assertEquals(await sessions.persist(\"visits\"), false);\n assertEquals(await sessions.del(\"user:123\", \"profile:123\", \"visits\"), 3);\n assertEquals(await sessions.exists(\"user:123\"), false);\n});\n\nDeno.test(\"text values round-trip and missing values are undefined\", async () => {\n const { stash } = testClient();\n assertEquals(await stash.get(\"missing\"), undefined);\n assertEquals(await stash.set(\"greeting\", \"Hello, 🌎\"), true);\n assertEquals(await stash.get(\"greeting\"), \"Hello, 🌎\");\n});\n\nDeno.test(\"bytes round-trip without UTF-8 conversion or shared mutation\", async () => {\n const { stash } = testClient();\n const input = new Uint8Array([0, 255, 128, 1]);\n assertEquals(await stash.getBytes(\"missing\"), undefined);\n await stash.setBytes(\"binary\", input);\n input[0] = 99;\n const output = await stash.getBytes(\"binary\");\n assertEquals(Array.from(output ?? []), [0, 255, 128, 1]);\n if (output) output[1] = 42;\n assertEquals(\n Array.from((await stash.getBytes(\"binary\")) ?? []),\n [0, 255, 128, 1],\n );\n});\n\nDeno.test(\"JSON helpers round-trip values and preserve write options\", async () => {\n const { stash, setNow } = controlledClient();\n\n assertEquals(await stash.getJSON(\"missing\"), undefined);\n assertEquals(\n await stash.setJSON(\n \"profile\",\n { name: \"Ada\", roles: [\"admin\", \"author\"] },\n { nx: true, ttlMs: 100 },\n ),\n true,\n );\n assertEquals(\n await stash.setJSON(\"profile\", { name: \"Grace\" }, { nx: true }),\n false,\n );\n assertEquals(await stash.getJSON(\"profile\"), {\n name: \"Ada\",\n roles: [\"admin\", \"author\"],\n });\n assertEquals(await stash.ttl(\"profile\"), 100);\n\n setNow(1_100);\n assertEquals(await stash.getJSON(\"profile\"), undefined);\n assertEquals(\n await stash.setJSON(\"profile\", { name: \"Grace\" }, { xx: true }),\n false,\n );\n\n await stash.set(\"malformed\", \"not JSON\");\n try {\n await stash.getJSON(\"malformed\");\n throw new Error(\"Expected malformed JSON to fail\");\n } catch (error) {\n if (!(error instanceof SyntaxError)) throw error;\n }\n assertEquals(await stash.get(\"malformed\"), \"not JSON\");\n\n try {\n await stash.setJSON(\"undefined\", undefined);\n throw new Error(\"Expected undefined JSON to fail\");\n } catch (error) {\n if (!(error instanceof TypeError)) throw error;\n }\n assertEquals(await stash.exists(\"undefined\"), false);\n});\n\nDeno.test(\"prefixed clients use the flat keyspace and compose in call order\", async () => {\n const { stash } = testClient();\n const tenant = stash.withPrefix(\"tenant:\");\n\n await tenant.setJSON(\"profile\", { plan: \"pro\" });\n assertEquals(await stash.get(\"tenant:profile\"), '{\"plan\":\"pro\"}');\n assertEquals(await tenant.getJSON(\"profile\"), { plan: \"pro\" });\n assertEquals(await stash.get(\"profile\"), undefined);\n\n await tenant.set(\"one\", \"1\");\n await stash.set(\"tenant:two\", \"2\");\n assertEquals(await tenant.exists(\"one\"), true);\n assertEquals(await tenant.type(\"two\"), \"string\");\n assertEquals(await tenant.del(\"one\", \"two\", \"missing\"), 2);\n assertEquals(await stash.exists(\"tenant:one\"), false);\n assertEquals(await stash.exists(\"tenant:two\"), false);\n\n const nested = tenant.withPrefix(\"v1:\");\n await nested.set(\"key\", \"value\");\n assertEquals(await stash.get(\"tenant:v1:key\"), \"value\");\n assertEquals(await stash.get(\"v1:key\"), undefined);\n});\n\nDeno.test(\"prefixed clients forward lifecycle, bytes, and counter commands\", async () => {\n const { stash, setNow } = controlledClient();\n const prefixed = stash.withPrefix(\"app:\");\n\n await prefixed.setBytes(\"binary\", new Uint8Array([1, 2]), { ttlMs: 100 });\n assertEquals(Array.from((await prefixed.getBytes(\"binary\")) ?? []), [1, 2]);\n assertEquals(await prefixed.ttl(\"binary\"), 100);\n assertEquals(await prefixed.expire(\"binary\", 200), true);\n assertEquals(await stash.ttl(\"app:binary\"), 200);\n assertEquals(await prefixed.persist(\"binary\"), true);\n assertEquals(await prefixed.ttl(\"binary\"), -1);\n\n assertEquals(await prefixed.incr(\"counter\", 2), 2n);\n assertEquals(await prefixed.decr(\"counter\"), 1n);\n assertEquals(await prefixed.expireAt(\"counter\", new Date(2_000)), true);\n assertEquals(await stash.ttl(\"app:counter\"), 1_000);\n\n await prefixed.set(\"expired\", \"value\", { ttlMs: 1 });\n setNow(1_001);\n assertEquals(await prefixed.cleanup(), 1);\n assertEquals(await stash.exists(\"app:expired\"), false);\n});\n\nDeno.test(\"initialization is repeatable and preserves stored data\", async () => {\n const database = new DatabaseSync(\":memory:\");\n const adapter = sqliteAdapter(database);\n const first = createStash(adapter);\n await first.set(\"key\", \"value\");\n const second = createStash(adapter);\n assertEquals(await second.get(\"key\"), \"value\");\n});\n\nDeno.test(\"initialization retries after a transient schema failure\", async () => {\n const database = new DatabaseSync(\":memory:\");\n const base = sqliteAdapter(database);\n let attempts = 0;\n const stash = createStash({\n execute: base.execute,\n batch(statements) {\n attempts += 1;\n if (attempts === 1) {\n return Promise.reject(new Error(\"transient schema failure\"));\n }\n return base.batch(statements);\n },\n });\n\n try {\n await stash.get(\"key\");\n throw new Error(\"Expected initialization to fail\");\n } catch (error) {\n if (!(error instanceof Error)) throw error;\n assertEquals(error.message, \"transient schema failure\");\n }\n\n assertEquals(await stash.get(\"key\"), undefined);\n assertEquals(attempts, 2);\n});\n\nDeno.test(\"replacement clears expiration unless keepTtl is requested\", async () => {\n const { database, stash } = controlledClient();\n await stash.set(\"key\", \"first\");\n database\n .prepare(\"UPDATE stash_keys SET expires_at = 1_100 WHERE key = ?\")\n .run(\"key\");\n await stash.set(\"key\", \"second\", { keepTtl: true });\n assertEquals(\n (\n database\n .prepare(\"SELECT expires_at FROM stash_keys WHERE key = ?\")\n .get(\"key\") as { expires_at: number }\n ).expires_at,\n 1_100,\n );\n await stash.set(\"key\", \"third\");\n assertEquals(\n (\n database\n .prepare(\"SELECT expires_at FROM stash_keys WHERE key = ?\")\n .get(\"key\") as { expires_at: number | null }\n ).expires_at,\n null,\n );\n assertEquals(await stash.get(\"key\"), \"third\");\n});\n\nDeno.test(\"conditional set reports whether it wrote and preserves failed values\", async () => {\n const { stash } = testClient();\n\n assertEquals(await stash.set(\"missing\", \"claimed\", { nx: true }), true);\n assertEquals(await stash.set(\"missing\", \"replaced\", { nx: true }), false);\n assertEquals(await stash.get(\"missing\"), \"claimed\");\n\n assertEquals(await stash.set(\"missing\", \"updated\", { xx: true }), true);\n assertEquals(await stash.get(\"missing\"), \"updated\");\n assertEquals(await stash.set(\"other\", \"created\", { xx: true }), false);\n assertEquals(await stash.get(\"other\"), undefined);\n});\n\nDeno.test(\"set supports relative and absolute expiration\", async () => {\n const { stash, setNow } = controlledClient();\n\n assertEquals(await stash.set(\"relative\", \"value\", { ttlMs: 5_000 }), true);\n assertEquals(await stash.ttl(\"relative\"), 5_000);\n assertEquals(await stash.exists(\"relative\"), true);\n assertEquals(await stash.type(\"relative\"), \"string\");\n\n setNow(5_999);\n assertEquals(await stash.ttl(\"relative\"), 1);\n setNow(6_000);\n assertEquals(await stash.get(\"relative\"), undefined);\n assertEquals(await stash.exists(\"relative\"), false);\n assertEquals(await stash.type(\"relative\"), \"none\");\n assertEquals(await stash.ttl(\"relative\"), undefined);\n\n assertEquals(\n await stash.set(\"absolute\", \"value\", { expiresAt: new Date(8_000) }),\n true,\n );\n assertEquals(await stash.ttl(\"absolute\"), 2_000);\n});\n\nDeno.test(\"expiration validation happens before database execution\", async () => {\n const database = new DatabaseSync(\":memory:\");\n const base = sqliteAdapter(database);\n let calls = 0;\n const stash = createStash(\n {\n execute(statement) {\n calls += 1;\n return base.execute(statement);\n },\n batch(statements) {\n calls += 1;\n return base.batch(statements);\n },\n },\n { now: () => 1_000 },\n );\n\n try {\n await stash.set(\"key\", \"value\", {\n ttlMs: 1_000,\n expiresAt: new Date(2_000),\n });\n throw new Error(\"Expected incompatible expiration options to fail\");\n } catch (error) {\n if (!(error instanceof TypeError)) throw error;\n }\n assertEquals(calls, 0);\n});\n\nDeno.test(\"relative expiration starts after schema initialization\", async () => {\n const database = new DatabaseSync(\":memory:\");\n const base = sqliteAdapter(database);\n let now = 1_000;\n const stash = createStash(\n {\n execute: base.execute,\n async batch(statements) {\n now += 500;\n return await base.batch(statements);\n },\n },\n { now: () => now },\n );\n\n await stash.set(\"delayed\", \"value\", { ttlMs: 1_000 });\n assertEquals(await stash.ttl(\"delayed\"), 1_000);\n});\n\nDeno.test(\"expire, persist, and ttl manage a visible key\", async () => {\n const { stash, setNow } = controlledClient();\n\n await stash.set(\"key\", \"value\");\n assertEquals(await stash.ttl(\"key\"), -1);\n assertEquals(await stash.expire(\"key\", 2_000), true);\n assertEquals(await stash.ttl(\"key\"), 2_000);\n\n setNow(2_000);\n assertEquals(await stash.persist(\"key\"), true);\n assertEquals(await stash.ttl(\"key\"), -1);\n assertEquals(await stash.persist(\"key\"), false);\n\n assertEquals(await stash.expire(\"missing\", 1_000), false);\n assertEquals(await stash.expireAt(\"missing\", new Date(4_000)), false);\n});\n\nDeno.test(\"expired keys are absent from lifecycle commands\", async () => {\n const { stash, setNow } = controlledClient();\n\n await stash.set(\"expired\", \"value\", { ttlMs: 10 });\n setNow(1_010);\n assertEquals(await stash.expire(\"expired\", 1_000), false);\n assertEquals(await stash.expireAt(\"expired\", new Date(5_000)), false);\n assertEquals(await stash.persist(\"expired\"), false);\n assertEquals(await stash.del(\"expired\"), 0);\n assertEquals(await stash.ttl(\"expired\"), undefined);\n assertEquals(await stash.cleanup(), 1);\n assertEquals(await stash.cleanup(), 0);\n});\n\nDeno.test(\"keepTtl preserves only a visible expiration\", async () => {\n const { stash, setNow } = controlledClient();\n\n await stash.set(\"visible\", \"first\", { ttlMs: 100 });\n setNow(1_050);\n assertEquals(await stash.set(\"visible\", \"second\", { keepTtl: true }), true);\n assertEquals(await stash.ttl(\"visible\"), 50);\n\n setNow(1_100);\n assertEquals(await stash.set(\"visible\", \"third\", { keepTtl: true }), true);\n assertEquals(await stash.ttl(\"visible\"), -1);\n});\n\nDeno.test(\"del counts distinct visible keys and cleanup only reclaims expired rows\", async () => {\n const { database, stash, setNow } = controlledClient();\n\n await stash.set(\"one\", \"1\");\n await stash.set(\"two\", \"2\", { ttlMs: 10 });\n await stash.set(\"three\", \"3\");\n setNow(1_010);\n\n assertEquals(await stash.del(\"one\", \"one\", \"two\", \"missing\"), 1);\n assertEquals(await stash.get(\"two\"), undefined);\n assertEquals(await stash.cleanup(), 1);\n assertEquals(\n (\n database.prepare(\"SELECT COUNT(*) AS count FROM stash_keys\").get() as {\n count: number;\n }\n ).count,\n 1,\n );\n assertEquals(await stash.get(\"three\"), \"3\");\n});\n\nDeno.test(\"conditional set works for byte values and expired keys\", async () => {\n const { database, stash } = testClient();\n await stash.setBytes(\"binary\", new Uint8Array([1, 2]), { nx: true });\n assertEquals(\n await stash.setBytes(\"binary\", new Uint8Array([3, 4]), { nx: true }),\n false,\n );\n assertEquals(Array.from((await stash.getBytes(\"binary\")) ?? []), [1, 2]);\n\n database\n .prepare(\"UPDATE stash_keys SET expires_at = ? WHERE key = ?\")\n .run(Date.now() - 1, \"binary\");\n assertEquals(\n await stash.setBytes(\"binary\", new Uint8Array([3, 4]), { nx: true }),\n true,\n );\n assertEquals(Array.from((await stash.getBytes(\"binary\")) ?? []), [3, 4]);\n assertEquals(\n await stash.setBytes(\"binary\", new Uint8Array([5, 6]), { xx: true }),\n true,\n );\n assertEquals(Array.from((await stash.getBytes(\"binary\")) ?? []), [5, 6]);\n});\n\nDeno.test(\"incompatible conditions fail before database execution\", async () => {\n const database = new DatabaseSync(\":memory:\");\n const base = sqliteAdapter(database);\n let calls = 0;\n const stash = createStash({\n execute(statement) {\n calls += 1;\n return base.execute(statement);\n },\n batch(statements) {\n calls += 1;\n return base.batch(statements);\n },\n });\n\n try {\n await stash.set(\"key\", \"value\", { nx: true, xx: true });\n throw new Error(\"Expected incompatible set conditions to fail\");\n } catch (error) {\n if (!(error instanceof TypeError)) throw error;\n }\n assertEquals(calls, 0);\n});\n\nDeno.test(\"competing nx writes have exactly one winner on the real adapter\", async () => {\n const { stash } = testClient();\n const attempts = await Promise.all(\n Array.from(\n { length: 32 },\n (_, index) => stash.set(\"lock\", `winner-${index}`, { nx: true }),\n ),\n );\n\n assertEquals(attempts.filter(Boolean).length, 1);\n const winner = await stash.get(\"lock\");\n if (!winner?.startsWith(\"winner-\")) {\n throw new Error(`Expected a competing write to win, got ${winner}`);\n }\n});\n\nDeno.test(\"counters support signed increments and decrements\", async () => {\n const { stash } = testClient();\n\n assertEquals(await stash.incr(\"counter\"), 1n);\n assertEquals(await stash.incr(\"counter\", 4), 5n);\n assertEquals(await stash.decr(\"counter\"), 4n);\n assertEquals(await stash.decr(\"counter\", -3), 7n);\n assertEquals(await stash.get(\"counter\"), \"7\");\n});\n\nDeno.test(\"counters preserve visible TTLs and reset expired values from zero\", async () => {\n const { stash, setNow } = controlledClient();\n\n await stash.set(\"counter\", \"5\", { ttlMs: 100 });\n setNow(1_050);\n assertEquals(await stash.incr(\"counter\"), 6n);\n assertEquals(await stash.ttl(\"counter\"), 50);\n\n setNow(1_100);\n assertEquals(await stash.incr(\"counter\"), 1n);\n assertEquals(await stash.get(\"counter\"), \"1\");\n assertEquals(await stash.ttl(\"counter\"), -1);\n});\n\nDeno.test(\"invalid counter state and overflow do not mutate values\", async () => {\n const { stash } = testClient();\n\n await stash.set(\"non-canonical\", \"01\");\n await assertCounterRejected(() => stash.incr(\"non-canonical\"));\n assertEquals(await stash.get(\"non-canonical\"), \"01\");\n\n await stash.set(\"maximum-boundary\", \"9223372036854775806\");\n await stash.incr(\"maximum-boundary\");\n assertEquals(await stash.get(\"maximum-boundary\"), \"9223372036854775807\");\n\n await stash.set(\"maximum\", \"9223372036854775807\");\n await assertCounterRejected(() => stash.incr(\"maximum\"));\n assertEquals(await stash.get(\"maximum\"), \"9223372036854775807\");\n\n await stash.set(\"minimum-boundary\", \"-9223372036854775807\");\n await stash.decr(\"minimum-boundary\");\n assertEquals(await stash.get(\"minimum-boundary\"), \"-9223372036854775808\");\n\n await stash.set(\"minimum\", \"-9223372036854775808\");\n await assertCounterRejected(() => stash.decr(\"minimum\"));\n assertEquals(await stash.get(\"minimum\"), \"-9223372036854775808\");\n});\n\nDeno.test(\"counters return exact signed 64-bit results\", async () => {\n const { stash } = testClient();\n\n await stash.set(\"large\", \"9007199254740992\");\n assertEquals(await stash.incr(\"large\"), 9007199254740993n);\n assertEquals(await stash.get(\"large\"), \"9007199254740993\");\n\n assertEquals(\n await stash.incr(\"bigint-amount\", 9007199254740993n),\n 9007199254740993n,\n );\n\n await stash.set(\"maximum-boundary\", \"9223372036854775806\");\n assertEquals(await stash.incr(\"maximum-boundary\"), 9223372036854775807n);\n});\n\nDeno.test(\"counter failures are classified from the attempted command\", async () => {\n const { stash } = testClient();\n await stash.set(\"counter\", \"01\");\n\n const [increment, replacement] = await Promise.allSettled([\n stash.incr(\"counter\"),\n stash.set(\"counter\", \"0\"),\n ]);\n\n assertEquals(increment.status, \"rejected\");\n if (increment.status !== \"rejected\") {\n throw new Error(\"Expected the invalid counter increment to fail\");\n }\n if (!(increment.reason instanceof Error)) throw increment.reason;\n assertEquals(\n increment.reason.message,\n counterRejectionMessage,\n );\n assertEquals(replacement, { status: \"fulfilled\", value: true });\n assertEquals(await stash.get(\"counter\"), \"0\");\n});\n\nDeno.test(\"counter amounts and wrong types are rejected without mutation\", async () => {\n const { database, stash } = testClient();\n\n await stash.set(\"amount\", \"4\");\n try {\n await stash.incr(\"amount\", 1.5);\n throw new Error(\"Expected a non-integer counter amount to fail\");\n } catch (error) {\n if (!(error instanceof TypeError)) throw error;\n }\n assertEquals(await stash.get(\"amount\"), \"4\");\n\n try {\n await stash.incr(\"amount\", 9223372036854775808n);\n throw new Error(\"Expected an out-of-range counter amount to fail\");\n } catch (error) {\n if (!(error instanceof RangeError)) throw error;\n }\n assertEquals(await stash.get(\"amount\"), \"4\");\n\n try {\n await stash.decr(\"amount\", -9223372036854775808n);\n throw new Error(\"Expected an out-of-range counter delta to fail\");\n } catch (error) {\n if (!(error instanceof RangeError)) throw error;\n }\n assertEquals(await stash.get(\"amount\"), \"4\");\n\n database\n .prepare(\"UPDATE stash_keys SET type = ? WHERE key = ?\")\n .run(\"hash\", \"amount\");\n await assertCounterRejected(() => stash.incr(\"amount\"));\n try {\n await stash.getBytes(\"amount\");\n throw new Error(\"Expected a wrong-type read to fail\");\n } catch (error) {\n if (!(error instanceof TypeError)) throw error;\n }\n database\n .prepare(\"UPDATE stash_keys SET type = ? WHERE key = ?\")\n .run(\"string\", \"amount\");\n assertEquals(await stash.get(\"amount\"), \"4\");\n});\n\nDeno.test(\"overlapping increments lose no updates on the real adapter\", async () => {\n const { stash } = testClient();\n const results = await Promise.all(\n Array.from({ length: 32 }, () => stash.incr(\"counter\")),\n );\n\n assertEquals(results.length, 32);\n assertEquals(await stash.get(\"counter\"), \"32\");\n});\n\nDeno.test(\"toSafeNumber converts exact values and rejects unsafe ones\", async () => {\n const { stash } = testClient();\n\n assertEquals(toSafeNumber(await stash.incr(\"visits\")), 1);\n assertEquals(toSafeNumber(0n), 0);\n assertEquals(toSafeNumber(-42n), -42);\n assertEquals(toSafeNumber(BigInt(Number.MAX_SAFE_INTEGER)), 9007199254740991);\n assertEquals(\n toSafeNumber(BigInt(Number.MIN_SAFE_INTEGER)),\n -9007199254740991,\n );\n\n for (const unsafe of [2n ** 53n, -(2n ** 53n)]) {\n try {\n toSafeNumber(unsafe);\n throw new Error(\"Expected an unsafe conversion to fail\");\n } catch (error) {\n if (!(error instanceof RangeError)) throw error;\n }\n }\n});\n\nfor (const conformanceCase of sqliteClientConformanceCases) {\n Deno.test(`SqliteClient conformance: ${conformanceCase.name}`, async () => {\n const database = new DatabaseSync(\":memory:\");\n await conformanceCase.fn(sqliteAdapter(database));\n });\n}\n",[],[354,345],"src","963a61b6-db88-4b00-a340-2dbfcc8d5112","stash.ts","5a22163c-7e06-11f1-8f03-1607ee4eb77e",266,["D",1783957548316],23,"export type StashValue = string | Uint8Array;\n\nexport interface SetOptions {\n /** Expire the key this many milliseconds after command execution begins. */\n ttlMs?: number;\n /** Expire the key at this absolute instant. */\n expiresAt?: Date;\n /** Set only when the key is absent or expired. */\n nx?: boolean;\n /** Set only when the key exists and has not expired. */\n xx?: boolean;\n /** Preserve an existing key's expiration when replacing its value. */\n keepTtl?: boolean;\n}\n\nexport interface Stash {\n get(key: string): Promise;\n getBytes(key: string): Promise;\n getJSON(key: string): Promise;\n set(key: string, value: StashValue, options?: SetOptions): Promise;\n setBytes(\n key: string,\n value: Uint8Array,\n options?: SetOptions,\n ): Promise;\n setJSON(key: string, value: T, options?: SetOptions): Promise;\n del(...keys: string[]): Promise;\n exists(key: string): Promise;\n type(key: string): Promise<\"string\" | \"none\">;\n expire(key: string, ttlMs: number): Promise;\n expireAt(key: string, expiresAt: Date): Promise;\n persist(key: string): Promise;\n /** Returns remaining milliseconds, -1 for persistent keys, or undefined when absent. */\n ttl(key: string): Promise;\n /** Removes expired rows and returns the number of rows reclaimed. */\n cleanup(): Promise;\n incr(key: string, by?: number | bigint): Promise;\n decr(key: string, by?: number | bigint): Promise;\n withPrefix(prefix: string): Stash;\n}\n\nexport interface StashOptions {\n /** Internal test seam for deterministic expiration behavior. */\n now?: () => number;\n}\n\nexport interface SqlStatement {\n sql: string;\n args?: SqlValue[] | Record;\n}\n\nexport type SqlValue = string | number | bigint | boolean | null | Uint8Array;\n\nexport interface SqlResult {\n rows: Record[];\n}\n\nexport interface SqliteClient {\n /**\n * Executes one SQL statement.\n *\n * A `RETURNING` clause must surface its result rows through this method.\n * Statements without result rows must resolve to a result with an empty\n * `rows` array, never `undefined`.\n *\n * Named parameters bind from a record, including a single name reused at more\n * than one placeholder (ADR-0005).\n *\n * `bigint` argument values bind.\n *\n * A plain string is accepted and runs as a bare SQL statement, including DDL\n * such as `CREATE TABLE` — schema initialization depends on this.\n *\n * A stored blob comes back as bytes the core can normalize: a `Uint8Array` or\n * an `ArrayBuffer` are both conformant. The two adapters differ here, which is\n * why the `asBytes` helper exists.\n */\n execute(statement: string | SqlStatement): Promise;\n /**\n * Executes several statements atomically: a failing statement rolls back the\n * statements before it, leaving the database as if the batch never ran.\n */\n batch(statements: SqlStatement[]): Promise;\n}\n\nfunction defineStatement(sql: string) {\n return (\n args:\n & B\n & Record\n & Record, never>,\n ): SqlStatement => ({\n sql,\n args: args as Record,\n });\n}\n\nconst schemaStatements: SqlStatement[] = [\n {\n sql: `CREATE TABLE IF NOT EXISTS\n stash_keys (\n key TEXT PRIMARY KEY,\n type TEXT NOT NULL,\n value BLOB,\n expires_at INTEGER,\n version INTEGER NOT NULL DEFAULT 1\n )`,\n },\n {\n sql:\n `CREATE INDEX IF NOT EXISTS stash_keys_expiration ON stash_keys (expires_at)\nWHERE\n expires_at IS NOT NULL`,\n },\n];\n\ninterface SelectValueArgs {\n key: string;\n now: number;\n}\n\nconst selectValue = defineStatement(`SELECT\n TYPE,\n value\nFROM\n stash_keys\nWHERE\n KEY = :key\n AND (\n expires_at IS NULL\n OR expires_at > :now\n )`);\n\ninterface UpsertArgs {\n key: string;\n value: Uint8Array;\n expiresAt: number | null;\n mode: 0 | 1 | 2;\n now: number;\n keepTtl: 0 | 1;\n}\n\nconst upsertValue = defineStatement(`INSERT INTO\n stash_keys (KEY, TYPE, value, expires_at)\nSELECT\n :key,\n 'string',\n :value,\n :expiresAt\nWHERE\n :mode <> 2\n OR EXISTS (\n SELECT\n 1\n FROM\n stash_keys\n WHERE\n KEY = :key\n AND (\n expires_at IS NULL\n OR expires_at > :now\n )\n ) ON CONFLICT (KEY) DO\nUPDATE\nSET\n TYPE = 'string',\n value = excluded.value,\n expires_at = CASE\n WHEN :keepTtl\n AND (\n stash_keys.expires_at IS NULL\n OR stash_keys.expires_at > :now\n ) THEN stash_keys.expires_at\n ELSE excluded.expires_at\n END,\n version = stash_keys.version + 1\nWHERE\n :mode = 0\n OR (\n :mode = 1\n AND stash_keys.expires_at IS NOT NULL\n AND stash_keys.expires_at <= :now\n )\n OR (\n :mode = 2\n AND (\n stash_keys.expires_at IS NULL\n OR stash_keys.expires_at > :now\n )\n ) RETURNING 1 AS written\n`);\n\nconst visibleExpiration = `(expires_at IS NULL OR expires_at > :now)`;\n\ninterface IncrementArgs {\n key: string;\n delta: bigint;\n now: number;\n}\n\nconst incrementValue = defineStatement(`INSERT INTO\n stash_keys (key, type, value, expires_at)\nVALUES\n (\n :key,\n 'string',\n CAST(CAST(:delta AS INTEGER) AS BLOB),\n NULL\n ) ON CONFLICT (KEY) DO\nUPDATE\nSET\n TYPE = 'string',\n value = CASE\n WHEN stash_keys.expires_at IS NULL\n OR stash_keys.expires_at > :now THEN CAST(\n CAST(CAST(stash_keys.value AS TEXT) AS INTEGER) + CAST(excluded.value AS INTEGER) AS BLOB\n )\n ELSE excluded.value\n END,\n expires_at = CASE\n WHEN stash_keys.expires_at IS NULL\n OR stash_keys.expires_at > :now THEN stash_keys.expires_at\n ELSE NULL\n END,\n version = stash_keys.version + 1\nWHERE\n (\n stash_keys.expires_at IS NOT NULL\n AND stash_keys.expires_at <= :now\n )\n OR (\n (\n stash_keys.expires_at IS NULL\n OR stash_keys.expires_at > :now\n )\n AND stash_keys.type = 'string'\n AND CAST(stash_keys.value AS TEXT) = CAST(\n CAST(CAST(stash_keys.value AS TEXT) AS INTEGER) AS TEXT\n )\n AND (\n CAST(excluded.value AS INTEGER) = 0\n OR (\n CAST(excluded.value AS INTEGER) > 0\n AND CAST(CAST(stash_keys.value AS TEXT) AS INTEGER) <= CAST('9223372036854775807' AS INTEGER) - CAST(excluded.value AS INTEGER)\n )\n OR (\n CAST(excluded.value AS INTEGER) < 0\n AND CAST(CAST(stash_keys.value AS TEXT) AS INTEGER) >= CAST('-9223372036854775808' AS INTEGER) - CAST(excluded.value AS INTEGER)\n )\n )\n ) RETURNING CAST(value AS TEXT) AS result`);\n\ninterface ExistsArgs {\n key: string;\n now: number;\n}\n\nconst existsValue = defineStatement(`SELECT\n 1 AS present\nFROM\n stash_keys\nWHERE\n KEY = :key\n AND ${visibleExpiration}`);\n\ninterface TypeArgs {\n key: string;\n now: number;\n}\n\nconst typeValue = defineStatement(`SELECT\n TYPE\nFROM\n stash_keys\nWHERE\n KEY = :key\n AND ${visibleExpiration}`);\n\ninterface UpdateExpirationArgs {\n expiresAt: number;\n key: string;\n now: number;\n}\n\nconst updateExpirationValue = defineStatement(\n `UPDATE stash_keys\nSET\n expires_at = :expiresAt,\n version = version + 1\nWHERE\n KEY = :key\n AND ${visibleExpiration} RETURNING 1 AS updated`,\n);\n\ninterface PersistArgs {\n key: string;\n now: number;\n}\n\nconst persistValue = defineStatement(`UPDATE stash_keys\nSET\n expires_at = NULL,\n version = version + 1\nWHERE\n KEY = :key\n AND expires_at IS NOT NULL\n AND ${visibleExpiration} RETURNING 1 AS updated`);\n\ninterface TtlArgs {\n key: string;\n now: number;\n}\n\nconst ttlValue = defineStatement(`SELECT\n expires_at\nFROM\n stash_keys\nWHERE\n KEY = :key\n AND ${visibleExpiration}`);\n\ninterface CleanupArgs {\n now: number;\n}\n\nconst cleanupExpired = defineStatement(`DELETE FROM stash_keys\nWHERE\n expires_at IS NOT NULL\n AND expires_at <= :now RETURNING 1 AS deleted`);\n\nfunction deleteValues(keys: string[], now: number): SqlStatement {\n const keyNames = keys.map((_, index) => `key${index}`);\n const args: Record = { now };\n for (const [index, key] of keys.entries()) {\n args[`key${index}`] = key;\n }\n return {\n sql: `DELETE FROM stash_keys\nWHERE\n KEY IN (${keyNames.map((name) => `:${name}`).join(\", \")})\n AND ${visibleExpiration} RETURNING 1 AS deleted`,\n args,\n };\n}\n\nconst textEncoder = new TextEncoder();\nconst textDecoder = new TextDecoder();\n\nfunction asBytes(value: unknown): Uint8Array {\n if (value instanceof Uint8Array) return new Uint8Array(value);\n if (value instanceof ArrayBuffer) return new Uint8Array(value.slice(0));\n if (ArrayBuffer.isView(value)) {\n return new Uint8Array(\n value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength),\n );\n }\n throw new TypeError(\"Townstash received a non-binary value from SQLite\");\n}\n\nfunction assertSafeMilliseconds(value: number, label: string): void {\n if (!Number.isSafeInteger(value) || value < 0) {\n throw new RangeError(`${label} must be a non-negative safe integer`);\n }\n}\n\nfunction expirationFromTtl(ttlMs: number, now: number): number {\n assertSafeMilliseconds(ttlMs, \"ttlMs\");\n const expiresAt = now + ttlMs;\n if (!Number.isSafeInteger(expiresAt)) {\n throw new RangeError(\n \"ttlMs produces an expiration outside the supported range\",\n );\n }\n return expiresAt;\n}\n\nfunction expirationFromDate(expiresAt: Date): number {\n if (!(expiresAt instanceof Date) || Number.isNaN(expiresAt.getTime())) {\n throw new TypeError(\"expiresAt must be a valid Date\");\n }\n return expiresAt.getTime();\n}\n\nfunction expirationFromOptions(\n options: SetOptions,\n now: number,\n): number | null {\n if (options.ttlMs !== undefined) {\n return expirationFromTtl(options.ttlMs, now);\n }\n if (options.expiresAt !== undefined) {\n return expirationFromDate(options.expiresAt);\n }\n return null;\n}\n\nfunction validateExpirationOptions(options: SetOptions): void {\n if (options.ttlMs !== undefined && options.expiresAt !== undefined) {\n throw new TypeError(\n \"Townstash set options ttlMs and expiresAt are mutually exclusive\",\n );\n }\n if (\n options.keepTtl === true &&\n (options.ttlMs !== undefined || options.expiresAt !== undefined)\n ) {\n throw new TypeError(\n \"Townstash set option keepTtl cannot be combined with expiration\",\n );\n }\n if (options.ttlMs !== undefined) {\n assertSafeMilliseconds(options.ttlMs, \"ttlMs\");\n }\n if (options.expiresAt !== undefined) expirationFromDate(options.expiresAt);\n}\n\nfunction assertValidClock(now: number): void {\n if (!Number.isSafeInteger(now)) {\n throw new RangeError(\n \"Townstash clock must return a safe integer timestamp\",\n );\n }\n}\n\nconst minimumSigned64 = -9_223_372_036_854_775_808n;\nconst maximumSigned64 = 9_223_372_036_854_775_807n;\n\nfunction assertCounterAmount(by: number | bigint): bigint {\n let amount: bigint;\n if (typeof by === \"bigint\") {\n amount = by;\n } else {\n if (!Number.isInteger(by)) {\n throw new TypeError(\"Townstash counter amount must be an integer\");\n }\n if (!Number.isSafeInteger(by)) {\n throw new RangeError(\"Townstash counter amount must be a safe integer\");\n }\n amount = BigInt(by);\n }\n if (amount < minimumSigned64 || amount > maximumSigned64) {\n throw new RangeError(\n \"Townstash counter amount must fit a signed 64-bit integer\",\n );\n }\n return amount;\n}\n\nfunction counterDelta(by: number | bigint, direction: 1n | -1n): bigint {\n const delta = assertCounterAmount(by) * direction;\n if (delta < minimumSigned64 || delta > maximumSigned64) {\n throw new RangeError(\n \"Townstash counter amount must fit a signed 64-bit integer\",\n );\n }\n return delta;\n}\n\n/**\n * Converts a counter result to a `number`, throwing `RangeError` instead of\n * silently losing precision outside JavaScript's safe-integer range.\n */\nexport function toSafeNumber(value: bigint): number {\n if (\n value < BigInt(Number.MIN_SAFE_INTEGER) ||\n value > BigInt(Number.MAX_SAFE_INTEGER)\n ) {\n throw new RangeError(\n `Townstash cannot represent ${value} exactly as a number`,\n );\n }\n return Number(value);\n}\n\nfunction serializeJson(value: unknown): string {\n const serialized = JSON.stringify(value);\n if (serialized === undefined) {\n throw new TypeError(\n \"Townstash JSON values must serialize to a JSON value, not undefined\",\n );\n }\n return serialized;\n}\n\nfunction parseJson(key: string, value: string): T {\n try {\n return JSON.parse(value) as T;\n } catch (error) {\n const detail = error instanceof Error ? `: ${error.message}` : \"\";\n throw new SyntaxError(\n `Townstash value for key ${\n JSON.stringify(\n key,\n )\n } is not valid JSON${detail}`,\n );\n }\n}\n\n/** Internal construction seam used by the real-SQLite integration suite. */\nexport function createStash(\n database: SqliteClient,\n options: StashOptions = {},\n): Stash {\n let initialization: Promise | undefined;\n const now = options.now ?? Date.now;\n\n function currentTime(): number {\n const value = now();\n assertValidClock(value);\n return value;\n }\n\n function initialize(): Promise {\n initialization ??= database.batch(schemaStatements).then(() => undefined)\n .catch((error) => {\n initialization = undefined;\n throw error;\n });\n return initialization;\n }\n\n function createView(prefix: string): Stash {\n const prefixedKey = (key: string) => `${prefix}${key}`;\n\n async function setBytes(\n key: string,\n value: Uint8Array,\n options: SetOptions = {},\n ): Promise {\n if (options.nx === true && options.xx === true) {\n throw new TypeError(\n \"Townstash set options nx and xx are mutually exclusive\",\n );\n }\n validateExpirationOptions(options);\n await initialize();\n const mode: UpsertArgs[\"mode\"] = options.nx === true\n ? 1\n : options.xx === true\n ? 2\n : 0;\n const current = currentTime();\n const expiresAt = expirationFromOptions(options, current);\n const keepTtl: UpsertArgs[\"keepTtl\"] = options.keepTtl === true ? 1 : 0;\n const result = await database.execute(\n upsertValue({\n key: prefixedKey(key),\n value: new Uint8Array(value),\n expiresAt,\n mode,\n now: current,\n keepTtl,\n }),\n );\n return result.rows.length > 0;\n }\n\n async function getBytes(key: string): Promise {\n await initialize();\n const result = await database.execute(\n selectValue({ key: prefixedKey(key), now: currentTime() }),\n );\n const row = result.rows[0];\n if (!row) return undefined;\n if (row.type !== \"string\") {\n throw new TypeError(\n `Townstash does not support value type ${String(row.type)}`,\n );\n }\n return asBytes(row.value);\n }\n\n async function getJSON(key: string): Promise {\n const value = await getBytes(key);\n return value === undefined\n ? undefined\n : parseJson(prefixedKey(key), textDecoder.decode(value));\n }\n\n async function del(...keys: string[]): Promise {\n if (keys.length === 0) return 0;\n await initialize();\n const result = await database.execute(\n deleteValues(keys.map(prefixedKey), currentTime()),\n );\n return result.rows.length;\n }\n\n async function exists(key: string): Promise {\n await initialize();\n const result = await database.execute(\n existsValue({ key: prefixedKey(key), now: currentTime() }),\n );\n return result.rows.length > 0;\n }\n\n async function type(key: string): Promise<\"string\" | \"none\"> {\n await initialize();\n const result = await database.execute(\n typeValue({ key: prefixedKey(key), now: currentTime() }),\n );\n const row = result.rows[0];\n if (!row) return \"none\";\n if (row.type !== \"string\") {\n throw new TypeError(\n `Townstash does not support value type ${String(row.type)}`,\n );\n }\n return \"string\";\n }\n\n async function updateExpiration(\n key: string,\n expiresAt: number,\n current: number,\n ): Promise {\n await initialize();\n const result = await database.execute(\n updateExpirationValue({\n expiresAt,\n key: prefixedKey(key),\n now: current,\n }),\n );\n return result.rows.length > 0;\n }\n\n async function expireAt(key: string, expiresAt: Date): Promise {\n const absoluteExpiration = expirationFromDate(expiresAt);\n await initialize();\n return await updateExpiration(key, absoluteExpiration, currentTime());\n }\n\n async function expire(key: string, ttlMs: number): Promise {\n assertSafeMilliseconds(ttlMs, \"ttlMs\");\n await initialize();\n const current = currentTime();\n return await updateExpiration(\n key,\n expirationFromTtl(ttlMs, current),\n current,\n );\n }\n\n async function persist(key: string): Promise {\n await initialize();\n const result = await database.execute(\n persistValue({ key: prefixedKey(key), now: currentTime() }),\n );\n return result.rows.length > 0;\n }\n\n async function ttl(key: string): Promise {\n await initialize();\n const current = currentTime();\n const result = await database.execute(\n ttlValue({ key: prefixedKey(key), now: current }),\n );\n const row = result.rows[0] as { expires_at?: number | null } | undefined;\n if (!row) return undefined;\n return row.expires_at === null || row.expires_at === undefined\n ? -1\n : row.expires_at - current;\n }\n\n async function cleanup(): Promise {\n await initialize();\n const result = await database.execute(\n cleanupExpired({ now: currentTime() }),\n );\n return result.rows.length;\n }\n\n async function incrementBy(key: string, delta: bigint): Promise {\n await initialize();\n const current = currentTime();\n const result = await database.execute(\n incrementValue({ key: prefixedKey(key), delta, now: current }),\n );\n const row = result.rows[0];\n if (row) {\n if (typeof row.result !== \"string\") {\n throw new Error(\"Townstash counter returned an invalid result\");\n }\n try {\n return BigInt(row.result);\n } catch {\n throw new Error(\"Townstash counter returned an invalid result\");\n }\n }\n\n throw new Error(\n \"Townstash counter update rejected invalid state or signed 64-bit overflow\",\n );\n }\n\n async function incr(\n key: string,\n by: number | bigint = 1n,\n ): Promise {\n return await incrementBy(key, counterDelta(by, 1n));\n }\n\n async function decr(\n key: string,\n by: number | bigint = 1n,\n ): Promise {\n return await incrementBy(key, counterDelta(by, -1n));\n }\n\n return {\n async get(key) {\n const value = await getBytes(key);\n return value === undefined ? undefined : textDecoder.decode(value);\n },\n getBytes,\n getJSON,\n async set(key, value, options) {\n return await setBytes(\n key,\n typeof value === \"string\" ? textEncoder.encode(value) : value,\n options,\n );\n },\n setBytes,\n async setJSON(key: string, value: T, options?: SetOptions) {\n return await setBytes(\n key,\n textEncoder.encode(serializeJson(value)),\n options,\n );\n },\n del,\n exists,\n type,\n expire,\n expireAt,\n persist,\n ttl,\n cleanup,\n incr,\n decr,\n withPrefix(nextPrefix) {\n return createView(`${prefix}${nextPrefix}`);\n },\n };\n }\n\n return createView(\"\");\n}\n",[],[354,356],"99e7a308-57a1-4d96-96dd-b6fb12b9d274","sqlite_conformance.ts","2976dd78-7ecf-11f1-af74-1607ee4eb77e",265,["D",1783957548245],"import type { SqliteClient } from \"./stash.ts\";\n\nconst scratchTable = \"__townstash_sqlite_conformance__\";\n\nexport interface SqliteConformanceCase {\n name: string;\n fn(client: SqliteClient): Promise;\n}\n\nfunction assert(condition: unknown, message: string): asserts condition {\n if (!condition) throw new Error(message);\n}\n\nasync function withScratchTable(\n client: SqliteClient,\n run: () => Promise,\n): Promise {\n await client.execute(`CREATE TABLE IF NOT EXISTS ${scratchTable} (\n id INTEGER PRIMARY KEY,\n value TEXT NOT NULL\n)`);\n\n try {\n await client.execute(`DELETE FROM ${scratchTable}`);\n await run();\n } finally {\n await client.execute(`DROP TABLE IF EXISTS ${scratchTable}`);\n }\n}\n\nexport const sqliteClientConformanceCases: readonly SqliteConformanceCase[] = [\n {\n name: \"RETURNING rows are surfaced by execute\",\n async fn(client) {\n await withScratchTable(client, async () => {\n const result = await client.execute({\n sql: `INSERT INTO ${scratchTable} (id, value)\nVALUES (?, ?) RETURNING value`,\n args: [1, \"returning\"],\n });\n\n assert(\n result.rows.length === 1,\n `Expected one RETURNING row, got ${result.rows.length}`,\n );\n assert(\n result.rows[0]?.value === \"returning\",\n `Expected the RETURNING value, got ${String(result.rows[0]?.value)}`,\n );\n });\n },\n },\n {\n name: \"rowless execute results always contain an empty rows array\",\n async fn(client) {\n await withScratchTable(client, async () => {\n const result = await client.execute({\n sql: `INSERT INTO ${scratchTable} (id, value) VALUES (?, ?)`,\n args: [1, \"rowless\"],\n });\n\n assert(\n Array.isArray(result.rows),\n \"Expected rowless execute to return a rows array\",\n );\n assert(\n result.rows.length === 0,\n `Expected no rows from rowless execute, got ${result.rows.length}`,\n );\n });\n },\n },\n {\n name:\n \"named parameters bind, including one name reused at two placeholders\",\n async fn(client) {\n await withScratchTable(client, async () => {\n await client.execute(\n `INSERT INTO ${scratchTable} (id, value)\nVALUES (1, 'a'), (2, 'b'), (3, 'c')`,\n );\n\n const result = await client.execute({\n sql:\n `SELECT value FROM ${scratchTable} WHERE id >= :bound AND id <= :bound`,\n args: { bound: 2 },\n });\n\n assert(\n result.rows.length === 1,\n `Expected one row for the reused named parameter, got ${result.rows.length}`,\n );\n assert(\n result.rows[0]?.value === \"b\",\n `Expected the reused name to bind at both placeholders, got ${\n String(result.rows[0]?.value)\n }`,\n );\n });\n },\n },\n {\n name: \"bigint values bind\",\n async fn(client) {\n await withScratchTable(client, async () => {\n // Two adjacent max-range keys that collapse to the same value if a bind\n // coerces bigint through a double — both exceed Number.MAX_SAFE_INTEGER.\n const lower = 9_223_372_036_854_775_806n;\n const upper = 9_223_372_036_854_775_807n;\n await client.execute({\n sql: `INSERT INTO ${scratchTable} (id, value) VALUES (:id, :value)`,\n args: { id: lower, value: \"lower\" },\n });\n await client.execute({\n sql: `INSERT INTO ${scratchTable} (id, value) VALUES (:id, :value)`,\n args: { id: upper, value: \"upper\" },\n });\n\n const result = await client.execute({\n sql: `SELECT value FROM ${scratchTable} WHERE id = :id`,\n args: { id: upper },\n });\n\n assert(\n result.rows.length === 1,\n `Expected exactly one bigint-bound row, got ${result.rows.length}`,\n );\n assert(\n result.rows[0]?.value === \"upper\",\n `Expected the bigint bind to select its exact row, got ${\n String(result.rows[0]?.value)\n }`,\n );\n });\n },\n },\n {\n name: \"plain-string execute runs DDL\",\n async fn(client) {\n const ddlTable = \"__townstash_sqlite_conformance_ddl__\";\n try {\n // Start from a clean slate so a hard-killed prior run (whose finally\n // DROP never ran) self-heals without a spurious PRIMARY KEY conflict.\n await client.execute(`DROP TABLE IF EXISTS ${ddlTable}`);\n await client.execute(\n `CREATE TABLE IF NOT EXISTS ${ddlTable} (\n id INTEGER PRIMARY KEY,\n note TEXT NOT NULL\n)`,\n );\n\n const result = await client.execute({\n sql:\n `INSERT INTO ${ddlTable} (id, note) VALUES (:id, :note) RETURNING note`,\n args: { id: 1, note: \"ddl\" },\n });\n\n assert(\n result.rows.length === 1 && result.rows[0]?.note === \"ddl\",\n \"Expected the DDL-created table to accept and return a row\",\n );\n } finally {\n await client.execute(`DROP TABLE IF EXISTS ${ddlTable}`);\n }\n },\n },\n {\n name: \"stored blobs come back as normalizable bytes\",\n async fn(client) {\n await withScratchTable(client, async () => {\n const bytes = new Uint8Array([0, 1, 127, 128, 255]);\n await client.execute({\n sql: `INSERT INTO ${scratchTable} (id, value) VALUES (:id, :value)`,\n args: { id: 1, value: bytes },\n });\n\n const result = await client.execute({\n sql: `SELECT value FROM ${scratchTable} WHERE id = :id`,\n args: { id: 1 },\n });\n\n const stored = result.rows[0]?.value;\n assert(\n stored instanceof Uint8Array || stored instanceof ArrayBuffer,\n `Expected a normalizable blob (Uint8Array or ArrayBuffer), got ${\n Object.prototype.toString.call(stored)\n }`,\n );\n\n const normalized = stored instanceof Uint8Array\n ? stored\n : new Uint8Array(stored);\n assert(\n normalized.length === bytes.length &&\n bytes.every((byte, index) => normalized[index] === byte),\n \"Expected the stored blob bytes to round-trip unchanged\",\n );\n });\n },\n },\n {\n name: \"batch is atomic: a failing statement rolls back the prior ones\",\n async fn(client) {\n await withScratchTable(client, async () => {\n let rejected = false;\n try {\n await client.batch([\n {\n sql:\n `INSERT INTO ${scratchTable} (id, value) VALUES (:id, :value)`,\n args: { id: 1, value: \"first\" },\n },\n {\n // Reuses the primary key, so this statement fails.\n sql:\n `INSERT INTO ${scratchTable} (id, value) VALUES (:id, :value)`,\n args: { id: 1, value: \"conflict\" },\n },\n ]);\n } catch {\n rejected = true;\n }\n\n assert(\n rejected,\n \"Expected a batch with a failing statement to reject\",\n );\n\n const result = await client.execute(\n `SELECT COUNT(*) AS count FROM ${scratchTable}`,\n );\n assert(\n Number(result.rows[0]?.count) === 0,\n `Expected the failed batch to roll back the prior insert, found ${\n String(result.rows[0]?.count)\n } row(s)`,\n );\n });\n },\n },\n];\n",[],[354,365],"cf900528-d2cd-4015-a14a-33c0ed1f666c","platform_suite.ts","eaccf2bc-7ed1-11f1-940b-1607ee4eb77e",273,["D",1783958111467],"import { stash } from \"../main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sqliteClientConformanceCases } from \"./sqlite_conformance.ts\";\n\nconst v1Commands = [\n \"cleanup\",\n \"decr\",\n \"del\",\n \"expire\",\n \"expireAt\",\n \"exists\",\n \"get\",\n \"getBytes\",\n \"getJSON\",\n \"incr\",\n \"persist\",\n \"set\",\n \"setBytes\",\n \"setJSON\",\n \"ttl\",\n \"type\",\n \"withPrefix\",\n];\n\nexport type TestCase = {\n name: string;\n ignore?: boolean;\n fn: () => void | Promise;\n};\n\nexport const platformTests: TestCase[] = [\n {\n name: \"the library entry point exports exactly the v1 stash client\",\n fn() {\n const actualCommands = Object.keys(stash).sort();\n const expectedCommands = [...v1Commands].sort();\n if (JSON.stringify(actualCommands) !== JSON.stringify(expectedCommands)) {\n throw new Error(\n `Expected v1 commands ${JSON.stringify(expectedCommands)}, got ${\n JSON.stringify(\n actualCommands,\n )\n }`,\n );\n }\n\n for (const command of v1Commands) {\n if (typeof stash[command as keyof typeof stash] !== \"function\") {\n throw new Error(`Expected stash.${command} to be callable`);\n }\n }\n },\n },\n {\n name: \"the published stash client completes a v1 workflow in Val Town\",\n ignore: Deno.env.get(\"TOWNSTASH_LIVE_INTEGRATION\") !== \"1\",\n async fn() {\n const client = stash.withPrefix(\n `__townstash_v1__:${crypto.randomUUID()}:`,\n );\n const keys = [\"text\", \"bytes\", \"json\", \"counter\"];\n console.log(\"[live] Townstash hosted integration started\");\n try {\n if (!(await client.set(\"text\", \"Ada\", { nx: true, ttlMs: 60_000 }))) {\n throw new Error(\"Expected the live integration claim to succeed\");\n }\n if ((await client.get(\"text\")) !== \"Ada\") {\n throw new Error(\"Expected the live text value to round-trip\");\n }\n console.log(\"[live] text and conditional write passed\");\n await client.setBytes(\"bytes\", new Uint8Array([0, 255, 128]));\n if (\n JSON.stringify(Array.from((await client.getBytes(\"bytes\")) ?? [])) !==\n \"[0,255,128]\"\n ) {\n throw new Error(\"Expected the live byte value to round-trip\");\n }\n console.log(\"[live] binary-safe bytes passed\");\n await client.setJSON(\"json\", { ready: true });\n if (\n (await client.getJSON<{ ready: boolean }>(\"json\"))?.ready !== true\n ) {\n throw new Error(\"Expected the live JSON value to round-trip\");\n }\n console.log(\"[live] JSON helpers passed\");\n if ((await client.incr(\"counter\", 2)) !== 2n) {\n throw new Error(\"Expected the live counter to increment\");\n }\n if ((await client.decr(\"counter\")) !== 1n) {\n throw new Error(\"Expected the live counter to decrement\");\n }\n console.log(\"[live] atomic counter operations passed\");\n if ((await client.del(\"text\", \"bytes\", \"json\", \"counter\")) !== 4) {\n throw new Error(\n \"Expected the live workflow cleanup to remove four keys\",\n );\n }\n console.log(\"[live] deletion and cleanup passed\");\n console.log(\"[live] Townstash hosted integration passed\");\n } finally {\n await client.del(...keys);\n }\n },\n },\n ...sqliteClientConformanceCases.map((conformanceCase) => ({\n name: `SqliteClient conformance: ${conformanceCase.name}`,\n fn: () => conformanceCase.fn(sqlite),\n })),\n];\n\nexport type PlatformSuiteSummary = {\n passed: number;\n failed: number;\n skipped: number;\n total: number;\n failures: Array<{ name: string; error: unknown }>;\n};\n\n/** Runs every non-ignored platform test case, logging as it goes. Never throws. */\nexport async function runPlatformSuite(): Promise {\n let passed = 0;\n let failed = 0;\n let skipped = 0;\n const failures: Array<{ name: string; error: unknown }> = [];\n\n for (const test of platformTests) {\n if (test.ignore) {\n console.log(`- ${test.name} ... ignored`);\n skipped++;\n continue;\n }\n try {\n await test.fn();\n console.log(`✓ ${test.name}`);\n passed++;\n } catch (error) {\n console.error(`✗ ${test.name}`);\n console.error(error);\n failed++;\n failures.push({ name: test.name, error });\n }\n }\n\n console.log(\n `\\n${passed} passed, ${failed} failed, ${skipped} ignored (of ${platformTests.length})`,\n );\n\n return { passed, failed, skipped, total: platformTests.length, failures };\n}\n",[],[354,373],"d91fe505-1de8-49ab-b4ad-a3f8acdddf2d","Untitled","69197460-7ecd-11f1-a13a-1607ee4eb77e",244,["D",1783955610816],"toSafeNumber",[],[354,381],"b853cae8-c7ca-4cb6-bd52-5120745a171a",68,["D",1783870116679],[240,241,242,243,244],[354],"fd8e5f59-9186-4748-b4c4-599ca461a0de","3faf0a40-7dba-11f1-a5bc-1607ee4eb77e","3f6f89a6-7dba-11f1-9bcf-1607ee4eb77e",225,["D",1783923547831],5,"# Spec: Townstash\n\n## Problem Statement\n\nVal Town provides val-scoped SQLite and Blob storage, but neither offers the\nergonomic data-structure API, atomic counters, conditional writes, expiration\nbehavior, and familiar key operations associated with Redis.\n\nDevelopers who need caching, idempotency, rate limiting, counters, queues, or\nsmall shared data structures must repeatedly design storage schemas and\nconcurrency behavior themselves. A reusable Redis-inspired TypeScript library\nwould provide consistent semantics for these use cases without requiring an\nexternal Redis service.\n\nThe library must be honest about its scope. It is a persistent library backed by\nVal Town storage, not an in-memory Redis server, a RESP-compatible endpoint, or\na complete reimplementation of Redis performance and distributed-system\nbehavior.\n\n## Solution\n\nProvide **Townstash**, a Val Town library val that exports a Redis-inspired\nTypeScript API backed by val-scoped SQLite. Consumers import the library from\n`townstash` and interact with its canonical exported client, `stash`. The first\nversion will implement Redis-style string values, key expiration, conditional\nwrites, deletion, existence checks, atomic integer counters, JSON convenience\nmethods, and optional key-prefix helpers.\n\nValues at the core storage boundary are binary-safe sequences of bytes. Text and\nJSON APIs are conveniences layered over that representation. Numbers are not a\nseparate value type: integer operations interpret the current string value as an\ninteger, following the Redis model.\n\nThe library will preserve correctness under concurrent requests by expressing\natomic operations as atomic database operations. Expired keys will be treated as\nabsent during every command that observes key existence, regardless of whether\nbackground cleanup has run.\n\nFuture releases may add hashes, sets, sorted sets, lists, and streams as\nfirst-class value types. These types will not be simulated by silently storing\nmutable JSON documents under string keys.\n\n## User Stories\n\n1. As a Val author, I want to store and retrieve text values by key, so that I\n can persist simple application state.\n2. As a Val author, I want to store and retrieve arbitrary bytes, so that string\n values are binary-safe rather than limited to UTF-8 text.\n3. As a TypeScript developer, I want explicit text, byte, and JSON helpers, so\n that serialization behavior is predictable.\n4. As a Val author, I want missing and expired keys to produce the same\n observable result, so that expiration does not leak storage-cleanup details.\n5. As a Val author, I want to set a key only when it is absent, so that I can\n implement locks, idempotency claims, and first-writer-wins behavior.\n6. As a Val author, I want to set a key only when it is present, so that I can\n avoid accidentally creating state during an update.\n7. As a Val author, I want conditional writes to be atomic, so that concurrent\n requests cannot both succeed when only one should.\n8. As a Val author, I want to attach a time to live when setting a value, so\n that cache and coordination records expire automatically.\n9. As a Val author, I want to add, replace, inspect, and remove a key's\n expiration, so that lifecycle management is available independently of value\n updates.\n10. As a Val author, I want expiration checks to be correct even if no cleanup\n job has run, so that stale values never become visible.\n11. As a Val author, I want to delete one or more keys and learn how many\n existed, so that deletion has useful Redis-like return semantics.\n12. As a Val author, I want to check whether a key exists without retrieving its\n value, so that intent is clear and serialization work is avoided.\n13. As a Val author, I want to increment or decrement an integer value\n atomically, so that counters and rate limits remain correct under\n concurrency.\n14. As a Val author, I want increment and decrement methods to accept an\n optional signed integer amount, so that the API remains expressive and\n Redis-consistent.\n15. As a Val author, I want separate increment and decrement methods, so that\n the direction of a counter change is discoverable and readable.\n16. As a Val author, I want a missing counter to behave as zero before an\n increment or decrement, so that counters need no initialization request.\n17. As a Val author, I want numeric commands to reject non-integer string values\n without changing them, so that invalid counter state is not silently\n corrupted.\n18. As a Val author, I want keys to occupy one flat keyspace, so that the\n storage model matches Redis key semantics.\n19. As a Val author, I want an optional prefixing wrapper, so that I can\n organize application keys without introducing first-class namespace\n behavior.\n20. As a Val author, I want prefixing to be transparent and compositional, so\n that commands operate on the same underlying flat keyspace.\n21. As a Val author, I want to inspect a key's type, so that type errors can be\n diagnosed as additional first-class data types are introduced.\n22. As a Val author, I want commands applied to the wrong value type to fail\n consistently, so that data-model mistakes are visible.\n23. As a library maintainer, I want expired rows to be removable independently\n of command correctness, so that storage can be reclaimed without making\n cleanup timing part of the API contract.\n24. As a library maintainer, I want schema initialization to be idempotent, so\n that importing or initializing the library repeatedly is safe.\n25. As a library maintainer, I want atomic behavior tested against the real\n SQLite adapter, so that tests detect behavior that mocks cannot represent.\n26. As a library adopter, I want documented deviations from Redis, so that I do\n not assume unsupported server, networking, blocking, or performance\n semantics.\n27. As a future library user, I want hashes, sets, sorted sets, lists, and\n streams to have first-class commands and storage behavior, so that\n collections do not require unsafe read-modify-write cycles over JSON\n strings.\n28. As a Val author, I want to import `stash` from the `townstash` library val,\n so that setup is minimal and the API reads naturally at call sites.\n\n## Implementation Decisions\n\nThe durable architectural choices behind this implementation are recorded in:\n\n- [ADR-0001: Use val-scoped SQLite as the storage backend](../../adr/0001-use-val-scoped-sqlite.md)\n- [ADR-0002: Use a flat keyspace of binary-safe string values](../../adr/0002-flat-binary-safe-keyspace.md)\n- [ADR-0003: Determine command results atomically at execution time](../../adr/0003-command-correctness-at-execution-time.md)\n\n- The storage backend is val-scoped SQLite. Blob storage is not the primary\n backend because its documented interface does not provide the\n conditional-write, transactional, and atomic-update primitives required for\n Redis-like command semantics.\n- The product and library val are named **Townstash** and `townstash`,\n respectively.\n- The canonical public export is a ready-to-use client named `stash`.\n- Townstash is distributed as a Val Town library val rather than an npm, JSR, or\n standalone server package.\n- Account-global SQLite is not used by default. Each library instance operates\n within the SQLite database scoped to its val.\n- `stash` exposes a direct TypeScript API using familiar Redis-style command\n names where their semantics can be represented honestly. It does not implement\n the Redis Serialization Protocol or accept connections from existing Redis\n clients.\n- The keyspace is flat. A key contains its complete application-visible\n identifier, including any conventional prefix such as `cache:` or `session:`.\n- Namespace is not a persisted, first-class dimension of key identity.\n- An optional prefixing wrapper may prepend a configured string to every key\n passed through it. This is ergonomic sugar over the flat keyspace, not\n isolation or authorization.\n- The core first-version value type is the Redis string: a binary-safe byte\n sequence.\n- Text access is an explicit decoding convenience over byte values.\n- JSON access is an explicit serialization convenience over string values. JSON\n is not a first-class value type and does not provide path-level reads or\n mutations.\n- Integer counters are stored using string-compatible semantics rather than a\n separate public numeric type.\n- The public counter API provides both increment and decrement operations. Both\n accept an optional signed integer amount. Decrement is semantically equivalent\n to incrementing by the negated amount, so decrementing by a negative amount\n increments the value.\n- Numeric operations are atomic, treat a missing key as zero, and fail without\n mutation when the existing value is not a valid integer.\n- Conditional set behavior supports only-if-absent and only-if-present modes.\n Mutually incompatible options are rejected before execution.\n- Only-if-absent treats an expired key as absent. Only-if-present treats an\n expired key as absent.\n- Expiration is represented as an absolute instant. Public APIs may accept\n relative durations, but commands compare against a consistent current time\n when determining visibility.\n- Expiration is lazy for correctness: every relevant command excludes or\n replaces expired keys as appropriate.\n- Background or explicitly invoked cleanup is a storage-reclamation optimization\n only. Correctness never depends on its schedule.\n- Commands that combine existence checks and mutations must execute atomically.\n They must not use an application-level read followed by a separate write.\n- Multi-statement commands use the database's transactional batch capability\n when a single statement cannot express the required behavior.\n- Schema initialization is safe to run repeatedly and preserves v1 data. V1 does\n not expose a versioned migration path; future schema changes require an\n explicit migration design before they are supported.\n- The first version includes string get/set operations, byte and JSON\n conveniences, deletion, existence, expiration management, type inspection,\n conditional set, and integer increment/decrement.\n- Future first-class types are hashes, sets, sorted sets, lists, then streams.\n Each type receives dedicated data modeling and atomic commands rather than\n being encoded as a mutable JSON string.\n- Streams, if added, initially support persistent append and non-blocking reads.\n Blocking reads and consumer-group coordination require separate design work.\n- Redis compatibility is behavioral and selective. Command names and return\n conventions should remain familiar where doing so does not misrepresent the\n backend.\n\n## API and Data-Model Sketches\n\nThe following stubs capture decisions made during design. They are illustrative\nrather than final implementation prescriptions; names and return types may be\nrefined while preserving the documented behavior.\n\n### Intended usage\n\n```ts\nimport { stash } from \"townstash\";\n\nawait stash.set(\"user:123\", \"Alice\");\nawait stash.get(\"user:123\");\nawait stash.incr(\"views\");\nawait stash.del(\"user:123\");\n\nconst sessions = stash.withPrefix(\"session:\");\nawait sessions.set(\"abc\", \"payload\", { ttlMs: 60_000 });\nawait sessions.get(\"abc\");\n```\n\n`withPrefix` changes only how keys are presented to the underlying flat\nkeyspace. In the example, `sessions.get(\"abc\")` reads the stored key\n`session:abc`.\n\n`setJSON` stores `JSON.stringify(value)` as a UTF-8 string value, and rejects a\ntop-level value that serializes to `undefined`. `getJSON` parses the stored\nUTF-8 text and raises a `SyntaxError` when the value is not valid JSON. JSON\nhelpers do not add path-level reads or mutations.\n\nPrefix wrappers compose in call order: `stash.withPrefix(\"a:\").withPrefix(\"b:\")`\noperates on the flat key `a:b:`. A prefix is not persisted as a namespace\nor security boundary; the complete prefixed key remains directly addressable\nthrough an unprefixed client.\n\n### First-version client surface\n\n```ts\ntype StashValue = string | Uint8Array;\n\ninterface SetOptions {\n /** Expire the key this many milliseconds after command execution begins. */\n ttlMs?: number;\n\n /** Expire the key at this absolute instant. */\n expiresAt?: Date;\n\n /** Set only when the key is absent or expired. */\n nx?: boolean;\n\n /** Set only when the key exists and has not expired. */\n xx?: boolean;\n\n /** Preserve the current expiration when replacing an existing value. */\n keepTtl?: boolean;\n}\n\ninterface Stash {\n get(key: string): Promise;\n getBytes(key: string): Promise;\n\n set(\n key: string,\n value: StashValue,\n options?: SetOptions,\n ): Promise;\n\n setBytes(\n key: string,\n value: Uint8Array,\n options?: SetOptions,\n ): Promise;\n\n getJSON(key: string): Promise;\n setJSON(key: string, value: T, options?: SetOptions): Promise;\n\n del(...keys: string[]): Promise;\n exists(key: string): Promise;\n type(key: string): Promise<\"string\" | \"none\">;\n\n expire(key: string, ttlMs: number): Promise;\n expireAt(key: string, expiresAt: Date): Promise;\n persist(key: string): Promise;\n ttl(key: string): Promise;\n cleanup(): Promise;\n\n incr(key: string, by?: number | bigint): Promise;\n decr(key: string, by?: number | bigint): Promise;\n\n withPrefix(prefix: string): Stash;\n}\n\nexport const stash: Stash;\n```\n\nThe provisional `boolean` result for `set` means whether the write occurred. An\nunconditional valid set returns `true`; an unsatisfied `nx` or `xx` condition\nreturns `false`.\n\n`ttl` returns remaining milliseconds for a visible expiring key, `-1` for a\nvisible persistent key, and `undefined` for a missing or expired key. `cleanup`\nreturns the number of expired storage rows reclaimed; it does not change the\nvisibility rules used by ordinary commands.\n\n### Counter relationship\n\nBoth public counter methods share one atomic signed-increment primitive:\n\n```ts\nasync function decr(key: string, by: number | bigint = 1n): Promise {\n return incrementBy(key, counterDelta(by, -1n));\n}\n```\n\nSigned amounts remain valid. Consequently, decrementing by a negative amount\nincrements the stored value.\n\nThe exact result is a JavaScript `bigint`, not a `number`. Callers use bigint\nliterals for arithmetic and strict comparisons. Callers that require a `number`\nmust explicitly convert with `Number(result)` after verifying that the value is\nbetween `Number.MIN_SAFE_INTEGER` and `Number.MAX_SAFE_INTEGER`; conversion\noutside that range loses precision. Because `JSON.stringify` does not accept\n`bigint` directly, JSON consumers serialize the result as a decimal string or a\nsafely bounded `number`.\n\n### First-version key schema\n\nThe schema keeps one flat keyspace and reserves a type discriminator for future\nfirst-class data structures:\n\n```sql\nCREATE TABLE IF NOT EXISTS stash_keys (\n key TEXT PRIMARY KEY,\n type TEXT NOT NULL,\n value BLOB,\n expires_at INTEGER,\n version INTEGER NOT NULL DEFAULT 1\n);\n\nCREATE INDEX IF NOT EXISTS stash_keys_expiration\n ON stash_keys(expires_at)\n WHERE expires_at IS NOT NULL;\n```\n\n`expires_at` is an absolute Unix timestamp in milliseconds. `version` is\nreserved for mutation tracking and potential future compare-and-swap behavior;\nit need not be exposed in the first public API.\n\n### Lazy expiration\n\nReads treat expired records exactly like missing records:\n\n```sql\nSELECT type, value\nFROM stash_keys\nWHERE key = ?\n AND (expires_at IS NULL OR expires_at > ?);\n```\n\nCleanup exists only to reclaim storage:\n\n```sql\nDELETE FROM stash_keys\nWHERE expires_at IS NOT NULL\n AND expires_at <= ?;\n```\n\nEvery command whose behavior depends on existence must apply the same logical\nexpiration rule. In particular, `nx` may replace an expired row, while `xx`,\n`exists`, `type`, `expire`, `persist`, and `ttl` treat it as absent.\n\n### Atomic increment shape\n\nThe implementation should perform parsing, validation, arithmetic, overflow\nchecking, and mutation as one database operation. It must not read the value\ninto TypeScript and issue a separate write. The earlier design used the\nfollowing upsert shape as a starting point:\n\n```sql\nINSERT INTO stash_keys (key, type, value, expires_at)\nVALUES (?, 'string', ?, NULL)\nON CONFLICT(key) DO UPDATE SET\n value = CAST(stash_keys.value AS INTEGER) + excluded.value,\n version = stash_keys.version + 1\nRETURNING value;\n```\n\nThis is intentionally a sketch: the final statement must additionally reject\nexpired or wrong-type state correctly, reject non-canonical integers, preserve\nthe existing TTL when required by the counter contract, and prevent signed\n64-bit overflow without mutation.\n\n### Eventual first-class collection storage\n\nDedicated tables are the provisional direction for collection types; collections\nshould not be rewritten as monolithic JSON string values.\n\n```sql\nCREATE TABLE stash_hashes (\n key TEXT NOT NULL,\n field TEXT NOT NULL,\n value BLOB NOT NULL,\n PRIMARY KEY (key, field)\n);\n\nCREATE TABLE stash_sets (\n key TEXT NOT NULL,\n member BLOB NOT NULL,\n PRIMARY KEY (key, member)\n);\n\nCREATE TABLE stash_sorted_sets (\n key TEXT NOT NULL,\n member BLOB NOT NULL,\n score REAL NOT NULL,\n PRIMARY KEY (key, member)\n);\n\nCREATE INDEX stash_sorted_sets_order\n ON stash_sorted_sets(key, score, member);\n\nCREATE TABLE stash_stream_entries (\n key TEXT NOT NULL,\n id_ms INTEGER NOT NULL,\n id_seq INTEGER NOT NULL,\n fields TEXT NOT NULL,\n PRIMARY KEY (key, id_ms, id_seq)\n);\n```\n\nThese future schemas are incomplete. A later design must specify key-level type\nownership, TTL behavior across collection rows, deletion, empty-collection\nbehavior, and transactional coordination with `stash_keys` before\nimplementation.\n\n## Seams & Testing Decisions\n\n- **Primary seam: public TypeScript client API backed by real val-scoped\n SQLite.** Tests invoke public commands and observe their results and errors\n without reaching through the client to assert SQL statements or table layouts.\n This seam was confirmed because correctness depends on real database atomicity\n and transaction behavior.\n- Tests verify externally observable command behavior: missing keys, byte\n preservation, text and JSON round trips, conditional-write results, expiration\n visibility, integer parsing, return values, and wrong-type errors.\n- Concurrency tests issue overlapping operations against the same database and\n key. They must demonstrate that only one competing only-if-absent write\n succeeds and that no increments are lost.\n- Expiration tests use a controllable clock exposed through the library's\n internal construction boundary. They do not rely on wall-clock sleeping.\n- Cleanup tests demonstrate that cleanup removes eligible storage while leaving\n API behavior unchanged before and after cleanup.\n- Prefix tests assert that a prefixed client is equivalent to applying the\n prefix to keys through the unprefixed client.\n- Schema tests verify that initialization can run more than once and that\n supported migrations preserve existing data.\n- Unit tests may cover pure serialization, validation, and key-prefix behavior,\n but mocks are not sufficient for command correctness.\n- Future data types will be tested through the same public client seam,\n including wrong-type behavior and concurrent mutations.\n\n## Out of Scope\n\n- RESP or wire-protocol compatibility.\n- Compatibility with existing Redis client libraries.\n- Running a persistent TCP server.\n- Redis replication, clustering, persistence modes, eviction policies, or\n in-memory performance characteristics.\n- Pub/sub.\n- Lua scripts or Redis Functions.\n- Blocking list or stream operations.\n- Distributed locks with guarantees stronger than those explicitly provided by\n the library.\n- First-class JSON path operations.\n- First-class hashes, sets, sorted sets, lists, or streams in the first release.\n- Bitmaps and bitfields in the first release; these may later be added as\n operations over string values.\n- Geospatial indexes, HyperLogLog, Bloom filters, other probabilistic\n structures, time series, arrays, and vector sets.\n- A hybrid SQLite-and-Blob value backend. Cross-store writes cannot be made\n atomic and are deferred until large binary values provide a demonstrated need.\n- Automatic key namespacing, tenant security boundaries, or access control based\n on prefixes.\n- Exact Redis latency, memory use, maximum value size, or algorithmic-complexity\n guarantees.\n\n## Settled API Decisions\n\n1. The default `get` method returns decoded text for ergonomics, paired with\n explicit `getBytes` and `setBytes` methods; the internal representation\n remains binary-safe.\n2. Relative expiration uses the explicit `ttlMs` option, while `expiresAt`\n accepts an absolute instant.\n3. A successful ordinary set clears an existing TTL unless the caller requests\n `keepTtl`.\n4. Counters guarantee signed 64-bit integers and return exact `bigint` values;\n overflow produces an error without mutation. Consumers must explicitly and\n safely convert when a `number` or JSON-compatible representation is required.\n\n## Open Questions\n\n1. Should the first release expose key scanning? If included, it should be a\n cursor-based, non-blocking API with clearly documented pattern semantics; a\n whole-keyspace `keys` operation should not be encouraged.\n2. Should future streams include consumer groups? Basic streams should be\n designed first; consumer groups require separate design because their\n delivery and recovery semantics are substantial.\n\n## Further Notes\n\n- Val Town SQLite reference: https://docs.val.town/reference/std/sqlite/\n- Val Town SQLite usage: https://docs.val.town/reference/std/sqlite/usage/\n- Val Town Blob reference: https://docs.val.town/reference/std/blob/\n- Redis data type reference: https://redis.io/docs/latest/develop/data-types/\n- Redis-compatible behavior is a design guide, not a claim of complete\n compatibility.\n- The likely eventual general-purpose type set is string, hash, set, sorted set,\n list, and stream. Cross-cutting semantics such as atomicity, expiration, type\n safety, and conditional mutation take priority over expanding that set.\n",[],[176,66,402,82],"townstash-v1","a51719b4-428a-49f9-a72f-e216ff41d3ed","06-v1-contract-and-release-readiness.md","3fc6266c-7dba-11f1-a60b-1607ee4eb77e","3f7e229a-7dba-11f1-a39f-1607ee4eb77e",124,["D",1783878036031],"# Harden and document the v1 contract\n\nStatus: resolved\n\n## What to build\n\nPrepare Townstash for v1 adoption by verifying the complete public client as one\ncoherent library, documenting its supported semantics and deliberate Redis\ndeviations, and providing usage guidance that does not imply server, protocol,\ndistributed-lock, or performance guarantees the SQLite-backed library does not\nprovide.\n\nThe release contract and documentation must remain consistent with\n[ADR-0001](../../../adr/0001-use-val-scoped-sqlite.md),\n[ADR-0002](../../../adr/0002-flat-binary-safe-keyspace.md), and\n[ADR-0003](../../../adr/0003-command-correctness-at-execution-time.md).\n\n## Acceptance criteria\n\n- [x] The canonical public surface matches the approved v1 contract for string\n values, conditional writes, expiration, key inspection and deletion,\n counters, JSON helpers, and prefixes.\n- [x] An integration suite exercises representative workflows through the\n exported `stash` client against the real SQLite adapter. The local suite\n uses the real SQLite adapter through the public client construction seam;\n the published entry-point workflow is opt-in in a Val Town-connected\n environment because the entry point is bound to the hosted SQLite API.\n- [x] Initialization is verified to be repeatable without losing existing data.\n V1 has no versioned migration path, so no unsupported migration behavior\n is presented as complete.\n- [x] Documentation includes import and usage examples for text, bytes, JSON,\n expiration, conditional writes, counters, deletion, and prefixed clients.\n- [x] Documentation clearly describes binary-safe storage, the flat keyspace,\n lazy expiration, atomicity boundaries, integer range, and return\n conventions.\n- [x] Redis-inspired compatibility and deliberate exclusions are stated plainly,\n including the lack of RESP, server compatibility, blocking operations,\n first-class collections, and Redis performance guarantees.\n- [x] The published library-val entry point exports the ready-to-use `stash`\n client and no unsupported v1 surface is presented as complete.\n- [x] Formatting, type checking, and the complete automated test suite pass\n using the repository's documented validation commands.\n\n## Blocked by\n\n- 02 — Add atomic conditional set behavior\n- 03 — Make key lifecycle behavior complete\n- 04 — Add atomic signed integer counters\n- 05 — Add JSON conveniences and compositional key prefixes\n\n## Comments\n\nImplemented and verified the v1 contract, adoption documentation, exact\nentry-point surface, representative real-SQLite workflows, lazy-expiration\ntiming, and wrong-type read failures. The published entry-point workflow is\navailable as an opt-in live integration test because `main.ts` is bound to the\nhosted Val Town SQLite service. V1 explicitly has no versioned migration path;\nschema initialization is repeatable and preserves existing data.\n\n`deno task check` and `deno task test` pass (26 tests including one ignored\nopt-in live test).\n",[],[176,66,402,66,404],"5a960918-b0e9-4bec-a83d-6f4b48267167","05-json-and-key-prefixes.md","3fb685e0-7dba-11f1-a39f-1607ee4eb77e",131,["D",1783878036169],"# Add JSON conveniences and compositional key prefixes\n\nStatus: resolved\n\n## What to build\n\nLet consumers explicitly serialize JSON values over Townstash strings and derive\nclients that prepend conventional key prefixes. Prefixed clients operate\ntransparently on the same flat keyspace and can be composed without implying\nnamespaces, isolation, or authorization.\n\nFollow [ADR-0002](../../../adr/0002-flat-binary-safe-keyspace.md): JSON and\nprefixes are conveniences over string values and complete flat keys, not\nadditional storage dimensions or types.\n\n## Acceptance criteria\n\n- [x] JSON values round-trip through explicit `setJSON` and `getJSON` helpers\n using documented serialization behavior.\n- [x] Missing JSON values return `undefined`, while malformed stored JSON\n produces a clear error without mutation.\n- [x] JSON writes support the same conditional and expiration options as other\n string writes.\n- [x] A prefixed client's commands are observationally equivalent to using the\n unprefixed client with the prefix prepended to each key.\n- [x] Prefixing applies consistently to single-key and multi-key commands.\n- [x] Calling `withPrefix` on a prefixed client composes prefixes in call order\n over the same flat keyspace.\n- [x] Tests make clear that prefixes are ergonomic sugar rather than persisted\n namespaces or security boundaries.\n- [x] All tests pass\n- [x] `deno task check` passes\n\n## Blocked by\n\n- 01 — Ship binary-safe string storage\n\n## Comments\n\nImplemented explicit JSON serialization over the binary-safe UTF-8 string API,\nincluding conditional and expiration options, missing-value behavior, clear\nmalformed-value errors, and rejection of top-level values that serialize to\n`undefined`. Added compositional prefix wrappers for every keyed command,\nincluding multi-key deletion; prefixes remain direct flat-key sugar and compose\nin call order. Added real-SQLite integration coverage and updated the PRD with\nthe serialization and prefix contract. `deno task check` and the full suite pass\n(23 tests).\n",[],[176,66,402,66,413],"10d92d07-452a-4b84-95f3-c4d89c48564a","04-atomic-integer-counters.md","3fc209f6-7dba-11f1-a5bc-1607ee4eb77e",230,["D",1783923548066],"# Add atomic signed integer counters\n\nStatus: resolved\n\n## What to build\n\nAllow Val authors to increment and decrement integer string values atomically\nfor counters and rate limits. Missing and expired counters behave as zero,\nsigned amounts are supported, valid TTLs survive counter updates, and invalid\nstate cannot be partially changed.\n\nFollow [ADR-0002](../../../adr/0002-flat-binary-safe-keyspace.md) for\ninteger-as-string semantics and\n[ADR-0003](../../../adr/0003-command-correctness-at-execution-time.md) for\natomic validation and mutation.\n\n## Acceptance criteria\n\n- [x] `incr` and `decr` default to an amount of one and return the resulting\n integer as an exact `bigint`.\n- [x] Both commands accept signed integer amounts, including decrementing by a\n negative amount.\n- [x] A missing or expired counter behaves as zero before the operation and\n becomes a visible string value containing the result.\n- [x] A counter update preserves the expiration of an existing visible value.\n- [x] Non-canonical integer strings, non-integer amounts, wrong-type values, and\n signed 64-bit overflow produce consistent errors without mutation.\n- [x] Parsing, validation, overflow checking, and mutation occur atomically\n rather than as an application-level read followed by a write.\n- [x] Real-adapter concurrency tests demonstrate that overlapping increments\n lose no updates.\n- [x] All tests pass\n- [x] `deno task check` passes\n\n## Blocked by\n\n- 03 — Make key lifecycle behavior complete\n\n## Comments\n\nImplemented atomic signed counter updates through the public client. Missing and\nexpired rows start from zero, visible TTLs are preserved, canonical\nsigned-64-bit values are validated in SQLite, and overflow or invalid state\nleaves the stored value unchanged. Added real-adapter coverage for signed\namounts, expiration behavior, boundary values, invalid amounts, wrong types,\noverflow, and overlapping increments. `deno task check` and the full test suite\npass.\n",[],[176,66,402,66,421],"a92d1d96-b40a-40c6-a0c1-21f4e2c8352e","03-key-lifecycle-and-cleanup.md","403d58f4-7dba-11f1-9c4e-1607ee4eb77e",128,["D",1783878036207],"# Make key lifecycle behavior complete\n\nStatus: resolved\n\n## What to build\n\nGive Val authors a complete key lifecycle: assign relative or absolute\nexpiration, inspect remaining lifetime, preserve or remove expiration, determine\nexistence and type, and delete one or more keys with useful return values. Every\nobserving command must treat an expired key exactly like a missing key,\nregardless of whether storage cleanup has run. Maintainers can reclaim expired\nrows independently without changing API behavior.\n\nFollow [ADR-0003](../../../adr/0003-command-correctness-at-execution-time.md):\nexpiration is resolved during each command, while cleanup only reclaims storage.\n\n## Acceptance criteria\n\n- [x] `set` accepts either an explicit millisecond TTL or an absolute expiration\n instant and rejects incompatible expiration options without mutation.\n- [x] `expire` and `expireAt` update the expiration of a visible key and report\n false for a missing or expired key.\n- [x] `ttl` reports the remaining lifetime in milliseconds for a visible\n expiring key and distinguishes a persistent key from a missing or expired\n key using the documented v1 convention.\n- [x] `persist` removes expiration from a visible key and reports whether it\n changed the key.\n- [x] `keepTtl` preserves the current expiration only when replacing an existing\n visible value.\n- [x] `get`, conditional `set`, `exists`, `type`, expiration commands, and\n deletion consistently treat expired keys as absent using a controllable\n clock in tests.\n- [x] `type` returns `string` for a visible v1 value and `none` for a missing or\n expired key.\n- [x] Multi-key `del` returns the number of visible keys removed and does not\n count missing or expired keys.\n- [x] Cleanup removes eligible expired storage while observable command results\n remain the same before and after cleanup.\n- [x] Behavior is covered through the public client against the real SQLite\n adapter without wall-clock sleeps.\n- [x] All tests pass\n- [x] `deno task check` passes\n\n## Blocked by\n\n- 02 — Add atomic conditional set behavior\n\n## Comments\n\nImplemented the complete v1 key lifecycle on the public client: relative and\nabsolute expiration, lazy visibility checks, expiration inspection and removal,\ntype/existence inspection, multi-key deletion, and explicit expired-row cleanup.\nAdded a controllable clock seam and real-SQLite coverage for boundary behavior,\nfailed operations on expired keys, TTL preservation, duplicate deletion keys,\nand cleanup invariants. `ttl` reports milliseconds, `-1` for persistent keys,\nand `undefined` for missing or expired keys.\n",[],[176,66,402,66,429],"9974c2f1-4a8a-41a3-83be-fd10dcc86b30","02-atomic-conditional-set.md","3fd29e2e-7dba-11f1-adbf-1607ee4eb77e",91,["D",1783871708191],"# Add atomic conditional set behavior\n\nStatus: resolved\n\n## What to build\n\nAllow Val authors to use only-if-absent and only-if-present writes for locks,\nidempotency claims, first-writer-wins state, and guarded updates. Conditions\nmust be decided in the same atomic database operation as the mutation so\nconcurrent callers cannot both succeed when only one should.\n\nFollow [ADR-0003](../../../adr/0003-command-correctness-at-execution-time.md):\nthe existence check and write must form one atomic command.\n\n## Acceptance criteria\n\n- [x] An unconditional valid set reports that the write occurred.\n- [x] `nx` writes only when the key is absent and returns false without mutation\n when the condition is not met.\n- [x] `xx` writes only when the key is present and returns false without\n mutation when the condition is not met.\n- [x] Mutually incompatible set options are rejected before database execution\n and do not mutate data.\n- [x] Conditional behavior is identical for text and byte values and composes\n with supported expiration options.\n- [x] A real-adapter concurrency test demonstrates that exactly one of multiple\n competing `nx` writes succeeds.\n\n## Blocked by\n\n- 01 — Ship binary-safe string storage\n\n## Comments\n\nImplemented atomic `nx` and `xx` set modes for text and byte values using one\nSQLite upsert statement with execution-time expiration checks and `RETURNING` to\nreport whether the write occurred. Added validation before schema/database\nexecution and real-adapter coverage for failed conditions, expired-key `nx`,\nbyte values, and competing writes. `deno task fmt`, `deno task check`, and the\nfull test suite pass.\n",[],[176,66,402,66,437],"914553fe-a332-4fff-829a-1b533dbb0b22","01-binary-safe-string-storage.md","3fecd46a-7dba-11f1-a5bc-1607ee4eb77e",86,["D",1783870146286],"# Ship binary-safe string storage\n\nStatus: resolved\n\n## What to build\n\nMake the canonical `stash` client usable for Townstash's foundational string\nvalue type. A Val author can import the client, initialize it repeatedly without\nharm, store text or arbitrary bytes in val-scoped SQLite, retrieve the value\nthrough the matching explicit API, and observe `undefined` for a missing key.\nReplacing an existing value follows the v1 set contract, including clearing an\nexisting expiration unless preservation is requested.\n\nCommand correctness must be exercised through the public client against the real\nSQLite adapter. Pure validation and serialization details may additionally use\nunit tests.\n\nFollow [ADR-0001](../../../adr/0001-use-val-scoped-sqlite.md) for the storage\nboundary and [ADR-0002](../../../adr/0002-flat-binary-safe-keyspace.md) for\nvalue and keyspace semantics.\n\n## Acceptance criteria\n\n- [x] Consumers can import the ready-to-use `stash` client from the Townstash\n library val without constructing or configuring a client.\n- [x] Schema initialization is idempotent and preserves existing supported data\n when run repeatedly.\n- [x] Text values round-trip predictably through `set` and `get`.\n- [x] Arbitrary byte sequences round-trip without UTF-8 conversion or data loss\n through the byte APIs.\n- [x] Missing keys return `undefined` from text and byte reads.\n- [x] An ordinary replacement succeeds and clears any existing expiration unless\n the caller explicitly requests TTL preservation.\n- [x] Public command behavior is covered against the real SQLite adapter.\n\n## Blocked by\n\nNone — can start immediately.\n\n## Comments\n\nImplemented the canonical val-scoped `stash` export, idempotent schema setup,\nbinary-safe text and byte APIs, replacement TTL behavior, and real-SQLite\nintegration coverage. `deno task fmt`, `deno task check`, and `deno task test`\npass.\n",[],[176,66,402,66,445],"65e005f7-ece4-407f-ac2b-88fbce6c820a",52,["D",1783837430770],[232,233,234,235,236,237],[176,66,402,66],"1a11735d-eb00-42bf-b53d-2487e6a25524",51,["D",1783837430676],[231,238],[176,66,402],["D",1783956364489],[],[176,66,92,82],"20168946-d3b2-41cd-8e68-d3a603c3e173","05-weekly-cron-email-alert.md","68fa5080-7ecd-11f1-911d-1607ee4eb77e",["D",1783958427390],"# Weekly cron with email-on-failure\n\nStatus: resolved\n\n## Parent\n\n`docs/issues/sqliteclient-conformance-suite/PRD.md`\n\n## What to build\n\nA scheduled run that catches the platform changing underneath the library\nbetween manual deploys. A new cron-triggered val file runs the platform test\nsuite on a weekly schedule; on failure it emails the maintainer using the\nplatform's standard email helper (`std/email`, first use in this repo).\n\nBecause the conformance cases carry no gating flag, the scheduled run exercises\nthe real `std/sqlite` adapter against whatever cases exist — the suite grows\nunder this cron as later invariant tickets land. Alerting is email only: no\ndashboards, retries, or escalation.\n\n## Acceptance criteria\n\n- [x] A cron-triggered file on the val runs the platform test suite on a weekly\n schedule.\n- [x] A failing run sends an email to the maintainer via `std/email`.\n- [x] A passing run sends no email.\n- [x] Verified: a forced failure sends mail. _(2026-07-13: a temporary failing\n case, deployed and triggered on Val Town, produced the alert email\n \"Townstash platform suite: 1 failing\" listing the case and its error; the\n temp case was then removed.)_\n- [x] Confirm the file's interval schedule is set to weekly (`0 0 * * 0`) so it\n runs unattended. _(2026-07-13: was hourly delay-based; reset to cron\n `0 0 * * 0`, next run 2026-07-19T00:00:00Z. A clean run of the deployed\n suite passed 9/9 against real `std/sqlite` and sent no email.)_\n\n## Blocked by\n\n- `01-conformance-skeleton-returning-pair.md`\n\n## Comments\n\nCode complete. The platform suite was extracted from `main_test.ts` into\n`src/platform_suite.ts` (exports `TestCase`, `platformTests`, and\n`runPlatformSuite()` which returns a\n`{ passed, failed, skipped, total,\nfailures }` summary and never throws).\n`main_test.ts` now consumes it and keeps its throw-on-failure plain-script\ncontract; observable behaviour is unchanged. New `cron_conformance_suite.ts` is\na weekly cron (`default (interval: Interval)`) that runs the suite and, only\nwhen `failed > 0`, emails via `std/email` — a passing run sends nothing.\nRecipient defaults to the val owner; an optional `TOWNSTASH_ALERT_EMAIL` env var\noverrides `to`. Both files were added to the `deno check` list in `deno.json`;\n`deno task check` is green.\n\nThe cron _expression_ is not in the source — Val Town sets an interval-type\nfile's schedule via the file's interval settings (UI or\n`write_interval_settings`), not embedded in the `.ts`. Recommended: weekly at\n`0 0 * * 0` (00:00 UTC every Sunday).\n\nRemaining (maintainer, on Val Town, per the PRD \"Verification for landing\"):\ndeploy, set the cron's weekly schedule (`0 0 * * 0`), confirm it is scheduled,\nand force a failure once to confirm mail arrives.",[],[176,66,92,66,466],"194cac9a-7dd8-4b7b-a760-ffeea6060b6b","04-delete-returning-regex.md","699690a8-7ecd-11f1-ac56-1607ee4eb77e",268,["D",1783957548019],"# Delete the test adapter's RETURNING regex\n\nStatus: resolved\n\n## Parent\n\n`docs/issues/sqliteclient-conformance-suite/PRD.md`\n\n## What to build\n\nMake the local `node:sqlite` test adapter reflect the documented contract\ninstead of guessing. Today it sniffs the SQL text (`SELECT` / `RETURNING`) to\ndecide whether to call the row-returning path. Deno's `node:sqlite` returns an\nempty array from the row-returning call for `INSERT`/`UPDATE`/`DELETE`/DDL\nstatements, so the adapter can always take that path and drop the regex.\n\nThe conformance invariants from ticket 01 are the safety net: invariant 1 proves\nrows still surface, invariant 2 proves row-less statements still resolve to an\nempty array. Deleting the regex changes adapter internals only — any behavioural\ndifference surfaces as a suite failure.\n\n## Acceptance criteria\n\n- [x] The `SELECT`/`RETURNING` SQL-sniffing regex is removed from the local test\n adapter.\n- [x] The adapter always uses the row-returning prepared-statement call.\n- [x] Conformance invariants 1 and 2 pass against the simplified adapter.\n- [x] The existing behaviour suite passes unchanged; `deno task check` and\n `deno task test` are green.\n\n## Blocked by\n\n- `01-conformance-skeleton-returning-pair.md`\n\n## Comments\n\nDeleted the `/^\\s*SELECT\\b/` + `/\\bRETURNING\\b/` branch in `sqliteAdapter`\n(`src/stash_test.ts`); `execute` now always calls `prepared.all()` and returns\nits rows, with a comment noting node:sqlite returns an empty array for row-less\nstatements. The full behaviour suite plus all seven conformance cases pass\nthrough the simplified adapter — `deno test src/stash_test.ts` is 35/35 and\n`deno task check` is green.\n",[],[176,66,92,66,473],"a6c64970-017e-4240-8ef3-c5257010eab8","03-blob-and-batch-invariants.md","681d7642-7ecd-11f1-a3e7-1607ee4eb77e",263,["D",1783957547703],"# Blob round-trip and batch-atomicity invariant cases + interface doc comments\n\nStatus: resolved\n\n## Parent\n\n`docs/issues/sqliteclient-conformance-suite/PRD.md`\n\n## What to build\n\nAdd the two behavioural invariants — the ones that actually differ across the\nadapters or reach code only production exercises — to the shared case module,\neach as a conformance case plus a doc comment on the `SqliteClient` interface.\n\n- **Blob round-trip.** A stored blob comes back as bytes the core can normalize:\n `Uint8Array` _or_ `ArrayBuffer` are both conformant. This is the divergence\n the byte-normalization helper (`asBytes`) exists for, and the branch only\n production reaches today — exercising it on the real adapter is the point.\n- **`batch` atomicity.** A failing statement in a batch rolls back the\n statements before it; the scratch table is left as if the batch never ran.\n\n## Acceptance criteria\n\n- [x] Blob round-trip case stores bytes and asserts the returned value is\n normalizable (`Uint8Array` or `ArrayBuffer`), passing through both\n adapters.\n- [x] `batch`-atomicity case shows a mid-batch failure rolls back prior\n statements, through both adapters.\n- [x] Both invariants have doc comments on the `SqliteClient` interface.\n- [x] `deno task check` and `deno task test` are green.\n\n## Blocked by\n\n- `01-conformance-skeleton-returning-pair.md`\n\n## Comments\n\nAdded two behavioural cases to `src/sqlite_conformance.ts`. The blob case stores\n`[0, 1, 127, 128, 255]`, asserts the returned value is `Uint8Array` or\n`ArrayBuffer`, and checks the bytes round-trip unchanged — this is the branch\nonly production reaches, so it matters most on the real adapter. The batch case\nsends two inserts that collide on the primary key, asserts the batch rejects,\nand confirms `COUNT(*) === 0` (the first insert rolled back). The\n`SqliteClient.execute` blob line and a new `batch` doc comment in `src/stash.ts`\nrecord both invariants.\n\nLocal gate green (`deno task check`; cases pass through `node:sqlite` via\n`src/stash_test.ts`, 35/35). Hosted `std/sqlite` leg verified on Val Town per\nthe PRD (not runnable from a local shell without `VAL_TOWN_API_KEY`).\n",[],[176,66,92,66,481],"e3a02ec9-d4dc-4e7c-9871-cd1058185339","02-binding-and-ddl-invariants.md","6852a380-7ecd-11f1-b8b9-1607ee4eb77e",262,["D",1783957547959],"# Binding and DDL invariant cases + interface doc comments\n\nStatus: resolved\n\n## Parent\n\n`docs/issues/sqliteclient-conformance-suite/PRD.md`\n\n## What to build\n\nAdd the plain binding and DDL invariants to the shared case module, each as a\nconformance case plus a matching doc comment on the `SqliteClient` interface.\nThese ride the skeleton from ticket 01 — new data in the shared module, no\nrunner changes.\n\n- **Named parameters** bind from a record, including one name reused at multiple\n placeholders (the contract already recorded in ADR-0005).\n- **`bigint` values** bind.\n- **Plain-string `execute` handles DDL** — schema initialization relies on\n passing bare SQL strings.\n\n## Acceptance criteria\n\n- [x] Named-parameter binding case, including a single name reused at multiple\n placeholders, passes through both adapters.\n- [x] `bigint`-binding case passes through both adapters.\n- [x] Plain-string DDL case passes through both adapters.\n- [x] Each of the three invariants has a doc comment on the `SqliteClient`\n interface.\n- [x] `deno task check` and `deno task test` are green.\n\n## Blocked by\n\n- `01-conformance-skeleton-returning-pair.md`\n\n## Comments\n\nAdded three cases to `src/sqlite_conformance.ts`: named-parameter binding with\n`:bound` reused at two placeholders (`id >= :bound AND id <= :bound`), `bigint`\nbinding (max signed-64 as key, located via the same bigint), and plain-string\nDDL (create → insert-with-RETURNING → drop). Each rides the ticket-01 skeleton —\nnew data only, no runner changes — and flows into both runners automatically.\nThe `SqliteClient.execute` doc comment in `src/stash.ts` now documents all three\ninvariants.\n\nLocal gate green: `deno task check` passes and the cases pass through the\n`node:sqlite` adapter via `src/stash_test.ts` (35/35). The `main_test.ts` hosted\nleg runs the same cases against real `std/sqlite`; it cannot authenticate from a\nlocal shell (libsql `resp.body?.cancel` error, no `VAL_TOWN_API_KEY`) and is\nverified on Val Town per the PRD, exactly as ticket 01.\n",[],[176,66,92,66,489],"ed45d0b4-1be9-4a11-9070-044a7a091285","01-conformance-skeleton-returning-pair.md","6830710c-7ecd-11f1-895a-1607ee4eb77e",257,["D",1783956463936],"# Conformance skeleton: shared case module + both runners\n\nStatus: resolved\n\n## Parent\n\n`docs/issues/sqliteclient-conformance-suite/PRD.md`\n\n## What to build\n\nStand up the whole conformance spine end to end, proven on the two `RETURNING`\ninvariants that also license the test-adapter simplification (ticket 04).\n\n- A shared conformance-case module holds cases as data — each a `name` plus a\n function taking a `SqliteClient`. It is the single source both runners\n consume, per the plain-script testing ADR (0004).\n- Each case is isolated to a fixed-name scratch table: create-if-not-exists at\n the start, exercise the invariant, drop it in a `finally`. Cases never touch\n the core's key table.\n- The local `Deno.test` suite runs every case against the `node:sqlite` adapter,\n reusing the in-memory adapter construction already in the local suite.\n- The Val Town plain-script suite runs every case against `std/sqlite` as\n additional `TestCase` entries, with **no** gating flag — the cases touch only\n their scratch table, so they run on every platform-suite execution.\n- Seed the module with the two `RETURNING`-contract invariants, each written up\n as a doc comment on the `SqliteClient` interface:\n 1. `RETURNING` clauses surface rows through `execute`.\n 2. Statements without result rows resolve to an empty rows array, never\n `undefined`.\n\n## Acceptance criteria\n\n- [x] A shared case module exports the conformance cases as `{name, fn(client)}`\n data, consumed by both runners.\n- [x] Each case creates its scratch table up front and drops it in a `finally`;\n no case reads or writes the core's key table.\n- [x] Local `Deno.test` runs the cases against the `node:sqlite` adapter.\n- [x] The Val Town plain-script `tests` array runs the same cases against\n `std/sqlite` with no `ignore`/gating flag.\n- [x] Invariants 1 and 2 are present as conformance cases and as doc comments on\n the `SqliteClient` interface.\n- [x] `deno task check` and `deno task test` are green; the existing behaviour\n suite passes unchanged.\n\n## Blocked by\n\n- None — can start immediately.\n\n## Comments\n\nImplemented the shared conformance module in `src/sqlite_conformance.ts`,\nincluding isolated fixed-name scratch-table cleanup and the two `RETURNING`\ninvariants. The local `Deno.test` suite and the Val Town plain-script suite both\nconsume the same case data; the platform entries are not gated.\n\n`deno task check` passed, and `deno test --allow-all src/stash_test.ts` passed\n30/30 tests. The initial local `deno task test` run passed all 30 local tests,\nbut the hosted cases could not authenticate from this environment because\n`VAL_TOWN_API_KEY` was unset.\n\nHosted verification completed on 2026-07-13. The Val Town run passed the\nentry-point check, the opt-in v1 workflow, and both conformance cases:\n`4 passed, 0 failed, 0 ignored (of 4)`.\n",[],[176,66,92,66,497],["D",1783955610279],[224,225,226,227,228],[176,66,92,66],["D",1783955610092],[223,229],[176,66,92],"a43b9f5a-b5ad-4dee-a3c6-b41151144e68","a2a58b86-7e3e-11f1-a3ca-1607ee4eb77e","a26c5dfc-7e3e-11f1-aeef-1607ee4eb77e",220,["D",1783923547521],"# Named-args bind contract\n\nStatus: resolved\n\nBlocked by: none\n\n## Problem Statement\n\nTownstash's core binds its hand-written SQL with positional `?` placeholders.\nThe two load-bearing statements are the worst offenders: the conditional-set\nupsert binds 13 unlabeled positional args (with `mode` and the current timestamp\ninterleaved repeatedly), and the atomic counter increment binds 6 args of which\nfour are the same timestamp value. The pure validation helpers feeding these\nbinds are well tested, but the binding itself — the one place a real defect\nwould live — is an unchecked integer index. A silently reordered arg corrupts\nconditional-write or expiration semantics, and no test asserts arg order; a swap\nbetween two same-valued slots is undetectable by the existing suite in\nprinciple. Maintainers (human or agent) must correlate a TypeScript array with\nSQL `?` slots by counting placeholders.\n\n## Solution\n\nBind every statement by name instead of position. SQLite named parameters\n(`:name`) are natively supported by both adapters behind the `SqliteClient` seam\n(the local `node:sqlite` test adapter and Val Town's `std/sqlite`, which is\n`@libsql/client`), including reuse of one named parameter at multiple places in\na statement — so the counter's four duplicated timestamp slots collapse into a\nsingle `:now`. Each statement becomes a small statement module: the SQL text\nplus a typed args interface, welded together by one generic factory so that a\nwrong, missing, or excess key is a compile error at the call site. The `Stash`\ninterface — the surface users and tests see — does not change at all.\n\n## User Stories\n\n1. As a townstash maintainer, I want each SQL statement's arguments bound by\n name, so that I can read a call site and know which value lands in which\n placeholder without counting `?` slots.\n2. As a townstash maintainer, I want the argument-ordering contract to live in\n exactly one place per statement, so that a change to a statement's parameters\n is a local edit rather than a cross-referencing exercise.\n3. As a townstash maintainer, I want a typo'd or missing argument key to be a\n compile error, so that binding mistakes are caught before any test runs.\n4. As a townstash maintainer, I want the conditional-set mode encoding\n (`0`/`1`/`2`) and keepTtl flag expressed as literal-union types on the args\n interface, so that the encoding is documented at the type level instead of\n only in SQL branches.\n5. As a townstash maintainer, I want the counter increment to bind its timestamp\n once under a single name, so that a swap between duplicated timestamp slots\n is structurally impossible.\n6. As a townstash maintainer, I want every statement in the core to use the same\n binding idiom, so that a reader never has to determine which of two binding\n dialects a given call site speaks.\n7. As a future adapter author, I want the `SqliteClient` interface to accept\n named args as a record alongside positional arrays, so that my adapter knows\n named-parameter support is part of the contract it must satisfy.\n8. As a future adapter author, I want the named-parameter requirement recorded\n in an ADR, so that I don't discover the invariant by breaking it.\n9. As a townstash user, I want the `Stash` interface and every command's\n observable behaviour to remain byte-for-byte identical, so that this refactor\n is invisible to me.\n10. As a test author, I want the existing behaviour suite to pass unchanged, so\n that the conversion is demonstrably a pure refactor.\n11. As a test author, I want a compile-time assertion that the real Val Town\n client type satisfies `SqliteClient`, so that drift between townstash's\n structural types and the platform's types fails type-checking instead of\n surfacing in production.\n12. As a deployer, I want the gated live integration suite run once against the\n real platform adapter after this change, so that the named-args path is\n verified end-to-end where the library actually ships.\n13. As an AI agent navigating the codebase, I want statements and their arg\n types adjacent in the core module, so that understanding one command never\n requires bouncing between files.\n14. As a future maintainer adding a new command, I want a generic statement\n factory I can reuse, so that new statements get named binding and\n compile-time arg checking for free.\n\n## Implementation Decisions\n\n- **Scope: all statements convert.** Every bind site in the core (eleven today)\n moves from positional arrays to named `:name` placeholders with record args —\n not just the two risky statements. Uniformity is nearly free once the seam\n accepts records, and a mixed positional/named codebase was judged worse than\n the marginal diff.\n- **The `SqliteClient` seam widens, nothing else changes.** The statement input\n type's `args` field widens from array-only to\n `SqlValue[] | Record`. This is an un-narrowing back to the\n platform's own shape: Val Town's sqlite client is `@libsql/client`, whose\n `InArgs` is `Array | Record`. The real adapter\n therefore needs zero adaptation.\n- **The core stays import-free.** Townstash keeps its own structural\n `SqliteClient`/statement/value types as a deliberate subset of libsql's.\n libsql types are imported (type-only) exclusively in the local test file,\n where a compile-time assignability assertion pins compatibility: the libsql\n `Client` must satisfy `SqliteClient`, and townstash's statement type must be\n assignable to libsql's `InStatement`. Drift fails `deno check`.\n- **One generic factory enforces the SQL↔args pairing.** A single\n `defineStatement` helper welds each SQL constant to its args interface (shape\n from the design session):\n\n ```ts\n function defineStatement>(sql: string) {\n return (args: A): SqlStatement => ({ sql, args });\n }\n // usage: await database.execute(upsertValue({ key, value, expiresAt, mode, keepTtl, now }));\n ```\n\n Each statement gets a named args interface (e.g. `UpsertArgs`,\n `IncrementArgs`) with literal-union fields where the value set is closed\n (`mode: 0 | 1 | 2`, `keepTtl: 0 | 1`).\n- **SQL logic is untouched.** Only placeholder syntax changes; every WHERE/ CASE\n branch stays character-equivalent. The integer `mode` encoding is kept, not\n unpacked into separate nx/xx booleans — binding mechanism and SQL logic must\n not change in the same diff. (Unpacking is a possible follow-up.)\n- **Placement: statement modules stay in the core module** next to where the SQL\n constants already live. A separate statements file would have exactly one\n consumer — a hypothetical seam.\n- **Naming defaults:** `:name` prefix (verified working verbatim in both\n adapters); the timestamp argument is named `now`; the counter statement's four\n duplicated timestamp binds collapse to one `:now`.\n- **The local test adapter passes record args through** to `node:sqlite`'s\n prepared-statement API directly (object argument), spreading only when args is\n an array. Deno's `node:sqlite` was verified to support named parameters with\n bare or prefixed keys and repeated use of one parameter.\n- **ADR-0005** records the decision (\"bind SQL statements by named parameters\")\n and its consequence: named-parameter support is a required invariant of every\n `SqliteClient` adapter, with type compatibility pinned by the libsql\n assignability test.\n\n## Testing Decisions\n\n- **The `Stash` interface is the test surface**; this refactor adds no new\n runtime seams and must not test past the interface. A good test here is the\n existing kind: drive commands through `createStash` against the real in-memory\n SQLite engine and assert observable behaviour (per ADR-0003 and ADR-0004),\n never inspecting SQL text or arg objects.\n- **The conversion is verified by the suite staying green unchanged.** The\n existing local suite — nx/xx/keepTtl conditionals, relative and absolute\n expiration, counter overflow/underflow/canonicalization, validation-before- DB\n call-count assertions, and both 32-way concurrency tests — passes with no\n behavioural test edits. Test-adapter plumbing for record args is the only\n expected test-file change besides the new assignability assertion.\n- **Compile-time checks are tests.** `deno check` must pass, and the new\n type-level assignability block (libsql `Client` vs `SqliteClient`) lives in\n the local test file. It has no runtime component.\n- **One live verification run.** After local green, deploy and run the Val Town\n plain-script suite with `TOWNSTASH_LIVE_INTEGRATION=1` to exercise the\n named-args path against the real `std/sqlite` adapter end-to-end. Prior art:\n the existing gated live smoke test in the Val Town suite.\n\n## Out of Scope\n\n- Unpacking the conditional-set `mode` integer into separate nx/xx boolean\n parameters (clean follow-up diff, same verification suite).\n- The adapter conformance suite across both `SqliteClient` adapters (candidate 3\n of the 2026-07-12 architecture review; this spec's live run is a one-shot\n check, not the durable suite).\n- Any change to the `Stash` interface, command semantics, error messages, or\n schema.\n- The other architecture-review candidates (counter-rule consolidation,\n prefix-wrapper absorption, codec seam).\n- Adopting libsql types inside the core, or adding any runtime import to it.\n\n## Further Notes\n\n- Origin: architecture review of 2026-07-12 (top recommendation), refined in a\n grilling session; all decisions above were confirmed by the maintainer.\n- The libsql out-value type documents that BLOBs come back as `ArrayBuffer` on\n the real platform — this is why the byte-coercion helper's `ArrayBuffer`\n branches exist and are only unreachable under the local test adapter. Relevant\n context for the future conformance-suite work, not for this change.\n- Val Town's `std/sqlite` is a thin re-export of `@libsql/client@0.17.2/web`;\n the pinned version matters only for the type-only import in the test file.\n\n## Outcome\n\nThe named-args binding contract is complete. All eleven core statements use\ntyped named arguments, the local SQLite suite and compile-time adapter checks\npass, and the deployed Val Town client passed the gated plain-script suite with\n`2 passed, 0 failed, 0 ignored (of 2)`. During live verification, the dynamic\n`del` query was corrected to interpolate the shared visible-expiration predicate\nbefore the final successful run.\n",[],[176,66,518,82],"named-args-bind-contract","95f43160-5704-44a9-9c18-b3696efe69da","04-live-verification-on-val-town.md","c3235a9e-7e45-11f1-b7a0-1607ee4eb77e","c307e05c-7e45-11f1-96eb-1607ee4eb77e",221,["D",1783923547565],"# 04: Live verification on Val Town\n\nStatus: resolved\n\nBlocked by: 02, 03\n\n## Parent\n\n`docs/issues/named-args-bind-contract/PRD.md`\n\n## What to build\n\nThe named-args path is verified end-to-end where the library actually ships.\nAfter local green on the fully converted core, deploy to Val Town and run the\nplain-script test suite with `TOWNSTASH_LIVE_INTEGRATION=1`, exercising every\nconverted statement against the real `std/sqlite` adapter (libsql). Prior art:\nthe existing gated live smoke test in the Val Town suite.\n\nThis is the PRD's one-shot live check — not the durable cross-adapter\nconformance suite, which is a separate architecture-review candidate and out of\nscope here.\n\n## Acceptance criteria\n\n- [x] Val Town deployment updated with the converted core\n- [x] Plain-script suite run with `TOWNSTASH_LIVE_INTEGRATION=1` against the\n real platform adapter; all tests pass\n- [x] Run outcome recorded in a comment on this ticket\n\n## Blocked by\n\n- `02-convert-conditional-set-upsert.md`\n- `03-convert-counter-and-remaining-statements.md`\n\n## Comments\n\nAttempted 2026-07-12. `vt status` reports the deployed val is already current at\n`main@0..208`, so no deployment update was needed. The exact suite was run with\n`TOWNSTASH_LIVE_INTEGRATION=1 deno run --allow-all main_test.ts`.\n\nThe unauthenticated run failed before the first database assertion because the\nlocal process has no Val Town-injected token. A retry with the personal `vt` CLI\ntoken reached the hosted endpoint but Val Town rejected it because the SQLite\nscoped endpoint requires a token scoped to a val. The client then surfaced\n`TypeError: resp.body?.cancel is not a function` from `@libsql/hrana-client`\nwhile handling that response. The suite therefore has not yet been executed\ninside the Val Town runtime, where the required val-scoped token is injected;\nthe live acceptance check remains open.\n\nFollow-up: the maintainer then ran deployed version 210 in Val Town. The live\npath passed entry-point discovery, conditional writes, bytes, JSON, and\ncounters, then failed during cleanup because `del` sent the literal\n`visibleExpiration` identifier instead of the interpolated expiration predicate.\nFixed `src/stash.ts` to interpolate the shared fragment and pushed the\ncorrection. Awaiting one more live run against the updated deployment.\n\nCompleted: the maintainer reran the exact plain-script suite against the updated\ndeployment and reported the full success output:\n`2 passed, 0 failed,\n0 ignored (of 2)`, including the cleanup/deletion step. The\nlive verification acceptance criteria are complete.\n",[],[176,66,518,66,520],"49c1ad5a-528f-4808-9b8e-331b57f52f73","03-convert-counter-and-remaining-statements.md","c32be894-7e45-11f1-b3a7-1607ee4eb77e",219,["D",1783923547479],"# 03: Convert the counter and all remaining statements to named args\n\nStatus: resolved\n\nBlocked by: none\n\n## Parent\n\n`docs/issues/named-args-bind-contract/PRD.md`\n\n## What to build\n\nEvery remaining bind site in the core moves to named args, so that after this\nticket (together with 02) zero positional binds remain and a reader never has to\ndetermine which binding dialect a call site speaks.\n\n- The counter increment — 6 positional args today, four of them the same\n timestamp — collapses its duplicated timestamp slots into a single `:now`,\n making a swap between same-valued slots structurally impossible. The counter's\n overflow-diagnosis follow-up query converts too.\n- The shared visible-expiration SQL fragment switches its placeholder to `:now`;\n all statements embedding it (delete, exists, type, the expiration updates,\n persist, ttl, cleanup, counter-state) convert in the same diff, since editing\n the fragment touches them all at once.\n- The delete statement's variable-length key list gets generated names (`:key0`,\n `:key1`, …) built alongside its args record; this is the one statement whose\n SQL is assembled per call rather than a static constant, so it may use the\n factory differently or bypass it — but still binds by name.\n- Each static statement becomes a statement module via the `defineStatement`\n factory with its own typed args interface, adjacent to its SQL constant in the\n core module.\n- SQL logic untouched; only placeholder syntax changes.\n\n## Acceptance criteria\n\n- [x] Counter increment binds its timestamp exactly once under `:now`\n- [x] No positional array binds remain anywhere in the core module\n- [x] Delete with multiple keys binds each key by a generated name and passes\n the existing multi-key tests\n- [x] Counter tests (overflow/underflow/canonicalization, 32-way concurrency)\n and all lifecycle tests (expire, expireAt, persist, ttl, cleanup, exists,\n type, del) pass with no behavioural test edits\n- [x] `deno check` passes; `Stash` interface and observable behaviour unchanged\n\n## Blocked by\n\n- None — ticket 01 is resolved.\n\n## Answer\n\nConverted every remaining core bind site to named parameters. The counter now\nbinds `key`, `delta`, and one shared `now` value through a typed statement; the\ncounter-state diagnostic query uses the same named-args factory. Lifecycle\nstatements use adjacent typed argument interfaces and the shared `:now`\nexpiration fragment. `del` generates `:key0`, `:key1`, and so on next to its\nrecord args, preserving duplicate-key behavior for the existing multi-key\ncommand.\n\nThe `Stash` interface and SQL behavior are unchanged, and no behavioral test\nfiles were edited.\n\nValidation passed:\n\n- `deno task test` — 24 local SQLite tests and the entry-point test passed; the\n gated Val Town integration was skipped\n- `deno check --allow-import main.ts main_test.ts src/stash.ts src/stash_test.ts`\n- `deno lint`\n- `deno fmt --check src/stash.ts src/stash_test.ts main.ts main_test.ts`\n",[],[176,66,518,66,529],"354b6e24-ac2d-4b0a-b069-66beb7e081c7","02-convert-conditional-set-upsert.md","c31c8f8e-7e45-11f1-89cc-1607ee4eb77e",223,["D",1783923547607],"# 02: Convert the conditional-set upsert to named args\n\nStatus: resolved\n\nBlocked by: 01\n\n## Parent\n\n`docs/issues/named-args-bind-contract/PRD.md`\n\n## What to build\n\nThe riskiest bind in the core — the conditional-set upsert behind `set` /\n`setBytes` / `setJSON`, currently 13 unlabeled positional args with `mode` and\nthe current timestamp interleaved repeatedly — binds by name. A maintainer\nreading the call site sees each value labeled once; a change to the statement's\nparameters becomes a local edit instead of a count-the-placeholders exercise.\n\n- The upsert becomes a statement module: `:name` placeholders plus an\n `UpsertArgs` interface, welded by the `defineStatement` factory from\n ticket 01.\n- Repeated slots collapse: `mode` (bound four times today), the current\n timestamp (`now`, bound five times), and the key each bind once under a single\n name.\n- The mode encoding and keepTtl flag are literal-union fields on the args\n interface (`mode: 0 | 1 | 2`, `keepTtl: 0 | 1`), documenting the encoding at\n the type level. The integer encoding itself is kept — unpacking into nx/xx\n booleans is explicitly out of scope (binding mechanism and SQL logic must not\n change in the same diff).\n- SQL logic untouched: every WHERE/CASE branch stays character-equivalent; only\n placeholder syntax changes.\n\n## Acceptance criteria\n\n- [x] Upsert binds entirely by `:name`; no positional args remain in this\n statement\n- [x] `UpsertArgs` uses literal unions for `mode` and `keepTtl`\n- [x] Each logical value (`mode`, `now`, key) appears exactly once in the args\n record\n- [x] Existing conditional-set tests (nx/xx/keepTtl, relative and absolute\n expiration, concurrency) pass with no behavioural test edits\n- [x] `deno check` passes; `Stash` interface and observable behaviour unchanged\n\n## Blocked by\n\n- `01-named-args-seam-factory-tracer.md`\n\n## Answer\n\nImplemented the conditional-set upsert as a typed named-args statement using the\n`defineStatement` factory. `UpsertArgs` documents the closed `mode` and\n`keepTtl` encodings, and the call site supplies each logical value once while\nthe SQL reuses named placeholders for the repeated branches. Existing SQL logic,\nthe `Stash` interface, and behavior tests remain unchanged.\n\nValidation passed:\n\n- `deno test --allow-all src/stash_test.ts` — 24 passed\n- `deno check --allow-import main.ts main_test.ts src/stash.ts src/stash_test.ts`\n- `deno lint`\n- `deno fmt --check src/stash.ts src/stash_test.ts main.ts main_test.ts`\n- `deno task test` — 24 local tests passed; the gated live test was skipped\n",[],[176,66,518,66,537],"a529e3e9-b0d6-4644-aceb-b3588a7e26e6","01-named-args-seam-factory-tracer.md","c33fcf30-7e45-11f1-96eb-1607ee4eb77e",222,["D",1783923547676],"# 01: Named-args seam, statement factory, and tracer conversion\n\nStatus: resolved\n\nBlocked by: none\n\n## Parent\n\n`docs/issues/named-args-bind-contract/PRD.md`\n\n## What to build\n\nMake named-parameter binding part of the `SqliteClient` contract and prove the\nwhole path with one converted statement. After this ticket, a maintainer can\nread the `get` command's bind site and see each value labeled by name, the local\nsuite passes unchanged, and any future adapter author finds the named-args\nrequirement recorded as an ADR and pinned by a compile-time check against the\nreal platform's types.\n\nConcretely, end to end:\n\n- The statement input type's `args` field accepts a record of named values\n alongside the existing positional array (an un-narrowing back to libsql's own\n `InArgs` shape, so the real Val Town adapter needs zero adaptation).\n- The local test adapter passes record args through to `node:sqlite`'s\n prepared-statement API as an object, spreading only when args is an array.\n- A type-only assignability block in the local test file pins compatibility both\n ways: the libsql `Client` must satisfy `SqliteClient`, and townstash's\n statement type must be assignable to libsql's `InStatement`. Drift fails\n `deno check`. The libsql import is type-only and lives exclusively in the test\n file — the core stays import-free.\n- A generic `defineStatement` factory welds each SQL constant to a typed args\n interface so a wrong, missing, or excess key is a compile error at the call\n site. Shape from the design session (decision-rich part only):\n\n ```ts\n function defineStatement >(sql: string) {\n return (args: A): SqlStatement => ({ sql, args });\n }\n ```\n\n- One simple statement — the select behind `get` — converts to `:name`\n placeholders via the factory as the tracer bullet. Statement modules live in\n the core module next to where the SQL constants already are.\n- ADR-0005 records the decision (\"bind SQL statements by named parameters\") and\n its consequence: named-parameter support is a required invariant of every\n `SqliteClient` adapter, with compatibility pinned by the libsql assignability\n test.\n\n## Acceptance criteria\n\n- [x] `SqliteClient` statement args accept\n `SqlValue[] | Record`\n- [x] Local test adapter executes record args against `node:sqlite` (object\n form), still spreading array args\n- [x] Compile-time assignability assertions (libsql `Client` vs `SqliteClient`;\n townstash statement vs libsql `InStatement`) live in the local test file\n and pass `deno check`\n- [x] `defineStatement` factory exists; a typo'd, missing, or extra arg key at a\n call site is a compile error\n- [x] The `get` select statement binds by `:name` through the factory\n- [x] ADR-0005 written\n- [x] Existing local behaviour suite passes with no behavioural test edits; SQL\n logic character-equivalent apart from placeholder syntax\n- [x] No runtime imports added to the core; `Stash` interface unchanged\n\n## Blocked by\n\n- None — can start immediately.\n\n## Answer\n\nImplemented and verified the named-args seam and `get` tracer. `SqlStatement`\nnow accepts named records alongside positional arrays, the local SQLite adapter\npasses records through as objects, and the local test file pins compatibility\nwith libsql's `Client` and `InStatement` types. The core defines typed\nstatements with `defineStatement` and the `get` query uses `:key` and `:now`.\nADR-0005 records the adapter invariant. No `Stash` API or behavior tests were\nchanged.\n\nValidation passed:\n\n- `deno test --allow-all src/stash_test.ts` — 24 passed\n- `deno check --allow-import main.ts main_test.ts src/stash.ts src/stash_test.ts`\n- `deno lint`\n- `deno fmt --check src/stash.ts src/stash_test.ts main.ts main_test.ts`\n",[],[176,66,518,66,545],"ac64c3ef-f587-4934-9f2a-4024d4e2e3fd",190,["D",1783897351503],[217,218,219,220],[176,66,518,66],"e2a86650-b7a3-403d-a606-9316ae98bdeb",184,["D",1783894290321],[216,221],[176,66,518],"33744be4-152c-4db7-92a1-b709f106077d","a2956ac6-7e3e-11f1-9a8e-1607ee4eb77e","a27d76f0-7e3e-11f1-b25d-1607ee4eb77e",224,["D",1783923547788],"# Absorb the prefix wrapper into the Stash module\n\nStatus: resolved\n\nBlocked by: none\n\n## Problem Statement\n\nTownstash's `withPrefix` is implemented as a shadow of the `Stash` interface: a\nwrapper module of eighteen one-line delegations whose only behaviour is\nprepending a string to keys. It is a shallow module by the deletion test —\ndeleting it would concentrate the key rule into one place rather than scatter\ncomplexity — and it is a standing locality trap: adding a new command to the\n`Stash` interface compiles cleanly without the corresponding wrapper edit,\nsilently dropping prefixing for that command on every prefixed client. Every\ninterface change pays a hidden parallel-edit tax.\n\n## Solution\n\nMove prefixing inside the `Stash` module itself. The command implementations are\nbuilt by an internal per-view factory parameterized by a prefix string; the root\nclient is the factory applied with the empty prefix, and `withPrefix` returns\nthe same implementation built with the concatenated prefix. The key rule\n(\"stored key = prefix + key\", plain text, composed in call order) lives in one\nplace, every current and future command gets prefixing for free, and the wrapper\nmodule is deleted. The `Stash` interface and all observable behaviour are\nunchanged.\n\n## User Stories\n\n1. As a townstash maintainer, I want prefixing implemented once inside the Stash\n module, so that the key rule has a single home instead of a shadow copy of\n the interface.\n2. As a townstash maintainer, I want new commands to be prefix-correct by\n construction, so that adding a method never requires remembering a parallel\n wrapper edit.\n3. As a townstash maintainer, I want the compiler to make \"prefix silently\n skipped\" impossible, so that the failure mode ceases to exist rather than\n being caught by review.\n4. As a townstash user, I want `withPrefix` to keep its exact semantics — plain\n text prepend, call-order composition, flat keyspace, no isolation — so that\n this refactor is invisible to me.\n5. As a townstash user, I want prefixed clients to keep sharing the parent's\n database connection, schema initialization, and clock, so that creating a\n prefixed view stays free of side effects.\n6. As a townstash user, I want `cleanup` through a prefixed client to remain\n global, so that storage reclamation behaviour does not change.\n7. As a test author, I want the entire existing suite to pass unchanged, so that\n the refactor is demonstrably behaviour-invariant.\n8. As an AI agent navigating the codebase, I want one implementation of the\n command set instead of an implementation plus a wrapper, so that\n understanding a command means reading one function.\n9. As a future maintainer, I want the deleted wrapper's behaviour pinned by the\n existing prefixed-client tests, so that any regression in composition or\n forwarding surfaces immediately.\n\n## Implementation Decisions\n\n- **The internal seam is a prefix string, not a transform function.** The\n per-view factory takes the prefix as a plain string; the root client uses the\n empty string; `withPrefix` concatenates. An `encodeKey`-style function\n parameter was considered and rejected: string concatenation is the only\n transform that exists, and a function-valued seam with one adapter is a\n hypothetical seam.\n- **Command implementations move into an inner per-view factory** inside the\n Stash factory. Each view gets its own closure set — the same allocation\n behaviour as the wrapper it replaces.\n- **The prefix is applied exactly once, at the innermost point** where a key is\n placed into a statement's arguments — never at public-method entry. The text\n getter/setter commands delegate to the byte commands internally, so\n entry-point encoding would double-prefix; the innermost placement makes that\n structurally impossible.\n- **Shared state stays in the outer factory closure:** the database client, the\n memoized schema-initialization promise, and the clock live above the per-view\n factory, so every view shares one initialization and one time source, exactly\n as today.\n- **Composition semantics are preserved verbatim:** prefixes compose in call\n order by string concatenation; the keyspace stays flat; the full prefixed key\n remains addressable from an unprefixed client; a prefix provides no isolation\n or authorization (per the flat-keyspace ADR). `cleanup` remains a global\n operation regardless of which view invokes it.\n- **The `Stash` interface, error modes, and messages are untouched.** The\n wrapper module is deleted outright; nothing else about the public surface\n moves.\n- **No new ADR.** No interface or platform contract changes; the resulting code\n shape is self-evident.\n- **Ordering constraint:** implement only after the named-args-bind-contract\n spec lands. Both changes restructure the same command bodies; the prefix\n application point is right next to the named-args bind sites.\n\n## Testing Decisions\n\n- **The `Stash` interface is the test surface**, and this change must not test\n past it. A good test drives commands through the public interface against the\n real in-memory SQLite engine and asserts observable behaviour (per the\n existing ADRs); no test inspects prefixes, closures, or SQL.\n- **No new tests.** The existing prefixed-client tests already pin the behaviour\n being preserved: call-order composition and root visibility of composed keys,\n cross-view `del` counting, full lifecycle/bytes/counter forwarding, and global\n `cleanup` through a prefixed view. They also catch the double-prefix failure\n mode directly (a doubled prefix breaks the root-visibility assertions\n immediately).\n- **The gate is the suite passing unchanged** plus type-checking: `deno test`\n and `deno check`, no behavioural test edits. No live Val Town run — the change\n never touches the storage seam, SQL text, or anything platform-facing.\n- Prior art: the two existing prefixed-client test blocks in the local\n `Deno.test` suite.\n\n## Out of Scope\n\n- Any change to `withPrefix` semantics (isolation, validation, reserved\n characters, persisted namespaces — all explicitly rejected by the\n flat-keyspace ADR).\n- The named-args bind conversion itself (separate spec, must land first).\n- The other 2026-07-12 architecture-review candidates: counter-rule\n consolidation, the SqliteClient conformance suite, the codec seam.\n- Any new key-transform capability (hashing, escaping, namespacing) — one\n adapter, no seam.\n\n## Further Notes\n\n- Origin: candidate 4 of the 2026-07-12 architecture review (\"Absorb the prefix\n wrapper into the Stash module\"), grilled to shared understanding with the\n maintainer on the same date.\n- Expected net effect on the core: roughly 25 lines of wrapper deleted, a\n factory nesting introduced, zero public-surface change. The deletion test\n motivated the candidate: removing the wrapper concentrates the key rule\n instead of relocating it.\n",[],[176,66,570,82],"absorb-prefix-wrapper","68d8b4de-b571-4215-8fe7-77b49f183c06","01-absorb-prefixing-into-stash.md","c1d0f146-7e82-11f1-883f-1607ee4eb77e","c0eee85a-7e82-11f1-8c55-1607ee4eb77e",231,["D",1783923547444],"# 01: Absorb prefix views into the Stash module\n\nStatus: resolved\n\nBlocked by: none\n\n## Parent\n\n`docs/issues/absorb-prefix-wrapper/PRD.md`\n\n## What to build\n\nMove prefix handling into the `Stash` module's internal per-view construction so\nthe root client and every prefixed client use one command implementation.\n`withPrefix` must preserve plain-text prepend, call-order composition, flat\nkeyspace visibility, shared database/schema/clock state, and global cleanup.\nDelete the separate wrapper implementation while leaving the public interface\nand all observable behavior unchanged.\n\n## Acceptance criteria\n\n- [x] The root client is the empty-prefix view, and `withPrefix` returns a\n prefix-aware view built by the same internal command construction path.\n- [x] Every command applies the accumulated prefix exactly once, including text,\n JSON, bytes, lifecycle, deletion, and counter operations.\n- [x] Prefixes compose in call order; full prefixed keys remain addressable from\n the root client; prefixes provide no isolation or authorization.\n- [x] Prefixed views share the parent's database connection, schema\n initialization, and clock without introducing side effects.\n- [x] `cleanup` invoked through a prefixed view remains global.\n- [x] The separate wrapper implementation is deleted; the `Stash` interface,\n errors, messages, and public behavior are unchanged.\n- [x] Existing behavior tests pass unchanged, including prefix composition, root\n visibility, lifecycle/bytes/counter forwarding, deletion counts, and\n global cleanup.\n- [x] `deno test` and `deno check` pass.\n\n## Blocked by\n\n- None — the named-args bind contract prerequisite is resolved.\n\n## Comments\n\nImplemented in `src/stash.ts` by moving command construction into the internal\n`createView(prefix)` factory. The root client uses an empty prefix, prefixed\nviews compose through the same factory, and keyed SQL arguments apply the\naccumulated prefix exactly once. The separate forwarding wrapper was deleted.\n\nValidation: `deno task check` passed; `deno task test` passed with 24 local\ntests and the Val Town integration intentionally ignored.\n",[],[176,66,570,66,572],"f6697ee7-8926-4e76-91d7-cda15235608e",217,["D",1783923547283],[213],[176,66,570,66],"b8671299-d4d3-4cb0-a6ba-9d1c950ff72a",185,["D",1783894290426],[212,214],[176,66,570],"abd74235-32cc-4cbd-95c6-ec534c904c40","3f266b0e-7dba-11f1-8f0a-1607ee4eb77e",50,["D",1783837430585],[211,215,222,230],[176,66],"cefe04c4-158a-4eca-952b-fc9f193cc3e9","2026-07-12-run-2-tightened.txt","9732206e-7e22-11f1-8bd4-1607ee4eb77e","972355ac-7e22-11f1-bffc-1607ee4eb77e",167,["D",1783882245576],"Tightened harness: median of 3×50 samples with per-run p50 [min–max] spread,\nisolated `del` (keys pre-seeded so only the delete is timed), and a\nconcurrency-width throughput sweep. This is the run BENCHMARKS.md reports.\n\nTownstash vs blob benchmark (namespace __townstash_bench__:cf779f6a-a4fb-4a5b-84e7-e9b899525c96:)\nconfig: iters=50 warmup=5 repeats=3\n========================================================================\n\n[set] small (64B)\n stash p50 46.0ms [40.5–47.0] p95 108.6ms p99 153.5ms mean 53.8ms (median of 3×50)\n blob p50 47.0ms [44.7–49.5] p95 95.1ms p99 117.4ms mean 52.5ms (median of 3×50)\n[get] small (64B)\n stash p50 19.7ms [12.6–34.0] p95 68.4ms p99 90.5ms mean 28.0ms (median of 3×50)\n blob p50 60.0ms [58.3–60.0] p95 103.9ms p99 123.6ms mean 59.9ms (median of 3×50)\n\n[set] medium (4096B)\n stash p50 39.9ms [30.9–50.1] p95 93.0ms p99 114.7ms mean 48.6ms (median of 3×50)\n blob p50 48.9ms [44.1–49.9] p95 95.3ms p99 118.9ms mean 53.6ms (median of 3×50)\n[get] medium (4096B)\n stash p50 13.2ms [8.7–27.1] p95 71.3ms p99 134.5ms mean 29.8ms (median of 3×50)\n blob p50 35.9ms [32.7–37.7] p95 67.3ms p99 81.7ms mean 40.6ms (median of 3×50)\n\n[set] large (262144B)\n stash p50 42.5ms [38.9–44.3] p95 108.6ms p99 147.2ms mean 51.0ms (median of 3×50)\n blob p50 48.1ms [42.1–48.6] p95 84.3ms p99 113.4ms mean 50.5ms (median of 3×50)\n[get] large (262144B)\n stash p50 13.3ms [13.0–19.1] p95 32.3ms p99 51.0ms mean 16.0ms (median of 3×50)\n blob p50 40.9ms [38.2–44.8] p95 72.1ms p99 118.7ms mean 43.1ms (median of 3×50)\n\n[del] (pre-seeded keys, delete only)\n stash p50 27.3ms [26.6–28.3] p95 63.5ms p99 66.5ms mean 33.0ms (median of 3×50)\n blob p50 26.1ms [26.0–30.5] p95 62.1ms p99 97.1ms mean 32.9ms (median of 3×50)\n\n[setJSON]\n stash p50 42.6ms [40.7–71.3] p95 108.9ms p99 187.6ms mean 57.1ms (median of 3×50)\n blob p50 49.9ms [43.3–107.7] p95 110.4ms p99 125.2ms mean 55.7ms (median of 3×50)\n[getJSON]\n stash p50 12.5ms [11.3–19.6] p95 58.8ms p99 72.2ms mean 23.2ms (median of 3×50)\n blob p50 44.7ms [40.9–49.4] p95 86.6ms p99 112.7ms mean 52.2ms (median of 3×50)\n\n[counter increment]\n stash.incr (atomic, 1 RT) p50 45.8ms [38.0–52.4] p95 82.1ms p99 106.6ms mean 48.6ms (median of 3×50)\n blob RMW (racy, 2 RT) p50 101.9ms [101.9–105.0] p95 168.5ms p99 238.1ms mean 108.3ms (median of 3×50)\n\n[concurrent set throughput] width sweep, 5 batches each\n width stash ops/s blob ops/s ratio(blob/stash)\n 1 31 20 0.64×\n 5 30 62 2.08×\n 10 45 108 2.41×\n 20 48 78 1.64×\n 50 52 139 2.70×\n\ncleanup: removed 521 stash keys, 521 blob keys\n",[],[176,605,597],"benchmarks","a479fc3e-73b2-4d23-bf0f-9a79fc3f810f","2026-07-12-run-1-initial-draft.txt","974e84ac-7e22-11f1-a188-1607ee4eb77e",170,["D",1783882245570],"Initial-draft harness: single pass (n=50), no repeats/brackets, `del` measured\nas set+del (not isolated). Superseded by run 2 for the headline numbers; kept\nfor provenance.\n\nTownstash vs blob benchmark (namespace __townstash_bench__:e9b57508-852e-4a17-8be7-5b22b6a11222:)\n========================================================================\n\n[set] small (64B)\n stash p50 33.1ms p95 72.2ms p99 77.6ms mean 41.1ms (n=50)\n blob p50 38.8ms p95 77.0ms p99 79.0ms mean 44.2ms (n=50)\n[get] small (64B)\n stash p50 12.7ms p95 62.6ms p99 100.8ms mean 23.5ms (n=50)\n blob p50 45.7ms p95 90.1ms p99 107.8ms mean 49.9ms (n=50)\n\n[set] medium (4096B)\n stash p50 37.5ms p95 76.0ms p99 158.6ms mean 42.7ms (n=50)\n blob p50 50.6ms p95 85.9ms p99 114.8ms mean 51.8ms (n=50)\n[get] medium (4096B)\n stash p50 22.1ms p95 68.7ms p99 91.3ms mean 27.8ms (n=50)\n blob p50 53.6ms p95 111.0ms p99 334.8ms mean 65.5ms (n=50)\n\n[set] large (262144B)\n stash p50 59.1ms p95 115.0ms p99 147.3ms mean 62.6ms (n=50)\n blob p50 47.0ms p95 72.5ms p99 113.6ms mean 49.6ms (n=50)\n[get] large (262144B)\n stash p50 41.8ms p95 77.7ms p99 215.3ms mean 45.6ms (n=50)\n blob p50 49.4ms p95 88.2ms p99 107.9ms mean 52.6ms (n=50)\n\n[del] (create then delete each iteration)\n stash p50 95.7ms p95 174.9ms p99 205.8ms mean 99.8ms (n=50)\n blob p50 92.8ms p95 165.7ms p99 280.6ms mean 92.7ms (n=50)\n\n[setJSON]\n stash p50 40.9ms p95 84.9ms p99 88.5ms mean 47.9ms (n=50)\n blob p50 43.4ms p95 97.0ms p99 129.7ms mean 53.7ms (n=50)\n[getJSON]\n stash p50 16.7ms p95 58.8ms p99 64.5ms mean 25.6ms (n=50)\n blob p50 56.1ms p95 82.7ms p99 96.0ms mean 51.3ms (n=50)\n\n[counter increment]\n stash.incr (atomic, 1 RT) p50 37.6ms p95 84.3ms p99 102.3ms mean 45.0ms (n=50)\n blob RMW (racy, 2 RT) p50 94.4ms p95 122.6ms p99 183.7ms mean 91.6ms (n=50)\n\n[concurrent set throughput] width=20 x 5 batches\n stash 52 ops/s (mean batch 381.6ms, 100 ops)\n blob 190 ops/s (mean batch 105.4ms, 100 ops)\n\ncleanup: removed 105 stash keys, 105 blob keys\n",[],[176,605,607],"e78d3deb-fb2e-4513-9623-91d0f827ebb7",166,["D",1783882245480],[208,209],[176,605],"1dbd9e66-c8b2-48b7-a71c-2e610aa52d8a","triage-labels.md","3fcbf0f6-7dba-11f1-8fde-1607ee4eb77e","3f50d204-7dba-11f1-8f0a-1607ee4eb77e",76,["D",1783870145621],"# Triage Labels\n\nThe skills speak in terms of five canonical triage roles. This file maps those\nroles to the actual label strings used in this repo's issue tracker.\n\n| Label in mattpocock/skills | Label in our tracker | Meaning |\n| -------------------------- | -------------------- | ---------------------------------------- |\n| `needs-triage` | `needs-triage` | Maintainer needs to evaluate this issue |\n| `needs-info` | `needs-info` | Waiting on reporter for more information |\n| `ready-for-agent` | `ready-for-agent` | Fully specified, ready for an AFK agent |\n| `ready-for-human` | `ready-for-human` | Requires human implementation |\n| `wontfix` | `wontfix` | Will not be actioned |\n\nWhen a skill mentions a role (e.g. \"apply the AFK-ready triage label\"), use the\ncorresponding label string from this table.\n\nEdit the right-hand column to match whatever vocabulary you actually use.\n",[],[176,628,620],"agents","de597148-157e-47e4-b33d-05eac66c146e","issue-tracker.md","3ff830d0-7dba-11f1-b5ea-1607ee4eb77e",78,["D",1783870145812],"# Issue tracker: Local Markdown\n\nIssues and PRDs for this repo live as markdown files in `docs/issues/`.\n\n## Conventions\n\n- One feature per directory: `docs/issues//`\n- The PRD is `docs/issues//PRD.md`\n- Implementation issues are `docs/issues//issues/-.md`,\n numbered from `01`\n- Triage state is recorded as a `Status:` line near the top of each issue file\n (see `triage-labels.md` for the role strings)\n- Comments and conversation history append to the bottom of the file under a\n `## Comments` heading\n\n## When a skill says \"publish to the issue tracker\"\n\nCreate a new file under `docs/issues//` (creating the directory if\nneeded).\n\n## When a skill says \"fetch the relevant ticket\"\n\nRead the file at the referenced path. The user will normally pass the path or\nthe issue number directly.\n\n## Wayfinding operations\n\nUsed by `/wayfinder`. The **map** is a file with one **child** file per ticket.\n\n- **Map**: `docs/issues//map.md` — the Notes / Decisions-so-far / Fog\n body.\n- **Child ticket**: `docs/issues//issues/NN-.md`, numbered from\n `01`, with the question in the body. A `Type:` line records the ticket type\n (`research`/`prototype`/`grilling`/`task`); a `Status:` line records\n `claimed`/`resolved`.\n- **Blocking**: a `Blocked by: NN, NN` line near the top. A ticket is unblocked\n when every file it lists is `resolved`.\n- **Frontier**: scan `docs/issues//issues/` for files that are open,\n unblocked, and unclaimed; first by number wins.\n- **Claim**: set `Status: claimed` and save before any work.\n- **Resolve**: append the answer under an `## Answer` heading, set\n `Status: resolved`, then append a context pointer (gist + link) to the map's\n Decisions-so-far in `map.md`.\n",[],[176,628,630],"0f602559-c73e-4ff9-b0dc-a4e242dd7d71","domain.md","3fba94aa-7dba-11f1-9ce1-1607ee4eb77e",83,["D",1783870146096],"# Domain Docs\n\nHow the engineering skills should consume this repo's domain documentation when\nexploring the codebase.\n\n## Before exploring, read these\n\n- **`CONTEXT.md`** at the repo root, or\n- **`CONTEXT-MAP.md`** at the repo root if it exists — it points at one\n `CONTEXT.md` per context. Read each one relevant to the topic.\n- **`docs/adr/`** — read ADRs that touch the area you're about to work in. In\n multi-context repos, also check `src//docs/adr/` for context-scoped\n decisions.\n\nIf any of these files don't exist, **proceed silently**. Don't flag their\nabsence; don't suggest creating them upfront. The `/domain-modeling` skill\n(reached via `/grill-with-docs` and `/improve-codebase-architecture`) creates\nthem lazily when terms or decisions actually get resolved.\n\n## File structure\n\nSingle-context repo (most repos):\n\n```\n/\n├── CONTEXT.md\n├── docs/adr/\n│ ├── 0001-event-sourced-orders.md\n│ └── 0002-postgres-for-write-model.md\n└── src/\n```\n\nMulti-context repo (presence of `CONTEXT-MAP.md` at the root):\n\n```\n/\n├── CONTEXT-MAP.md\n├── docs/adr/ ← system-wide decisions\n└── src/\n ├── ordering/\n │ ├── CONTEXT.md\n │ └── docs/adr/ ← context-specific decisions\n └── billing/\n ├── CONTEXT.md\n └── docs/adr/\n```\n\n## Use the glossary's vocabulary\n\nWhen your output names a domain concept (in an issue title, a refactor proposal,\na hypothesis, a test name), use the term as defined in `CONTEXT.md`. Don't drift\nto synonyms the glossary explicitly avoids.\n\nIf the concept you need isn't in the glossary yet, that's a signal — either\nyou're inventing language the project doesn't use (reconsider) or there's a real\ngap (note it for `/domain-modeling`).\n\n## Flag ADR conflicts\n\nIf your output contradicts an existing ADR, surface it explicitly rather than\nsilently overriding:\n\n> _Contradicts ADR-0007 (event-sourced orders) — but worth reopening because…_\n",[],[176,628,638],"7476c2df-e6a3-4000-90f6-c09497669369",49,["D",1783837430475],[204,205,206],[176,628],"69ad60a4-4b86-4bab-a7e3-b6f8590fac7f","0005-bind-sql-statements-by-name.md","c316051a-7e45-11f1-96eb-1607ee4eb77e","3f3d4644-7dba-11f1-8f0a-1607ee4eb77e",191,["D",1783897351597],"# Bind SQL statements by named parameters\n\nTownstash binds SQL statement arguments by named parameters. Every statement\nthat accepts values uses named placeholders such as `:key` and passes a record\nof named values through the `SqliteClient` seam. The generic statement factory\nkeeps each statement's SQL and argument shape together so incorrect argument\nnames are compile-time errors at the call site.\n\n## Considered Options\n\n- **Named parameters:** makes each bind explicit at the call site, supports\n reusing one value in multiple SQL positions, and lets statement-specific\n argument types document closed encodings.\n- **Positional parameters:** is supported by SQLite, but requires maintainers to\n correlate an unlabeled array with every `?` in the SQL text.\n- **A separate adapter-specific binding layer:** could hide differences between\n clients, but would add a second statement representation and allow the core\n contract to drift from the platform adapter.\n\n## Consequences\n\nNamed-parameter support is a required invariant of every `SqliteClient` adapter.\nThe seam accepts both named records and positional arrays so existing schema\nstatements and future adapters remain compatible during incremental conversion,\nwhile all core bind sites move toward one uniform idiom.\n\nTownstash keeps structural SQLite types in the core and does not import libsql\nat runtime. The local test file pins assignability against the real libsql\n`Client` and `InStatement` types, so platform type drift fails `deno check`. The\nlocal `node:sqlite` adapter passes named records through as objects and\ncontinues to spread positional arrays.\n",[],[176,659,651],"adr","87b236b4-b581-4be6-8588-a4588e0ce4a2","0004-plain-script-tests-for-val-town.md","62ebb790-7e1b-11f1-8e3b-1607ee4eb77e",153,["D",1783879967586],"# Use `Deno.test` for local tests, plain scripts for Val Town tests\n\nTownstash tests split by where they must run:\n\n- **Local unit tests use `Deno.test`.** `src/stash_test.ts` drives the pure\n stash logic against an in-memory `node:sqlite` adapter and runs with\n `deno test`. Nothing about it needs the Val Town runtime, so the idiomatic\n Deno harness is the right tool.\n- **Val Town tests use a plain script runner.** `main_test.ts` exercises the\n real val (the `stash` entry point backed by `std/sqlite`), so it must be\n runnable on Val Town. The Val Town runtime executes a val as a top-level\n script and does not provide the Deno test harness — a file built around\n `Deno.test(...)` registers cases that never run there. So these tests are a\n `TestCase[]` iterated by a top-level `await runTests()` loop instead.\n\nThe deciding question for a new test is not \"which style do we prefer\" but \"does\nthis test need to run on Val Town?\"\n\n## Considered Options\n\n- **Split by runtime (chosen):** `Deno.test` where tests only run locally; a\n plain script runner where they must run on Val Town.\n- **Plain script runner everywhere:** uniform, but discards `deno test`'s\n filtering, reporting, and tooling for the local suite that has no reason to\n abandon it.\n- **`Deno.test` everywhere:** keeps one style, but the registered cases are\n inert in the Val Town runtime, so the suite that matters most cannot run where\n the library actually ships.\n\n## Consequences\n\nThe plain-script suite runs as a script: the runner throws (non-zero exit) when\nany case fails, so CI and the val runner still detect failures. Each case\ncarries its own `ignore` flag instead of `Deno.test`'s options bag — the live\nworkflow stays gated behind `TOWNSTASH_LIVE_INTEGRATION=1`. New Val Town tests\nare added as entries in the `tests` array; new local unit tests remain ordinary\n`Deno.test` calls. Tests that must run on Val Town may only use APIs it supports\n(e.g. `Deno.env.get`, `crypto.randomUUID`).\n",[],[176,659,661],"9f79febc-f49e-4fa8-bd12-1878a04ccb5c","0003-command-correctness-at-execution-time.md","3f991de8-7dba-11f1-b615-1607ee4eb77e",75,["D",1783870145598],"# Determine command results atomically at execution time\n\nEvery Townstash command determines visibility and performs any dependent\nmutation atomically in SQLite. Expired keys are logically absent during command\nexecution, so correctness never depends on an earlier application read or on\nbackground cleanup.\n\n## Considered Options\n\n- **Single SQL statements or transactional batches:** preserve conditional and\n concurrent command semantics.\n- **Application-level read then write:** is easier to implement but races across\n concurrent Val requests.\n- **Cleanup-driven expiration:** simplifies queries but can expose stale values\n whenever cleanup is delayed.\n\n## Consequences\n\nCleanup is only a storage-reclamation optimization. Commands that observe\nexistence must apply the same expiration rule, and mutations such as conditional\nset and increment cannot be implemented as separate reads and writes. Tests for\ncommand correctness use the real SQLite adapter, a controllable clock for\nexpiration, and concurrent operations where atomicity matters; mocks remain\nappropriate only for pure validation and serialization.\n",[],[176,659,669],"5232ee04-aacd-4995-a5ac-acff44a9fbda","0002-flat-binary-safe-keyspace.md","3fa61f02-7dba-11f1-a39f-1607ee4eb77e",82,["D",1783870145661],"# Use a flat keyspace of binary-safe string values\n\nTownstash models one flat Redis-style keyspace whose v1 values are binary-safe\nbyte sequences. Text, JSON, integer counters, and key prefixes are\ninterpretations or conveniences over that model rather than persisted namespaces\nor additional first-class value types.\n\n## Considered Options\n\n- **Flat keys with compositional prefixes:** keeps the full application-visible\n key as the identity and preserves familiar multi-key and future scanning\n semantics.\n- **A persisted namespace dimension:** partitions keys conveniently but\n introduces behavior Redis does not have and complicates cross-namespace\n commands.\n- **Automatically serialized JavaScript values:** is ergonomic initially but\n makes coercion surprising and obscures future first-class type boundaries.\n\n## Consequences\n\nThe default text API decodes the stored bytes, while explicit byte and JSON\nhelpers make serialization intent visible. Integers remain string values\ninterpreted by atomic numeric commands. Prefix wrappers only prepend text to\nkeys; they provide neither isolation nor authorization. Future hashes, sets,\nsorted sets, lists, and streams require dedicated storage and commands rather\nthan mutable JSON documents stored as strings.\n",[],[176,659,677],"7ab1100d-5085-4faa-8adb-22f2f4639505","0001-use-val-scoped-sqlite.md","3f9197ee-7dba-11f1-9acb-1607ee4eb77e",77,["D",1783870145600],"# Use val-scoped SQLite as the storage backend\n\nTownstash uses the SQLite database scoped to its library val as the sole v1\nstorage backend. SQLite was chosen over Blob because Redis-inspired conditional\nwrites, counters, expiration, and multi-step commands require atomic database\nmutations and transactions; the documented Blob interface does not provide those\nprimitives.\n\n## Considered Options\n\n- **Val-scoped SQLite:** supports conditional SQL, atomic updates, indexing, and\n transactional batches.\n- **Val-scoped Blob:** resembles a key/value store but would require race-prone\n read-modify-write operations for core commands.\n- **SQLite metadata with Blob values:** supports large binary payloads but\n introduces cross-store writes that cannot be committed atomically.\n\n## Consequences\n\nTownstash does not promise Redis's in-memory performance characteristics, and\nlarge values remain subject to SQLite's practical constraints. Blob or a hybrid\nbackend may be reconsidered only if a demonstrated large-value requirement\njustifies explicit orphan cleanup, versioning, and partial-failure semantics.\n",[],[176,659,685],"0d260c6b-0cd0-4b8c-a44f-3241e292ced1",48,["D",1783837430333],[198,199,200,201,202],[176,659],"a3f979cb-9774-4c49-a797-f5bd4c8469df",47,["D",1783837430189],[197,203,207,210],[176],["D",1783830414588],["D",1789526460011],{"_11":12,"_145":72},{"_11":12,"_141":-5,"_71":72,"_31":70,"_142":143,"_144":30},{"_41":132,"_13":16,"_35":38,"_133":94,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"ctx",{"_54":-5,"_164":740,"_741":742,"_743":744,"_745":30,"_746":30,"_747":30,"_748":24,"_749":-5,"_750":-7,"_751":-7,"_752":26,"_753":30,"_754":30,"_755":-5,"_756":30,"_757":30,"_758":30,"_759":-5},"ENV",{"_711":712,"_713":714,"_715":16,"_716":717,"_718":719,"_720":721,"_722":723,"_724":725,"_726":727,"_728":729,"_730":731,"_732":733,"_734":735,"_736":737,"_738":739},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · sqliteclient-conformance-suite