Summary

• add a strict private parser worker wire protocol and browser worker endpoint
• load only literal PostgreSQL and BigQuery parser modules inside the isolated worker
• fail closed on malformed messages, unsafe realms, overlap, and poisoned parser descriptors
• add Node and Chromium coverage plus package artifact assertions

Validation

• 1,159 Node tests passed with one intentional expected failure
• 4 Chromium worker tests passed
• typecheck, oxlint, test integrity, demo, package smoke, worker placement, and changed coverage passed
• changed production coverage: 99.46% statements/lines and 100% branches/functions
• exact-head adversarial review approved by architecture/security, lifecycle/session, and packaging/browser reviewers

Scope

Private infrastructure only: no public exports, session wiring, semantic extraction, cache, or API compatibility commitment.

Review policy

Copilot review is requested once for this PR. It will not be re-requested after later pushes.

Summary by cubic

Adds a private, versioned wire protocol and a dedicated module-worker endpoint for node-sql-parser to run parsing in an isolated browser worker. The endpoint now guards the entire backend operation and uses stricter, bounded wire decoding; artifacts are production-shaped but still private.

• New Features

  • Closed protocol v1 for parse requests/responses; no AST, source text, or raw errors on the wire; retryability derived from failure code.
  • Dedicated worker endpoint that lazily loads bigquery/postgresql, reuses the backend normalizer, and restores exact NodeSQLParser/global descriptors around module load, decode, parser construction, parse, and normalization.
  • Single-flight only: one in-flight request; malformed or overlapping requests emit a protocol error and then close.
  • Outcomes include normalized statement kind, bounded unsupported reasons, or bounded failure codes.

• Bug Fixes

  • Guarded the full worker backend parse and permanently poison on restoration failure; close the generation on module-load failures.
  • Bounded and hardened wire decoding: accept only closed plain records, enforce key limits, and avoid accessor traps.

^{Written for commit e06a42f. Summary will update on new commits.}