v0.3.2

Bug-fix patch from the deep-audit follow-up. Published to npm as `tanstack-do-db-collection@0.3.2`.

Added

• Wire-input hardening at the server boundary (ADR-0012) — frame-shape guards drop malformed frames (the socket survives and answers the next valid frame); inbound limits bound frame size and per-connection subscription count. (#15)

Fixed

• A failed initial connect no longer wedges the client transport. A WebSocket that never open()s fires no close event, so auto-reconnect couldn't run and the cached rejected connectPromise wedged the transport permanently. On a failed open the transport now clears the promise and re-arms the reconnect while subscriptions are live. (#12)

Changed

• Reconnect catch-up no longer issues an N+1. Delta hydration batches keyed reads in chunks (≤64) and the per-table changelog read uses the (tbl, seq) composite index — a 500-key catch-up issues ~8 queries instead of 500. Behavior unchanged. (#14)

Security

• Mutation execute errors are sanitized — a failed execute returns a generic "mutation failed" rather than leaking SQLite/internal detail; authorize errors still pass through. (#15)

Internal

• Server error-path + wire-level test coverage expanded (#11); dead snapshotAll removed and CDC trigger DDL identifiers quoted (#13).

Not included: the ne/like predicate-parity divergence (parked pending an ADR decision; will ride a later patch).

Full Changelog: v0.3.1...v0.3.2