All notable changes to Filo are documented here.

The format follows Keep a Changelog, and Filo uses Semantic Versioning. While the version is below 1.0.0, the minor number carries breaking changes as well as features; patch releases stay backward compatible.

[0.2.1] — 2026-07-31

A performance fix on the JSON result path. Backward compatible: no API change, no wire-format change, identical bytes out.

Fixed

  • Filo.Value.encode_json/1 no longer raises once per BLOB cell. The text branch classified a binary by trying Jason.encode_to_iodata!/1 and rescuing Jason.EncodeError to fall back to blob. A BLOB reaches this function as a bare binary — SQLite drivers hand back a plain binary for both TEXT and BLOB cells, so the storage class is already gone — and random bytes are essentially never valid UTF-8, so every blob cell built an exception and a stacktrace. Measured at 64 bytes: 32.84 µs/value, against 0.16 µs for a text cell. A result set of 62,500 blob cells spent 4.4 seconds inside this function.

    Restored the String.valid?/1 pre-scan, which costs ~0.07 µs on a text cell and saves ~32.6 µs on a blob cell — break-even is around one blob per 460 text cells. End to end over a real Hrana WebSocket, 64-byte blobs went from 0.9 MB/s to 32.6 MB/s (36×), and the blob-vs-text penalty fell from 5743% to 50%. The remainder is base64's +33% bytes, which is expected and irreducible on this wire format.

    It went unnoticed because every workload that drives this path — TPC-B, TPC-C, the wire benches — is INTEGER, REAL and TEXT only, and never put a blob on the wire. Jason.encode_to_iodata/2 (non-bang) was measured as an alternative and rejected: it still builds the error struct, at 22.5 µs/value. Guarded by a test asserting the blob/text cost ratio rather than a wall-clock duration, so it cannot flake on a slow or loaded CI box.

0.2.0 — 2026-07-28

Filo stops being server-only: it now ships a Hrana client built on the same codec, plus an authorization seam that works on both transports. Everything here is additive — a host on 0.1.0 upgrades without code changes.

Added

  • Filo.Client — a Hrana client mirroring the server's codec, so there is no second implementation of the wire format to drift from. One client is one Hrana stream over one owned connection, with baton threading, so a transaction is a burst of execute/3 on a held connection. Scope is the Hrana 2/3 HTTP JSON pipeline. The HTTP round-trip is a Filo.Client.Transport behaviour; the default Filo.Client.Transport.Mint uses the optional :mint dependency, so server-only hosts never pull it in.
  • Transparent stream resume. A dropped connection is retried with the same baton, resuming the Hrana stream instead of abandoning it. This matters behind a load balancer that recycles an idle client keep-alive after N requests — that used to kill a held transaction mid-flight.
  • An optional :authorize seam gating every stream open, on both transports. It is a Filo callback rather than a plug because WebSocket clients send no upgrade header: the credential arrives in the Hrana hello frame, which only Filo sees.
  • Authorize context threaded to Executor.open/2. :authorize may return {:ok, context}; Filo threads that host-opaque value into open/2 for every stream the connection opens — the HTTP stream that opens in its own process, the stateless v1 open, and every WebSocket open_stream after the hello. open/2 is in @optional_callbacks, so an executor that only implements open/1 keeps working and the context is dropped. Not a breaking change.
  • Streams monitor their connection owner and tear down when it dies, so an orphaned stream cannot outlive the process that opened it.

Changed

  • Cursor entries batch into ~32 KiB transport chunks instead of one write per ndjson entry.
  • Direct-to-iodata JSON row encoding (Filo.Value.encode_json, rows: :json) and pre-encoded row fragments on the JSON paths, with iodata carried through to the send sites — fewer intermediate binaries per result.
  • Idle-timer cancellation is async, and the host can set a process policy for stream processes.

Fixed

  • A malformed WebSocket text frame now closes with 1007 (invalid frame payload data) rather than a bare 1000, so a client can tell a protocol error from a normal close.

0.1.0 — 2026-07-02

Initial release: the Hrana protocol server.

Added

  • Both transports libSQL clients use, from one Plug. HTTP — Hrana 1 (stateless execute/batch), Hrana 2/3 pipelines, and Hrana 3 cursors, in JSON and Protobuf. WebSocket — Hrana 2/3 and hrana3-protobuf, the path django-libsql uses.
  • Stateful streams. A stream owns one connection for its life, so transactions and temp tables persist across requests. HTTP streams are pinned by signed batons, WebSocket streams by a client-allocated id.
  • Filo.Executor behaviouropen, execute, autocommit?, close, plus optional describe and sequence. Bring exqlite, a libSQL/Turso connection, or anything that speaks SQLite.
  • Ships a Plug and a WebSock handler and nothing else — the host brings the HTTP server. Runtime deps are only plug, jason, and the websock behaviour.
  • MIT license.