Add RE2-backed safe-regex substrate (re2 native dependency)

.github/workflows/integration-tests.yaml

@@ -109,6 +109,11 @@ jobs:
       - name: Relink bin scripts
         run: npm install --ignore-scripts
 
+      # re2 downloads its native binary from a post-install script (unlike lmdb/msgpackr/rocksdb,
+      # which bundle prebuilds), so --ignore-scripts above leaves it absent. Materialize it here.
+      - name: Build re2 native binary
+        run: npm rebuild re2
+
       - name: Install harperdb@4 for legacy tests
         run: |
           mkdir -p /tmp/harperdb-legacy

.github/workflows/stress-large-data.yaml

@@ -105,6 +105,10 @@ jobs:
           name: harper-large-stress-build-${{ inputs.node-version || '24' }}
       - name: Relink bin scripts
         run: npm install --ignore-scripts
+      # re2 downloads its native binary from a post-install script (unlike lmdb/msgpackr/rocksdb,
+      # which bundle prebuilds), so --ignore-scripts above leaves it absent. Materialize it here.
+      - name: Build re2 native binary
+        run: npm rebuild re2
       - name: Run ${{ matrix.test.name }}
         env:
           HARPER_RUN_STRESS_TESTS: '1'

.github/workflows/stress-tests.yaml

@@ -145,6 +145,10 @@ jobs:
           name: harper-stress-build-${{ inputs.node-version || '24' }}
       - name: Relink bin scripts
         run: npm install --ignore-scripts
+      # re2 downloads its native binary from a post-install script (unlike lmdb/msgpackr/rocksdb,
+      # which bundle prebuilds), so --ignore-scripts above leaves it absent. Materialize it here.
+      - name: Build re2 native binary
+        run: npm rebuild re2
       - name: Run ${{ matrix.test.name }}
         env:
           HARPER_RUN_STRESS_TESTS: '1'

.github/workflows/unit-tests.yaml

@@ -30,6 +30,11 @@ jobs:
       - name: Install dependencies
         run: npm install --ignore-scripts
 
+      # re2 downloads its native binary from a post-install script (unlike lmdb/msgpackr/rocksdb,
+      # which bundle prebuilds), so --ignore-scripts above leaves it absent. Materialize it here.
+      - name: Build re2 native binary
+        run: npm rebuild re2
+
       - name: Build
         run: npm run build || true
 

package.json

@@ -191,6 +191,7 @@
 		"pkijs": "3.4.0",
 		"prompt": "1.3.0",
 		"properties-reader": "2.3.0",
+		"re2": "^1.26.0",
 		"recursive-iterator": "3.3.0",
 		"semver": "7.8.5",
 		"send": "^1.2.0",