@bastani/atomic 0.9.11-alpha.8 → 0.9.11

package/dist/core/tools/resource-selectors.js

@@ -3,41 +3,125 @@ import { createRequire } from "node:module";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 import { deflateRawSync, gunzipSync, gzipSync, inflateRawSync } from "node:zlib";
 import { loadNativeSearchBinding } from "./search-native.js";
+/** `bun:sqlite` accepts booleans and stores integer 1/0; `node:sqlite` throws on them. */
+export function toSqliteBindValues(params) {
+    return params.map((param) => (typeof param === "boolean" ? (param ? 1 : 0) : param));
+}
+function nodeSqliteAdapter(DatabaseSync) {
+    return class NodeSqliteAdapter {
+        constructor(path, options) {
+            // Passing `undefined` explicitly fails node:sqlite's arity validation.
+            this.db = options?.readonly === true ? new DatabaseSync(path, { readOnly: true }) : new DatabaseSync(path);
+        }
+        query(sql) {
+            const statement = this.db.prepare(sql);
+            return {
+                all: (...params) => statement.all(...toSqliteBindValues(params)),
+                get: (...params) => statement.get(...toSqliteBindValues(params)),
+                iterate: () => statement.iterate(),
+                run: (...params) => {
+                    const result = statement.run(...toSqliteBindValues(params));
+                    return { changes: Number(result.changes ?? 0), lastInsertRowid: result.lastInsertRowid };
+                },
+            };
+        }
+        close() {
+            this.db.close();
+        }
+    };
+}
 function sqliteDatabase() {
+    const requireModule = createRequire(import.meta.url);
     try {
-        return createRequire(import.meta.url)("bun:sqlite").Database;
+        const { DatabaseSync } = requireModule("node:sqlite");
+        return nodeSqliteAdapter(DatabaseSync);
     }
     catch {
-        throw new Error("SQLite selectors require Atomic's Bun runtime with bun:sqlite support.");
+        try {
+            return requireModule("bun:sqlite").Database;
+        }
+        catch {
+            throw new Error("SQLite selectors need node:sqlite (Node >= 22.13) or bun:sqlite; this runtime provides neither.");
+        }
     }
 }
-function existingSqliteFile(path) { if (!existsSync(path))
-    return undefined; return readFileSync(path).subarray(0, 16).toString("binary") === "SQLite format 3\0"; }
-export function sqliteSelectorForPath(value, cwd) { const selector = parseSqliteSelector(value); if (!selector)
-    return undefined; const absolute = resolveContainedLocalPath(cwd, selector.databasePath, "SQLite selector"); if (existingSqliteFile(absolute) !== true)
-    return undefined; return { ...selector, databasePath: absolute }; }
+function existingSqliteFile(path) {
+    if (!existsSync(path))
+        return undefined;
+    return readFileSync(path).subarray(0, 16).toString("binary") === "SQLite format 3\0";
+}
+export function sqliteSelectorForPath(value, cwd) {
+    const selector = parseSqliteSelector(value);
+    if (!selector)
+        return undefined;
+    const absolute = resolveContainedLocalPath(cwd, selector.databasePath, "SQLite selector");
+    if (existingSqliteFile(absolute) !== true)
+        return undefined;
+    return { ...selector, databasePath: absolute };
+}
 const MAX_TAR_ARCHIVE_BYTES = 256 * 1024 * 1024;
 const MAX_ARCHIVE_MEMBER_BYTES = 64 * 1024 * 1024;
 const MAX_ARCHIVE_DIRECTORY_ENTRIES = 500;
+const ARCHIVE_EXTENSIONS = ["zip", "jar", "tar", "tgz", "tar.gz", "gz"];
+const SQLITE_EXTENSIONS = ["sqlite", "sqlite3", "db", "db3"];
+/** Whether `value[0..end)` ends with `.<extension>` preceded by at least one character. */
+function endsWithExtension(lower, end, extensions) {
+    return extensions.some((extension) => end > extension.length + 1 && lower.endsWith(`.${extension}`, end));
+}
 export function parseArchiveSelector(value) {
-    const match = value.match(/^(.+\.(?:zip|jar|tar|tgz|tar\.gz|gz)):(.*)$/i);
-    return match ? { archivePath: match[1] ?? "", memberPath: match[2] ?? "" } : undefined;
+    // Scan colons right to left so the longest archive path wins, exactly as the
+    // previous greedy `(.+\.ext):(.*)` regex did. That regex's ambiguous `.+`
+    // prefix was flagged as polynomial ReDoS (js/polynomial-redos); this scan is
+    // linear in the input.
+    const lower = value.toLowerCase();
+    for (let index = value.lastIndexOf(":"); index > 0; index = value.lastIndexOf(":", index - 1)) {
+        if (endsWithExtension(lower, index, ARCHIVE_EXTENSIONS)) {
+            return { archivePath: value.slice(0, index), memberPath: value.slice(index + 1) };
+        }
+    }
+    return undefined;
 }
 export function resolveArchiveSelector(selector, cwd) {
     return { ...selector, archivePath: resolveContainedLocalPath(cwd, selector.archivePath, "Archive selector") };
 }
+const SQLITE_SELECTOR_SUFFIX = /^(?:\?q=(.+)|:([^:?]+)(?:\?(.+))?(?::([^:?]+))?)?$/i;
 export function parseSqliteSelector(value) {
-    const match = value.match(/^(.+\.(?:sqlite3?|db3?))(?:\?q=(.+)|:([^:?]+)(?:\?(.+))?(?::([^:?]+))?)?$/i);
-    if (!match)
-        return undefined;
-    const params = new URLSearchParams(match[4] ?? "");
-    const limit = Number.parseInt(params.get("limit") ?? "", 10);
-    const offset = Number.parseInt(params.get("offset") ?? "", 10);
-    const sampleRows = Number.parseInt(params.get("sampleRows") ?? params.get("sample_rows") ?? "", 10);
-    return { databasePath: match[1] ?? "", query: match[2] ? decodeURIComponent(match[2]) : undefined, table: match[3], rowId: match[5] ?? params.get("id") ?? undefined, limit: Number.isFinite(limit) ? Math.max(0, Math.min(500, limit)) : undefined, offset: Number.isFinite(offset) ? Math.max(0, offset) : undefined, where: params.get("where") ?? undefined, order: params.get("order") ?? undefined, schema: params.get("schema") === "true" || params.get("schema") === "1", sampleRows: Number.isFinite(sampleRows) ? Math.max(0, Math.min(100, sampleRows)) : undefined };
-}
-function isZipArchive(path) { return /\.(?:zip|jar)$/i.test(path); }
-function isGzipTar(path) { return /\.(?:tgz|tar\.gz|gz)$/i.test(path); }
+    // Try each candidate database path from longest to shortest, mirroring the
+    // previous greedy `(.+\.ext)` regex prefix without its ambiguity, which was
+    // flagged as polynomial ReDoS (js/polynomial-redos). The suffix grammar is
+    // unchanged and unambiguous.
+    const lower = value.toLowerCase();
+    for (let end = value.length; end > 0; end--) {
+        if (!endsWithExtension(lower, end, SQLITE_EXTENSIONS))
+            continue;
+        const match = value.slice(end).match(SQLITE_SELECTOR_SUFFIX);
+        if (!match)
+            continue;
+        const params = new URLSearchParams(match[3] ?? "");
+        const limit = Number.parseInt(params.get("limit") ?? "", 10);
+        const offset = Number.parseInt(params.get("offset") ?? "", 10);
+        const sampleRows = Number.parseInt(params.get("sampleRows") ?? params.get("sample_rows") ?? "", 10);
+        return {
+            databasePath: value.slice(0, end),
+            query: match[1] ? decodeURIComponent(match[1]) : undefined,
+            table: match[2],
+            rowId: match[4] ?? params.get("id") ?? undefined,
+            limit: Number.isFinite(limit) ? Math.max(0, Math.min(500, limit)) : undefined,
+            offset: Number.isFinite(offset) ? Math.max(0, offset) : undefined,
+            where: params.get("where") ?? undefined,
+            order: params.get("order") ?? undefined,
+            schema: params.get("schema") === "true" || params.get("schema") === "1",
+            sampleRows: Number.isFinite(sampleRows) ? Math.max(0, Math.min(100, sampleRows)) : undefined,
+        };
+    }
+    return undefined;
+}
+function isZipArchive(path) {
+    return /\.(?:zip|jar)$/i.test(path);
+}
+function isGzipTar(path) {
+    return /\.(?:tgz|tar\.gz|gz)$/i.test(path);
+}
 function crc32(data) {
     let crc = ~0;
     for (const byte of data) {
@@ -48,7 +132,11 @@ function crc32(data) {
     return ~crc >>> 0;
 }
 function assertZipRange(buf, offset, length, label) {
-    if (!Number.isSafeInteger(offset) || !Number.isSafeInteger(length) || offset < 0 || length < 0 || offset > buf.length - length)
+    if (!Number.isSafeInteger(offset) ||
+        !Number.isSafeInteger(length) ||
+        offset < 0 ||
+        length < 0 ||
+        offset > buf.length - length)
         throw new Error(`Invalid zip entry bounds: ${label}`);
 }
 function zipEntryPayload(buf, label, name, localOffset, compressedSize) {
@@ -86,11 +174,19 @@ export function readZipEntriesFromBuffer(buf, label) {
         if (size > MAX_ARCHIVE_MEMBER_BYTES)
             throw new Error(`Archive member too large: ${name}`);
         const data = zipEntryPayload(buf, label, name, localOffset, compressedSize);
-        entries.set(name, method === 0 ? Buffer.from(data) : method === 8 ? inflateRawSync(data, { maxOutputLength: MAX_ARCHIVE_MEMBER_BYTES }) : (() => { throw new Error(`Unsupported zip compression method ${method} for ${name}`); })());
+        entries.set(name, method === 0
+            ? Buffer.from(data)
+            : method === 8
+                ? inflateRawSync(data, { maxOutputLength: MAX_ARCHIVE_MEMBER_BYTES })
+                : (() => {
+                    throw new Error(`Unsupported zip compression method ${method} for ${name}`);
+                })());
     }
     return entries;
 }
-export function readZipEntries(path) { return readZipEntriesFromBuffer(readFileSync(path), path); }
+export function readZipEntries(path) {
+    return readZipEntriesFromBuffer(readFileSync(path), path);
+}
 function writeZipEntries(path, entries) {
     const locals = [], centrals = [];
     let offset = 0;
@@ -161,7 +257,7 @@ function tarHeader(name, size) {
     header.write("0000644\0", 100);
     header.write("0000000\0", 108);
     header.write("0000000\0", 116);
-    header.write(size.toString(8).padStart(11, "0") + "\0", 124);
+    header.write(`${size.toString(8).padStart(11, "0")}\0`, 124);
     header.write("00000000000\0", 136);
     header.fill(0x20, 148, 156);
     header[156] = 48;
@@ -170,7 +266,7 @@ function tarHeader(name, size) {
     let sum = 0;
     for (const byte of header)
         sum += byte;
-    header.write(sum.toString(8).padStart(6, "0") + "\0 ", 148);
+    header.write(`${sum.toString(8).padStart(6, "0")}\0 `, 148);
     return header;
 }
 function writeTar(path, entries) {
@@ -228,7 +324,13 @@ function readZipSelector(path, memberPath) {
         if (size > MAX_ARCHIVE_MEMBER_BYTES)
             throw new Error(`Archive member too large: ${memberPath}`);
         const data = zipEntryPayload(buf, path, name, localOffset, compressedSize);
-        return (method === 0 ? Buffer.from(data) : method === 8 ? inflateRawSync(data, { maxOutputLength: MAX_ARCHIVE_MEMBER_BYTES }) : (() => { throw new Error(`Unsupported zip compression method ${method} for ${name}`); })()).toString("utf8");
+        return (method === 0
+            ? Buffer.from(data)
+            : method === 8
+                ? inflateRawSync(data, { maxOutputLength: MAX_ARCHIVE_MEMBER_BYTES })
+                : (() => {
+                    throw new Error(`Unsupported zip compression method ${method} for ${name}`);
+                })()).toString("utf8");
     }
     const listing = listArchiveDirectory(names, memberPath);
     if (listing)
@@ -254,8 +356,10 @@ export function readArchiveSelector(selector) {
         return listing;
     throw new Error(`Archive member not found: ${selector.memberPath}`);
 }
-function validateArchiveMemberPath(memberPath) { if (!memberPath || memberPath.startsWith("/") || memberPath.endsWith("/") || memberPath.split("/").includes(".."))
-    throw new Error(`Invalid archive member path: ${memberPath}`); }
+function validateArchiveMemberPath(memberPath) {
+    if (!memberPath || memberPath.startsWith("/") || memberPath.endsWith("/") || memberPath.split("/").includes(".."))
+        throw new Error(`Invalid archive member path: ${memberPath}`);
+}
 function writeZipEntrySelective(path, memberPath, data) {
     const source = existsSync(path) ? readFileSync(path) : Buffer.alloc(0);
     const locals = [], centrals = [];
@@ -367,7 +471,10 @@ function normalizeSearchPattern(pattern, ignoreCase) {
             if (flag === "i" || flag === "m" || flag === "s")
                 flags.add(flag);
         }
-        return { pattern: inline.includes("x") ? stripExtendedRegexWhitespace(match[2] ?? "") : match[2] ?? "", flags: [...flags].join("") };
+        return {
+            pattern: inline.includes("x") ? stripExtendedRegexWhitespace(match[2] ?? "") : (match[2] ?? ""),
+            flags: [...flags].join(""),
+        };
     }
     return { pattern, flags: [...flags].join("") };
 }
@@ -375,17 +482,30 @@ function searchTextSelectorLines(label, text, pattern, ignoreCase, literal, cont
     const normalized = normalizeSearchPattern(pattern, ignoreCase);
     if (!literal && !normalized.pattern.includes("\n") && !pattern.includes("\\n"))
         try {
-            const native = loadNativeSearchBinding()?.search?.(text, { pattern: normalized.pattern, ignoreCase: normalized.flags.includes("i"), multiline: normalized.flags.includes("m") || normalized.flags.includes("s"), contextBefore, contextAfter });
+            const native = loadNativeSearchBinding()?.search?.(text, {
+                pattern: normalized.pattern,
+                ignoreCase: normalized.flags.includes("i"),
+                multiline: normalized.flags.includes("m") || normalized.flags.includes("s"),
+                contextBefore,
+                contextAfter,
+            });
             if (native && !native.error)
-                return native.matches.flatMap((match) => [...(match.contextBefore ?? []).map((line) => `${label}-${line.lineNumber}- ${truncateSearchLine(line.line)}`), `${label}:${match.lineNumber}: ${truncateSearchLine(match.line)}`, ...(match.contextAfter ?? []).map((line) => `${label}-${line.lineNumber}- ${truncateSearchLine(line.line)}`)]);
+                return native.matches.flatMap((match) => [
+                    ...(match.contextBefore ?? []).map((line) => `${label}-${line.lineNumber}- ${truncateSearchLine(line.line)}`),
+                    `${label}:${match.lineNumber}: ${truncateSearchLine(match.line)}`,
+                    ...(match.contextAfter ?? []).map((line) => `${label}-${line.lineNumber}- ${truncateSearchLine(line.line)}`),
+                ]);
         }
         catch { }
     const matcher = literal ? undefined : new RegExp(normalized.pattern, normalized.flags);
     const needle = normalized.flags.includes("i") ? normalized.pattern.toLowerCase() : normalized.pattern;
     const lines = text.split("\n");
     const matchLines = new Set();
-    lines.forEach((line, index) => { const haystack = normalized.flags.includes("i") ? line.toLowerCase() : line; if (matcher ? matcher.test(line) : haystack.includes(needle))
-        matchLines.add(index + 1); });
+    lines.forEach((line, index) => {
+        const haystack = normalized.flags.includes("i") ? line.toLowerCase() : line;
+        if (matcher ? matcher.test(line) : haystack.includes(needle))
+            matchLines.add(index + 1);
+    });
     if (matchLines.size === 0 && matcher) {
         const match = new RegExp(normalized.pattern, normalized.flags).exec(text);
         if (match?.[0]) {
@@ -398,12 +518,16 @@ function searchTextSelectorLines(label, text, pattern, ignoreCase, literal, cont
     for (const line of matchLines)
         for (let n = Math.max(1, line - contextBefore); n <= Math.min(lines.length, line + contextAfter); n++)
             outputLines.add(n);
-    return [...outputLines].sort((a, b) => a - b).map((line) => `${label}${matchLines.has(line) ? ":" : "-"}${line}${matchLines.has(line) ? ":" : "-"} ${truncateSearchLine(lines[line - 1] ?? "")}`);
+    return [...outputLines]
+        .sort((a, b) => a - b)
+        .map((line) => `${label}${matchLines.has(line) ? ":" : "-"}${line}${matchLines.has(line) ? ":" : "-"} ${truncateSearchLine(lines[line - 1] ?? "")}`);
 }
 export function searchArchiveSelector(selector, pattern, ignoreCase = false, literal = false, contextBefore = 1, contextAfter = 3) {
     if (isZipArchive(selector.archivePath) && selector.memberPath)
         return searchTextSelectorLines(`${selector.archivePath}:${selector.memberPath}`, readArchiveSelector(selector), pattern, ignoreCase, literal, contextBefore, contextAfter).join("\n");
-    const entries = isZipArchive(selector.archivePath) ? readZipEntries(selector.archivePath) : parseTar(selector.archivePath);
+    const entries = isZipArchive(selector.archivePath)
+        ? readZipEntries(selector.archivePath)
+        : parseTar(selector.archivePath);
     const out = [];
     for (const [name, data] of entries) {
         if (selector.memberPath && name !== selector.memberPath)
@@ -412,7 +536,9 @@ export function searchArchiveSelector(selector, pattern, ignoreCase = false, lit
     }
     return out.join("\n");
 }
-function routerFromContext(context) { return context?.internalRouter ?? context?.internalResourceRouter; }
+function routerFromContext(context) {
+    return context?.internalRouter ?? context?.internalResourceRouter;
+}
 async function resolveViaRouter(value, cwd, context) {
     const router = routerFromContext(context);
     const routed = await router?.resolve?.(value);
@@ -437,7 +563,9 @@ function nearestExistingAncestor(pathValue) {
     }
     return current;
 }
-function realpathExisting(pathValue) { return realpathSync.native(nearestExistingAncestor(pathValue)); }
+function realpathExisting(pathValue) {
+    return realpathSync.native(nearestExistingAncestor(pathValue));
+}
 function resolveContainedPath(root, pathValue, label) {
     const lexicalRoot = resolve(root), resolved = resolve(root, pathValue);
     if (!isContained(lexicalRoot, resolved))
@@ -446,19 +574,25 @@ function resolveContainedPath(root, pathValue, label) {
         throw new Error(`${label} escapes the workspace: ${pathValue}`);
     return resolved;
 }
-function resolveContainedLocalPath(cwd, pathValue, label = "local:// resource") { return resolveContainedPath(cwd, pathValue, label); }
+function resolveContainedLocalPath(cwd, pathValue, label = "local:// resource") {
+    return resolveContainedPath(cwd, pathValue, label);
+}
 function fallbackInternalPath(value, cwd) {
-    const skill = value.match(/^skill:\/\/([^/]+)\/?(.*)$/);
+    const skill = value.match(/^skill:\/\/([^/]+)(?:\/(.*))?$/);
     if (skill) {
         const name = skill[1] ?? "", rest = skill[2] || "SKILL.md";
-        return [".agents/skills", "packages/subagents/skills", "packages/workflows/skills"].map((base) => resolveContainedPath(resolveContainedLocalPath(cwd, base, "skill:// resource"), `${name}/${rest}`, "skill:// resource")).find((candidate) => existsSync(candidate));
+        return [".agents/skills", "packages/subagents/skills", "packages/workflows/skills"]
+            .map((base) => resolveContainedPath(resolveContainedLocalPath(cwd, base, "skill:// resource"), `${name}/${rest}`, "skill:// resource"))
+            .find((candidate) => existsSync(candidate));
     }
     const local = value.match(/^local:\/\/(.+)$/);
     if (local)
         return resolveContainedLocalPath(cwd, local[1] ?? "");
     return undefined;
 }
-export function resolveInternalSelector(value, cwd) { return fallbackInternalPath(value, cwd); }
+export function resolveInternalSelector(value, cwd) {
+    return fallbackInternalPath(value, cwd);
+}
 export async function readInternalSelector(value, cwd, context) {
     const router = routerFromContext(context);
     const routed = await router?.read?.(value);
@@ -486,10 +620,12 @@ export async function writeInternalSelector(value, cwd, content, context) {
 export async function searchInternalSelector(value, cwd, pattern, ignoreCase = false, literal = false, context, contextBefore = 1, contextAfter = 3) {
     return searchTextSelectorLines(value, await readInternalSelector(value, cwd, context), pattern, ignoreCase, literal, contextBefore, contextAfter).join("\n");
 }
-function shellQuote(value) { return `'${value.replace(/'/g, `'\\''`)}'`; }
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
 export async function expandShellInternalUrls(text, cwd, context, quote = false) {
     let output = text;
-    const matches = [...new Set(text.match(/[a-z][a-z0-9+.-]*:\/\/[^\s'"`$)]+/gi) ?? [])];
+    const matches = [...new Set(text.match(/(?<![a-z0-9+.-])[a-z][a-z0-9+.-]*:\/\/[^\s'"`$)]+/gi) ?? [])];
     for (const match of matches) {
         const resolved = await resolveViaRouter(match, cwd, context);
         if (resolved)
@@ -499,26 +635,46 @@ export async function expandShellInternalUrls(text, cwd, context, quote = false)
 }
 const ROW_COUNT_PROBE_CAP = 50_000;
 const MAX_RAW_QUERY_ROWS = 1000;
-function quoteSqliteIdent(value) { return `"${value.replace(/"/g, '""')}"`; }
+function quoteSqliteIdent(value) {
+    return `"${value.replace(/"/g, '""')}"`;
+}
 function formatSqliteOrder(order) {
     if (!order)
         return "";
-    return order.split(",").map((part) => {
+    return order
+        .split(",")
+        .map((part) => {
         const [column, direction] = part.split(":");
         if (!column || !/^[A-Za-z_][\w$]*$/.test(column))
             throw new Error(`Invalid SQLite order column: ${part}`);
         const dir = direction?.toLowerCase() === "desc" ? "desc" : "asc";
         return `${quoteSqliteIdent(column)} ${dir}`;
-    }).join(", ");
+    })
+        .join(", ");
 }
-const FORBIDDEN_WHERE_KEYWORDS = new Set(["limit", "offset", "union", "intersect", "except", "attach", "detach", "pragma", "select", "load_extension"]);
+const FORBIDDEN_WHERE_KEYWORDS = new Set([
+    "limit",
+    "offset",
+    "union",
+    "intersect",
+    "except",
+    "attach",
+    "detach",
+    "pragma",
+    "select",
+    "load_extension",
+]);
 function validateSqliteWhere(where) {
     const trimmed = where?.trim();
     if (!trimmed)
         return undefined;
     let quote = "", token = "";
-    const flush = () => { const lower = token.toLowerCase(); if (token && (FORBIDDEN_WHERE_KEYWORDS.has(lower) || lower.startsWith("pragma_") || lower.startsWith("sqlite_")))
-        throw new Error("Invalid SQLite where filter"); token = ""; };
+    const flush = () => {
+        const lower = token.toLowerCase();
+        if (token && (FORBIDDEN_WHERE_KEYWORDS.has(lower) || lower.startsWith("pragma_") || lower.startsWith("sqlite_")))
+            throw new Error("Invalid SQLite where filter");
+        token = "";
+    };
     for (let i = 0; i < trimmed.length; i++) {
         const ch = trimmed[i], next = trimmed[i + 1];
         if (quote === "'") {
@@ -530,12 +686,12 @@ function validateSqliteWhere(where) {
                 quote = "";
             continue;
         }
-        if (quote === "\"") {
-            if (ch === "\"" && next === "\"") {
+        if (quote === '"') {
+            if (ch === '"' && next === '"') {
                 i++;
                 continue;
             }
-            if (ch === "\"") {
+            if (ch === '"') {
                 quote = "";
                 flush();
                 continue;
@@ -548,12 +704,12 @@ function validateSqliteWhere(where) {
             token = ch;
             continue;
         }
-        if (ch === "'" || ch === "\"") {
+        if (ch === "'" || ch === '"') {
             flush();
             quote = ch;
             continue;
         }
-        if (ch === ";" || ch === "-" && next === "-" || ch === "/" && next === "*" || ch === "*" && next === "/")
+        if (ch === ";" || (ch === "-" && next === "-") || (ch === "/" && next === "*") || (ch === "*" && next === "/"))
             throw new Error("Invalid SQLite where filter");
         if (ch && /[A-Za-z0-9_]/.test(ch)) {
             token += ch;
@@ -564,8 +720,27 @@ function validateSqliteWhere(where) {
     flush();
     return trimmed;
 }
-function rowsToJsonLines(rows) { return rows.map((row) => JSON.stringify(row)).join("\n"); }
-const FORBIDDEN_RAW_QUERY_KEYWORDS = new Set(["attach", "detach", "pragma", "insert", "update", "delete", "drop", "alter", "create", "replace", "vacuum", "reindex", "load_extension", "union", "intersect", "except"]);
+function rowsToJsonLines(rows) {
+    return rows.map((row) => JSON.stringify(row)).join("\n");
+}
+const FORBIDDEN_RAW_QUERY_KEYWORDS = new Set([
+    "attach",
+    "detach",
+    "pragma",
+    "insert",
+    "update",
+    "delete",
+    "drop",
+    "alter",
+    "create",
+    "replace",
+    "vacuum",
+    "reindex",
+    "load_extension",
+    "union",
+    "intersect",
+    "except",
+]);
 function validateRawSqliteQuery(query) {
     const trimmed = query.trim();
     if (!trimmed)
@@ -573,8 +748,13 @@ function validateRawSqliteQuery(query) {
     if (!/^select\b/i.test(trimmed))
         throw new Error("Invalid raw SQLite query");
     let quote = "", token = "";
-    const flush = () => { const lower = token.toLowerCase(); if (lower && (FORBIDDEN_RAW_QUERY_KEYWORDS.has(lower) || lower.startsWith("sqlite_") || lower.startsWith("pragma_")))
-        throw new Error("Invalid raw SQLite query"); token = ""; };
+    const flush = () => {
+        const lower = token.toLowerCase();
+        if (lower &&
+            (FORBIDDEN_RAW_QUERY_KEYWORDS.has(lower) || lower.startsWith("sqlite_") || lower.startsWith("pragma_")))
+            throw new Error("Invalid raw SQLite query");
+        token = "";
+    };
     for (let i = 0; i < trimmed.length; i++) {
         const ch = trimmed[i], next = trimmed[i + 1];
         if (quote === "'") {
@@ -586,12 +766,12 @@ function validateRawSqliteQuery(query) {
                 quote = "";
             continue;
         }
-        if (quote === "\"") {
-            if (ch === "\"" && next === "\"") {
+        if (quote === '"') {
+            if (ch === '"' && next === '"') {
                 i++;
                 continue;
             }
-            if (ch === "\"") {
+            if (ch === '"') {
                 quote = "";
                 flush();
                 continue;
@@ -604,12 +784,12 @@ function validateRawSqliteQuery(query) {
             token = ch;
             continue;
         }
-        if (ch === "'" || ch === "\"") {
+        if (ch === "'" || ch === '"') {
             flush();
             quote = ch;
             continue;
         }
-        if (ch === ";" || ch === "-" && next === "-" || ch === "/" && next === "*" || ch === "*" && next === "/")
+        if (ch === ";" || (ch === "-" && next === "-") || (ch === "/" && next === "*") || (ch === "*" && next === "/"))
             throw new Error("Invalid raw SQLite query");
         if (ch && /[A-Za-z0-9_]/.test(ch)) {
             token += ch;
@@ -622,20 +802,38 @@ function validateRawSqliteQuery(query) {
         throw new Error("Invalid raw SQLite query");
     return trimmed;
 }
-function readRawSqliteRows(query) { const rows = []; const iterable = query.iterate?.(); if (!iterable)
-    return query.all().slice(0, MAX_RAW_QUERY_ROWS); for (const row of iterable) {
-    if (rows.length >= MAX_RAW_QUERY_ROWS)
-        break;
-    rows.push(row);
-} return rows; }
-function sqliteTableColumns(db, table) { return db.query(`pragma table_info(${quoteSqliteIdent(table)})`).all().map((row) => String(row.name ?? "")).filter(Boolean); }
-function boundedSqliteRowCount(db, table) { const row = db.query(`select count(*) as count from (select 1 from ${quoteSqliteIdent(table)} limit ${ROW_COUNT_PROBE_CAP + 1})`).all()[0]; const count = Number(row?.count ?? 0); return count > ROW_COUNT_PROBE_CAP ? `${ROW_COUNT_PROBE_CAP}+` : count; }
+function readRawSqliteRows(query) {
+    const rows = [];
+    const iterable = query.iterate?.();
+    if (!iterable)
+        return query.all().slice(0, MAX_RAW_QUERY_ROWS);
+    for (const row of iterable) {
+        if (rows.length >= MAX_RAW_QUERY_ROWS)
+            break;
+        rows.push(row);
+    }
+    return rows;
+}
+function sqliteTableColumns(db, table) {
+    return db.query(`pragma table_info(${quoteSqliteIdent(table)})`).all()
+        .map((row) => String(row.name ?? ""))
+        .filter(Boolean);
+}
+function boundedSqliteRowCount(db, table) {
+    const row = db
+        .query(`select count(*) as count from (select 1 from ${quoteSqliteIdent(table)} limit ${ROW_COUNT_PROBE_CAP + 1})`)
+        .all()[0];
+    const count = Number(row?.count ?? 0);
+    return count > ROW_COUNT_PROBE_CAP ? `${ROW_COUNT_PROBE_CAP}+` : count;
+}
 function normalizeSqliteWriteValue(value, column) {
     if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean")
         return value;
     throw new Error(`SQLite column '${column}' only accepts JSON scalar values or null`);
 }
-function sqlitePrimaryKey(db, table) { return db.query(`pragma table_info(${quoteSqliteIdent(table)})`).all().find((row) => row.pk === 1)?.name ?? "rowid"; }
+function sqlitePrimaryKey(db, table) {
+    return (db.query(`pragma table_info(${quoteSqliteIdent(table)})`).all().find((row) => row.pk === 1)?.name ?? "rowid");
+}
 export function readSqliteSelector(selector) {
     const Database = sqliteDatabase();
     const db = new Database(selector.databasePath, { readonly: true });
@@ -643,8 +841,16 @@ export function readSqliteSelector(selector) {
         if (selector.query)
             return rowsToJsonLines(readRawSqliteRows(db.query(validateRawSqliteQuery(selector.query))));
         if (!selector.table) {
-            const tables = db.query("select name from sqlite_master where type='table' and name not like 'sqlite_%' order by name").all().slice(0, 500);
-            return tables.map((row) => { const name = String(row.name ?? ""); return JSON.stringify({ table: name, rows: boundedSqliteRowCount(db, name) }); }).join("\n");
+            const tables = db
+                .query("select name from sqlite_master where type='table' and name not like 'sqlite_%' order by name")
+                .all()
+                .slice(0, 500);
+            return tables
+                .map((row) => {
+                const name = String(row.name ?? "");
+                return JSON.stringify({ table: name, rows: boundedSqliteRowCount(db, name) });
+            })
+                .join("\n");
         }
         const schemaRows = db.query(`pragma table_info(${quoteSqliteIdent(selector.table)})`).all();
         if (selector.schema)
@@ -655,7 +861,14 @@ export function readSqliteSelector(selector) {
         const isQuery = selector.limit !== undefined || selector.offset !== undefined || selector.where || selector.order;
         const limit = selector.sampleRows ?? selector.limit ?? (isQuery ? 20 : 5);
         const offset = selector.offset ?? 0;
-        const sql = [`select * from ${quoteSqliteIdent(selector.table)}`, where ? `where ${where}` : "", order ? `order by ${order}` : "", "limit ? offset ?"].filter(Boolean).join(" ");
+        const sql = [
+            `select * from ${quoteSqliteIdent(selector.table)}`,
+            where ? `where ${where}` : "",
+            order ? `order by ${order}` : "",
+            "limit ? offset ?",
+        ]
+            .filter(Boolean)
+            .join(" ");
         const rows = selector.rowId ? db.query(sql).all(selector.rowId, limit, offset) : db.query(sql).all(limit, offset);
         if (selector.rowId || isQuery || selector.sampleRows !== undefined)
             return rowsToJsonLines(rows);
@@ -713,12 +926,20 @@ function parseLooseJsonObject(content) {
         parsed = JSON.parse(trimmed);
     }
     catch {
-        const normalized = trimmed.replace(/([{,]\s*)([A-Za-z_$][\w$]*)\s*:/g, '$1"$2":').replace(/:\s*\+(-?\d+(?:\.\d+)?)/g, ":$1").replace(/(:\s*)0x[0-9a-fA-F]+/g, (match, prefix) => `${prefix}${Number.parseInt(match.slice(prefix.length + 2), 16)}`).replace(/'([^'\\]*(?:\\.[^'\\]*)*)'/g, (_match, body) => JSON.stringify(body.replace(/\\'/g, "'"))).replace(/,\s*([}\]])/g, "$1");
+        const normalized = trimmed
+            .replace(/([{,]\s*)([A-Za-z_$][\w$]*)\s*:/g, '$1"$2":')
+            .replace(/:\s*\+(-?\d+(?:\.\d+)?)/g, ":$1")
+            .replace(/(:\s*)0x[0-9a-fA-F]+/g, (match, prefix) => `${prefix}${Number.parseInt(match.slice(prefix.length + 2), 16)}`)
+            .replace(/'([^'\\]*(?:\\.[^'\\]*)*)'/g, (_match, body) => JSON.stringify(body.replace(/\\'/g, "'")))
+            .replace(/,\s*([}\]])/g, "$1");
         parsed = JSON.parse(normalized);
     }
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
         throw new Error("SQLite write content must be a JSON object.");
-    return Object.fromEntries(Object.entries(parsed).map(([column, value]) => [column, normalizeSqliteWriteValue(value, column)]));
+    return Object.fromEntries(Object.entries(parsed).map(([column, value]) => [
+        column,
+        normalizeSqliteWriteValue(value, column),
+    ]));
 }
 export function writeSqliteSelector(selector, content) {
     if (!selector.table)
@@ -732,8 +953,12 @@ export function writeSqliteSelector(selector, content) {
         const db = new Database(selector.databasePath);
         try {
             const table = selector.table;
-            const result = db.query(`delete from ${quoteSqliteIdent(table)} where ${quoteSqliteIdent(sqlitePrimaryKey(db, table))} = ?`).run(selector.rowId);
-            return (result.changes ?? 0) > 0 ? `Deleted row '${selector.rowId}' in ${table}` : `No row deleted for '${selector.rowId}' in ${table}`;
+            const result = db
+                .query(`delete from ${quoteSqliteIdent(table)} where ${quoteSqliteIdent(sqlitePrimaryKey(db, table))} = ?`)
+                .run(selector.rowId);
+            return (result.changes ?? 0) > 0
+                ? `Deleted row '${selector.rowId}' in ${table}`
+                : `No row deleted for '${selector.rowId}' in ${table}`;
         }
         finally {
             db.close();
@@ -769,8 +994,12 @@ export function writeSqliteSelector(selector, content) {
             return `Inserted row into ${table}`;
         }
         const assignments = columns.map((column) => `${quoteSqliteIdent(column)} = ?`).join(", ");
-        const result = db.query(`update ${quotedTable} set ${assignments} where ${quotedKey} = ?`).run(...columns.map((column) => data[column]), selector.rowId);
-        return (result.changes ?? 0) > 0 ? `Updated row '${selector.rowId}' in ${table}` : `No row updated for '${selector.rowId}' in ${table}`;
+        const result = db
+            .query(`update ${quotedTable} set ${assignments} where ${quotedKey} = ?`)
+            .run(...columns.map((column) => data[column]), selector.rowId);
+        return (result.changes ?? 0) > 0
+            ? `Updated row '${selector.rowId}' in ${table}`
+            : `No row updated for '${selector.rowId}' in ${table}`;
     }
     finally {
         db.close();
@@ -791,15 +1020,26 @@ export function searchSqliteSelector(selector, pattern, ignoreCase = false, cont
         const offset = selector.offset ?? 0;
         const rowIdAlias = "__atomic_rowid__";
         const selectList = key === "rowid" ? `rowid as ${quoteSqliteIdent(rowIdAlias)}, *` : "*";
-        const sql = [`select ${selectList} from ${quoteSqliteIdent(selector.table)}`, where ? `where ${where}` : "", order ? `order by ${order}` : "", "limit ? offset ?"].filter(Boolean).join(" ");
+        const sql = [
+            `select ${selectList} from ${quoteSqliteIdent(selector.table)}`,
+            where ? `where ${where}` : "",
+            order ? `order by ${order}` : "",
+            "limit ? offset ?",
+        ]
+            .filter(Boolean)
+            .join(" ");
         const rows = selector.rowId ? db.query(sql).all(selector.rowId, limit, offset) : db.query(sql).all(limit, offset);
-        return rows.map((rawRow, index) => {
+        return rows
+            .map((rawRow, index) => {
             const row = rawRow;
             const rowKey = key === "rowid" ? row[rowIdAlias] : row[key];
             if (key === "rowid")
                 delete row[rowIdAlias];
             return { row, key: String(rowKey ?? offset + index + 1) };
-        }).filter(({ row }) => matcher.test(JSON.stringify(row))).map(({ row, key }) => `${selector.databasePath}:${selector.table}:${key}: ${truncateSearchLine(JSON.stringify(row))}`).join("\n");
+        })
+            .filter(({ row }) => matcher.test(JSON.stringify(row)))
+            .map(({ row, key }) => `${selector.databasePath}:${selector.table}:${key}: ${truncateSearchLine(JSON.stringify(row))}`)
+            .join("\n");
     }
     finally {
         db.close();