@databricks/appkit 0.72.0 → 0.74.0

package/dist/database/errors.js

@@ -9,6 +9,10 @@ const definitions = {
 		message: "Invalid database request",
 		statusCode: 400
 	},
+	VALIDATION_FAILED: {
+		message: "Database request failed validation",
+		statusCode: 422
+	},
 	NOT_FOUND: {
 		message: "Database record not found",
 		statusCode: 404
@@ -25,6 +29,10 @@ const definitions = {
 		message: "Database operation temporarily unavailable",
 		statusCode: 503
 	},
+	UNSUPPORTED_MEDIA_TYPE: {
+		message: "Database request body must be JSON",
+		statusCode: 415
+	},
 	PAYLOAD_TOO_LARGE: {
 		message: "Database response is too large",
 		statusCode: 413
@@ -44,6 +52,8 @@ const categoryByStatus = {
 	404: "NOT_FOUND",
 	409: "CONFLICT",
 	413: "PAYLOAD_TOO_LARGE",
+	415: "UNSUPPORTED_MEDIA_TYPE",
+	422: "VALIDATION_FAILED",
 	503: "TRANSIENT"
 };
 /** AppKit-facing database failure with stable metadata and no driver details. */
@@ -51,9 +61,9 @@ var DatabasePluginError = class extends AppKitError {
 	code = "DATABASE_PLUGIN_ERROR";
 	isRetryable;
 	statusCode;
-	constructor(category, phase, runtimeMessage, details) {
+	constructor(category, phase, diagnosticMessage, details) {
 		const definition = definitions[category];
-		super(phase === "runtime" && runtimeMessage ? runtimeMessage : definition.message, { clientMessage: definition.message });
+		super((phase === "runtime" || phase === "setup") && diagnosticMessage ? diagnosticMessage : definition.message, { clientMessage: definition.message });
 		this.category = category;
 		this.phase = phase;
 		this.details = details;
@@ -67,8 +77,8 @@ function invalidDatabaseRequest(runtimeMessage) {
 	return new DatabasePluginError("INVALID_REQUEST", "runtime", runtimeMessage);
 }
 /** Refuse to publish a plugin whose configuration cannot be honored. */
-function databaseSetupFailed() {
-	return new DatabasePluginError("SETUP_FAILED", "setup");
+function databaseSetupFailed(reason) {
+	return new DatabasePluginError("SETUP_FAILED", "setup", reason ? `Database setup failed: ${reason}` : void 0);
 }
 /** Reject untrusted request input, naming the field but never its value. */
 function invalidDatabaseInput(path, message) {
@@ -93,7 +103,7 @@ function describeUnclassifiedError(error) {
 }
 /** Add operation context without retaining an unknown error's details. */
 function classifyDatabaseError(error, phase) {
-	if (error instanceof DatabasePluginError) return error.phase === phase ? error : new DatabasePluginError(error.category, phase);
+	if (error instanceof DatabasePluginError) return error.phase === phase ? error : new DatabasePluginError(error.category, phase, void 0, error.details);
 	logger.error("Unclassified database error during %s (%s)", phase, describeUnclassifiedError(error));
 	return new DatabasePluginError("INTERNAL", phase);
 }

package/dist/database/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","names":[],"sources":["../../src/database/errors.ts"],"sourcesContent":["import { AppKitError } from \"../errors\";\nimport { createLogger } from \"../logging/logger\";\n\nconst logger = createLogger(\"database\");\n\nexport type DatabaseErrorCategory =\n  | \"INVALID_REQUEST\"\n  | \"NOT_FOUND\"\n  | \"CONFLICT\"\n  | \"FORBIDDEN\"\n  | \"TRANSIENT\"\n  | \"PAYLOAD_TOO_LARGE\"\n  | \"INTERNAL\"\n  | \"SETUP_FAILED\";\n\n/** Which request field a rejection concerns; it never carries caller values. */\nexport interface DatabaseErrorDetail {\n  readonly path: readonly string[];\n  readonly message: string;\n}\n\ntype DatabaseErrorPhase =\n  | \"setup\"\n  | \"shutdown\"\n  | \"read\"\n  | \"write\"\n  | \"transaction\"\n  | \"runtime\";\n\nconst definitions: Record<\n  DatabaseErrorCategory,\n  { readonly message: string; readonly statusCode: number }\n> = {\n  INVALID_REQUEST: { message: \"Invalid database request\", statusCode: 400 },\n  NOT_FOUND: { message: \"Database record not found\", statusCode: 404 },\n  CONFLICT: { message: \"Database conflict\", statusCode: 409 },\n  FORBIDDEN: { message: \"Database operation forbidden\", statusCode: 403 },\n  TRANSIENT: {\n    message: \"Database operation temporarily unavailable\",\n    statusCode: 503,\n  },\n  PAYLOAD_TOO_LARGE: {\n    message: \"Database response is too large\",\n    statusCode: 413,\n  },\n  INTERNAL: { message: \"Database operation failed\", statusCode: 500 },\n  SETUP_FAILED: { message: \"Database setup failed\", statusCode: 500 },\n};\n\nconst categoryByStatus: Readonly<Record<number, DatabaseErrorCategory>> = {\n  400: \"INVALID_REQUEST\",\n  403: \"FORBIDDEN\",\n  404: \"NOT_FOUND\",\n  409: \"CONFLICT\",\n  413: \"PAYLOAD_TOO_LARGE\",\n  503: \"TRANSIENT\",\n};\n\n/** AppKit-facing database failure with stable metadata and no driver details. */\nexport class DatabasePluginError extends AppKitError {\n  readonly code = \"DATABASE_PLUGIN_ERROR\";\n  readonly isRetryable: boolean;\n  readonly statusCode: number;\n\n  constructor(\n    readonly category: DatabaseErrorCategory,\n    readonly phase: DatabaseErrorPhase,\n    runtimeMessage?: string,\n    readonly details?: readonly DatabaseErrorDetail[],\n  ) {\n    const definition = definitions[category];\n    // Plugin boundaries replace runtime diagnostics with the stable message.\n    super(\n      phase === \"runtime\" && runtimeMessage\n        ? runtimeMessage\n        : definition.message,\n      {\n        clientMessage: definition.message,\n      },\n    );\n    this.statusCode = definition.statusCode;\n    this.isRetryable = category === \"TRANSIENT\";\n    this.name = \"DatabasePluginError\";\n  }\n}\n\n/** Keep runtime diagnostics internal until a plugin boundary classifies them. */\nexport function invalidDatabaseRequest(\n  runtimeMessage?: string,\n): DatabasePluginError {\n  return new DatabasePluginError(\"INVALID_REQUEST\", \"runtime\", runtimeMessage);\n}\n\n/** Refuse to publish a plugin whose configuration cannot be honored. */\nexport function databaseSetupFailed(): DatabasePluginError {\n  return new DatabasePluginError(\"SETUP_FAILED\", \"setup\");\n}\n\n/** Reject untrusted request input, naming the field but never its value. */\nexport function invalidDatabaseInput(\n  path: readonly string[],\n  message: string,\n): DatabasePluginError {\n  return new DatabasePluginError(\"INVALID_REQUEST\", \"read\", undefined, [\n    { path, message },\n  ]);\n}\n\n/**\n * Name an unknown failure without its payload. A driver error carries the SQL\n * text and its bound row values (for example a `DrizzleQueryError` retains\n * `query` and `params`), so only constructor names walk into the log.\n */\nfunction describeUnclassifiedError(error: unknown): string {\n  const names: string[] = [];\n  let current: unknown = error;\n  for (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n    names.push(current.name);\n    current = current.cause;\n  }\n  return names.length > 0 ? names.join(\" <- \") : typeof error;\n}\n\n/** Add operation context without retaining an unknown error's details. */\nexport function classifyDatabaseError(\n  error: unknown,\n  phase: DatabaseErrorPhase,\n): DatabasePluginError {\n  if (error instanceof DatabasePluginError) {\n    return error.phase === phase\n      ? error\n      : new DatabasePluginError(error.category, phase);\n  }\n  logger.error(\n    \"Unclassified database error during %s (%s)\",\n    phase,\n    describeUnclassifiedError(error),\n  );\n  return new DatabasePluginError(\"INTERNAL\", phase);\n}\n\n/** Restore the safe database category carried through `Plugin.execute()`. */\nexport function databaseErrorFromStatus(\n  status: number,\n  phase: DatabaseErrorPhase,\n): DatabasePluginError {\n  const category = categoryByStatus[status] ?? \"INTERNAL\";\n  return new DatabasePluginError(category, phase);\n}\n"],"mappings":";;;;;AAGA,MAAM,SAAS,aAAa,WAAW;AA0BvC,MAAM,cAGF;CACF,iBAAiB;EAAE,SAAS;EAA4B,YAAY;EAAK;CACzE,WAAW;EAAE,SAAS;EAA6B,YAAY;EAAK;CACpE,UAAU;EAAE,SAAS;EAAqB,YAAY;EAAK;CAC3D,WAAW;EAAE,SAAS;EAAgC,YAAY;EAAK;CACvE,WAAW;EACT,SAAS;EACT,YAAY;EACb;CACD,mBAAmB;EACjB,SAAS;EACT,YAAY;EACb;CACD,UAAU;EAAE,SAAS;EAA6B,YAAY;EAAK;CACnE,cAAc;EAAE,SAAS;EAAyB,YAAY;EAAK;CACpE;AAED,MAAM,mBAAoE;CACxE,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACN;;AAGD,IAAa,sBAAb,cAAyC,YAAY;CACnD,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YACE,AAAS,UACT,AAAS,OACT,gBACA,AAAS,SACT;EACA,MAAM,aAAa,YAAY;AAE/B,QACE,UAAU,aAAa,iBACnB,iBACA,WAAW,SACf,EACE,eAAe,WAAW,SAC3B,CACF;EAdQ;EACA;EAEA;AAYT,OAAK,aAAa,WAAW;AAC7B,OAAK,cAAc,aAAa;AAChC,OAAK,OAAO;;;;AAKhB,SAAgB,uBACd,gBACqB;AACrB,QAAO,IAAI,oBAAoB,mBAAmB,WAAW,eAAe;;;AAI9E,SAAgB,sBAA2C;AACzD,QAAO,IAAI,oBAAoB,gBAAgB,QAAQ;;;AAIzD,SAAgB,qBACd,MACA,SACqB;AACrB,QAAO,IAAI,oBAAoB,mBAAmB,QAAQ,QAAW,CACnE;EAAE;EAAM;EAAS,CAClB,CAAC;;;;;;;AAQJ,SAAS,0BAA0B,OAAwB;CACzD,MAAM,QAAkB,EAAE;CAC1B,IAAI,UAAmB;AACvB,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AAClE,QAAM,KAAK,QAAQ,KAAK;AACxB,YAAU,QAAQ;;AAEpB,QAAO,MAAM,SAAS,IAAI,MAAM,KAAK,OAAO,GAAG,OAAO;;;AAIxD,SAAgB,sBACd,OACA,OACqB;AACrB,KAAI,iBAAiB,oBACnB,QAAO,MAAM,UAAU,QACnB,QACA,IAAI,oBAAoB,MAAM,UAAU,MAAM;AAEpD,QAAO,MACL,8CACA,OACA,0BAA0B,MAAM,CACjC;AACD,QAAO,IAAI,oBAAoB,YAAY,MAAM;;;AAInD,SAAgB,wBACd,QACA,OACqB;AAErB,QAAO,IAAI,oBADM,iBAAiB,WAAW,YACJ,MAAM"}
+{"version":3,"file":"errors.js","names":[],"sources":["../../src/database/errors.ts"],"sourcesContent":["import { AppKitError } from \"../errors\";\nimport { createLogger } from \"../logging/logger\";\n\nconst logger = createLogger(\"database\");\n\nexport type DatabaseErrorCategory =\n  | \"INVALID_REQUEST\"\n  | \"VALIDATION_FAILED\"\n  | \"NOT_FOUND\"\n  | \"CONFLICT\"\n  | \"FORBIDDEN\"\n  | \"TRANSIENT\"\n  | \"UNSUPPORTED_MEDIA_TYPE\"\n  | \"PAYLOAD_TOO_LARGE\"\n  | \"INTERNAL\"\n  | \"SETUP_FAILED\";\n\n/** Which request field a rejection concerns; it never carries caller values. */\nexport interface DatabaseErrorDetail {\n  readonly path: readonly string[];\n  readonly message: string;\n}\n\ntype DatabaseErrorPhase =\n  | \"setup\"\n  | \"shutdown\"\n  | \"read\"\n  | \"write\"\n  | \"transaction\"\n  | \"runtime\";\n\nconst definitions: Record<\n  DatabaseErrorCategory,\n  { readonly message: string; readonly statusCode: number }\n> = {\n  INVALID_REQUEST: { message: \"Invalid database request\", statusCode: 400 },\n  VALIDATION_FAILED: {\n    message: \"Database request failed validation\",\n    statusCode: 422,\n  },\n  NOT_FOUND: { message: \"Database record not found\", statusCode: 404 },\n  CONFLICT: { message: \"Database conflict\", statusCode: 409 },\n  FORBIDDEN: { message: \"Database operation forbidden\", statusCode: 403 },\n  TRANSIENT: {\n    message: \"Database operation temporarily unavailable\",\n    statusCode: 503,\n  },\n  UNSUPPORTED_MEDIA_TYPE: {\n    message: \"Database request body must be JSON\",\n    statusCode: 415,\n  },\n  PAYLOAD_TOO_LARGE: {\n    message: \"Database response is too large\",\n    statusCode: 413,\n  },\n  INTERNAL: { message: \"Database operation failed\", statusCode: 500 },\n  SETUP_FAILED: { message: \"Database setup failed\", statusCode: 500 },\n};\n\nconst categoryByStatus: Readonly<Record<number, DatabaseErrorCategory>> = {\n  400: \"INVALID_REQUEST\",\n  403: \"FORBIDDEN\",\n  404: \"NOT_FOUND\",\n  409: \"CONFLICT\",\n  413: \"PAYLOAD_TOO_LARGE\",\n  415: \"UNSUPPORTED_MEDIA_TYPE\",\n  422: \"VALIDATION_FAILED\",\n  503: \"TRANSIENT\",\n};\n\n/** AppKit-facing database failure with stable metadata and no driver details. */\nexport class DatabasePluginError extends AppKitError {\n  readonly code = \"DATABASE_PLUGIN_ERROR\";\n  readonly isRetryable: boolean;\n  readonly statusCode: number;\n\n  constructor(\n    readonly category: DatabaseErrorCategory,\n    readonly phase: DatabaseErrorPhase,\n    diagnosticMessage?: string,\n    readonly details?: readonly DatabaseErrorDetail[],\n  ) {\n    const definition = definitions[category];\n    // Setup and runtime diagnostics stay server-side. Request boundaries and\n    // clientMessage always use the stable message.\n    super(\n      (phase === \"runtime\" || phase === \"setup\") && diagnosticMessage\n        ? diagnosticMessage\n        : definition.message,\n      {\n        clientMessage: definition.message,\n      },\n    );\n    this.statusCode = definition.statusCode;\n    this.isRetryable = category === \"TRANSIENT\";\n    this.name = \"DatabasePluginError\";\n  }\n}\n\n/** Keep runtime diagnostics internal until a plugin boundary classifies them. */\nexport function invalidDatabaseRequest(\n  runtimeMessage?: string,\n): DatabasePluginError {\n  return new DatabasePluginError(\"INVALID_REQUEST\", \"runtime\", runtimeMessage);\n}\n\n/** Refuse to publish a plugin whose configuration cannot be honored. */\nexport function databaseSetupFailed(reason?: string): DatabasePluginError {\n  return new DatabasePluginError(\n    \"SETUP_FAILED\",\n    \"setup\",\n    reason ? `Database setup failed: ${reason}` : undefined,\n  );\n}\n\n/** Reject untrusted request input, naming the field but never its value. */\nexport function invalidDatabaseInput(\n  path: readonly string[],\n  message: string,\n): DatabasePluginError {\n  return new DatabasePluginError(\"INVALID_REQUEST\", \"read\", undefined, [\n    { path, message },\n  ]);\n}\n\n/**\n * Name an unknown failure without its payload. A driver error carries the SQL\n * text and its bound row values (for example a `DrizzleQueryError` retains\n * `query` and `params`), so only constructor names walk into the log.\n */\nfunction describeUnclassifiedError(error: unknown): string {\n  const names: string[] = [];\n  let current: unknown = error;\n  for (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n    names.push(current.name);\n    current = current.cause;\n  }\n  return names.length > 0 ? names.join(\" <- \") : typeof error;\n}\n\n/** Add operation context without retaining an unknown error's details. */\nexport function classifyDatabaseError(\n  error: unknown,\n  phase: DatabaseErrorPhase,\n): DatabasePluginError {\n  if (error instanceof DatabasePluginError) {\n    // Details name request fields only, so they survive a change of phase.\n    return error.phase === phase\n      ? error\n      : new DatabasePluginError(\n          error.category,\n          phase,\n          undefined,\n          error.details,\n        );\n  }\n  logger.error(\n    \"Unclassified database error during %s (%s)\",\n    phase,\n    describeUnclassifiedError(error),\n  );\n  return new DatabasePluginError(\"INTERNAL\", phase);\n}\n\n/** Restore the safe database category carried through `Plugin.execute()`. */\nexport function databaseErrorFromStatus(\n  status: number,\n  phase: DatabaseErrorPhase,\n): DatabasePluginError {\n  const category = categoryByStatus[status] ?? \"INTERNAL\";\n  return new DatabasePluginError(category, phase);\n}\n"],"mappings":";;;;;AAGA,MAAM,SAAS,aAAa,WAAW;AA4BvC,MAAM,cAGF;CACF,iBAAiB;EAAE,SAAS;EAA4B,YAAY;EAAK;CACzE,mBAAmB;EACjB,SAAS;EACT,YAAY;EACb;CACD,WAAW;EAAE,SAAS;EAA6B,YAAY;EAAK;CACpE,UAAU;EAAE,SAAS;EAAqB,YAAY;EAAK;CAC3D,WAAW;EAAE,SAAS;EAAgC,YAAY;EAAK;CACvE,WAAW;EACT,SAAS;EACT,YAAY;EACb;CACD,wBAAwB;EACtB,SAAS;EACT,YAAY;EACb;CACD,mBAAmB;EACjB,SAAS;EACT,YAAY;EACb;CACD,UAAU;EAAE,SAAS;EAA6B,YAAY;EAAK;CACnE,cAAc;EAAE,SAAS;EAAyB,YAAY;EAAK;CACpE;AAED,MAAM,mBAAoE;CACxE,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;CACN;;AAGD,IAAa,sBAAb,cAAyC,YAAY;CACnD,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YACE,AAAS,UACT,AAAS,OACT,mBACA,AAAS,SACT;EACA,MAAM,aAAa,YAAY;AAG/B,SACG,UAAU,aAAa,UAAU,YAAY,oBAC1C,oBACA,WAAW,SACf,EACE,eAAe,WAAW,SAC3B,CACF;EAfQ;EACA;EAEA;AAaT,OAAK,aAAa,WAAW;AAC7B,OAAK,cAAc,aAAa;AAChC,OAAK,OAAO;;;;AAKhB,SAAgB,uBACd,gBACqB;AACrB,QAAO,IAAI,oBAAoB,mBAAmB,WAAW,eAAe;;;AAI9E,SAAgB,oBAAoB,QAAsC;AACxE,QAAO,IAAI,oBACT,gBACA,SACA,SAAS,0BAA0B,WAAW,OAC/C;;;AAIH,SAAgB,qBACd,MACA,SACqB;AACrB,QAAO,IAAI,oBAAoB,mBAAmB,QAAQ,QAAW,CACnE;EAAE;EAAM;EAAS,CAClB,CAAC;;;;;;;AAQJ,SAAS,0BAA0B,OAAwB;CACzD,MAAM,QAAkB,EAAE;CAC1B,IAAI,UAAmB;AACvB,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AAClE,QAAM,KAAK,QAAQ,KAAK;AACxB,YAAU,QAAQ;;AAEpB,QAAO,MAAM,SAAS,IAAI,MAAM,KAAK,OAAO,GAAG,OAAO;;;AAIxD,SAAgB,sBACd,OACA,OACqB;AACrB,KAAI,iBAAiB,oBAEnB,QAAO,MAAM,UAAU,QACnB,QACA,IAAI,oBACF,MAAM,UACN,OACA,QACA,MAAM,QACP;AAEP,QAAO,MACL,8CACA,OACA,0BAA0B,MAAM,CACjC;AACD,QAAO,IAAI,oBAAoB,YAAY,MAAM;;;AAInD,SAAgB,wBACd,QACA,OACqB;AAErB,QAAO,IAAI,oBADM,iBAAiB,WAAW,YACJ,MAAM"}

package/dist/database/runtime/data-path.d.ts

@@ -0,0 +1,7 @@
+import { IdValue, OrderDirection } from "../contract/wire.js";
+
+//#region src/database/runtime/data-path.d.ts
+type Row = Record<string, unknown>;
+//#endregion
+export { Row };
+//# sourceMappingURL=data-path.d.ts.map

package/dist/database/runtime/data-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-path.d.ts","names":[],"sources":["../../../src/database/runtime/data-path.ts"],"mappings":";;;KA8CY,GAAA,GAAM,MAAA"}

package/dist/database/runtime/data-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-path.js","names":[],"sources":["../../../src/database/runtime/data-path.ts"],"sourcesContent":["import {\n  DEFAULT_LIMIT,\n  type FilterOperator,\n  type IdValue,\n  MAX_LIMIT,\n  MAX_OFFSET,\n  type OrderDirection,\n} from \"../contract\";\nimport { invalidDatabaseRequest } from \"../errors\";\nimport type { AppKitTable, ColumnMeta } from \"../schema-builder\";\n\nexport type { IdValue, OrderDirection };\nexport type ScalarValue = string | number | bigint | boolean | null;\n/** Operators for one column; array operands are reserved for `in`. */\nexport type FilterOps = Partial<\n  Record<FilterOperator, ScalarValue | readonly ScalarValue[]>\n>;\nexport type WhereValue = ScalarValue | readonly ScalarValue[] | FilterOps;\n/** Direct-column predicates with explicit `and` and `or` predicate groups. */\nexport type WhereClause = Readonly<\n  Record<string, WhereValue | readonly WhereClause[]>\n>;\n\nexport type OrderSpec = Readonly<Record<string, OrderDirection>>;\n\nexport interface IncludeOptions {\n  readonly select?: readonly string[];\n  readonly where?: WhereClause;\n  readonly order?: OrderSpec;\n  readonly limit?: number;\n  readonly include?: IncludeSpec;\n}\n\n/** Selection and bounds for one declared relation edge. */\nexport type IncludeSpec = Readonly<Record<string, boolean | IncludeOptions>>;\n\n/** A bounded root read; adapters apply defaults and validate explicit bounds. */\nexport interface QuerySpec {\n  readonly where?: WhereClause;\n  readonly order?: OrderSpec;\n  readonly select?: readonly string[];\n  readonly include?: IncludeSpec;\n  readonly limit?: number;\n  readonly offset?: number;\n}\n\nexport type Row = Record<string, unknown>;\n\n/** Combine predicates without making callers understand the wire shape. */\nexport function andWhere(\n  existing: WhereClause | undefined,\n  next: WhereClause,\n): WhereClause {\n  return existing === undefined ? next : { and: [existing, next] };\n}\n\n/** Internal AppKit execution port; field names are schema-owned identifiers. */\nexport interface DataPath {\n  /** Read a bounded collection from one finalized table. */\n  select(table: AppKitTable, spec: QuerySpec): Promise<Row[]>;\n  /** Read by the sole primary key while preserving supported query state. */\n  findOne(\n    table: AppKitTable,\n    id: IdValue,\n    spec?: Pick<QuerySpec, \"where\" | \"select\" | \"include\">,\n  ): Promise<Row | null>;\n  count(table: AppKitTable, where?: WhereClause): Promise<number>;\n  /** Return exactly one inserted row; zero or many is an invariant failure. */\n  insert(table: AppKitTable, values: Row): Promise<Row>;\n  /** Return null for zero updated rows and reject more than one. */\n  update(table: AppKitTable, id: IdValue, values: Row): Promise<Row | null>;\n  /** Return exactly one row for a validated primary-key or unique conflict. */\n  upsert(table: AppKitTable, values: Row, onConflict: string): Promise<Row>;\n  /** Return false for zero deleted rows, true for one, and reject many. */\n  delete(table: AppKitTable, id: IdValue): Promise<boolean>;\n  /** Execute tagged SQL whose interpolations are parameter values, not SQL. */\n  raw<T = Row>(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ): Promise<T[]>;\n  /** Run the callback with one transaction-bound DataPath. */\n  transaction<T>(callback: (tx: DataPath) => Promise<T>): Promise<T>;\n}\n\n/** Validate an explicit root or relation row limit. */\nexport function validateLimit(limit: number): number {\n  if (!Number.isInteger(limit) || limit < 0 || limit > MAX_LIMIT) {\n    throw invalidDatabaseRequest(\n      `limit must be an integer between 0 and ${MAX_LIMIT}`,\n    );\n  }\n  return limit;\n}\n\n/** Apply the conservative collection default when no limit is supplied. */\nexport function limitOrDefault(limit?: number): number {\n  return limit === undefined ? DEFAULT_LIMIT : validateLimit(limit);\n}\n\n/** Validate an explicit root or relation row offset. */\nexport function validateOffset(offset: number): number {\n  if (!Number.isSafeInteger(offset) || offset < 0 || offset > MAX_OFFSET) {\n    throw invalidDatabaseRequest(\n      `offset must be an integer between 0 and ${MAX_OFFSET}`,\n    );\n  }\n  return offset;\n}\n\n/** Resolve the sole primary key required by keyed operations. */\nexport function primaryKeyMeta(table: AppKitTable): ColumnMeta {\n  const primaryKeys = Object.values(table.$columns).filter(\n    (column) => column.primaryKey,\n  );\n  if (primaryKeys.length !== 1) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" has no primary key`);\n  }\n  return primaryKeys[0];\n}\n\n/** Resolve an upsert target that PostgreSQL can use for conflict detection. */\nexport function conflictTargetMeta(\n  table: AppKitTable,\n  columnName: string,\n): ColumnMeta {\n  const column = table.$columns[columnName];\n  if (!column || (!column.primaryKey && !column.unique)) {\n    throw invalidDatabaseRequest(\n      `Column \"${table.$name}.${columnName}\" is not a conflict target`,\n    );\n  }\n  return column;\n}\n"],"mappings":";;;;;;AAiDA,SAAgB,SACd,UACA,MACa;AACb,QAAO,aAAa,SAAY,OAAO,EAAE,KAAK,CAAC,UAAU,KAAK,EAAE;;;AAgClE,SAAgB,cAAc,OAAuB;AACnD,KAAI,CAAC,OAAO,UAAU,MAAM,IAAI,QAAQ,KAAK,QAAQ,UACnD,OAAM,uBACJ,0CAA0C,YAC3C;AAEH,QAAO;;;AAIT,SAAgB,eAAe,OAAwB;AACrD,QAAO,UAAU,SAAY,gBAAgB,cAAc,MAAM;;;AAInE,SAAgB,eAAe,QAAwB;AACrD,KAAI,CAAC,OAAO,cAAc,OAAO,IAAI,SAAS,KAAK,SAAS,WAC1D,OAAM,uBACJ,2CAA2C,aAC5C;AAEH,QAAO;;;AAIT,SAAgB,eAAe,OAAgC;CAC7D,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,CAAC,QAC/C,WAAW,OAAO,WACpB;AACD,KAAI,YAAY,WAAW,EACzB,OAAM,uBAAuB,UAAU,MAAM,MAAM,sBAAsB;AAE3E,QAAO,YAAY;;;AAIrB,SAAgB,mBACd,OACA,YACY;CACZ,MAAM,SAAS,MAAM,SAAS;AAC9B,KAAI,CAAC,UAAW,CAAC,OAAO,cAAc,CAAC,OAAO,OAC5C,OAAM,uBACJ,WAAW,MAAM,MAAM,GAAG,WAAW,4BACtC;AAEH,QAAO"}
+{"version":3,"file":"data-path.js","names":[],"sources":["../../../src/database/runtime/data-path.ts"],"sourcesContent":["import {\n  DEFAULT_LIMIT,\n  type FilterOperator,\n  type IdValue,\n  MAX_LIMIT,\n  MAX_OFFSET,\n  type OrderDirection,\n} from \"../contract\";\nimport { invalidDatabaseRequest } from \"../errors\";\nimport type { AppKitTable, ColumnMeta } from \"../schema-builder\";\n\nexport type { IdValue, OrderDirection };\nexport type ScalarValue = string | number | bigint | boolean | null;\n/** Operators for one column; array operands are reserved for `in`. */\nexport type FilterOps = Partial<\n  Record<FilterOperator, ScalarValue | readonly ScalarValue[]>\n>;\nexport type WhereValue = ScalarValue | readonly ScalarValue[] | FilterOps;\n/** Direct-column predicates with explicit `and` and `or` predicate groups. */\nexport type WhereClause = Readonly<\n  Record<string, WhereValue | readonly WhereClause[]>\n>;\n\nexport type OrderSpec = Readonly<Record<string, OrderDirection>>;\n\nexport interface IncludeOptions {\n  readonly select?: readonly string[];\n  readonly where?: WhereClause;\n  readonly order?: OrderSpec;\n  readonly limit?: number;\n  readonly include?: IncludeSpec;\n}\n\n/** Selection and bounds for one declared relation edge. */\nexport type IncludeSpec = Readonly<Record<string, boolean | IncludeOptions>>;\n\n/** A bounded root read; adapters apply defaults and validate explicit bounds. */\nexport interface QuerySpec {\n  readonly where?: WhereClause;\n  readonly order?: OrderSpec;\n  readonly select?: readonly string[];\n  readonly include?: IncludeSpec;\n  readonly limit?: number;\n  readonly offset?: number;\n}\n\nexport type Row = Record<string, unknown>;\n\n/** Combine predicates without making callers understand the wire shape. */\nexport function andWhere(\n  existing: WhereClause | undefined,\n  next: WhereClause,\n): WhereClause {\n  return existing === undefined ? next : { and: [existing, next] };\n}\n\n/** Internal AppKit execution port; field names are schema-owned identifiers. */\nexport interface DataPath {\n  /** Read a bounded collection from one finalized table. */\n  select(table: AppKitTable, spec: QuerySpec): Promise<Row[]>;\n  /** Read by the sole primary key while preserving supported query state. */\n  findOne(\n    table: AppKitTable,\n    id: IdValue,\n    spec?: Pick<QuerySpec, \"where\" | \"select\" | \"include\">,\n  ): Promise<Row | null>;\n  count(table: AppKitTable, where?: WhereClause): Promise<number>;\n  /** Return exactly one inserted row; zero or many is an invariant failure. */\n  insert(table: AppKitTable, values: Row): Promise<Row>;\n  /** Return null for zero updated rows and reject more than one. */\n  update(\n    table: AppKitTable,\n    id: IdValue,\n    values: Row,\n    where?: WhereClause,\n  ): Promise<Row | null>;\n  /** Return exactly one row for a validated primary-key or unique conflict. */\n  upsert(table: AppKitTable, values: Row, onConflict: string): Promise<Row>;\n  /** Return false for zero deleted rows, true for one, and reject many. */\n  delete(\n    table: AppKitTable,\n    id: IdValue,\n    where?: WhereClause,\n  ): Promise<boolean>;\n  /** Execute tagged SQL whose interpolations are parameter values, not SQL. */\n  raw<T = Row>(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ): Promise<T[]>;\n  /** Run the callback with one transaction-bound DataPath. */\n  transaction<T>(callback: (tx: DataPath) => Promise<T>): Promise<T>;\n}\n\n/** Validate an explicit root or relation row limit. */\nexport function validateLimit(limit: number): number {\n  if (!Number.isInteger(limit) || limit < 0 || limit > MAX_LIMIT) {\n    throw invalidDatabaseRequest(\n      `limit must be an integer between 0 and ${MAX_LIMIT}`,\n    );\n  }\n  return limit;\n}\n\n/** Apply the conservative collection default when no limit is supplied. */\nexport function limitOrDefault(limit?: number): number {\n  return limit === undefined ? DEFAULT_LIMIT : validateLimit(limit);\n}\n\n/** Validate an explicit root or relation row offset. */\nexport function validateOffset(offset: number): number {\n  if (!Number.isSafeInteger(offset) || offset < 0 || offset > MAX_OFFSET) {\n    throw invalidDatabaseRequest(\n      `offset must be an integer between 0 and ${MAX_OFFSET}`,\n    );\n  }\n  return offset;\n}\n\n/** Resolve the sole primary key required by keyed operations. */\nexport function primaryKeyMeta(table: AppKitTable): ColumnMeta {\n  const primaryKeys = Object.values(table.$columns).filter(\n    (column) => column.primaryKey,\n  );\n  if (primaryKeys.length !== 1) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" has no primary key`);\n  }\n  return primaryKeys[0];\n}\n\n/** Resolve an upsert target that PostgreSQL can use for conflict detection. */\nexport function conflictTargetMeta(\n  table: AppKitTable,\n  columnName: string,\n): ColumnMeta {\n  const column = table.$columns[columnName];\n  if (!column || (!column.primaryKey && !column.unique)) {\n    throw invalidDatabaseRequest(\n      `Column \"${table.$name}.${columnName}\" is not a conflict target`,\n    );\n  }\n  return column;\n}\n"],"mappings":";;;;;;AAiDA,SAAgB,SACd,UACA,MACa;AACb,QAAO,aAAa,SAAY,OAAO,EAAE,KAAK,CAAC,UAAU,KAAK,EAAE;;;AAyClE,SAAgB,cAAc,OAAuB;AACnD,KAAI,CAAC,OAAO,UAAU,MAAM,IAAI,QAAQ,KAAK,QAAQ,UACnD,OAAM,uBACJ,0CAA0C,YAC3C;AAEH,QAAO;;;AAIT,SAAgB,eAAe,OAAwB;AACrD,QAAO,UAAU,SAAY,gBAAgB,cAAc,MAAM;;;AAInE,SAAgB,eAAe,QAAwB;AACrD,KAAI,CAAC,OAAO,cAAc,OAAO,IAAI,SAAS,KAAK,SAAS,WAC1D,OAAM,uBACJ,2CAA2C,aAC5C;AAEH,QAAO;;;AAIT,SAAgB,eAAe,OAAgC;CAC7D,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,CAAC,QAC/C,WAAW,OAAO,WACpB;AACD,KAAI,YAAY,WAAW,EACzB,OAAM,uBAAuB,UAAU,MAAM,MAAM,sBAAsB;AAE3E,QAAO,YAAY;;;AAIrB,SAAgB,mBACd,OACA,YACY;CACZ,MAAM,SAAS,MAAM,SAAS;AAC9B,KAAI,CAAC,UAAW,CAAC,OAAO,cAAc,CAAC,OAAO,OAC5C,OAAM,uBACJ,WAAW,MAAM,MAAM,GAAG,WAAW,4BACtC;AAEH,QAAO"}

package/dist/database/runtime/engine/drizzle-data-path.js

@@ -2,7 +2,7 @@ import { createLogger } from "../../../logging/logger.js";
 import { columnValueSchema } from "../../schema-builder/validators.js";
 import { DatabasePluginError, invalidDatabaseRequest } from "../../errors.js";
 import { buildEngineRelations } from "../../schema-builder/engine/relations.js";
-import { conflictTargetMeta, limitOrDefault, primaryKeyMeta, validateOffset } from "../data-path.js";
+import { andWhere, conflictTargetMeta, limitOrDefault, primaryKeyMeta, validateOffset } from "../data-path.js";
 import { columnOf, defaultColumns, publicColumnNames, returningColumns, selectToColumns, translateInclude, translateOrder, translateWhere } from "./translate.js";
 import { and, eq, isSQLWrapper, sql } from "drizzle-orm";
 import { drizzle } from "drizzle-orm/node-postgres";
@@ -113,6 +113,8 @@ function createDrizzleDataPath(db, schema, options = {}) {
 		return table.$engine;
 	};
 	const whereSql = (table, where) => where === void 0 ? void 0 : translateWhere(table, where, columnAccess);
+	/** Narrow by the primary key while preserving an accumulated predicate. */
+	const keyedWhere = (table, primaryKey, id, where) => where === void 0 ? eq(columnOf(table, primaryKey.columnName), id) : translateWhere(table, andWhere({ [primaryKey.columnName]: { eq: id } }, where), columnAccess);
 	return {
 		async select(table, spec) {
 			return runDatabaseOperation(() => relationalQueryBuilder(db, schema, table).findMany({
@@ -142,11 +144,11 @@ function createDrizzleDataPath(db, schema, options = {}) {
 			const parameters = mutationValues(table, values, "insert");
 			return expectExactlyOne(mutationRows(table, await runDatabaseOperation(() => db.insert(engineTable).values(parameters).returning(returningColumns(table, columnAccess))), columnAccess));
 		},
-		async update(table, id, values) {
+		async update(table, id, values, where) {
 			const engineTable = pgTable(table);
 			const parameters = mutationValues(table, values, "update");
 			const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(table, id);
-			return expectZeroOrOne(mutationRows(table, await runDatabaseOperation(() => db.update(engineTable).set(parameters).where(eq(columnOf(table, primaryKey.columnName), validatedId)).returning(returningColumns(table, columnAccess))), columnAccess));
+			return expectZeroOrOne(mutationRows(table, await runDatabaseOperation(() => db.update(engineTable).set(parameters).where(keyedWhere(table, primaryKey, validatedId, where)).returning(returningColumns(table, columnAccess))), columnAccess));
 		},
 		async upsert(table, values, onConflict) {
 			const engineTable = pgTable(table);
@@ -158,9 +160,9 @@ function createDrizzleDataPath(db, schema, options = {}) {
 				set: updates
 			}).returning(returningColumns(table, columnAccess))), columnAccess));
 		},
-		async delete(table, id) {
+		async delete(table, id, where) {
 			const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(table, id);
-			return expectZeroOrOne(await runDatabaseOperation(() => db.delete(pgTable(table)).where(eq(columnOf(table, primaryKey.columnName), validatedId)).returning({ id: columnOf(table, primaryKey.columnName) }))) !== null;
+			return expectZeroOrOne(await runDatabaseOperation(() => db.delete(pgTable(table)).where(keyedWhere(table, primaryKey, validatedId, where)).returning({ id: columnOf(table, primaryKey.columnName) }))) !== null;
 		},
 		async raw(strings, ...values) {
 			if (values.some((value) => isSQLWrapper(value))) throw invalidDatabaseRequest("Tagged SQL interpolations must be parameter values");

package/dist/database/runtime/engine/drizzle-data-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"drizzle-data-path.js","names":[],"sources":["../../../../src/database/runtime/engine/drizzle-data-path.ts"],"sourcesContent":["import { and, eq, isSQLWrapper, type SQL, sql } from \"drizzle-orm\";\nimport { drizzle, type NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type { PgTable } from \"drizzle-orm/pg-core\";\nimport type { Pool } from \"pg\";\n\nimport { createLogger } from \"../../../logging/logger\";\nimport {\n  type DatabaseErrorCategory,\n  DatabasePluginError,\n  invalidDatabaseRequest,\n} from \"../../errors\";\nimport type { AppKitTable, ColumnMeta, Schema } from \"../../schema-builder\";\nimport { buildEngineRelations } from \"../../schema-builder/engine/relations\";\nimport { columnValueSchema } from \"../../schema-builder/validators\";\nimport {\n  conflictTargetMeta,\n  type DataPath,\n  type IdValue,\n  limitOrDefault,\n  primaryKeyMeta,\n  type Row,\n  validateOffset,\n  type WhereClause,\n} from \"../data-path\";\nimport {\n  columnOf,\n  type ColumnAccess,\n  defaultColumns,\n  publicColumnNames,\n  returningColumns,\n  selectToColumns,\n  translateInclude,\n  translateOrder,\n  translateWhere,\n} from \"./translate\";\n\nconst logger = createLogger(\"database\");\n\n/** Concrete Drizzle seam shared by the adapter and its focused tests. */\nexport type DrizzleDb = NodePgDatabase<Record<string, never>>;\n\nexport interface DrizzleDataPathOptions {\n  /** Explicit capability for trusted server code that must read private data. */\n  readonly columnAccess?: ColumnAccess;\n}\n\n/** Bind finalized AppKit metadata to a relational Drizzle database. */\nexport function createDrizzleDb(pool: Pool, schema: Schema): DrizzleDb {\n  const completeSchema: Record<string, unknown> = Object.assign(\n    Object.create(null),\n    schema.$engine,\n    buildEngineRelations(schema.$tables),\n  );\n  return drizzle(pool, { schema: completeSchema }) as unknown as DrizzleDb;\n}\n\ninterface RelationalQueryBuilder {\n  findMany(config: Record<string, unknown>): Promise<Row[]>;\n  findFirst(config: Record<string, unknown>): Promise<Row | undefined>;\n}\n\n/** Reject same-name or forged tables by requiring finalized object identity. */\nfunction assertRegisteredTable(schema: Schema, table: AppKitTable): void {\n  if (schema.$tables[table.$name] !== table) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" is not registered`);\n  }\n}\n\nfunction relationalQueryBuilder(\n  db: DrizzleDb,\n  schema: Schema,\n  table: AppKitTable,\n): RelationalQueryBuilder {\n  assertRegisteredTable(schema, table);\n  const query = (db.query as unknown as Record<string, RelationalQueryBuilder>)[\n    table.$name\n  ];\n  if (!query) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" is not registered`);\n  }\n  return query;\n}\n\nfunction selectedColumns(\n  table: AppKitTable,\n  select?: readonly string[],\n  access: ColumnAccess = \"public\",\n): Record<string, true> {\n  return select === undefined\n    ? defaultColumns(table)\n    : selectToColumns(table, select, access);\n}\n\ntype MutationKind = \"insert\" | \"update\";\n\ninterface MutationSchema {\n  safeParse(\n    value: unknown,\n  ):\n    | { readonly success: true; readonly data: unknown }\n    | { readonly success: false };\n}\n\n/** Apply the finalized write schema again at the persistence boundary. */\nfunction mutationValues(\n  table: AppKitTable,\n  values: Row,\n  kind: MutationKind,\n): Row {\n  if (values === null || typeof values !== \"object\" || Array.isArray(values)) {\n    throw invalidDatabaseRequest(\"Database mutation values must be an object\");\n  }\n  for (const [key, value] of Object.entries(values)) {\n    if (!Object.hasOwn(table.$columns, key)) {\n      throw invalidDatabaseRequest(`Unknown column \"${table.$name}.${key}\"`);\n    }\n    if (isSQLWrapper(value)) {\n      throw invalidDatabaseRequest(\n        \"Database mutation values cannot contain SQL\",\n      );\n    }\n  }\n  const schema = (\n    kind === \"insert\" ? table.$insertSchema : table.$updateSchema\n  ) as MutationSchema;\n  const result = schema.safeParse(values);\n  if (!result.success) {\n    throw invalidDatabaseRequest(`Invalid database ${kind} values`);\n  }\n  return result.data as Row;\n}\n\n/** Never change row identity or the conflict key during the update half. */\nfunction upsertUpdateValues(\n  table: AppKitTable,\n  parameters: Row,\n  conflictTarget: string,\n): Row {\n  const updates: Row = {};\n  for (const [key, value] of Object.entries(parameters)) {\n    const column = table.$columns[key];\n    if (\n      column.primaryKey ||\n      column.serverGenerated ||\n      column.columnName === conflictTarget\n    ) {\n      continue;\n    }\n    updates[key] = value;\n  }\n  if (Object.keys(updates).length > 0) return updates;\n\n  // A safe self-assignment preserves the exactly-one-row upsert contract.\n  return { [conflictTarget]: columnOf(table, conflictTarget) };\n}\n\n// Drizzle wraps driver failures in DrizzleQueryError, so the SQLSTATE sits on a\n// nested `cause` rather than the thrown error. Walk a bounded chain to find it.\nconst MAX_CAUSE_DEPTH = 5;\n\nfunction sqlStateOf(error: unknown): string | undefined {\n  let current = error;\n  for (let depth = 0; depth < MAX_CAUSE_DEPTH; depth++) {\n    if (!current || typeof current !== \"object\") return undefined;\n    try {\n      const candidate = Reflect.get(current, \"code\");\n      // SQLSTATE is always a five-character alphanumeric class code.\n      if (typeof candidate === \"string\" && /^[0-9A-Z]{5}$/.test(candidate)) {\n        return candidate;\n      }\n      current = Reflect.get(current, \"cause\");\n    } catch {\n      return undefined;\n    }\n  }\n  return undefined;\n}\n\n/** Classify SQLSTATE without retaining the driver error or its properties. */\nfunction classifyDriverError(error: unknown): DatabasePluginError {\n  const code = sqlStateOf(error);\n  const category: DatabaseErrorCategory =\n    code === \"40001\" || code === \"40P01\" || code === \"57014\"\n      ? \"TRANSIENT\"\n      : code === \"42501\"\n        ? \"FORBIDDEN\"\n        : code?.startsWith(\"23\")\n          ? \"CONFLICT\"\n          : \"INTERNAL\";\n  logger.error(\n    \"Database driver error classified as %s (SQLSTATE %s)\",\n    category,\n    code ?? \"unknown\",\n  );\n  return new DatabasePluginError(category, \"runtime\");\n}\n\nasync function runDatabaseOperation<T>(\n  operation: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await operation();\n  } catch (error) {\n    if (error instanceof DatabasePluginError) throw error;\n    throw classifyDriverError(error);\n  }\n}\n\n/** Apply the adapter's column capability before rows reach cardinality checks. */\nfunction mutationRows(\n  table: AppKitTable,\n  rows: Row[],\n  access: ColumnAccess,\n): Row[] {\n  if (access === \"trusted\") return rows;\n  const names = publicColumnNames(table);\n  return rows.map((row) => {\n    const projected: Row = {};\n    for (const name of names) {\n      if (Object.hasOwn(row, name)) projected[name] = row[name];\n    }\n    return projected;\n  });\n}\n\n/** Resolve and validate the sole key once before a keyed operation executes. */\nfunction validatedPrimaryKey(\n  table: AppKitTable,\n  id: unknown,\n): { readonly meta: ColumnMeta; readonly value: IdValue } {\n  const meta = primaryKeyMeta(table);\n  const result = columnValueSchema(meta).safeParse(id);\n  if (!result.success) {\n    throw invalidDatabaseRequest(\n      `Invalid primary-key value for \"${table.$name}.${meta.columnName}\"`,\n    );\n  }\n  return { meta, value: result.data as IdValue };\n}\n\n// Enforce the single-row DataPath contract before results reach callers.\nfunction expectExactlyOne(rows: Row[]): Row {\n  if (rows.length !== 1) {\n    throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  }\n  return rows[0];\n}\n\nfunction expectZeroOrOne(rows: Row[]): Row | null {\n  if (rows.length > 1) {\n    throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  }\n  return rows[0] ?? null;\n}\n\n/** Adapt a Drizzle database to AppKit's internal execution port. */\nexport function createDrizzleDataPath(\n  db: DrizzleDb,\n  schema: Schema,\n  options: DrizzleDataPathOptions = {},\n): DataPath {\n  const columnAccess = options.columnAccess ?? \"public\";\n  const pgTable = (table: AppKitTable): PgTable => {\n    assertRegisteredTable(schema, table);\n    return table.$engine as unknown as PgTable;\n  };\n  const whereSql = (\n    table: AppKitTable,\n    where?: WhereClause,\n  ): SQL | undefined =>\n    where === undefined\n      ? undefined\n      : translateWhere(table, where, columnAccess);\n\n  return {\n    async select(table, spec) {\n      return runDatabaseOperation(() =>\n        relationalQueryBuilder(db, schema, table).findMany({\n          where: whereSql(table, spec.where),\n          orderBy:\n            spec.order === undefined\n              ? undefined\n              : translateOrder(table, spec.order, columnAccess),\n          columns: selectedColumns(table, spec.select, columnAccess),\n          with:\n            spec.include === undefined\n              ? undefined\n              : translateInclude(table, schema, spec.include, columnAccess),\n          limit: limitOrDefault(spec.limit),\n          offset:\n            spec.offset === undefined ? undefined : validateOffset(spec.offset),\n        }),\n      );\n    },\n\n    async findOne(table, id, spec) {\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const primaryKeyPredicate = eq(\n        columnOf(table, primaryKey.columnName),\n        validatedId,\n      );\n      const additionalPredicate =\n        spec?.where === undefined\n          ? undefined\n          : translateWhere(table, spec.where, columnAccess);\n      const row = await runDatabaseOperation(() =>\n        relationalQueryBuilder(db, schema, table).findFirst({\n          where:\n            additionalPredicate === undefined\n              ? primaryKeyPredicate\n              : and(primaryKeyPredicate, additionalPredicate),\n          columns: selectedColumns(table, spec?.select, columnAccess),\n          with:\n            spec?.include === undefined\n              ? undefined\n              : translateInclude(table, schema, spec.include, columnAccess),\n        }),\n      );\n      return row ?? null;\n    },\n\n    async count(table, where) {\n      return runDatabaseOperation(() =>\n        db.$count(pgTable(table), whereSql(table, where)),\n      );\n    },\n\n    async insert(table, values) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"insert\");\n      const rows = await runDatabaseOperation(() =>\n        db\n          .insert(engineTable)\n          .values(parameters)\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectExactlyOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async update(table, id, values) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"update\");\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const rows = await runDatabaseOperation(() =>\n        db\n          .update(engineTable)\n          .set(parameters)\n          .where(eq(columnOf(table, primaryKey.columnName), validatedId))\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectZeroOrOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async upsert(table, values, onConflict) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"insert\");\n      const target = conflictTargetMeta(table, onConflict);\n      const updates = upsertUpdateValues(table, parameters, target.columnName);\n      const rows = await runDatabaseOperation(() =>\n        db\n          .insert(engineTable)\n          .values(parameters)\n          .onConflictDoUpdate({\n            target: columnOf(table, target.columnName),\n            set: updates,\n          })\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectExactlyOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async delete(table, id) {\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const rows = await runDatabaseOperation(() =>\n        db\n          .delete(pgTable(table))\n          .where(eq(columnOf(table, primaryKey.columnName), validatedId))\n          .returning({ id: columnOf(table, primaryKey.columnName) }),\n      );\n      return expectZeroOrOne(rows as Row[]) !== null;\n    },\n\n    async raw<T = Row>(\n      strings: TemplateStringsArray,\n      ...values: unknown[]\n    ): Promise<T[]> {\n      // SQL wrappers carry structure; tagged interpolations may carry values only.\n      if (values.some((value) => isSQLWrapper(value))) {\n        throw invalidDatabaseRequest(\n          \"Tagged SQL interpolations must be parameter values\",\n        );\n      }\n      const result = await runDatabaseOperation(() =>\n        db.execute(sql(strings, ...values.map((value) => sql.param(value)))),\n      );\n      return ((result as { rows?: unknown }).rows ?? result) as T[];\n    },\n\n    async transaction<T>(callback: (tx: DataPath) => Promise<T>): Promise<T> {\n      let callbackFailed = false;\n      let callbackError: unknown;\n      try {\n        return await db.transaction(async (transaction) => {\n          try {\n            return await callback(\n              createDrizzleDataPath(\n                transaction as unknown as DrizzleDb,\n                schema,\n                { columnAccess },\n              ),\n            );\n          } catch (error) {\n            callbackFailed = true;\n            callbackError = error;\n            throw error;\n          }\n        });\n      } catch (error) {\n        // Callback errors are application-owned; sanitize only tx lifecycle errors.\n        if (\n          callbackFailed &&\n          (error === callbackError ||\n            callbackError instanceof DatabasePluginError)\n        ) {\n          throw callbackError;\n        }\n        if (error instanceof DatabasePluginError) throw error;\n        throw classifyDriverError(error);\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;AAoCA,MAAM,SAAS,aAAa,WAAW;;AAWvC,SAAgB,gBAAgB,MAAY,QAA2B;AAMrE,QAAO,QAAQ,MAAM,EAAE,QALyB,OAAO,OACrD,OAAO,OAAO,KAAK,EACnB,OAAO,SACP,qBAAqB,OAAO,QAAQ,CACrC,EAC8C,CAAC;;;AASlD,SAAS,sBAAsB,QAAgB,OAA0B;AACvE,KAAI,OAAO,QAAQ,MAAM,WAAW,MAClC,OAAM,uBAAuB,UAAU,MAAM,MAAM,qBAAqB;;AAI5E,SAAS,uBACP,IACA,QACA,OACwB;AACxB,uBAAsB,QAAQ,MAAM;CACpC,MAAM,QAAS,GAAG,MAChB,MAAM;AAER,KAAI,CAAC,MACH,OAAM,uBAAuB,UAAU,MAAM,MAAM,qBAAqB;AAE1E,QAAO;;AAGT,SAAS,gBACP,OACA,QACA,SAAuB,UACD;AACtB,QAAO,WAAW,SACd,eAAe,MAAM,GACrB,gBAAgB,OAAO,QAAQ,OAAO;;;AAc5C,SAAS,eACP,OACA,QACA,MACK;AACL,KAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CACxE,OAAM,uBAAuB,6CAA6C;AAE5E,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,EAAE;AACjD,MAAI,CAAC,OAAO,OAAO,MAAM,UAAU,IAAI,CACrC,OAAM,uBAAuB,mBAAmB,MAAM,MAAM,GAAG,IAAI,GAAG;AAExE,MAAI,aAAa,MAAM,CACrB,OAAM,uBACJ,8CACD;;CAML,MAAM,UAFJ,SAAS,WAAW,MAAM,gBAAgB,MAAM,eAE5B,UAAU,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,OAAM,uBAAuB,oBAAoB,KAAK,SAAS;AAEjE,QAAO,OAAO;;;AAIhB,SAAS,mBACP,OACA,YACA,gBACK;CACL,MAAM,UAAe,EAAE;AACvB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,WAAW,EAAE;EACrD,MAAM,SAAS,MAAM,SAAS;AAC9B,MACE,OAAO,cACP,OAAO,mBACP,OAAO,eAAe,eAEtB;AAEF,UAAQ,OAAO;;AAEjB,KAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EAAG,QAAO;AAG5C,QAAO,GAAG,iBAAiB,SAAS,OAAO,eAAe,EAAE;;AAK9D,MAAM,kBAAkB;AAExB,SAAS,WAAW,OAAoC;CACtD,IAAI,UAAU;AACd,MAAK,IAAI,QAAQ,GAAG,QAAQ,iBAAiB,SAAS;AACpD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,MAAI;GACF,MAAM,YAAY,QAAQ,IAAI,SAAS,OAAO;AAE9C,OAAI,OAAO,cAAc,YAAY,gBAAgB,KAAK,UAAU,CAClE,QAAO;AAET,aAAU,QAAQ,IAAI,SAAS,QAAQ;UACjC;AACN;;;;;AAON,SAAS,oBAAoB,OAAqC;CAChE,MAAM,OAAO,WAAW,MAAM;CAC9B,MAAM,WACJ,SAAS,WAAW,SAAS,WAAW,SAAS,UAC7C,cACA,SAAS,UACP,cACA,MAAM,WAAW,KAAK,GACpB,aACA;AACV,QAAO,MACL,wDACA,UACA,QAAQ,UACT;AACD,QAAO,IAAI,oBAAoB,UAAU,UAAU;;AAGrD,eAAe,qBACb,WACY;AACZ,KAAI;AACF,SAAO,MAAM,WAAW;UACjB,OAAO;AACd,MAAI,iBAAiB,oBAAqB,OAAM;AAChD,QAAM,oBAAoB,MAAM;;;;AAKpC,SAAS,aACP,OACA,MACA,QACO;AACP,KAAI,WAAW,UAAW,QAAO;CACjC,MAAM,QAAQ,kBAAkB,MAAM;AACtC,QAAO,KAAK,KAAK,QAAQ;EACvB,MAAM,YAAiB,EAAE;AACzB,OAAK,MAAM,QAAQ,MACjB,KAAI,OAAO,OAAO,KAAK,KAAK,CAAE,WAAU,QAAQ,IAAI;AAEtD,SAAO;GACP;;;AAIJ,SAAS,oBACP,OACA,IACwD;CACxD,MAAM,OAAO,eAAe,MAAM;CAClC,MAAM,SAAS,kBAAkB,KAAK,CAAC,UAAU,GAAG;AACpD,KAAI,CAAC,OAAO,QACV,OAAM,uBACJ,kCAAkC,MAAM,MAAM,GAAG,KAAK,WAAW,GAClE;AAEH,QAAO;EAAE;EAAM,OAAO,OAAO;EAAiB;;AAIhD,SAAS,iBAAiB,MAAkB;AAC1C,KAAI,KAAK,WAAW,EAClB,OAAM,IAAI,oBAAoB,YAAY,UAAU;AAEtD,QAAO,KAAK;;AAGd,SAAS,gBAAgB,MAAyB;AAChD,KAAI,KAAK,SAAS,EAChB,OAAM,IAAI,oBAAoB,YAAY,UAAU;AAEtD,QAAO,KAAK,MAAM;;;AAIpB,SAAgB,sBACd,IACA,QACA,UAAkC,EAAE,EAC1B;CACV,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,WAAW,UAAgC;AAC/C,wBAAsB,QAAQ,MAAM;AACpC,SAAO,MAAM;;CAEf,MAAM,YACJ,OACA,UAEA,UAAU,SACN,SACA,eAAe,OAAO,OAAO,aAAa;AAEhD,QAAO;EACL,MAAM,OAAO,OAAO,MAAM;AACxB,UAAO,2BACL,uBAAuB,IAAI,QAAQ,MAAM,CAAC,SAAS;IACjD,OAAO,SAAS,OAAO,KAAK,MAAM;IAClC,SACE,KAAK,UAAU,SACX,SACA,eAAe,OAAO,KAAK,OAAO,aAAa;IACrD,SAAS,gBAAgB,OAAO,KAAK,QAAQ,aAAa;IAC1D,MACE,KAAK,YAAY,SACb,SACA,iBAAiB,OAAO,QAAQ,KAAK,SAAS,aAAa;IACjE,OAAO,eAAe,KAAK,MAAM;IACjC,QACE,KAAK,WAAW,SAAY,SAAY,eAAe,KAAK,OAAO;IACtE,CAAC,CACH;;EAGH,MAAM,QAAQ,OAAO,IAAI,MAAM;GAC7B,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;GACD,MAAM,sBAAsB,GAC1B,SAAS,OAAO,WAAW,WAAW,EACtC,YACD;GACD,MAAM,sBACJ,MAAM,UAAU,SACZ,SACA,eAAe,OAAO,KAAK,OAAO,aAAa;AAcrD,UAbY,MAAM,2BAChB,uBAAuB,IAAI,QAAQ,MAAM,CAAC,UAAU;IAClD,OACE,wBAAwB,SACpB,sBACA,IAAI,qBAAqB,oBAAoB;IACnD,SAAS,gBAAgB,OAAO,MAAM,QAAQ,aAAa;IAC3D,MACE,MAAM,YAAY,SACd,SACA,iBAAiB,OAAO,QAAQ,KAAK,SAAS,aAAa;IAClE,CAAC,CACH,IACa;;EAGhB,MAAM,MAAM,OAAO,OAAO;AACxB,UAAO,2BACL,GAAG,OAAO,QAAQ,MAAM,EAAE,SAAS,OAAO,MAAM,CAAC,CAClD;;EAGH,MAAM,OAAO,OAAO,QAAQ;GAC1B,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;AAO1D,UAAO,iBAAiB,aAAa,OANxB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,OAAO,WAAW,CAClB,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EAC0D,aAAa,CAAC;;EAG3E,MAAM,OAAO,OAAO,IAAI,QAAQ;GAC9B,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;GAC1D,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;AAQD,UAAO,gBAAgB,aAAa,OAPvB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,IAAI,WAAW,CACf,MAAM,GAAG,SAAS,OAAO,WAAW,WAAW,EAAE,YAAY,CAAC,CAC9D,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EACyD,aAAa,CAAC;;EAG1E,MAAM,OAAO,OAAO,QAAQ,YAAY;GACtC,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;GAC1D,MAAM,SAAS,mBAAmB,OAAO,WAAW;GACpD,MAAM,UAAU,mBAAmB,OAAO,YAAY,OAAO,WAAW;AAWxE,UAAO,iBAAiB,aAAa,OAVxB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,OAAO,WAAW,CAClB,mBAAmB;IAClB,QAAQ,SAAS,OAAO,OAAO,WAAW;IAC1C,KAAK;IACN,CAAC,CACD,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EAC0D,aAAa,CAAC;;EAG3E,MAAM,OAAO,OAAO,IAAI;GACtB,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;AAOD,UAAO,gBANM,MAAM,2BACjB,GACG,OAAO,QAAQ,MAAM,CAAC,CACtB,MAAM,GAAG,SAAS,OAAO,WAAW,WAAW,EAAE,YAAY,CAAC,CAC9D,UAAU,EAAE,IAAI,SAAS,OAAO,WAAW,WAAW,EAAE,CAAC,CAC7D,CACoC,KAAK;;EAG5C,MAAM,IACJ,SACA,GAAG,QACW;AAEd,OAAI,OAAO,MAAM,UAAU,aAAa,MAAM,CAAC,CAC7C,OAAM,uBACJ,qDACD;GAEH,MAAM,SAAS,MAAM,2BACnB,GAAG,QAAQ,IAAI,SAAS,GAAG,OAAO,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,CACrE;AACD,UAAS,OAA8B,QAAQ;;EAGjD,MAAM,YAAe,UAAoD;GACvE,IAAI,iBAAiB;GACrB,IAAI;AACJ,OAAI;AACF,WAAO,MAAM,GAAG,YAAY,OAAO,gBAAgB;AACjD,SAAI;AACF,aAAO,MAAM,SACX,sBACE,aACA,QACA,EAAE,cAAc,CACjB,CACF;cACM,OAAO;AACd,uBAAiB;AACjB,sBAAgB;AAChB,YAAM;;MAER;YACK,OAAO;AAEd,QACE,mBACC,UAAU,iBACT,yBAAyB,qBAE3B,OAAM;AAER,QAAI,iBAAiB,oBAAqB,OAAM;AAChD,UAAM,oBAAoB,MAAM;;;EAGrC"}
+{"version":3,"file":"drizzle-data-path.js","names":[],"sources":["../../../../src/database/runtime/engine/drizzle-data-path.ts"],"sourcesContent":["import { and, eq, isSQLWrapper, type SQL, sql } from \"drizzle-orm\";\nimport { drizzle, type NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type { PgTable } from \"drizzle-orm/pg-core\";\nimport type { Pool } from \"pg\";\n\nimport { createLogger } from \"../../../logging/logger\";\nimport {\n  type DatabaseErrorCategory,\n  DatabasePluginError,\n  invalidDatabaseRequest,\n} from \"../../errors\";\nimport type { AppKitTable, ColumnMeta, Schema } from \"../../schema-builder\";\nimport { buildEngineRelations } from \"../../schema-builder/engine/relations\";\nimport { columnValueSchema } from \"../../schema-builder/validators\";\nimport {\n  andWhere,\n  conflictTargetMeta,\n  type DataPath,\n  type IdValue,\n  limitOrDefault,\n  primaryKeyMeta,\n  type Row,\n  validateOffset,\n  type WhereClause,\n} from \"../data-path\";\nimport {\n  columnOf,\n  type ColumnAccess,\n  defaultColumns,\n  publicColumnNames,\n  returningColumns,\n  selectToColumns,\n  translateInclude,\n  translateOrder,\n  translateWhere,\n} from \"./translate\";\n\nconst logger = createLogger(\"database\");\n\n/** Concrete Drizzle seam shared by the adapter and its focused tests. */\nexport type DrizzleDb = NodePgDatabase<Record<string, never>>;\n\nexport interface DrizzleDataPathOptions {\n  /** Explicit capability for trusted server code that must read private data. */\n  readonly columnAccess?: ColumnAccess;\n}\n\n/** Bind finalized AppKit metadata to a relational Drizzle database. */\nexport function createDrizzleDb(pool: Pool, schema: Schema): DrizzleDb {\n  const completeSchema: Record<string, unknown> = Object.assign(\n    Object.create(null),\n    schema.$engine,\n    buildEngineRelations(schema.$tables),\n  );\n  return drizzle(pool, { schema: completeSchema }) as unknown as DrizzleDb;\n}\n\ninterface RelationalQueryBuilder {\n  findMany(config: Record<string, unknown>): Promise<Row[]>;\n  findFirst(config: Record<string, unknown>): Promise<Row | undefined>;\n}\n\n/** Reject same-name or forged tables by requiring finalized object identity. */\nfunction assertRegisteredTable(schema: Schema, table: AppKitTable): void {\n  if (schema.$tables[table.$name] !== table) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" is not registered`);\n  }\n}\n\nfunction relationalQueryBuilder(\n  db: DrizzleDb,\n  schema: Schema,\n  table: AppKitTable,\n): RelationalQueryBuilder {\n  assertRegisteredTable(schema, table);\n  const query = (db.query as unknown as Record<string, RelationalQueryBuilder>)[\n    table.$name\n  ];\n  if (!query) {\n    throw invalidDatabaseRequest(`Table \"${table.$name}\" is not registered`);\n  }\n  return query;\n}\n\nfunction selectedColumns(\n  table: AppKitTable,\n  select?: readonly string[],\n  access: ColumnAccess = \"public\",\n): Record<string, true> {\n  return select === undefined\n    ? defaultColumns(table)\n    : selectToColumns(table, select, access);\n}\n\ntype MutationKind = \"insert\" | \"update\";\n\ninterface MutationSchema {\n  safeParse(\n    value: unknown,\n  ):\n    | { readonly success: true; readonly data: unknown }\n    | { readonly success: false };\n}\n\n/** Apply the finalized write schema again at the persistence boundary. */\nfunction mutationValues(\n  table: AppKitTable,\n  values: Row,\n  kind: MutationKind,\n): Row {\n  if (values === null || typeof values !== \"object\" || Array.isArray(values)) {\n    throw invalidDatabaseRequest(\"Database mutation values must be an object\");\n  }\n  for (const [key, value] of Object.entries(values)) {\n    if (!Object.hasOwn(table.$columns, key)) {\n      throw invalidDatabaseRequest(`Unknown column \"${table.$name}.${key}\"`);\n    }\n    if (isSQLWrapper(value)) {\n      throw invalidDatabaseRequest(\n        \"Database mutation values cannot contain SQL\",\n      );\n    }\n  }\n  const schema = (\n    kind === \"insert\" ? table.$insertSchema : table.$updateSchema\n  ) as MutationSchema;\n  const result = schema.safeParse(values);\n  if (!result.success) {\n    throw invalidDatabaseRequest(`Invalid database ${kind} values`);\n  }\n  return result.data as Row;\n}\n\n/** Never change row identity or the conflict key during the update half. */\nfunction upsertUpdateValues(\n  table: AppKitTable,\n  parameters: Row,\n  conflictTarget: string,\n): Row {\n  const updates: Row = {};\n  for (const [key, value] of Object.entries(parameters)) {\n    const column = table.$columns[key];\n    if (\n      column.primaryKey ||\n      column.serverGenerated ||\n      column.columnName === conflictTarget\n    ) {\n      continue;\n    }\n    updates[key] = value;\n  }\n  if (Object.keys(updates).length > 0) return updates;\n\n  // A safe self-assignment preserves the exactly-one-row upsert contract.\n  return { [conflictTarget]: columnOf(table, conflictTarget) };\n}\n\n// Drizzle wraps driver failures in DrizzleQueryError, so the SQLSTATE sits on a\n// nested `cause` rather than the thrown error. Walk a bounded chain to find it.\nconst MAX_CAUSE_DEPTH = 5;\n\nfunction sqlStateOf(error: unknown): string | undefined {\n  let current = error;\n  for (let depth = 0; depth < MAX_CAUSE_DEPTH; depth++) {\n    if (!current || typeof current !== \"object\") return undefined;\n    try {\n      const candidate = Reflect.get(current, \"code\");\n      // SQLSTATE is always a five-character alphanumeric class code.\n      if (typeof candidate === \"string\" && /^[0-9A-Z]{5}$/.test(candidate)) {\n        return candidate;\n      }\n      current = Reflect.get(current, \"cause\");\n    } catch {\n      return undefined;\n    }\n  }\n  return undefined;\n}\n\n/** Classify SQLSTATE without retaining the driver error or its properties. */\nfunction classifyDriverError(error: unknown): DatabasePluginError {\n  const code = sqlStateOf(error);\n  const category: DatabaseErrorCategory =\n    code === \"40001\" || code === \"40P01\" || code === \"57014\"\n      ? \"TRANSIENT\"\n      : code === \"42501\"\n        ? \"FORBIDDEN\"\n        : code?.startsWith(\"23\")\n          ? \"CONFLICT\"\n          : \"INTERNAL\";\n  logger.error(\n    \"Database driver error classified as %s (SQLSTATE %s)\",\n    category,\n    code ?? \"unknown\",\n  );\n  return new DatabasePluginError(category, \"runtime\");\n}\n\nasync function runDatabaseOperation<T>(\n  operation: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await operation();\n  } catch (error) {\n    if (error instanceof DatabasePluginError) throw error;\n    throw classifyDriverError(error);\n  }\n}\n\n/** Apply the adapter's column capability before rows reach cardinality checks. */\nfunction mutationRows(\n  table: AppKitTable,\n  rows: Row[],\n  access: ColumnAccess,\n): Row[] {\n  if (access === \"trusted\") return rows;\n  const names = publicColumnNames(table);\n  return rows.map((row) => {\n    const projected: Row = {};\n    for (const name of names) {\n      if (Object.hasOwn(row, name)) projected[name] = row[name];\n    }\n    return projected;\n  });\n}\n\n/** Resolve and validate the sole key once before a keyed operation executes. */\nfunction validatedPrimaryKey(\n  table: AppKitTable,\n  id: unknown,\n): { readonly meta: ColumnMeta; readonly value: IdValue } {\n  const meta = primaryKeyMeta(table);\n  const result = columnValueSchema(meta).safeParse(id);\n  if (!result.success) {\n    throw invalidDatabaseRequest(\n      `Invalid primary-key value for \"${table.$name}.${meta.columnName}\"`,\n    );\n  }\n  return { meta, value: result.data as IdValue };\n}\n\n// Enforce the single-row DataPath contract before results reach callers.\nfunction expectExactlyOne(rows: Row[]): Row {\n  if (rows.length !== 1) {\n    throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  }\n  return rows[0];\n}\n\nfunction expectZeroOrOne(rows: Row[]): Row | null {\n  if (rows.length > 1) {\n    throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  }\n  return rows[0] ?? null;\n}\n\n/** Adapt a Drizzle database to AppKit's internal execution port. */\nexport function createDrizzleDataPath(\n  db: DrizzleDb,\n  schema: Schema,\n  options: DrizzleDataPathOptions = {},\n): DataPath {\n  const columnAccess = options.columnAccess ?? \"public\";\n  const pgTable = (table: AppKitTable): PgTable => {\n    assertRegisteredTable(schema, table);\n    return table.$engine as unknown as PgTable;\n  };\n  const whereSql = (\n    table: AppKitTable,\n    where?: WhereClause,\n  ): SQL | undefined =>\n    where === undefined\n      ? undefined\n      : translateWhere(table, where, columnAccess);\n  /** Narrow by the primary key while preserving an accumulated predicate. */\n  const keyedWhere = (\n    table: AppKitTable,\n    primaryKey: ColumnMeta,\n    id: IdValue,\n    where?: WhereClause,\n  ): SQL | undefined =>\n    where === undefined\n      ? eq(columnOf(table, primaryKey.columnName), id)\n      : translateWhere(\n          table,\n          andWhere({ [primaryKey.columnName]: { eq: id } }, where),\n          columnAccess,\n        );\n\n  return {\n    async select(table, spec) {\n      return runDatabaseOperation(() =>\n        relationalQueryBuilder(db, schema, table).findMany({\n          where: whereSql(table, spec.where),\n          orderBy:\n            spec.order === undefined\n              ? undefined\n              : translateOrder(table, spec.order, columnAccess),\n          columns: selectedColumns(table, spec.select, columnAccess),\n          with:\n            spec.include === undefined\n              ? undefined\n              : translateInclude(table, schema, spec.include, columnAccess),\n          limit: limitOrDefault(spec.limit),\n          offset:\n            spec.offset === undefined ? undefined : validateOffset(spec.offset),\n        }),\n      );\n    },\n\n    async findOne(table, id, spec) {\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const primaryKeyPredicate = eq(\n        columnOf(table, primaryKey.columnName),\n        validatedId,\n      );\n      const additionalPredicate =\n        spec?.where === undefined\n          ? undefined\n          : translateWhere(table, spec.where, columnAccess);\n      const row = await runDatabaseOperation(() =>\n        relationalQueryBuilder(db, schema, table).findFirst({\n          where:\n            additionalPredicate === undefined\n              ? primaryKeyPredicate\n              : and(primaryKeyPredicate, additionalPredicate),\n          columns: selectedColumns(table, spec?.select, columnAccess),\n          with:\n            spec?.include === undefined\n              ? undefined\n              : translateInclude(table, schema, spec.include, columnAccess),\n        }),\n      );\n      return row ?? null;\n    },\n\n    async count(table, where) {\n      return runDatabaseOperation(() =>\n        db.$count(pgTable(table), whereSql(table, where)),\n      );\n    },\n\n    async insert(table, values) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"insert\");\n      const rows = await runDatabaseOperation(() =>\n        db\n          .insert(engineTable)\n          .values(parameters)\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectExactlyOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async update(table, id, values, where) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"update\");\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const rows = await runDatabaseOperation(() =>\n        db\n          .update(engineTable)\n          .set(parameters)\n          .where(keyedWhere(table, primaryKey, validatedId, where))\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectZeroOrOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async upsert(table, values, onConflict) {\n      const engineTable = pgTable(table);\n      const parameters = mutationValues(table, values, \"insert\");\n      const target = conflictTargetMeta(table, onConflict);\n      const updates = upsertUpdateValues(table, parameters, target.columnName);\n      const rows = await runDatabaseOperation(() =>\n        db\n          .insert(engineTable)\n          .values(parameters)\n          .onConflictDoUpdate({\n            target: columnOf(table, target.columnName),\n            set: updates,\n          })\n          .returning(returningColumns(table, columnAccess)),\n      );\n      return expectExactlyOne(mutationRows(table, rows as Row[], columnAccess));\n    },\n\n    async delete(table, id, where) {\n      const { meta: primaryKey, value: validatedId } = validatedPrimaryKey(\n        table,\n        id,\n      );\n      const rows = await runDatabaseOperation(() =>\n        db\n          .delete(pgTable(table))\n          .where(keyedWhere(table, primaryKey, validatedId, where))\n          .returning({ id: columnOf(table, primaryKey.columnName) }),\n      );\n      return expectZeroOrOne(rows as Row[]) !== null;\n    },\n\n    async raw<T = Row>(\n      strings: TemplateStringsArray,\n      ...values: unknown[]\n    ): Promise<T[]> {\n      // SQL wrappers carry structure; tagged interpolations may carry values only.\n      if (values.some((value) => isSQLWrapper(value))) {\n        throw invalidDatabaseRequest(\n          \"Tagged SQL interpolations must be parameter values\",\n        );\n      }\n      const result = await runDatabaseOperation(() =>\n        db.execute(sql(strings, ...values.map((value) => sql.param(value)))),\n      );\n      return ((result as { rows?: unknown }).rows ?? result) as T[];\n    },\n\n    async transaction<T>(callback: (tx: DataPath) => Promise<T>): Promise<T> {\n      let callbackFailed = false;\n      let callbackError: unknown;\n      try {\n        return await db.transaction(async (transaction) => {\n          try {\n            return await callback(\n              createDrizzleDataPath(\n                transaction as unknown as DrizzleDb,\n                schema,\n                { columnAccess },\n              ),\n            );\n          } catch (error) {\n            callbackFailed = true;\n            callbackError = error;\n            throw error;\n          }\n        });\n      } catch (error) {\n        // Callback errors are application-owned; sanitize only tx lifecycle errors.\n        if (\n          callbackFailed &&\n          (error === callbackError ||\n            callbackError instanceof DatabasePluginError)\n        ) {\n          throw callbackError;\n        }\n        if (error instanceof DatabasePluginError) throw error;\n        throw classifyDriverError(error);\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;AAqCA,MAAM,SAAS,aAAa,WAAW;;AAWvC,SAAgB,gBAAgB,MAAY,QAA2B;AAMrE,QAAO,QAAQ,MAAM,EAAE,QALyB,OAAO,OACrD,OAAO,OAAO,KAAK,EACnB,OAAO,SACP,qBAAqB,OAAO,QAAQ,CACrC,EAC8C,CAAC;;;AASlD,SAAS,sBAAsB,QAAgB,OAA0B;AACvE,KAAI,OAAO,QAAQ,MAAM,WAAW,MAClC,OAAM,uBAAuB,UAAU,MAAM,MAAM,qBAAqB;;AAI5E,SAAS,uBACP,IACA,QACA,OACwB;AACxB,uBAAsB,QAAQ,MAAM;CACpC,MAAM,QAAS,GAAG,MAChB,MAAM;AAER,KAAI,CAAC,MACH,OAAM,uBAAuB,UAAU,MAAM,MAAM,qBAAqB;AAE1E,QAAO;;AAGT,SAAS,gBACP,OACA,QACA,SAAuB,UACD;AACtB,QAAO,WAAW,SACd,eAAe,MAAM,GACrB,gBAAgB,OAAO,QAAQ,OAAO;;;AAc5C,SAAS,eACP,OACA,QACA,MACK;AACL,KAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CACxE,OAAM,uBAAuB,6CAA6C;AAE5E,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,EAAE;AACjD,MAAI,CAAC,OAAO,OAAO,MAAM,UAAU,IAAI,CACrC,OAAM,uBAAuB,mBAAmB,MAAM,MAAM,GAAG,IAAI,GAAG;AAExE,MAAI,aAAa,MAAM,CACrB,OAAM,uBACJ,8CACD;;CAML,MAAM,UAFJ,SAAS,WAAW,MAAM,gBAAgB,MAAM,eAE5B,UAAU,OAAO;AACvC,KAAI,CAAC,OAAO,QACV,OAAM,uBAAuB,oBAAoB,KAAK,SAAS;AAEjE,QAAO,OAAO;;;AAIhB,SAAS,mBACP,OACA,YACA,gBACK;CACL,MAAM,UAAe,EAAE;AACvB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,WAAW,EAAE;EACrD,MAAM,SAAS,MAAM,SAAS;AAC9B,MACE,OAAO,cACP,OAAO,mBACP,OAAO,eAAe,eAEtB;AAEF,UAAQ,OAAO;;AAEjB,KAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EAAG,QAAO;AAG5C,QAAO,GAAG,iBAAiB,SAAS,OAAO,eAAe,EAAE;;AAK9D,MAAM,kBAAkB;AAExB,SAAS,WAAW,OAAoC;CACtD,IAAI,UAAU;AACd,MAAK,IAAI,QAAQ,GAAG,QAAQ,iBAAiB,SAAS;AACpD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,MAAI;GACF,MAAM,YAAY,QAAQ,IAAI,SAAS,OAAO;AAE9C,OAAI,OAAO,cAAc,YAAY,gBAAgB,KAAK,UAAU,CAClE,QAAO;AAET,aAAU,QAAQ,IAAI,SAAS,QAAQ;UACjC;AACN;;;;;AAON,SAAS,oBAAoB,OAAqC;CAChE,MAAM,OAAO,WAAW,MAAM;CAC9B,MAAM,WACJ,SAAS,WAAW,SAAS,WAAW,SAAS,UAC7C,cACA,SAAS,UACP,cACA,MAAM,WAAW,KAAK,GACpB,aACA;AACV,QAAO,MACL,wDACA,UACA,QAAQ,UACT;AACD,QAAO,IAAI,oBAAoB,UAAU,UAAU;;AAGrD,eAAe,qBACb,WACY;AACZ,KAAI;AACF,SAAO,MAAM,WAAW;UACjB,OAAO;AACd,MAAI,iBAAiB,oBAAqB,OAAM;AAChD,QAAM,oBAAoB,MAAM;;;;AAKpC,SAAS,aACP,OACA,MACA,QACO;AACP,KAAI,WAAW,UAAW,QAAO;CACjC,MAAM,QAAQ,kBAAkB,MAAM;AACtC,QAAO,KAAK,KAAK,QAAQ;EACvB,MAAM,YAAiB,EAAE;AACzB,OAAK,MAAM,QAAQ,MACjB,KAAI,OAAO,OAAO,KAAK,KAAK,CAAE,WAAU,QAAQ,IAAI;AAEtD,SAAO;GACP;;;AAIJ,SAAS,oBACP,OACA,IACwD;CACxD,MAAM,OAAO,eAAe,MAAM;CAClC,MAAM,SAAS,kBAAkB,KAAK,CAAC,UAAU,GAAG;AACpD,KAAI,CAAC,OAAO,QACV,OAAM,uBACJ,kCAAkC,MAAM,MAAM,GAAG,KAAK,WAAW,GAClE;AAEH,QAAO;EAAE;EAAM,OAAO,OAAO;EAAiB;;AAIhD,SAAS,iBAAiB,MAAkB;AAC1C,KAAI,KAAK,WAAW,EAClB,OAAM,IAAI,oBAAoB,YAAY,UAAU;AAEtD,QAAO,KAAK;;AAGd,SAAS,gBAAgB,MAAyB;AAChD,KAAI,KAAK,SAAS,EAChB,OAAM,IAAI,oBAAoB,YAAY,UAAU;AAEtD,QAAO,KAAK,MAAM;;;AAIpB,SAAgB,sBACd,IACA,QACA,UAAkC,EAAE,EAC1B;CACV,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,WAAW,UAAgC;AAC/C,wBAAsB,QAAQ,MAAM;AACpC,SAAO,MAAM;;CAEf,MAAM,YACJ,OACA,UAEA,UAAU,SACN,SACA,eAAe,OAAO,OAAO,aAAa;;CAEhD,MAAM,cACJ,OACA,YACA,IACA,UAEA,UAAU,SACN,GAAG,SAAS,OAAO,WAAW,WAAW,EAAE,GAAG,GAC9C,eACE,OACA,SAAS,GAAG,WAAW,aAAa,EAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EACxD,aACD;AAEP,QAAO;EACL,MAAM,OAAO,OAAO,MAAM;AACxB,UAAO,2BACL,uBAAuB,IAAI,QAAQ,MAAM,CAAC,SAAS;IACjD,OAAO,SAAS,OAAO,KAAK,MAAM;IAClC,SACE,KAAK,UAAU,SACX,SACA,eAAe,OAAO,KAAK,OAAO,aAAa;IACrD,SAAS,gBAAgB,OAAO,KAAK,QAAQ,aAAa;IAC1D,MACE,KAAK,YAAY,SACb,SACA,iBAAiB,OAAO,QAAQ,KAAK,SAAS,aAAa;IACjE,OAAO,eAAe,KAAK,MAAM;IACjC,QACE,KAAK,WAAW,SAAY,SAAY,eAAe,KAAK,OAAO;IACtE,CAAC,CACH;;EAGH,MAAM,QAAQ,OAAO,IAAI,MAAM;GAC7B,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;GACD,MAAM,sBAAsB,GAC1B,SAAS,OAAO,WAAW,WAAW,EACtC,YACD;GACD,MAAM,sBACJ,MAAM,UAAU,SACZ,SACA,eAAe,OAAO,KAAK,OAAO,aAAa;AAcrD,UAbY,MAAM,2BAChB,uBAAuB,IAAI,QAAQ,MAAM,CAAC,UAAU;IAClD,OACE,wBAAwB,SACpB,sBACA,IAAI,qBAAqB,oBAAoB;IACnD,SAAS,gBAAgB,OAAO,MAAM,QAAQ,aAAa;IAC3D,MACE,MAAM,YAAY,SACd,SACA,iBAAiB,OAAO,QAAQ,KAAK,SAAS,aAAa;IAClE,CAAC,CACH,IACa;;EAGhB,MAAM,MAAM,OAAO,OAAO;AACxB,UAAO,2BACL,GAAG,OAAO,QAAQ,MAAM,EAAE,SAAS,OAAO,MAAM,CAAC,CAClD;;EAGH,MAAM,OAAO,OAAO,QAAQ;GAC1B,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;AAO1D,UAAO,iBAAiB,aAAa,OANxB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,OAAO,WAAW,CAClB,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EAC0D,aAAa,CAAC;;EAG3E,MAAM,OAAO,OAAO,IAAI,QAAQ,OAAO;GACrC,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;GAC1D,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;AAQD,UAAO,gBAAgB,aAAa,OAPvB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,IAAI,WAAW,CACf,MAAM,WAAW,OAAO,YAAY,aAAa,MAAM,CAAC,CACxD,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EACyD,aAAa,CAAC;;EAG1E,MAAM,OAAO,OAAO,QAAQ,YAAY;GACtC,MAAM,cAAc,QAAQ,MAAM;GAClC,MAAM,aAAa,eAAe,OAAO,QAAQ,SAAS;GAC1D,MAAM,SAAS,mBAAmB,OAAO,WAAW;GACpD,MAAM,UAAU,mBAAmB,OAAO,YAAY,OAAO,WAAW;AAWxE,UAAO,iBAAiB,aAAa,OAVxB,MAAM,2BACjB,GACG,OAAO,YAAY,CACnB,OAAO,WAAW,CAClB,mBAAmB;IAClB,QAAQ,SAAS,OAAO,OAAO,WAAW;IAC1C,KAAK;IACN,CAAC,CACD,UAAU,iBAAiB,OAAO,aAAa,CAAC,CACpD,EAC0D,aAAa,CAAC;;EAG3E,MAAM,OAAO,OAAO,IAAI,OAAO;GAC7B,MAAM,EAAE,MAAM,YAAY,OAAO,gBAAgB,oBAC/C,OACA,GACD;AAOD,UAAO,gBANM,MAAM,2BACjB,GACG,OAAO,QAAQ,MAAM,CAAC,CACtB,MAAM,WAAW,OAAO,YAAY,aAAa,MAAM,CAAC,CACxD,UAAU,EAAE,IAAI,SAAS,OAAO,WAAW,WAAW,EAAE,CAAC,CAC7D,CACoC,KAAK;;EAG5C,MAAM,IACJ,SACA,GAAG,QACW;AAEd,OAAI,OAAO,MAAM,UAAU,aAAa,MAAM,CAAC,CAC7C,OAAM,uBACJ,qDACD;GAEH,MAAM,SAAS,MAAM,2BACnB,GAAG,QAAQ,IAAI,SAAS,GAAG,OAAO,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,CACrE;AACD,UAAS,OAA8B,QAAQ;;EAGjD,MAAM,YAAe,UAAoD;GACvE,IAAI,iBAAiB;GACrB,IAAI;AACJ,OAAI;AACF,WAAO,MAAM,GAAG,YAAY,OAAO,gBAAgB;AACjD,SAAI;AACF,aAAO,MAAM,SACX,sBACE,aACA,QACA,EAAE,cAAc,CACjB,CACF;cACM,OAAO;AACd,uBAAiB;AACjB,sBAAgB;AAChB,YAAM;;MAER;YACK,OAAO;AAEd,QACE,mBACC,UAAU,iBACT,yBAAyB,qBAE3B,OAAM;AAER,QAAI,iBAAiB,oBAAqB,OAAM;AAChD,UAAM,oBAAoB,MAAM;;;EAGrC"}

package/dist/database/schema-builder/define-schema.d.ts

@@ -8,7 +8,7 @@ interface SchemaBuilderContext {
 }
 /**
  * Compile one declared schema. The returned type keeps the table names the
- * builder returned, so `crudRoutes` and `hooks` can name only real tables.
+ * builder returned, so `api.tables` and `hooks` can name only real tables.
  */
 declare function defineSchema<TTables extends Record<string, AppKitTable>>(builder: (context: SchemaBuilderContext) => TTables, options?: DefineSchemaOptions): Schema<Extract<keyof TTables, string>>;
 //#endregion

package/dist/database/schema-builder/define-schema.js

@@ -186,7 +186,7 @@ function assertFinalizedSchema(value) {
 }
 /**
 * Compile one declared schema. The returned type keeps the table names the
-* builder returned, so `crudRoutes` and `hooks` can name only real tables.
+* builder returned, so `api.tables` and `hooks` can name only real tables.
 */
 function defineSchema(builder, options) {
 	const schemaName = options?.schemaName ?? "public";

package/dist/database/schema-builder/define-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"define-schema.js","names":[],"sources":["../../../src/database/schema-builder/define-schema.ts"],"sourcesContent":["import { ColumnBuilder, enumColumn, validateLiteralDefaults } from \"./columns\";\nimport { buildEngineTables } from \"./engine/tables\";\nimport { resolveForeignKeys } from \"./fk\";\nimport { buildRelations } from \"./relations\";\nimport {\n  type AppKitTable,\n  type ColumnMeta,\n  type ColumnRef,\n  type DefineSchemaOptions,\n  type MutableColumnMeta,\n  type ResolvedRelation,\n  type Schema,\n  SchemaBuildError,\n  type TableHandle,\n} from \"./types\";\nimport { deriveInsertSchema, deriveUpdateSchema } from \"./validators\";\n\ninterface RawTable {\n  readonly name: string;\n  readonly metas: Record<string, MutableColumnMeta>;\n  readonly handle: Record<string, ColumnRef>;\n}\n\ninterface FinalizedTableCandidate {\n  readonly columns: Readonly<Record<string, ColumnMeta>>;\n  readonly engine: Schema[\"$engine\"][string];\n  readonly relations: readonly ResolvedRelation[];\n  readonly insertSchema: unknown;\n  readonly updateSchema: unknown;\n}\n\ninterface DeclarationState {\n  readonly raw: Map<string, RawTable>;\n  readonly handleNames: Map<object, string>;\n}\n\nexport interface SchemaBuilderContext {\n  table<C extends Record<string, ColumnBuilder>>(\n    name: string,\n    columns: C,\n  ): TableHandle<C>;\n  enum(name: string, values: readonly string[]): ColumnBuilder;\n}\n\nconst RESERVED_OBJECT_KEYS = new Set([\"__proto__\", \"prototype\", \"constructor\"]);\nconst RESERVED_DATABASE_EXPORT_KEYS = new Set([\"sql\", \"transaction\"]);\n// A global symbol lets typegen recognize schemas loaded through another AppKit instance.\nconst FINALIZED_SCHEMA = Symbol.for(\"@databricks/appkit.database.schema\");\nconst TABLE_METADATA_KEYS = [\n  \"$name\",\n  \"$schemaName\",\n  \"$columns\",\n  \"$engine\",\n  \"$relations\",\n  \"$insertSchema\",\n  \"$updateSchema\",\n] as const;\n\nfunction nullRecord<T>(): Record<string, T> {\n  return Object.create(null) as Record<string, T>;\n}\n\nfunction assertRecord(value: unknown, label: string): asserts value is object {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    throw new SchemaBuildError(`${label} must be an object`);\n  }\n}\n\nfunction assertName(value: string, label: string): void {\n  if (!value || RESERVED_OBJECT_KEYS.has(value)) {\n    throw new SchemaBuildError(`${label} \"${value}\" is reserved`);\n  }\n}\n\nfunction assertTableName(value: string): void {\n  assertName(value, \"Table name\");\n  if (RESERVED_DATABASE_EXPORT_KEYS.has(value)) {\n    throw new SchemaBuildError(`Table name \"${value}\" is reserved`);\n  }\n}\n\nfunction finalizeColumn(meta: MutableColumnMeta): ColumnMeta {\n  if (!meta.engineColumn) {\n    throw new SchemaBuildError(\n      `Engine column \"${meta.columnName}\" is missing during finalization`,\n    );\n  }\n  const { fkRef: _fkRef, ...published } = meta;\n  return Object.freeze({\n    ...published,\n    enumValues: meta.enumValues\n      ? Object.freeze([...meta.enumValues])\n      : undefined,\n    fk: meta.fk ? Object.freeze({ ...meta.fk }) : undefined,\n    engineColumn: meta.engineColumn,\n  }) as ColumnMeta;\n}\n\nfunction finalizeRelations(\n  relations: readonly ResolvedRelation[],\n): readonly ResolvedRelation[] {\n  return Object.freeze(\n    relations.map((relation) => Object.freeze({ ...relation })),\n  );\n}\n\n/** Clone builders into per-table metadata and create stable column handles. */\nfunction declareTable<C extends Record<string, ColumnBuilder>>(\n  state: DeclarationState,\n  name: string,\n  columns: C,\n): TableHandle<C> {\n  assertTableName(name);\n  if (state.raw.has(name)) {\n    throw new SchemaBuildError(`Duplicate table \"${name}\"`);\n  }\n  assertRecord(columns, `Columns for table \"${name}\"`);\n\n  const metas = nullRecord<MutableColumnMeta>();\n  const handle = Object.create(null) as Record<string, ColumnRef>;\n  for (const [key, column] of Object.entries(columns)) {\n    assertName(key, `Column name on table \"${name}\"`);\n    if (key.startsWith(\"$\") || key === \"and\" || key === \"or\") {\n      throw new SchemaBuildError(\n        `Column \"${name}.${key}\" collides with AppKit runtime metadata`,\n      );\n    }\n    if (!(column instanceof ColumnBuilder)) {\n      throw new SchemaBuildError(\n        `Column \"${name}.${key}\" was not created by an AppKit column builder`,\n      );\n    }\n\n    const meta = column._cloneMeta();\n    meta.name = key;\n    meta.columnName = key;\n    metas[key] = meta;\n\n    const reference: ColumnRef = Object.freeze({\n      __isColumnRef: true,\n      tableName: name,\n      columnName: key,\n    });\n    Object.defineProperty(handle, key, {\n      enumerable: true,\n      value: reference,\n    });\n  }\n\n  state.raw.set(name, { name, metas, handle });\n  state.handleNames.set(handle, name);\n  return handle as unknown as TableHandle<C>;\n}\n\nfunction createBuilderContext(state: DeclarationState): SchemaBuilderContext {\n  return {\n    table(name, columns) {\n      return declareTable(state, name, columns);\n    },\n    enum(name, values) {\n      return enumColumn(name, values);\n    },\n  };\n}\n\n/** Require every exact table handle once under its declared identity. */\nfunction validateReturnedTables(\n  returned: unknown,\n  state: DeclarationState,\n): void {\n  assertRecord(returned, \"defineSchema() return value\");\n  const returnedHandles = new Set<object>();\n  for (const [key, value] of Object.entries(returned)) {\n    const name =\n      value !== null && typeof value === \"object\"\n        ? state.handleNames.get(value)\n        : undefined;\n    if (!name) {\n      throw new SchemaBuildError(\n        `defineSchema returned a value for \"${key}\" that was not produced by ctx.table()`,\n      );\n    }\n    if (key !== name) {\n      throw new SchemaBuildError(\n        `defineSchema returned table \"${name}\" under key \"${key}\"; aliases are not supported`,\n      );\n    }\n    if (returnedHandles.has(value)) {\n      throw new SchemaBuildError(`Table \"${name}\" was returned more than once`);\n    }\n    returnedHandles.add(value);\n  }\n  if (returnedHandles.size !== state.raw.size) {\n    const omitted = [...state.raw.values()]\n      .filter((table) => !returnedHandles.has(table.handle))\n      .map((table) => table.name);\n    throw new SchemaBuildError(\n      `defineSchema omitted declared table${omitted.length === 1 ? \"\" : \"s\"}: ${omitted.join(\", \")}`,\n    );\n  }\n}\n\n/** Detect declaration-handle tampering before metadata publication. */\nfunction validateHandles(raw: ReadonlyMap<string, RawTable>): void {\n  for (const table of raw.values()) {\n    const ownKeys = Reflect.ownKeys(table.handle);\n    const hasOnlyDeclaredColumns =\n      ownKeys.length === Object.keys(table.metas).length &&\n      ownKeys.every(\n        (key) => typeof key === \"string\" && Object.hasOwn(table.metas, key),\n      );\n    const hasMetadataCollision = TABLE_METADATA_KEYS.some((key) =>\n      Object.hasOwn(table.handle, key),\n    );\n    if (\n      Object.getPrototypeOf(table.handle) !== null ||\n      !Object.isExtensible(table.handle) ||\n      !hasOnlyDeclaredColumns ||\n      hasMetadataCollision\n    ) {\n      throw new SchemaBuildError(\n        `Table handle \"${table.name}\" was modified during schema declaration`,\n      );\n    }\n  }\n}\n\n/** Reject composite primary keys, which keyed operations cannot represent. */\nfunction validatePrimaryKeys(raw: ReadonlyMap<string, RawTable>): void {\n  for (const table of raw.values()) {\n    const primaryKeys = Object.values(table.metas).filter(\n      (meta) => meta.primaryKey,\n    );\n    if (primaryKeys.length > 1) {\n      throw new SchemaBuildError(\n        `Table \"${table.name}\" declares multiple primary-key columns; composite primary keys are not supported`,\n      );\n    }\n  }\n}\n\n/** Reject table names that collide with generated Drizzle relation keys. */\nfunction validateRelationKeys(\n  raw: ReadonlyMap<string, RawTable>,\n  relations: ReadonlyMap<string, readonly ResolvedRelation[]>,\n): void {\n  for (const [name, tableRelations] of relations) {\n    if (tableRelations.length > 0 && raw.has(`${name}Relations`)) {\n      throw new SchemaBuildError(\n        `Table \"${name}Relations\" collides with generated relation metadata for \"${name}\"`,\n      );\n    }\n  }\n}\n\n/** Prepare every engine object and validator without mutating handles. */\nfunction prepareTables(\n  raw: ReadonlyMap<string, RawTable>,\n  schemaName: string,\n  relations: ReadonlyMap<string, readonly ResolvedRelation[]>,\n): Map<string, FinalizedTableCandidate> {\n  const built = buildEngineTables(raw.values(), schemaName);\n  const candidates = new Map<string, FinalizedTableCandidate>();\n  for (const table of raw.values()) {\n    const builtTable = built.get(table.name);\n    if (!builtTable) {\n      throw new SchemaBuildError(\n        `Engine table \"${table.name}\" was not constructed`,\n      );\n    }\n    const columns = nullRecord<ColumnMeta>();\n    for (const [key, meta] of Object.entries(builtTable.columns)) {\n      columns[key] = finalizeColumn(meta);\n    }\n    Object.freeze(columns);\n    const tableRelations = finalizeRelations(relations.get(table.name) ?? []);\n    const validatorTable = { $columns: columns } as AppKitTable;\n    candidates.set(table.name, {\n      columns,\n      engine: builtTable.engine,\n      relations: tableRelations,\n      insertSchema: deriveInsertSchema(validatorTable),\n      updateSchema: deriveUpdateSchema(validatorTable),\n    });\n  }\n  return candidates;\n}\n\n/** Atomically publish prepared metadata as the final schema transition. */\nfunction publishSchema(\n  raw: ReadonlyMap<string, RawTable>,\n  candidates: ReadonlyMap<string, FinalizedTableCandidate>,\n  schemaName: string,\n): Schema {\n  const publications = [...raw.values()].map((table) => {\n    const candidate = candidates.get(table.name);\n    if (!candidate) {\n      throw new SchemaBuildError(\n        `Table \"${table.name}\" was not prepared for finalization`,\n      );\n    }\n    return { table, candidate };\n  });\n\n  const tables = nullRecord<AppKitTable>();\n  const engine = nullRecord<Schema[\"$engine\"][string]>();\n  for (const { table, candidate } of publications) {\n    Object.defineProperties(table.handle, {\n      $name: { value: table.name },\n      $schemaName: { value: schemaName },\n      $columns: { value: candidate.columns },\n      $engine: { value: candidate.engine },\n      $relations: { value: candidate.relations },\n      $insertSchema: { value: candidate.insertSchema },\n      $updateSchema: { value: candidate.updateSchema },\n    });\n    const finalized = Object.freeze(table.handle) as unknown as AppKitTable;\n    tables[table.name] = finalized;\n    engine[table.name] = candidate.engine;\n  }\n\n  const schema = {\n    $schemaName: schemaName,\n    $tables: Object.freeze(tables),\n    $engine: Object.freeze(engine),\n  };\n  Object.defineProperty(schema, FINALIZED_SCHEMA, { value: true });\n  return Object.freeze(schema);\n}\n\n/** @internal Reject values that were not finalized by `defineSchema()`. */\nexport function assertFinalizedSchema(value: unknown): asserts value is Schema {\n  if (\n    value === null ||\n    typeof value !== \"object\" ||\n    (value as Record<PropertyKey, unknown>)[FINALIZED_SCHEMA] !== true\n  ) {\n    throw new TypeError(\"Expected a finalized AppKit database schema\");\n  }\n}\n\n/**\n * Compile one declared schema. The returned type keeps the table names the\n * builder returned, so `crudRoutes` and `hooks` can name only real tables.\n */\nexport function defineSchema<TTables extends Record<string, AppKitTable>>(\n  builder: (context: SchemaBuilderContext) => TTables,\n  options?: DefineSchemaOptions,\n): Schema<Extract<keyof TTables, string>> {\n  const schemaName = options?.schemaName ?? \"public\";\n  if (!schemaName) throw new SchemaBuildError(\"Schema name cannot be empty\");\n\n  const state: DeclarationState = {\n    raw: new Map(),\n    handleNames: new Map(),\n  };\n  const returned = builder(createBuilderContext(state));\n\n  validateReturnedTables(returned, state);\n  validateHandles(state.raw);\n  validatePrimaryKeys(state.raw);\n  resolveForeignKeys(state.raw);\n  // FK literals are checked against the inherited target storage, not the placeholder.\n  validateLiteralDefaults(state.raw.values());\n\n  const relations = buildRelations(state.raw);\n  validateRelationKeys(state.raw, relations);\n  const candidates = prepareTables(state.raw, schemaName, relations);\n  return publishSchema(state.raw, candidates, schemaName);\n}\n"],"mappings":";;;;;;;;AA4CA,MAAM,uBAAuB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAc,CAAC;AAC/E,MAAM,gCAAgC,IAAI,IAAI,CAAC,OAAO,cAAc,CAAC;AAErE,MAAM,mBAAmB,OAAO,IAAI,qCAAqC;AACzE,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,SAAS,aAAmC;AAC1C,QAAO,OAAO,OAAO,KAAK;;AAG5B,SAAS,aAAa,OAAgB,OAAwC;AAC5E,KAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACrE,OAAM,IAAI,iBAAiB,GAAG,MAAM,oBAAoB;;AAI5D,SAAS,WAAW,OAAe,OAAqB;AACtD,KAAI,CAAC,SAAS,qBAAqB,IAAI,MAAM,CAC3C,OAAM,IAAI,iBAAiB,GAAG,MAAM,IAAI,MAAM,eAAe;;AAIjE,SAAS,gBAAgB,OAAqB;AAC5C,YAAW,OAAO,aAAa;AAC/B,KAAI,8BAA8B,IAAI,MAAM,CAC1C,OAAM,IAAI,iBAAiB,eAAe,MAAM,eAAe;;AAInE,SAAS,eAAe,MAAqC;AAC3D,KAAI,CAAC,KAAK,aACR,OAAM,IAAI,iBACR,kBAAkB,KAAK,WAAW,kCACnC;CAEH,MAAM,EAAE,OAAO,QAAQ,GAAG,cAAc;AACxC,QAAO,OAAO,OAAO;EACnB,GAAG;EACH,YAAY,KAAK,aACb,OAAO,OAAO,CAAC,GAAG,KAAK,WAAW,CAAC,GACnC;EACJ,IAAI,KAAK,KAAK,OAAO,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG;EAC9C,cAAc,KAAK;EACpB,CAAC;;AAGJ,SAAS,kBACP,WAC6B;AAC7B,QAAO,OAAO,OACZ,UAAU,KAAK,aAAa,OAAO,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAC5D;;;AAIH,SAAS,aACP,OACA,MACA,SACgB;AAChB,iBAAgB,KAAK;AACrB,KAAI,MAAM,IAAI,IAAI,KAAK,CACrB,OAAM,IAAI,iBAAiB,oBAAoB,KAAK,GAAG;AAEzD,cAAa,SAAS,sBAAsB,KAAK,GAAG;CAEpD,MAAM,QAAQ,YAA+B;CAC7C,MAAM,SAAS,OAAO,OAAO,KAAK;AAClC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,QAAQ,EAAE;AACnD,aAAW,KAAK,yBAAyB,KAAK,GAAG;AACjD,MAAI,IAAI,WAAW,IAAI,IAAI,QAAQ,SAAS,QAAQ,KAClD,OAAM,IAAI,iBACR,WAAW,KAAK,GAAG,IAAI,yCACxB;AAEH,MAAI,EAAE,kBAAkB,eACtB,OAAM,IAAI,iBACR,WAAW,KAAK,GAAG,IAAI,+CACxB;EAGH,MAAM,OAAO,OAAO,YAAY;AAChC,OAAK,OAAO;AACZ,OAAK,aAAa;AAClB,QAAM,OAAO;EAEb,MAAM,YAAuB,OAAO,OAAO;GACzC,eAAe;GACf,WAAW;GACX,YAAY;GACb,CAAC;AACF,SAAO,eAAe,QAAQ,KAAK;GACjC,YAAY;GACZ,OAAO;GACR,CAAC;;AAGJ,OAAM,IAAI,IAAI,MAAM;EAAE;EAAM;EAAO;EAAQ,CAAC;AAC5C,OAAM,YAAY,IAAI,QAAQ,KAAK;AACnC,QAAO;;AAGT,SAAS,qBAAqB,OAA+C;AAC3E,QAAO;EACL,MAAM,MAAM,SAAS;AACnB,UAAO,aAAa,OAAO,MAAM,QAAQ;;EAE3C,KAAK,MAAM,QAAQ;AACjB,UAAO,WAAW,MAAM,OAAO;;EAElC;;;AAIH,SAAS,uBACP,UACA,OACM;AACN,cAAa,UAAU,8BAA8B;CACrD,MAAM,kCAAkB,IAAI,KAAa;AACzC,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;EACnD,MAAM,OACJ,UAAU,QAAQ,OAAO,UAAU,WAC/B,MAAM,YAAY,IAAI,MAAM,GAC5B;AACN,MAAI,CAAC,KACH,OAAM,IAAI,iBACR,sCAAsC,IAAI,wCAC3C;AAEH,MAAI,QAAQ,KACV,OAAM,IAAI,iBACR,gCAAgC,KAAK,eAAe,IAAI,8BACzD;AAEH,MAAI,gBAAgB,IAAI,MAAM,CAC5B,OAAM,IAAI,iBAAiB,UAAU,KAAK,+BAA+B;AAE3E,kBAAgB,IAAI,MAAM;;AAE5B,KAAI,gBAAgB,SAAS,MAAM,IAAI,MAAM;EAC3C,MAAM,UAAU,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,CACpC,QAAQ,UAAU,CAAC,gBAAgB,IAAI,MAAM,OAAO,CAAC,CACrD,KAAK,UAAU,MAAM,KAAK;AAC7B,QAAM,IAAI,iBACR,sCAAsC,QAAQ,WAAW,IAAI,KAAK,IAAI,IAAI,QAAQ,KAAK,KAAK,GAC7F;;;;AAKL,SAAS,gBAAgB,KAA0C;AACjE,MAAK,MAAM,SAAS,IAAI,QAAQ,EAAE;EAChC,MAAM,UAAU,QAAQ,QAAQ,MAAM,OAAO;EAC7C,MAAM,yBACJ,QAAQ,WAAW,OAAO,KAAK,MAAM,MAAM,CAAC,UAC5C,QAAQ,OACL,QAAQ,OAAO,QAAQ,YAAY,OAAO,OAAO,MAAM,OAAO,IAAI,CACpE;EACH,MAAM,uBAAuB,oBAAoB,MAAM,QACrD,OAAO,OAAO,MAAM,QAAQ,IAAI,CACjC;AACD,MACE,OAAO,eAAe,MAAM,OAAO,KAAK,QACxC,CAAC,OAAO,aAAa,MAAM,OAAO,IAClC,CAAC,0BACD,qBAEA,OAAM,IAAI,iBACR,iBAAiB,MAAM,KAAK,0CAC7B;;;;AAMP,SAAS,oBAAoB,KAA0C;AACrE,MAAK,MAAM,SAAS,IAAI,QAAQ,CAI9B,KAHoB,OAAO,OAAO,MAAM,MAAM,CAAC,QAC5C,SAAS,KAAK,WAChB,CACe,SAAS,EACvB,OAAM,IAAI,iBACR,UAAU,MAAM,KAAK,mFACtB;;;AAMP,SAAS,qBACP,KACA,WACM;AACN,MAAK,MAAM,CAAC,MAAM,mBAAmB,UACnC,KAAI,eAAe,SAAS,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,CAC1D,OAAM,IAAI,iBACR,UAAU,KAAK,4DAA4D,KAAK,GACjF;;;AAMP,SAAS,cACP,KACA,YACA,WACsC;CACtC,MAAM,QAAQ,kBAAkB,IAAI,QAAQ,EAAE,WAAW;CACzD,MAAM,6BAAa,IAAI,KAAsC;AAC7D,MAAK,MAAM,SAAS,IAAI,QAAQ,EAAE;EAChC,MAAM,aAAa,MAAM,IAAI,MAAM,KAAK;AACxC,MAAI,CAAC,WACH,OAAM,IAAI,iBACR,iBAAiB,MAAM,KAAK,uBAC7B;EAEH,MAAM,UAAU,YAAwB;AACxC,OAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,WAAW,QAAQ,CAC1D,SAAQ,OAAO,eAAe,KAAK;AAErC,SAAO,OAAO,QAAQ;EACtB,MAAM,iBAAiB,kBAAkB,UAAU,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;EACzE,MAAM,iBAAiB,EAAE,UAAU,SAAS;AAC5C,aAAW,IAAI,MAAM,MAAM;GACzB;GACA,QAAQ,WAAW;GACnB,WAAW;GACX,cAAc,mBAAmB,eAAe;GAChD,cAAc,mBAAmB,eAAe;GACjD,CAAC;;AAEJ,QAAO;;;AAIT,SAAS,cACP,KACA,YACA,YACQ;CACR,MAAM,eAAe,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,UAAU;EACpD,MAAM,YAAY,WAAW,IAAI,MAAM,KAAK;AAC5C,MAAI,CAAC,UACH,OAAM,IAAI,iBACR,UAAU,MAAM,KAAK,qCACtB;AAEH,SAAO;GAAE;GAAO;GAAW;GAC3B;CAEF,MAAM,SAAS,YAAyB;CACxC,MAAM,SAAS,YAAuC;AACtD,MAAK,MAAM,EAAE,OAAO,eAAe,cAAc;AAC/C,SAAO,iBAAiB,MAAM,QAAQ;GACpC,OAAO,EAAE,OAAO,MAAM,MAAM;GAC5B,aAAa,EAAE,OAAO,YAAY;GAClC,UAAU,EAAE,OAAO,UAAU,SAAS;GACtC,SAAS,EAAE,OAAO,UAAU,QAAQ;GACpC,YAAY,EAAE,OAAO,UAAU,WAAW;GAC1C,eAAe,EAAE,OAAO,UAAU,cAAc;GAChD,eAAe,EAAE,OAAO,UAAU,cAAc;GACjD,CAAC;EACF,MAAM,YAAY,OAAO,OAAO,MAAM,OAAO;AAC7C,SAAO,MAAM,QAAQ;AACrB,SAAO,MAAM,QAAQ,UAAU;;CAGjC,MAAM,SAAS;EACb,aAAa;EACb,SAAS,OAAO,OAAO,OAAO;EAC9B,SAAS,OAAO,OAAO,OAAO;EAC/B;AACD,QAAO,eAAe,QAAQ,kBAAkB,EAAE,OAAO,MAAM,CAAC;AAChE,QAAO,OAAO,OAAO,OAAO;;;AAI9B,SAAgB,sBAAsB,OAAyC;AAC7E,KACE,UAAU,QACV,OAAO,UAAU,YAChB,MAAuC,sBAAsB,KAE9D,OAAM,IAAI,UAAU,8CAA8C;;;;;;AAQtE,SAAgB,aACd,SACA,SACwC;CACxC,MAAM,aAAa,SAAS,cAAc;AAC1C,KAAI,CAAC,WAAY,OAAM,IAAI,iBAAiB,8BAA8B;CAE1E,MAAM,QAA0B;EAC9B,qBAAK,IAAI,KAAK;EACd,6BAAa,IAAI,KAAK;EACvB;AAGD,wBAFiB,QAAQ,qBAAqB,MAAM,CAAC,EAEpB,MAAM;AACvC,iBAAgB,MAAM,IAAI;AAC1B,qBAAoB,MAAM,IAAI;AAC9B,oBAAmB,MAAM,IAAI;AAE7B,yBAAwB,MAAM,IAAI,QAAQ,CAAC;CAE3C,MAAM,YAAY,eAAe,MAAM,IAAI;AAC3C,sBAAqB,MAAM,KAAK,UAAU;CAC1C,MAAM,aAAa,cAAc,MAAM,KAAK,YAAY,UAAU;AAClE,QAAO,cAAc,MAAM,KAAK,YAAY,WAAW"}
+{"version":3,"file":"define-schema.js","names":[],"sources":["../../../src/database/schema-builder/define-schema.ts"],"sourcesContent":["import { ColumnBuilder, enumColumn, validateLiteralDefaults } from \"./columns\";\nimport { buildEngineTables } from \"./engine/tables\";\nimport { resolveForeignKeys } from \"./fk\";\nimport { buildRelations } from \"./relations\";\nimport {\n  type AppKitTable,\n  type ColumnMeta,\n  type ColumnRef,\n  type DefineSchemaOptions,\n  type MutableColumnMeta,\n  type ResolvedRelation,\n  type Schema,\n  SchemaBuildError,\n  type TableHandle,\n} from \"./types\";\nimport { deriveInsertSchema, deriveUpdateSchema } from \"./validators\";\n\ninterface RawTable {\n  readonly name: string;\n  readonly metas: Record<string, MutableColumnMeta>;\n  readonly handle: Record<string, ColumnRef>;\n}\n\ninterface FinalizedTableCandidate {\n  readonly columns: Readonly<Record<string, ColumnMeta>>;\n  readonly engine: Schema[\"$engine\"][string];\n  readonly relations: readonly ResolvedRelation[];\n  readonly insertSchema: unknown;\n  readonly updateSchema: unknown;\n}\n\ninterface DeclarationState {\n  readonly raw: Map<string, RawTable>;\n  readonly handleNames: Map<object, string>;\n}\n\nexport interface SchemaBuilderContext {\n  table<C extends Record<string, ColumnBuilder>>(\n    name: string,\n    columns: C,\n  ): TableHandle<C>;\n  enum(name: string, values: readonly string[]): ColumnBuilder;\n}\n\nconst RESERVED_OBJECT_KEYS = new Set([\"__proto__\", \"prototype\", \"constructor\"]);\nconst RESERVED_DATABASE_EXPORT_KEYS = new Set([\"sql\", \"transaction\"]);\n// A global symbol lets typegen recognize schemas loaded through another AppKit instance.\nconst FINALIZED_SCHEMA = Symbol.for(\"@databricks/appkit.database.schema\");\nconst TABLE_METADATA_KEYS = [\n  \"$name\",\n  \"$schemaName\",\n  \"$columns\",\n  \"$engine\",\n  \"$relations\",\n  \"$insertSchema\",\n  \"$updateSchema\",\n] as const;\n\nfunction nullRecord<T>(): Record<string, T> {\n  return Object.create(null) as Record<string, T>;\n}\n\nfunction assertRecord(value: unknown, label: string): asserts value is object {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    throw new SchemaBuildError(`${label} must be an object`);\n  }\n}\n\nfunction assertName(value: string, label: string): void {\n  if (!value || RESERVED_OBJECT_KEYS.has(value)) {\n    throw new SchemaBuildError(`${label} \"${value}\" is reserved`);\n  }\n}\n\nfunction assertTableName(value: string): void {\n  assertName(value, \"Table name\");\n  if (RESERVED_DATABASE_EXPORT_KEYS.has(value)) {\n    throw new SchemaBuildError(`Table name \"${value}\" is reserved`);\n  }\n}\n\nfunction finalizeColumn(meta: MutableColumnMeta): ColumnMeta {\n  if (!meta.engineColumn) {\n    throw new SchemaBuildError(\n      `Engine column \"${meta.columnName}\" is missing during finalization`,\n    );\n  }\n  const { fkRef: _fkRef, ...published } = meta;\n  return Object.freeze({\n    ...published,\n    enumValues: meta.enumValues\n      ? Object.freeze([...meta.enumValues])\n      : undefined,\n    fk: meta.fk ? Object.freeze({ ...meta.fk }) : undefined,\n    engineColumn: meta.engineColumn,\n  }) as ColumnMeta;\n}\n\nfunction finalizeRelations(\n  relations: readonly ResolvedRelation[],\n): readonly ResolvedRelation[] {\n  return Object.freeze(\n    relations.map((relation) => Object.freeze({ ...relation })),\n  );\n}\n\n/** Clone builders into per-table metadata and create stable column handles. */\nfunction declareTable<C extends Record<string, ColumnBuilder>>(\n  state: DeclarationState,\n  name: string,\n  columns: C,\n): TableHandle<C> {\n  assertTableName(name);\n  if (state.raw.has(name)) {\n    throw new SchemaBuildError(`Duplicate table \"${name}\"`);\n  }\n  assertRecord(columns, `Columns for table \"${name}\"`);\n\n  const metas = nullRecord<MutableColumnMeta>();\n  const handle = Object.create(null) as Record<string, ColumnRef>;\n  for (const [key, column] of Object.entries(columns)) {\n    assertName(key, `Column name on table \"${name}\"`);\n    if (key.startsWith(\"$\") || key === \"and\" || key === \"or\") {\n      throw new SchemaBuildError(\n        `Column \"${name}.${key}\" collides with AppKit runtime metadata`,\n      );\n    }\n    if (!(column instanceof ColumnBuilder)) {\n      throw new SchemaBuildError(\n        `Column \"${name}.${key}\" was not created by an AppKit column builder`,\n      );\n    }\n\n    const meta = column._cloneMeta();\n    meta.name = key;\n    meta.columnName = key;\n    metas[key] = meta;\n\n    const reference: ColumnRef = Object.freeze({\n      __isColumnRef: true,\n      tableName: name,\n      columnName: key,\n    });\n    Object.defineProperty(handle, key, {\n      enumerable: true,\n      value: reference,\n    });\n  }\n\n  state.raw.set(name, { name, metas, handle });\n  state.handleNames.set(handle, name);\n  return handle as unknown as TableHandle<C>;\n}\n\nfunction createBuilderContext(state: DeclarationState): SchemaBuilderContext {\n  return {\n    table(name, columns) {\n      return declareTable(state, name, columns);\n    },\n    enum(name, values) {\n      return enumColumn(name, values);\n    },\n  };\n}\n\n/** Require every exact table handle once under its declared identity. */\nfunction validateReturnedTables(\n  returned: unknown,\n  state: DeclarationState,\n): void {\n  assertRecord(returned, \"defineSchema() return value\");\n  const returnedHandles = new Set<object>();\n  for (const [key, value] of Object.entries(returned)) {\n    const name =\n      value !== null && typeof value === \"object\"\n        ? state.handleNames.get(value)\n        : undefined;\n    if (!name) {\n      throw new SchemaBuildError(\n        `defineSchema returned a value for \"${key}\" that was not produced by ctx.table()`,\n      );\n    }\n    if (key !== name) {\n      throw new SchemaBuildError(\n        `defineSchema returned table \"${name}\" under key \"${key}\"; aliases are not supported`,\n      );\n    }\n    if (returnedHandles.has(value)) {\n      throw new SchemaBuildError(`Table \"${name}\" was returned more than once`);\n    }\n    returnedHandles.add(value);\n  }\n  if (returnedHandles.size !== state.raw.size) {\n    const omitted = [...state.raw.values()]\n      .filter((table) => !returnedHandles.has(table.handle))\n      .map((table) => table.name);\n    throw new SchemaBuildError(\n      `defineSchema omitted declared table${omitted.length === 1 ? \"\" : \"s\"}: ${omitted.join(\", \")}`,\n    );\n  }\n}\n\n/** Detect declaration-handle tampering before metadata publication. */\nfunction validateHandles(raw: ReadonlyMap<string, RawTable>): void {\n  for (const table of raw.values()) {\n    const ownKeys = Reflect.ownKeys(table.handle);\n    const hasOnlyDeclaredColumns =\n      ownKeys.length === Object.keys(table.metas).length &&\n      ownKeys.every(\n        (key) => typeof key === \"string\" && Object.hasOwn(table.metas, key),\n      );\n    const hasMetadataCollision = TABLE_METADATA_KEYS.some((key) =>\n      Object.hasOwn(table.handle, key),\n    );\n    if (\n      Object.getPrototypeOf(table.handle) !== null ||\n      !Object.isExtensible(table.handle) ||\n      !hasOnlyDeclaredColumns ||\n      hasMetadataCollision\n    ) {\n      throw new SchemaBuildError(\n        `Table handle \"${table.name}\" was modified during schema declaration`,\n      );\n    }\n  }\n}\n\n/** Reject composite primary keys, which keyed operations cannot represent. */\nfunction validatePrimaryKeys(raw: ReadonlyMap<string, RawTable>): void {\n  for (const table of raw.values()) {\n    const primaryKeys = Object.values(table.metas).filter(\n      (meta) => meta.primaryKey,\n    );\n    if (primaryKeys.length > 1) {\n      throw new SchemaBuildError(\n        `Table \"${table.name}\" declares multiple primary-key columns; composite primary keys are not supported`,\n      );\n    }\n  }\n}\n\n/** Reject table names that collide with generated Drizzle relation keys. */\nfunction validateRelationKeys(\n  raw: ReadonlyMap<string, RawTable>,\n  relations: ReadonlyMap<string, readonly ResolvedRelation[]>,\n): void {\n  for (const [name, tableRelations] of relations) {\n    if (tableRelations.length > 0 && raw.has(`${name}Relations`)) {\n      throw new SchemaBuildError(\n        `Table \"${name}Relations\" collides with generated relation metadata for \"${name}\"`,\n      );\n    }\n  }\n}\n\n/** Prepare every engine object and validator without mutating handles. */\nfunction prepareTables(\n  raw: ReadonlyMap<string, RawTable>,\n  schemaName: string,\n  relations: ReadonlyMap<string, readonly ResolvedRelation[]>,\n): Map<string, FinalizedTableCandidate> {\n  const built = buildEngineTables(raw.values(), schemaName);\n  const candidates = new Map<string, FinalizedTableCandidate>();\n  for (const table of raw.values()) {\n    const builtTable = built.get(table.name);\n    if (!builtTable) {\n      throw new SchemaBuildError(\n        `Engine table \"${table.name}\" was not constructed`,\n      );\n    }\n    const columns = nullRecord<ColumnMeta>();\n    for (const [key, meta] of Object.entries(builtTable.columns)) {\n      columns[key] = finalizeColumn(meta);\n    }\n    Object.freeze(columns);\n    const tableRelations = finalizeRelations(relations.get(table.name) ?? []);\n    const validatorTable = { $columns: columns } as AppKitTable;\n    candidates.set(table.name, {\n      columns,\n      engine: builtTable.engine,\n      relations: tableRelations,\n      insertSchema: deriveInsertSchema(validatorTable),\n      updateSchema: deriveUpdateSchema(validatorTable),\n    });\n  }\n  return candidates;\n}\n\n/** Atomically publish prepared metadata as the final schema transition. */\nfunction publishSchema(\n  raw: ReadonlyMap<string, RawTable>,\n  candidates: ReadonlyMap<string, FinalizedTableCandidate>,\n  schemaName: string,\n): Schema {\n  const publications = [...raw.values()].map((table) => {\n    const candidate = candidates.get(table.name);\n    if (!candidate) {\n      throw new SchemaBuildError(\n        `Table \"${table.name}\" was not prepared for finalization`,\n      );\n    }\n    return { table, candidate };\n  });\n\n  const tables = nullRecord<AppKitTable>();\n  const engine = nullRecord<Schema[\"$engine\"][string]>();\n  for (const { table, candidate } of publications) {\n    Object.defineProperties(table.handle, {\n      $name: { value: table.name },\n      $schemaName: { value: schemaName },\n      $columns: { value: candidate.columns },\n      $engine: { value: candidate.engine },\n      $relations: { value: candidate.relations },\n      $insertSchema: { value: candidate.insertSchema },\n      $updateSchema: { value: candidate.updateSchema },\n    });\n    const finalized = Object.freeze(table.handle) as unknown as AppKitTable;\n    tables[table.name] = finalized;\n    engine[table.name] = candidate.engine;\n  }\n\n  const schema = {\n    $schemaName: schemaName,\n    $tables: Object.freeze(tables),\n    $engine: Object.freeze(engine),\n  };\n  Object.defineProperty(schema, FINALIZED_SCHEMA, { value: true });\n  return Object.freeze(schema);\n}\n\n/** @internal Reject values that were not finalized by `defineSchema()`. */\nexport function assertFinalizedSchema(value: unknown): asserts value is Schema {\n  if (\n    value === null ||\n    typeof value !== \"object\" ||\n    (value as Record<PropertyKey, unknown>)[FINALIZED_SCHEMA] !== true\n  ) {\n    throw new TypeError(\"Expected a finalized AppKit database schema\");\n  }\n}\n\n/**\n * Compile one declared schema. The returned type keeps the table names the\n * builder returned, so `api.tables` and `hooks` can name only real tables.\n */\nexport function defineSchema<TTables extends Record<string, AppKitTable>>(\n  builder: (context: SchemaBuilderContext) => TTables,\n  options?: DefineSchemaOptions,\n): Schema<Extract<keyof TTables, string>> {\n  const schemaName = options?.schemaName ?? \"public\";\n  if (!schemaName) throw new SchemaBuildError(\"Schema name cannot be empty\");\n\n  const state: DeclarationState = {\n    raw: new Map(),\n    handleNames: new Map(),\n  };\n  const returned = builder(createBuilderContext(state));\n\n  validateReturnedTables(returned, state);\n  validateHandles(state.raw);\n  validatePrimaryKeys(state.raw);\n  resolveForeignKeys(state.raw);\n  // FK literals are checked against the inherited target storage, not the placeholder.\n  validateLiteralDefaults(state.raw.values());\n\n  const relations = buildRelations(state.raw);\n  validateRelationKeys(state.raw, relations);\n  const candidates = prepareTables(state.raw, schemaName, relations);\n  return publishSchema(state.raw, candidates, schemaName);\n}\n"],"mappings":";;;;;;;;AA4CA,MAAM,uBAAuB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAc,CAAC;AAC/E,MAAM,gCAAgC,IAAI,IAAI,CAAC,OAAO,cAAc,CAAC;AAErE,MAAM,mBAAmB,OAAO,IAAI,qCAAqC;AACzE,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,SAAS,aAAmC;AAC1C,QAAO,OAAO,OAAO,KAAK;;AAG5B,SAAS,aAAa,OAAgB,OAAwC;AAC5E,KAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CACrE,OAAM,IAAI,iBAAiB,GAAG,MAAM,oBAAoB;;AAI5D,SAAS,WAAW,OAAe,OAAqB;AACtD,KAAI,CAAC,SAAS,qBAAqB,IAAI,MAAM,CAC3C,OAAM,IAAI,iBAAiB,GAAG,MAAM,IAAI,MAAM,eAAe;;AAIjE,SAAS,gBAAgB,OAAqB;AAC5C,YAAW,OAAO,aAAa;AAC/B,KAAI,8BAA8B,IAAI,MAAM,CAC1C,OAAM,IAAI,iBAAiB,eAAe,MAAM,eAAe;;AAInE,SAAS,eAAe,MAAqC;AAC3D,KAAI,CAAC,KAAK,aACR,OAAM,IAAI,iBACR,kBAAkB,KAAK,WAAW,kCACnC;CAEH,MAAM,EAAE,OAAO,QAAQ,GAAG,cAAc;AACxC,QAAO,OAAO,OAAO;EACnB,GAAG;EACH,YAAY,KAAK,aACb,OAAO,OAAO,CAAC,GAAG,KAAK,WAAW,CAAC,GACnC;EACJ,IAAI,KAAK,KAAK,OAAO,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG;EAC9C,cAAc,KAAK;EACpB,CAAC;;AAGJ,SAAS,kBACP,WAC6B;AAC7B,QAAO,OAAO,OACZ,UAAU,KAAK,aAAa,OAAO,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC,CAC5D;;;AAIH,SAAS,aACP,OACA,MACA,SACgB;AAChB,iBAAgB,KAAK;AACrB,KAAI,MAAM,IAAI,IAAI,KAAK,CACrB,OAAM,IAAI,iBAAiB,oBAAoB,KAAK,GAAG;AAEzD,cAAa,SAAS,sBAAsB,KAAK,GAAG;CAEpD,MAAM,QAAQ,YAA+B;CAC7C,MAAM,SAAS,OAAO,OAAO,KAAK;AAClC,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,QAAQ,EAAE;AACnD,aAAW,KAAK,yBAAyB,KAAK,GAAG;AACjD,MAAI,IAAI,WAAW,IAAI,IAAI,QAAQ,SAAS,QAAQ,KAClD,OAAM,IAAI,iBACR,WAAW,KAAK,GAAG,IAAI,yCACxB;AAEH,MAAI,EAAE,kBAAkB,eACtB,OAAM,IAAI,iBACR,WAAW,KAAK,GAAG,IAAI,+CACxB;EAGH,MAAM,OAAO,OAAO,YAAY;AAChC,OAAK,OAAO;AACZ,OAAK,aAAa;AAClB,QAAM,OAAO;EAEb,MAAM,YAAuB,OAAO,OAAO;GACzC,eAAe;GACf,WAAW;GACX,YAAY;GACb,CAAC;AACF,SAAO,eAAe,QAAQ,KAAK;GACjC,YAAY;GACZ,OAAO;GACR,CAAC;;AAGJ,OAAM,IAAI,IAAI,MAAM;EAAE;EAAM;EAAO;EAAQ,CAAC;AAC5C,OAAM,YAAY,IAAI,QAAQ,KAAK;AACnC,QAAO;;AAGT,SAAS,qBAAqB,OAA+C;AAC3E,QAAO;EACL,MAAM,MAAM,SAAS;AACnB,UAAO,aAAa,OAAO,MAAM,QAAQ;;EAE3C,KAAK,MAAM,QAAQ;AACjB,UAAO,WAAW,MAAM,OAAO;;EAElC;;;AAIH,SAAS,uBACP,UACA,OACM;AACN,cAAa,UAAU,8BAA8B;CACrD,MAAM,kCAAkB,IAAI,KAAa;AACzC,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,EAAE;EACnD,MAAM,OACJ,UAAU,QAAQ,OAAO,UAAU,WAC/B,MAAM,YAAY,IAAI,MAAM,GAC5B;AACN,MAAI,CAAC,KACH,OAAM,IAAI,iBACR,sCAAsC,IAAI,wCAC3C;AAEH,MAAI,QAAQ,KACV,OAAM,IAAI,iBACR,gCAAgC,KAAK,eAAe,IAAI,8BACzD;AAEH,MAAI,gBAAgB,IAAI,MAAM,CAC5B,OAAM,IAAI,iBAAiB,UAAU,KAAK,+BAA+B;AAE3E,kBAAgB,IAAI,MAAM;;AAE5B,KAAI,gBAAgB,SAAS,MAAM,IAAI,MAAM;EAC3C,MAAM,UAAU,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,CACpC,QAAQ,UAAU,CAAC,gBAAgB,IAAI,MAAM,OAAO,CAAC,CACrD,KAAK,UAAU,MAAM,KAAK;AAC7B,QAAM,IAAI,iBACR,sCAAsC,QAAQ,WAAW,IAAI,KAAK,IAAI,IAAI,QAAQ,KAAK,KAAK,GAC7F;;;;AAKL,SAAS,gBAAgB,KAA0C;AACjE,MAAK,MAAM,SAAS,IAAI,QAAQ,EAAE;EAChC,MAAM,UAAU,QAAQ,QAAQ,MAAM,OAAO;EAC7C,MAAM,yBACJ,QAAQ,WAAW,OAAO,KAAK,MAAM,MAAM,CAAC,UAC5C,QAAQ,OACL,QAAQ,OAAO,QAAQ,YAAY,OAAO,OAAO,MAAM,OAAO,IAAI,CACpE;EACH,MAAM,uBAAuB,oBAAoB,MAAM,QACrD,OAAO,OAAO,MAAM,QAAQ,IAAI,CACjC;AACD,MACE,OAAO,eAAe,MAAM,OAAO,KAAK,QACxC,CAAC,OAAO,aAAa,MAAM,OAAO,IAClC,CAAC,0BACD,qBAEA,OAAM,IAAI,iBACR,iBAAiB,MAAM,KAAK,0CAC7B;;;;AAMP,SAAS,oBAAoB,KAA0C;AACrE,MAAK,MAAM,SAAS,IAAI,QAAQ,CAI9B,KAHoB,OAAO,OAAO,MAAM,MAAM,CAAC,QAC5C,SAAS,KAAK,WAChB,CACe,SAAS,EACvB,OAAM,IAAI,iBACR,UAAU,MAAM,KAAK,mFACtB;;;AAMP,SAAS,qBACP,KACA,WACM;AACN,MAAK,MAAM,CAAC,MAAM,mBAAmB,UACnC,KAAI,eAAe,SAAS,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,CAC1D,OAAM,IAAI,iBACR,UAAU,KAAK,4DAA4D,KAAK,GACjF;;;AAMP,SAAS,cACP,KACA,YACA,WACsC;CACtC,MAAM,QAAQ,kBAAkB,IAAI,QAAQ,EAAE,WAAW;CACzD,MAAM,6BAAa,IAAI,KAAsC;AAC7D,MAAK,MAAM,SAAS,IAAI,QAAQ,EAAE;EAChC,MAAM,aAAa,MAAM,IAAI,MAAM,KAAK;AACxC,MAAI,CAAC,WACH,OAAM,IAAI,iBACR,iBAAiB,MAAM,KAAK,uBAC7B;EAEH,MAAM,UAAU,YAAwB;AACxC,OAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,WAAW,QAAQ,CAC1D,SAAQ,OAAO,eAAe,KAAK;AAErC,SAAO,OAAO,QAAQ;EACtB,MAAM,iBAAiB,kBAAkB,UAAU,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;EACzE,MAAM,iBAAiB,EAAE,UAAU,SAAS;AAC5C,aAAW,IAAI,MAAM,MAAM;GACzB;GACA,QAAQ,WAAW;GACnB,WAAW;GACX,cAAc,mBAAmB,eAAe;GAChD,cAAc,mBAAmB,eAAe;GACjD,CAAC;;AAEJ,QAAO;;;AAIT,SAAS,cACP,KACA,YACA,YACQ;CACR,MAAM,eAAe,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,UAAU;EACpD,MAAM,YAAY,WAAW,IAAI,MAAM,KAAK;AAC5C,MAAI,CAAC,UACH,OAAM,IAAI,iBACR,UAAU,MAAM,KAAK,qCACtB;AAEH,SAAO;GAAE;GAAO;GAAW;GAC3B;CAEF,MAAM,SAAS,YAAyB;CACxC,MAAM,SAAS,YAAuC;AACtD,MAAK,MAAM,EAAE,OAAO,eAAe,cAAc;AAC/C,SAAO,iBAAiB,MAAM,QAAQ;GACpC,OAAO,EAAE,OAAO,MAAM,MAAM;GAC5B,aAAa,EAAE,OAAO,YAAY;GAClC,UAAU,EAAE,OAAO,UAAU,SAAS;GACtC,SAAS,EAAE,OAAO,UAAU,QAAQ;GACpC,YAAY,EAAE,OAAO,UAAU,WAAW;GAC1C,eAAe,EAAE,OAAO,UAAU,cAAc;GAChD,eAAe,EAAE,OAAO,UAAU,cAAc;GACjD,CAAC;EACF,MAAM,YAAY,OAAO,OAAO,MAAM,OAAO;AAC7C,SAAO,MAAM,QAAQ;AACrB,SAAO,MAAM,QAAQ,UAAU;;CAGjC,MAAM,SAAS;EACb,aAAa;EACb,SAAS,OAAO,OAAO,OAAO;EAC9B,SAAS,OAAO,OAAO,OAAO;EAC/B;AACD,QAAO,eAAe,QAAQ,kBAAkB,EAAE,OAAO,MAAM,CAAC;AAChE,QAAO,OAAO,OAAO,OAAO;;;AAI9B,SAAgB,sBAAsB,OAAyC;AAC7E,KACE,UAAU,QACV,OAAO,UAAU,YAChB,MAAuC,sBAAsB,KAE9D,OAAM,IAAI,UAAU,8CAA8C;;;;;;AAQtE,SAAgB,aACd,SACA,SACwC;CACxC,MAAM,aAAa,SAAS,cAAc;AAC1C,KAAI,CAAC,WAAY,OAAM,IAAI,iBAAiB,8BAA8B;CAE1E,MAAM,QAA0B;EAC9B,qBAAK,IAAI,KAAK;EACd,6BAAa,IAAI,KAAK;EACvB;AAGD,wBAFiB,QAAQ,qBAAqB,MAAM,CAAC,EAEpB,MAAM;AACvC,iBAAgB,MAAM,IAAI;AAC1B,qBAAoB,MAAM,IAAI;AAC9B,oBAAmB,MAAM,IAAI;AAE7B,yBAAwB,MAAM,IAAI,QAAQ,CAAC;CAE3C,MAAM,YAAY,eAAe,MAAM,IAAI;AAC3C,sBAAqB,MAAM,KAAK,UAAU;CAC1C,MAAM,aAAa,cAAc,MAAM,KAAK,YAAY,UAAU;AAClE,QAAO,cAAc,MAAM,KAAK,YAAY,WAAW"}

package/dist/errors/database-validation.d.ts

@@ -0,0 +1,23 @@
+import { AppKitError } from "./base.js";
+
+//#region src/errors/database-validation.d.ts
+/** One rejected field; `path` names public columns, never their values. */
+interface DatabaseValidationIssue {
+  readonly path: readonly string[];
+  readonly message: string;
+}
+/**
+ * Deliberate validation failure raised by a database mutation hook. Generated
+ * routes answer `422` and echo only the issues naming a public column; every
+ * other failure raised inside a hook stays an opaque server error.
+ */
+declare class DatabaseValidationError extends AppKitError {
+  readonly code = "DATABASE_VALIDATION_ERROR";
+  readonly statusCode = 422;
+  readonly isRetryable = false;
+  readonly issues: readonly DatabaseValidationIssue[];
+  constructor(message: string, issues?: readonly DatabaseValidationIssue[]);
+}
+//#endregion
+export { DatabaseValidationError, DatabaseValidationIssue };
+//# sourceMappingURL=database-validation.d.ts.map

package/dist/errors/database-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-validation.d.ts","names":[],"sources":["../../src/errors/database-validation.ts"],"mappings":";;;;UAMiB,uBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;AAAA;;;AAQX;;;cAAa,uBAAA,SAAgC,WAAA;EAAA,SAClC,IAAA;EAAA,SACA,UAAA;EAAA,SACA,WAAA;EAAA,SACA,MAAA,WAAiB,uBAAA;cAGxB,OAAA,UACA,MAAA,YAAiB,uBAAA;AAAA"}

package/dist/errors/database-validation.js

@@ -0,0 +1,24 @@
+import { AppKitError } from "./base.js";
+
+//#region src/errors/database-validation.ts
+/** Cap how many issues one rejection can put on the wire. */
+const MAX_ISSUES = 50;
+/**
+* Deliberate validation failure raised by a database mutation hook. Generated
+* routes answer `422` and echo only the issues naming a public column; every
+* other failure raised inside a hook stays an opaque server error.
+*/
+var DatabaseValidationError = class extends AppKitError {
+	code = "DATABASE_VALIDATION_ERROR";
+	statusCode = 422;
+	isRetryable = false;
+	issues;
+	constructor(message, issues = []) {
+		super(message, { clientMessage: "Database request failed validation" });
+		this.issues = issues.slice(0, MAX_ISSUES);
+	}
+};
+
+//#endregion
+export { DatabaseValidationError };
+//# sourceMappingURL=database-validation.js.map

package/dist/errors/database-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-validation.js","names":[],"sources":["../../src/errors/database-validation.ts"],"sourcesContent":["import { AppKitError } from \"./base\";\n\n/** Cap how many issues one rejection can put on the wire. */\nconst MAX_ISSUES = 50;\n\n/** One rejected field; `path` names public columns, never their values. */\nexport interface DatabaseValidationIssue {\n  readonly path: readonly string[];\n  readonly message: string;\n}\n\n/**\n * Deliberate validation failure raised by a database mutation hook. Generated\n * routes answer `422` and echo only the issues naming a public column; every\n * other failure raised inside a hook stays an opaque server error.\n */\nexport class DatabaseValidationError extends AppKitError {\n  readonly code = \"DATABASE_VALIDATION_ERROR\";\n  readonly statusCode = 422;\n  readonly isRetryable = false;\n  readonly issues: readonly DatabaseValidationIssue[];\n\n  constructor(\n    message: string,\n    issues: readonly DatabaseValidationIssue[] = [],\n  ) {\n    super(message, { clientMessage: \"Database request failed validation\" });\n    this.issues = issues.slice(0, MAX_ISSUES);\n  }\n}\n"],"mappings":";;;;AAGA,MAAM,aAAa;;;;;;AAanB,IAAa,0BAAb,cAA6C,YAAY;CACvD,AAAS,OAAO;CAChB,AAAS,aAAa;CACtB,AAAS,cAAc;CACvB,AAAS;CAET,YACE,SACA,SAA6C,EAAE,EAC/C;AACA,QAAM,SAAS,EAAE,eAAe,sCAAsC,CAAC;AACvE,OAAK,SAAS,OAAO,MAAM,GAAG,WAAW"}

package/dist/errors/index.js

@@ -2,6 +2,7 @@ import { AppKitError } from "./base.js";
 import { AuthenticationError } from "./authentication.js";
 import { ConfigurationError } from "./configuration.js";
 import { ConnectionError } from "./connection.js";
+import { DatabaseValidationError } from "./database-validation.js";
 import { ExecutionError } from "./execution.js";
 import { InitializationError } from "./initialization.js";
 import { ServerError } from "./server.js";

package/dist/evals/dataset.d.ts

@@ -0,0 +1,49 @@
+import { WorkspaceClient } from "../workspace-client/index.js";
+
+//#region src/evals/dataset.d.ts
+/**
+ * One row of a managed evaluation dataset. `inputs` are the kwargs passed to the
+ * agent for the turn; `expectations` (when present) is the row's ground truth /
+ * guidelines. Mirrors the `{inputs, expectations}` shape of `mlflow.genai`
+ * datasets and of the Unity Catalog table backing a managed eval dataset.
+ */
+interface DatasetRow {
+  inputs: Record<string, unknown>;
+  expectations?: Record<string, unknown>;
+}
+interface ReadEvalDatasetOptions {
+  /** Fully-qualified UC table: `catalog.schema.table`. */
+  table: string;
+  /** SQL warehouse id to run the read against. */
+  warehouseId: string;
+  /** Optional row cap. */
+  limit?: number;
+}
+/**
+ * Extract every user-message content, in order, from an MLflow
+ * `{"messages":[{"role":"user","content":"..."}]}` input. A dataset row can
+ * carry a full multi-turn conversation; replaying these against one thread (one
+ * `t.send` per returned string) lets the agent see the accumulating history.
+ *
+ * Only `role === "user"` turns are returned — any interleaved `assistant`/
+ * `system` messages in the row are ignored, since the agent generates its own
+ * responses; you never inject the dataset's assistant turns. A single-user-turn
+ * row yields a one-element array (backward compatible); a row with no `messages`
+ * yields `[]`.
+ */
+declare function userTurns(input: Record<string, unknown>): string[];
+/**
+ * Read a Databricks managed evaluation dataset (a Unity Catalog table with
+ * `inputs`/`expectations` columns) into rows, over the public SQL Statement
+ * Execution API. Reuses {@link SQLWarehouseConnector} for submit/poll/transform
+ * — its result transform already JSON-parses string columns into objects, so
+ * `inputs`/`expectations` come back as records whether the table stores them as
+ * JSON strings or structs.
+ *
+ * The Python `mlflow.genai.datasets` API needs a Spark session (no TS
+ * equivalent), so we read the backing table directly.
+ */
+declare function readEvalDataset(client: WorkspaceClient, options: ReadEvalDatasetOptions): Promise<DatasetRow[]>;
+//#endregion
+export { DatasetRow, ReadEvalDatasetOptions, readEvalDataset, userTurns };
+//# sourceMappingURL=dataset.d.ts.map

package/dist/evals/dataset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset.d.ts","names":[],"sources":["../../src/evals/dataset.ts"],"mappings":";;;;;AASA;;;;UAAiB,UAAA;EACf,MAAA,EAAQ,MAAA;EACR,YAAA,GAAe,MAAA;AAAA;AAAA,UAGA,sBAAA;EAHM;EAKrB,KAAA;EAFqC;EAIrC,WAAA;EAJqC;EAMrC,KAAA;AAAA;;;;AAeF;;;;;AAkCA;;;;iBAlCgB,SAAA,CAAU,KAAA,EAAO,MAAA;;;;;;;;;;;;iBAkCX,eAAA,CACpB,MAAA,EAAQ,eAAA,EACR,OAAA,EAAS,sBAAA,GACR,OAAA,CAAQ,UAAA"}

package/dist/evals/dataset.js

@@ -0,0 +1,51 @@
+import { SQLWarehouseConnector } from "../connectors/sql-warehouse/client.js";
+import "../connectors/index.js";
+
+//#region src/evals/dataset.ts
+/**
+* Extract every user-message content, in order, from an MLflow
+* `{"messages":[{"role":"user","content":"..."}]}` input. A dataset row can
+* carry a full multi-turn conversation; replaying these against one thread (one
+* `t.send` per returned string) lets the agent see the accumulating history.
+*
+* Only `role === "user"` turns are returned — any interleaved `assistant`/
+* `system` messages in the row are ignored, since the agent generates its own
+* responses; you never inject the dataset's assistant turns. A single-user-turn
+* row yields a one-element array (backward compatible); a row with no `messages`
+* yields `[]`.
+*/
+function userTurns(input) {
+	return (Array.isArray(input.messages) ? input.messages : []).filter((m) => typeof m === "object" && m !== null).filter((m) => m.role === "user").map((m) => typeof m.content === "string" ? m.content : "");
+}
+/** A managed eval dataset is a UC table; only 3-level names are valid. */
+const UC_TABLE = /^[A-Za-z0-9_]+\.[A-Za-z0-9_]+\.[A-Za-z0-9_]+$/;
+/** Coerce a cell (already JSON-parsed by the connector for JSON columns) to a record. */
+function toRecord(value) {
+	if (value && typeof value === "object" && !Array.isArray(value)) return value;
+}
+/**
+* Read a Databricks managed evaluation dataset (a Unity Catalog table with
+* `inputs`/`expectations` columns) into rows, over the public SQL Statement
+* Execution API. Reuses {@link SQLWarehouseConnector} for submit/poll/transform
+* — its result transform already JSON-parses string columns into objects, so
+* `inputs`/`expectations` come back as records whether the table stores them as
+* JSON strings or structs.
+*
+* The Python `mlflow.genai.datasets` API needs a Spark session (no TS
+* equivalent), so we read the backing table directly.
+*/
+async function readEvalDataset(client, options) {
+	if (!UC_TABLE.test(options.table)) throw new Error(`Invalid dataset table "${options.table}" — expected catalog.schema.table`);
+	const limit = typeof options.limit === "number" && options.limit > 0 ? ` LIMIT ${Math.floor(options.limit)}` : "";
+	return ((await new SQLWarehouseConnector({}).executeStatement(client, {
+		warehouse_id: options.warehouseId,
+		statement: `SELECT inputs, expectations FROM ${options.table}${limit}`
+	})).result?.data ?? []).map((row) => ({
+		inputs: toRecord(row.inputs) ?? {},
+		expectations: toRecord(row.expectations)
+	}));
+}
+
+//#endregion
+export { readEvalDataset, userTurns };
+//# sourceMappingURL=dataset.js.map

package/dist/evals/dataset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset.js","names":[],"sources":["../../src/evals/dataset.ts"],"sourcesContent":["import { SQLWarehouseConnector } from \"../connectors\";\nimport type { WorkspaceClient } from \"../workspace-client\";\n\n/**\n * One row of a managed evaluation dataset. `inputs` are the kwargs passed to the\n * agent for the turn; `expectations` (when present) is the row's ground truth /\n * guidelines. Mirrors the `{inputs, expectations}` shape of `mlflow.genai`\n * datasets and of the Unity Catalog table backing a managed eval dataset.\n */\nexport interface DatasetRow {\n  inputs: Record<string, unknown>;\n  expectations?: Record<string, unknown>;\n}\n\nexport interface ReadEvalDatasetOptions {\n  /** Fully-qualified UC table: `catalog.schema.table`. */\n  table: string;\n  /** SQL warehouse id to run the read against. */\n  warehouseId: string;\n  /** Optional row cap. */\n  limit?: number;\n}\n\n/**\n * Extract every user-message content, in order, from an MLflow\n * `{\"messages\":[{\"role\":\"user\",\"content\":\"...\"}]}` input. A dataset row can\n * carry a full multi-turn conversation; replaying these against one thread (one\n * `t.send` per returned string) lets the agent see the accumulating history.\n *\n * Only `role === \"user\"` turns are returned — any interleaved `assistant`/\n * `system` messages in the row are ignored, since the agent generates its own\n * responses; you never inject the dataset's assistant turns. A single-user-turn\n * row yields a one-element array (backward compatible); a row with no `messages`\n * yields `[]`.\n */\nexport function userTurns(input: Record<string, unknown>): string[] {\n  const messages = Array.isArray(input.messages) ? input.messages : [];\n  // Dataset rows are external data: skip null/non-object entries; coerce non-string content to \"\".\n  return messages\n    .filter(\n      (m): m is { role?: unknown; content?: unknown } =>\n        typeof m === \"object\" && m !== null,\n    )\n    .filter((m) => m.role === \"user\")\n    .map((m) => (typeof m.content === \"string\" ? m.content : \"\"));\n}\n\n/** A managed eval dataset is a UC table; only 3-level names are valid. */\nconst UC_TABLE = /^[A-Za-z0-9_]+\\.[A-Za-z0-9_]+\\.[A-Za-z0-9_]+$/;\n\n/** Coerce a cell (already JSON-parsed by the connector for JSON columns) to a record. */\nfunction toRecord(value: unknown): Record<string, unknown> | undefined {\n  if (value && typeof value === \"object\" && !Array.isArray(value)) {\n    return value as Record<string, unknown>;\n  }\n  return undefined;\n}\n\n/**\n * Read a Databricks managed evaluation dataset (a Unity Catalog table with\n * `inputs`/`expectations` columns) into rows, over the public SQL Statement\n * Execution API. Reuses {@link SQLWarehouseConnector} for submit/poll/transform\n * — its result transform already JSON-parses string columns into objects, so\n * `inputs`/`expectations` come back as records whether the table stores them as\n * JSON strings or structs.\n *\n * The Python `mlflow.genai.datasets` API needs a Spark session (no TS\n * equivalent), so we read the backing table directly.\n */\nexport async function readEvalDataset(\n  client: WorkspaceClient,\n  options: ReadEvalDatasetOptions,\n): Promise<DatasetRow[]> {\n  if (!UC_TABLE.test(options.table)) {\n    throw new Error(\n      `Invalid dataset table \"${options.table}\" — expected catalog.schema.table`,\n    );\n  }\n\n  const limit =\n    typeof options.limit === \"number\" && options.limit > 0\n      ? ` LIMIT ${Math.floor(options.limit)}`\n      : \"\";\n  const connector = new SQLWarehouseConnector({});\n  const response = await connector.executeStatement(client, {\n    warehouse_id: options.warehouseId,\n    statement: `SELECT inputs, expectations FROM ${options.table}${limit}`,\n  });\n\n  const rows =\n    (response.result as { data?: Array<Record<string, unknown>> } | undefined)\n      ?.data ?? [];\n\n  return rows.map((row) => ({\n    inputs: toRecord(row.inputs) ?? {},\n    expectations: toRecord(row.expectations),\n  }));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAmCA,SAAgB,UAAU,OAA0C;AAGlE,SAFiB,MAAM,QAAQ,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,EAGjE,QACE,MACC,OAAO,MAAM,YAAY,MAAM,KAClC,CACA,QAAQ,MAAM,EAAE,SAAS,OAAO,CAChC,KAAK,MAAO,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,GAAI;;;AAIjE,MAAM,WAAW;;AAGjB,SAAS,SAAS,OAAqD;AACrE,KAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,CAC7D,QAAO;;;;;;;;;;;;;AAgBX,eAAsB,gBACpB,QACA,SACuB;AACvB,KAAI,CAAC,SAAS,KAAK,QAAQ,MAAM,CAC/B,OAAM,IAAI,MACR,0BAA0B,QAAQ,MAAM,mCACzC;CAGH,MAAM,QACJ,OAAO,QAAQ,UAAU,YAAY,QAAQ,QAAQ,IACjD,UAAU,KAAK,MAAM,QAAQ,MAAM,KACnC;AAWN,UATiB,MADC,IAAI,sBAAsB,EAAE,CAAC,CACd,iBAAiB,QAAQ;EACxD,cAAc,QAAQ;EACtB,WAAW,oCAAoC,QAAQ,QAAQ;EAChE,CAAC,EAGU,QACN,QAAQ,EAAE,EAEJ,KAAK,SAAS;EACxB,QAAQ,SAAS,IAAI,OAAO,IAAI,EAAE;EAClC,cAAc,SAAS,IAAI,aAAa;EACzC,EAAE"}

package/dist/evals/define-eval.d.ts

@@ -1,4 +1,4 @@
-import { EvalDefinition } from "./types.js";
+import { EvalConfig, EvalDefinition } from "./types.js";
 
 //#region src/evals/define-eval.d.ts
 /**
@@ -21,6 +21,8 @@ import { EvalDefinition } from "./types.js";
  * ```
  */
 declare function defineEval(def: EvalDefinition): EvalDefinition;
+/** Define per-directory eval config. Default-export from `evals.config.ts`. */
+declare function defineEvalConfig(config: EvalConfig): EvalConfig;
 //#endregion
-export { defineEval };
+export { defineEval, defineEvalConfig };
 //# sourceMappingURL=define-eval.d.ts.map

package/dist/evals/define-eval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-eval.d.ts","names":[],"sources":["../../src/evals/define-eval.ts"],"mappings":";;;;;AAqBA;;;;;;;;;;;;;;;;;iBAAgB,UAAA,CAAW,GAAA,EAAK,cAAA,GAAiB,cAAA"}
+{"version":3,"file":"define-eval.d.ts","names":[],"sources":["../../src/evals/define-eval.ts"],"mappings":";;;;;AAqBA;;;;;;;;;AAQA;;;;;;;;iBARgB,UAAA,CAAW,GAAA,EAAK,cAAA,GAAiB,cAAA;;iBAQjC,gBAAA,CAAiB,MAAA,EAAQ,UAAA,GAAa,UAAA"}