@flaredev/core 0.4.0 → 0.5.0

package/dist/{chunk-PWP4QEZV.js → chunk-VLHPSNQN.js}

@@ -1,6 +1,9 @@
 // src/resource/fields.ts
 var STRING_FORMATS = ["email", "url", "tel", "domain", "country", "color", "slug"];
 var FILE_CATEGORIES = {
+  // For a field that holds whatever someone has: a drive, an attachment, a backup.
+  // Nothing is checked beyond the size limit, so don't reach for it out of convenience.
+  any: ["*/*"],
   image: ["image/png", "image/jpeg", "image/gif", "image/webp", "image/avif"],
   pdf: ["application/pdf"],
   video: ["video/*"],
@@ -17,7 +20,18 @@ var FILE_CATEGORIES = {
     "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
     "application/vnd.oasis.opendocument.spreadsheet"
   ],
-  archive: ["application/zip"]
+  // Browsers disagree about what a .zip is — Windows sends x-zip-compressed — and an
+  // archive field that refuses an ordinary zip is no use, so the aliases are listed too.
+  archive: [
+    "application/zip",
+    "application/x-zip-compressed",
+    "application/x-zip",
+    "application/gzip",
+    "application/x-gzip",
+    "application/x-7z-compressed",
+    "application/vnd.rar",
+    "application/x-rar-compressed"
+  ]
 };
 function mimeTypesFor(accept) {
   return [...new Set(accept.flatMap((category) => FILE_CATEGORIES[category]))];
@@ -87,6 +101,13 @@ function pluralize(value) {
 
 // src/resource/define.ts
 var RESERVED_FIELD_NAMES = ["id", "createdAt", "updatedAt"];
+function clientResource(resource) {
+  const { hooks, computed, $types, ...rest } = resource;
+  void hooks;
+  void computed;
+  void $types;
+  return rest;
+}
 var ResourceDefinitionError = class extends Error {
   constructor(resource, message) {
     super(`Resource "${resource}": ${message}`);
@@ -385,6 +406,7 @@ export {
   humanize,
   pluralize,
   RESERVED_FIELD_NAMES,
+  clientResource,
   ResourceDefinitionError,
   defaultFieldLabel,
   defineResource,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField } from './policy-CvfE-wCK.js';
-export { B as BelongsToField, a as BooleanField, D as DEFAULT_FILE_MAX_BYTES, b as DateField, c as DateTimeField, E as EnumField, d as FILE_CATEGORIES, e as FieldKind, f as FieldValue, g as FileCategory, h as FileField, i as FloatField, H as HasManyField, I as IntField, M as MultiSelectField, P as Policy, j as PolicyAction, k as PolicyConfig, l as PolicyError, m as RESERVED_FIELD_NAMES, n as RecordOf, o as ResourceConfig, p as ResourceDefinitionError, q as STRING_FORMATS, r as StringField, s as StringFormat, T as TextField, t as allowedActions, u as can, v as columnName, w as defaultFieldLabel, x as definePolicy, y as defineResource, z as field, A as fileMaxBytes, G as mimeTypesFor, J as storedFields } from './policy-CvfE-wCK.js';
+import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField } from './policy-DaKcWZ5g.js';
+export { B as BelongsToField, a as BooleanField, b as ClientResource, D as DEFAULT_FILE_MAX_BYTES, c as DateField, d as DateTimeField, E as EnumField, e as FILE_CATEGORIES, f as FieldKind, g as FieldValue, h as FileCategory, i as FileField, j as FloatField, H as HasManyField, I as IntField, M as MultiSelectField, P as Policy, k as PolicyAction, l as PolicyConfig, m as PolicyError, n as RESERVED_FIELD_NAMES, o as RecordOf, p as ResourceConfig, q as ResourceDefinitionError, r as STRING_FORMATS, s as StringField, t as StringFormat, T as TextField, u as allowedActions, v as can, w as clientResource, x as columnName, y as defaultFieldLabel, z as definePolicy, A as defineResource, G as field, J as fileMaxBytes, K as mimeTypesFor, L as storedFields } from './policy-DaKcWZ5g.js';
 import { z } from 'zod';
 
 /**
@@ -125,6 +125,22 @@ interface StorageBucket {
         };
     }): Promise<unknown>;
     delete(keys: string | string[]): Promise<void>;
+    /**
+     * The keys in the bucket, a page at a time. R2 counts this as a Class A operation —
+     * the expensive kind — so call it to answer a question, not on a page people reload.
+     */
+    list?(options?: {
+        limit?: number;
+        prefix?: string;
+        cursor?: string;
+    }): Promise<{
+        objects: {
+            key: string;
+            size: number;
+        }[];
+        truncated: boolean;
+        cursor?: string;
+    }>;
 }
 interface StorageObjectBody {
     body: ReadableStream;
@@ -286,7 +302,7 @@ declare function fieldSchema(def: StoredField): z.ZodType;
  * edit a record could attach another resource's private file and read it through theirs.
  */
 declare const fileKeyPrefix: (resource: Pick<Resource, "table">, fieldKey: string) => string;
-declare function createValidators<Fields extends Record<string, Field>>(resource: Resource<Fields>): ResourceValidators<Fields>;
+declare function createValidators<Fields extends Record<string, Field>>(resource: Pick<Resource<Fields>, "fields" | "table">): ResourceValidators<Fields>;
 
 /** Naming helpers shared by descriptors and the generator. */
 /** "OrderItem" / "order item" / "order-item" → ["order", "item"] */
@@ -365,13 +381,13 @@ declare function formatValue(def: StoredField | {
  */
 type FormValues = Record<string, string | boolean>;
 /** Initial form state: the record's values (edit) or the descriptor's defaults (create). */
-declare function initialFormValues(resource: Resource, record?: Record<string, unknown> | null): FormValues;
+declare function initialFormValues(resource: Pick<Resource, "fields">, record?: Record<string, unknown> | null): FormValues;
 /**
  * API input from form state. Empty optional fields become null (clearing them);
  * empty fields that have a default are omitted on create so the default applies;
  * empty required fields are left for validation to report as "Required".
  */
-declare function formValuesToInput(resource: Resource, values: FormValues, mode: "create" | "edit"): Record<string, unknown>;
+declare function formValuesToInput(resource: Pick<Resource, "fields">, values: FormValues, mode: "create" | "edit"): Record<string, unknown>;
 /** A multiselect's form state (a JSON array string) as the picked values. */
 declare function parseMultiValue(raw: string | boolean | undefined): string[];
 /** Field errors keyed by field name, from validation or API issues (first message wins). */
@@ -439,6 +455,8 @@ interface Fake {
     email(name?: string): string;
     company(): string;
     jobTitle(): string;
+    /** "Brushed steel desk lamp", or a digital one: "Starter kit licence". */
+    product(digital?: boolean): string;
     city(): string;
     /** ISO 3166-1 alpha-2, e.g. "UG". */
     country(): string;
@@ -495,7 +513,11 @@ declare const fake: Fake;
  */
 type InsertMany = <T extends object>(table: unknown, count: number | readonly T[], build?: (index: number) => T) => Promise<number>;
 interface SeedContext {
-    /** Drizzle client over the app's schema, bound to the local D1 database. */
+    /**
+     * The app's database client: Drizzle over the local D1 database on Cloudflare, the
+     * app's own Prisma client on Next.js. Untyped, because which one it is depends on
+     * the stack and both are generated per app.
+     */
     db: any;
     /** All local bindings and variables (D1, R2, .dev.vars). */
     env: Record<string, unknown>;
@@ -507,6 +529,6 @@ interface SeedContext {
 type Seed = (context: SeedContext) => void | Promise<void>;
 declare function defineSeed(seed: Seed): Seed;
 
-declare const FLARE_VERSION = "0.4.0";
+declare const FLARE_VERSION = "0.5.0";
 
 export { type BelongsToRelation, type Country, CreateInput, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type Storage, type StorageBucket, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, currentPeriodEnd, defineSeed, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, grantsAccess, hashPassword, humanize, importSigningKey, initialFormValues, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toSubscriptionStatus, verifyPassword, verifyToken, words };

package/dist/index.js

@@ -8,6 +8,7 @@ import {
   allowedActions,
   camelCase,
   can,
+  clientResource,
   columnName,
   countries,
   countryName,
@@ -38,7 +39,7 @@ import {
   storedFields,
   toE164,
   words
-} from "./chunk-PWP4QEZV.js";
+} from "./chunk-VLHPSNQN.js";
 
 // src/password.ts
 var ALGORITHM = "pbkdf2-sha256";
@@ -241,6 +242,8 @@ var EMPTY_ZIP = [80, 75, 5, 6];
 var OLE2 = [208, 207, 17, 224, 161, 177, 26, 225];
 var EBML = [26, 69, 223, 163];
 var isZip = (head) => startsWith(head, ZIP) || startsWith(head, EMPTY_ZIP);
+var isGzip = (head) => startsWith(head, [31, 139]);
+var isRar = (head) => startsWith(head, ascii("Rar!"));
 var EXACT = {
   "image/png": (head) => startsWith(head, [137, 80, 78, 71, 13, 10, 26, 10]),
   "image/jpeg": (head) => startsWith(head, [255, 216, 255]),
@@ -249,6 +252,13 @@ var EXACT = {
   "image/avif": (head) => ["avif", "avis", "mif1", "msf1"].includes(isoBrand(head) ?? ""),
   "application/pdf": (head) => startsWith(head, ascii("%PDF-")),
   "application/zip": isZip,
+  "application/x-zip-compressed": isZip,
+  "application/x-zip": isZip,
+  "application/gzip": isGzip,
+  "application/x-gzip": isGzip,
+  "application/x-7z-compressed": (head) => startsWith(head, [55, 122, 188, 175, 39, 28]),
+  "application/vnd.rar": isRar,
+  "application/x-rar-compressed": isRar,
   // Office Open XML and OpenDocument files are zip archives.
   "application/vnd.openxmlformats-officedocument.wordprocessingml.document": isZip,
   "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": isZip,
@@ -281,6 +291,7 @@ function matchesContentType(contentType, allowed) {
   if (!/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(type)) return false;
   return allowed.some((pattern) => {
     const p = pattern.trim().toLowerCase();
+    if (p === "*/*") return true;
     return p.endsWith("/*") ? type.startsWith(p.slice(0, -1)) : type === p;
   });
 }
@@ -873,6 +884,26 @@ var WORDS = [
   "variance",
   "workflow"
 ];
+var PRODUCT_QUALITIES = ["Oak", "Walnut", "Brushed steel", "Canvas", "Merino", "Recycled", "Matte black", "Linen", "Copper", "Frosted glass"];
+var PRODUCT_THINGS = [
+  "desk lamp",
+  "office chair",
+  "notebook",
+  "water bottle",
+  "backpack",
+  "keyboard",
+  "mouse mat",
+  "coffee grinder",
+  "travel mug",
+  "wall clock",
+  "storage box",
+  "cable tidy",
+  "monitor stand",
+  "planter",
+  "door mat",
+  "tote bag"
+];
+var DIGITAL_THINGS = ["starter kit", "source code licence", "icon pack", "template bundle", "course", "font family", "preset pack", "e-book"];
 var DOMAINS = ["example.com", "example.org", "example.net", "mail.example.com"];
 var TLDS = ["com", "io", "co", "org", "net"];
 var COLORS = ["#f2541d", "#2563eb", "#16a34a", "#d97706", "#7c3aed", "#0891b2", "#db2777", "#4b5563"];
@@ -924,6 +955,7 @@ function createFake(seed = 20260101) {
       return `${slugify2(local).replace(/-/g, ".")}${step()}@${pick(DOMAINS)}`;
     },
     company: () => `${pick(COMPANY_HEADS)} ${pick(COMPANY_TAILS)}`,
+    product: (digital = false) => digital ? `${pick(PRODUCT_QUALITIES)} ${pick(DIGITAL_THINGS)}` : `${pick(PRODUCT_QUALITIES)} ${pick(PRODUCT_THINGS)}`,
     jobTitle: () => `${pick(["Head of", "Senior", "Lead", "Regional", "Junior"])} ${pick(["Operations", "Sales", "Support", "Engineering", "Finance", "Logistics"])}`,
     city: () => pick(CITIES),
     country: () => pick(COUNTRIES)[0],
@@ -962,7 +994,7 @@ function createFake(seed = 20260101) {
 var fake = createFake();
 
 // src/index.ts
-var FLARE_VERSION = "0.4.0";
+var FLARE_VERSION = "0.5.0";
 export {
   DEFAULT_FILE_MAX_BYTES,
   FILE_CATEGORIES,
@@ -979,6 +1011,7 @@ export {
   camelCase,
   can,
   checkoutPaid,
+  clientResource,
   columnName,
   countries,
   countryName,

package/dist/{policy-CvfE-wCK.d.ts → policy-DaKcWZ5g.d.ts}

@@ -116,6 +116,7 @@ type Field = StringField | TextField | IntField | FloatField | BooleanField | Da
 type StoredField = Exclude<Field, HasManyField>;
 /** File categories usable in `file:[...]` and the MIME types each allows. */
 declare const FILE_CATEGORIES: {
+    readonly any: readonly ["*/*"];
     readonly image: readonly ["image/png", "image/jpeg", "image/gif", "image/webp", "image/avif"];
     readonly pdf: readonly ["application/pdf"];
     readonly video: readonly ["video/*"];
@@ -124,7 +125,7 @@ declare const FILE_CATEGORIES: {
     readonly csv: readonly ["text/csv"];
     readonly document: readonly ["application/msword", "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "application/vnd.oasis.opendocument.text"];
     readonly spreadsheet: readonly ["application/vnd.ms-excel", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", "application/vnd.oasis.opendocument.spreadsheet"];
-    readonly archive: readonly ["application/zip"];
+    readonly archive: readonly ["application/zip", "application/x-zip-compressed", "application/x-zip", "application/gzip", "application/x-gzip", "application/x-7z-compressed", "application/vnd.rar", "application/x-rar-compressed"];
 };
 type FileCategory = keyof typeof FILE_CATEGORIES;
 declare function mimeTypesFor(accept: readonly FileCategory[]): string[];
@@ -261,7 +262,11 @@ interface HookContext {
     } | null;
 }
 interface ResourceHooks {
-    /** Change or check the input before it's written. Return the input (changed or not), or throw to refuse. */
+    /**
+     * Change or check the input before it's written. Return the input (changed or not), or
+     * throw to refuse. It runs *before* validation, so it can fill in a field the caller
+     * couldn't supply — an order number, a slug — and what it returns is then validated.
+     */
     beforeCreate?: (input: Record<string, unknown>, context: HookContext) => Promise<Record<string, unknown>> | Record<string, unknown>;
     afterCreate?: (record: Record<string, unknown>, context: HookContext) => Promise<void> | void;
     beforeUpdate?: (input: Record<string, unknown>, context: HookContext & {
@@ -307,6 +312,22 @@ interface Resource<Fields extends Record<string, Field> = Record<string, Field>>
         record: RecordOf<Fields>;
     };
 }
+/**
+ * A resource as a client component can receive it: everything that describes the fields,
+ * without the code.
+ *
+ * `hooks` and `computed` hold functions, and a function can't cross from the server to
+ * the browser — React refuses a prop it wasn't told to expose, and the page fails to
+ * render. So a server component hands a client one `clientResource(resource)` instead.
+ * The `never` types below turn passing the whole resource into a type error, which is
+ * cheaper to find than the runtime one.
+ */
+type ClientResource<Fields extends Record<string, Field> = Record<string, Field>> = Omit<Resource<Fields>, "hooks" | "computed" | "$types"> & {
+    hooks?: never;
+    computed?: never;
+};
+/** The parts of a resource that are safe to send to the browser. */
+declare function clientResource<Fields extends Record<string, Field>>(resource: Resource<Fields>): ClientResource<Fields>;
 declare class ResourceDefinitionError extends Error {
     constructor(resource: string, message: string);
 }
@@ -314,7 +335,7 @@ declare class ResourceDefinitionError extends Error {
 declare function defaultFieldLabel(key: string, field: Field): string;
 declare function defineResource<const Fields extends Record<string, Field>>(config: ResourceConfig<Fields>): Resource<Fields>;
 /** Stored (column-backed) fields of a resource, in declaration order. */
-declare function storedFields(resource: Resource): [string, StoredField & {
+declare function storedFields(resource: Pick<Resource, "fields">): [string, StoredField & {
     label: string;
 }][];
 /** Database column name for a field key ("companyId" → "company_id"). */
@@ -356,4 +377,4 @@ declare function can(policy: Policy | undefined | null, role: string | null | un
 /** Actions `role` may perform, for hiding UI it can't use. */
 declare function allowedActions(policy: Policy | undefined | null, role: string | null | undefined): Record<Exclude<PolicyAction, "list">, boolean>;
 
-export { fileMaxBytes as A, type BelongsToField as B, type CreateInput as C, DEFAULT_FILE_MAX_BYTES as D, type EnumField as E, type Field as F, mimeTypesFor as G, type HasManyField as H, type IntField as I, storedFields as J, type MultiSelectField as M, type Policy as P, type Resource as R, type StoredField as S, type TextField as T, type UpdateInput as U, type BooleanField as a, type DateField as b, type DateTimeField as c, FILE_CATEGORIES as d, type FieldKind as e, type FieldValue as f, type FileCategory as g, type FileField as h, type FloatField as i, type PolicyAction as j, type PolicyConfig as k, PolicyError as l, RESERVED_FIELD_NAMES as m, type RecordOf as n, type ResourceConfig as o, ResourceDefinitionError as p, STRING_FORMATS as q, type StringField as r, type StringFormat as s, allowedActions as t, can as u, columnName as v, defaultFieldLabel as w, definePolicy as x, defineResource as y, field as z };
+export { defineResource as A, type BelongsToField as B, type CreateInput as C, DEFAULT_FILE_MAX_BYTES as D, type EnumField as E, type Field as F, field as G, type HasManyField as H, type IntField as I, fileMaxBytes as J, mimeTypesFor as K, storedFields as L, type MultiSelectField as M, type Policy as P, type Resource as R, type StoredField as S, type TextField as T, type UpdateInput as U, type BooleanField as a, type ClientResource as b, type DateField as c, type DateTimeField as d, FILE_CATEGORIES as e, type FieldKind as f, type FieldValue as g, type FileCategory as h, type FileField as i, type FloatField as j, type PolicyAction as k, type PolicyConfig as l, PolicyError as m, RESERVED_FIELD_NAMES as n, type RecordOf as o, type ResourceConfig as p, ResourceDefinitionError as q, STRING_FORMATS as r, type StringField as s, type StringFormat as t, allowedActions as u, can as v, clientResource as w, columnName as x, defaultFieldLabel as y, definePolicy as z };

package/dist/server.d.ts

@@ -1,6 +1,82 @@
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
-import { BaseSQLiteDatabase, SQLiteTable } from 'drizzle-orm/sqlite-core';
-import { S as StoredField, R as Resource, F as Field, P as Policy } from './policy-CvfE-wCK.js';
+import { BaseSQLiteDatabase, SQLiteTable, SQLiteColumn } from 'drizzle-orm/sqlite-core';
+import { S as StoredField, R as Resource, F as Field, P as Policy } from './policy-DaKcWZ5g.js';
+
+/**
+ * The handful of things a resource store needs a database to do.
+ *
+ * Everything that makes a Flare resource behave the way it does — validation, hooks,
+ * computed values, cursors, capped counts, the wording of a constraint error — lives in
+ * the store and is the same on every stack. What differs is how rows are actually read
+ * and written, and that is this interface: nine operations, described in the
+ * descriptor's terms rather than in SQL.
+ *
+ * Drizzle over SQLite is one implementation; Prisma over Postgres is another. A store
+ * built on either behaves identically, which is the whole point — the same descriptor
+ * has to mean the same thing on Cloudflare and on Vercel.
+ */
+type Row = Record<string, unknown>;
+/** What a list needs, before it becomes SQL. */
+interface RowsQuery {
+    /** Free-text search across the fields the descriptor marks searchable. */
+    search?: {
+        term: string;
+        fields: string[];
+    };
+    /** field → value, or null for "is null". */
+    filters: Record<string, unknown>;
+    sort: {
+        field: string;
+        direction: "asc" | "desc";
+    };
+    /**
+     * Keyset pagination: everything after (or before) this row, compared on
+     * `(sort field, id)` together so rows sharing a sort value are neither skipped nor
+     * repeated.
+     */
+    cursor?: {
+        field: string;
+        value: unknown;
+        id: string;
+        greaterThan: boolean;
+    };
+    limit: number;
+    /** Offset paging, for the page-number case. Never combined with a cursor. */
+    offset?: number;
+}
+/** A database refusing a write, in terms the store can turn into a message. */
+type ConstraintHit = {
+    kind: "unique";
+    column?: string;
+} | {
+    kind: "foreignKey";
+} | {
+    kind: "check";
+};
+interface ResourceRows {
+    /** The database handle a descriptor's hooks are given. Drizzle, or a Prisma client. */
+    readonly db: unknown;
+    find(query: RowsQuery): Promise<Row[]>;
+    /** How many rows match, giving up at `limit` so a huge table is never fully counted. */
+    countUpTo(query: Pick<RowsQuery, "search" | "filters">, limit: number): Promise<number>;
+    byId(id: string): Promise<Row | null>;
+    titles(ids: string[], titleField: string): Promise<{
+        id: string;
+        title: unknown;
+    }[]>;
+    insert(values: Row): Promise<Row>;
+    /** The saved row, or null when there was nothing with that id. */
+    update(id: string, values: Row): Promise<Row | null>;
+    /** Whether a row was actually removed. */
+    remove(id: string): Promise<boolean>;
+    /** Recognise a constraint violation, or hand the error back by returning undefined. */
+    constraint(error: unknown): ConstraintHit | undefined;
+}
+
+type AnyDatabase = BaseSQLiteDatabase<"sync" | "async", any, any>;
+declare function drizzleRows(table: SQLiteTable, getDb: () => AnyDatabase): ResourceRows & {
+    columns: Record<string, SQLiteColumn>;
+};
 
 interface ListQuery {
     page: number;
@@ -44,7 +120,6 @@ declare function parseListQuery(resource: Resource, params: URLSearchParams): {
     issues: QueryIssue[];
 };
 
-type AnyDatabase = BaseSQLiteDatabase<"sync" | "async", any, any>;
 type ResourceAction = "list" | "read" | "create" | "update" | "delete";
 interface FieldIssue {
     /** Dotted field path; "" for the whole body (e.g. unknown keys). */
@@ -106,8 +181,14 @@ interface ResourceStoreOptions {
         email: string;
         role?: string | null;
     } | null;
-    table: SQLiteTable;
-    getDb: () => AnyDatabase;
+    /**
+     * The Drizzle table and database, for the Cloudflare stack. Another stack passes
+     * `rows` instead — a Prisma-backed one, say — and everything else is identical.
+     */
+    table?: SQLiteTable;
+    getDb?: () => AnyDatabase;
+    /** Where rows come from, when it isn't Drizzle. */
+    rows?: ResourceRows;
     /**
      * Called after a write succeeds, for cache invalidation. Runs before the
      * operation returns, so a caller that revalidates tags can't hand back a
@@ -124,15 +205,15 @@ interface ResourceStoreOptions {
  */
 declare function createResourceStore(options: ResourceStoreOptions): {
     resource: Resource<Record<string, Field>>;
-    table: SQLiteTable<drizzle_orm_sqlite_core.TableConfig>;
+    table: SQLiteTable<drizzle_orm_sqlite_core.TableConfig> | undefined;
     /** `params`: page, perPage, sort, q, filter[field], cursor (as parsed by parseListQuery). */
     list(params: URLSearchParams): Promise<Result<ListResult>>;
     get(id: string): Promise<Result<Record<string, unknown>>>;
     /** Title-field values for a set of ids (for showing relations). Missing ids are omitted. */
     titles(ids: string[]): Promise<Record<string, string>>;
-    create(input: unknown): Promise<Result<Record<string, unknown>>>;
+    create(raw: unknown): Promise<Result<Record<string, unknown>>>;
     /** Partial update (PATCH semantics). */
-    update(id: string, input: unknown): Promise<Result<Record<string, unknown>>>;
+    update(id: string, raw: unknown): Promise<Result<Record<string, unknown>>>;
     /** Full replacement (PUT semantics): omitted fields go back to their default, or null when optional. */
     replace(id: string, input: unknown): Promise<Result<Record<string, unknown>>>;
     delete(id: string): Promise<Result<{
@@ -151,8 +232,11 @@ interface AuthorizeContext {
 type Authorize = (context: AuthorizeContext) => Response | void | Promise<Response | void>;
 interface ResourceHandlerOptions {
     resource: Resource;
-    table: SQLiteTable;
-    getDb: () => AnyDatabase;
+    /** Drizzle and D1, on the Cloudflare stack. Another stack passes `rows` instead. */
+    table?: SQLiteTable;
+    getDb?: () => AnyDatabase;
+    /** Where rows come from, when it isn't Drizzle — a Prisma-backed adapter, say. */
+    rows?: ResourceRows;
     authorize: Authorize;
     /** Who is making the request, for the descriptor's hooks. */
     currentUser?: ResourceStoreOptions["currentUser"];
@@ -178,12 +262,12 @@ declare function createResourceHandlers(options: ResourceHandlerOptions): {
     };
     store: {
         resource: Resource<Record<string, Field>>;
-        table: SQLiteTable<drizzle_orm_sqlite_core.TableConfig>;
+        table: SQLiteTable<drizzle_orm_sqlite_core.TableConfig> | undefined;
         list(params: URLSearchParams): Promise<Result<ListResult>>;
         get(id: string): Promise<Result<Record<string, unknown>>>;
         titles(ids: string[]): Promise<Record<string, string>>;
-        create(input: unknown): Promise<Result<Record<string, unknown>>>;
-        update(id: string, input: unknown): Promise<Result<Record<string, unknown>>>;
+        create(raw: unknown): Promise<Result<Record<string, unknown>>>;
+        update(id: string, raw: unknown): Promise<Result<Record<string, unknown>>>;
         replace(id: string, input: unknown): Promise<Result<Record<string, unknown>>>;
         delete(id: string): Promise<Result<{
             id: string;
@@ -191,6 +275,37 @@ declare function createResourceHandlers(options: ResourceHandlerOptions): {
     };
 };
 
+/**
+ * {@link ResourceRows} over Prisma and Postgres — the Next.js stack's half.
+ *
+ * The same nine operations the Drizzle adapter implements, expressed as Prisma queries.
+ * Everything a resource *means* — validation, hooks, computed values, the capped count,
+ * the wording of a unique-constraint error — stays in the store and is shared, so a
+ * descriptor behaves the same on either stack.
+ *
+ * Nothing here imports `@prisma/client`: a generated client is app-specific and this
+ * package can't depend on one. The delegate is described structurally instead, which is
+ * also what makes it easy to test without a database.
+ */
+
+/**
+ * The part of a Prisma model delegate a resource store uses.
+ *
+ * The arguments are loose on purpose. Prisma generates a precise argument type per
+ * model — `Prisma.ProductFindManyArgs` and so on — and describing them here would mean
+ * reproducing Prisma's generics for a client this package can't import. The queries are
+ * all built in this file, so there is exactly one place to get them right.
+ */
+interface PrismaDelegate {
+    findMany(args: any): Promise<any[]>;
+    findUnique(args: any): Promise<any>;
+    count(args: any): Promise<number>;
+    create(args: any): Promise<any>;
+    update(args: any): Promise<any>;
+    delete(args: any): Promise<any>;
+}
+declare function prismaRows(delegate: PrismaDelegate, client: unknown): ResourceRows;
+
 /**
  * An OpenAPI 3.1 document for an app's generated REST API, built at request time
  * from the same descriptors and policies the API itself runs on, so it can't drift.
@@ -218,4 +333,4 @@ interface OpenApiOptions {
 declare function fieldJsonSchema(def: StoredField): Schema;
 declare function openApiDocument(options: OpenApiOptions): Schema;
 
-export { type AnyDatabase, type Authorize, type AuthorizeContext, type ChangeEvent, type Failure, type FieldIssue, type ListQuery, type ListResult, type OpenApiOptions, type QueryIssue, type ResourceAction, type ResourceHandlerOptions, type ResourceStore, type ResourceStoreOptions, type Result, createResourceHandlers, createResourceStore, fieldJsonSchema, isFilterable, isSearchable, isSortable, openApiDocument, parseListQuery };
+export { type AnyDatabase, type Authorize, type AuthorizeContext, type ChangeEvent, type ConstraintHit, type Failure, type FieldIssue, type ListQuery, type ListResult, type OpenApiOptions, type PrismaDelegate, type QueryIssue, type ResourceAction, type ResourceHandlerOptions, type ResourceRows, type ResourceStore, type ResourceStoreOptions, type Result, type Row, type RowsQuery, createResourceHandlers, createResourceStore, drizzleRows, fieldJsonSchema, isFilterable, isSearchable, isSortable, openApiDocument, parseListQuery, prismaRows };

package/dist/server.js

@@ -1,10 +1,11 @@
 import {
   can,
+  columnName,
   createValidators,
   storedFields
-} from "./chunk-PWP4QEZV.js";
+} from "./chunk-VLHPSNQN.js";
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/entity.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/entity.js
 var entityKind = /* @__PURE__ */ Symbol.for("drizzle:entityKind");
 function is(value, type) {
   if (!value || typeof value !== "object") {
@@ -30,7 +31,7 @@ function is(value, type) {
   return false;
 }
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/column.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/column.js
 var Column = class {
   constructor(table, config) {
     this.table = table;
@@ -81,7 +82,7 @@ var Column = class {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/column-builder.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/column-builder.js
 var ColumnBuilder = class {
   static [entityKind] = "ColumnBuilder";
   config;
@@ -184,10 +185,10 @@ var ColumnBuilder = class {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/table.utils.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/table.utils.js
 var TableName = /* @__PURE__ */ Symbol.for("drizzle:Name");
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/pg-core/foreign-keys.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/pg-core/foreign-keys.js
 var ForeignKeyBuilder = class {
   static [entityKind] = "PgForeignKeyBuilder";
   /** @internal */
@@ -244,12 +245,12 @@ var ForeignKey = class {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/tracing-utils.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/tracing-utils.js
 function iife(fn, ...args) {
   return fn(...args);
 }
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/pg-core/unique-constraint.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/pg-core/unique-constraint.js
 function uniqueKeyName(table, columns) {
   return `${table[TableName]}_${columns.join("_")}_unique`;
 }
@@ -299,7 +300,7 @@ var UniqueConstraint = class {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/pg-core/utils/array.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/pg-core/utils/array.js
 function parsePgArrayValue(arrayString, startFrom, inQuotes) {
   for (let i = startFrom; i < arrayString.length; i++) {
     const char = arrayString[i];
@@ -375,7 +376,7 @@ function makePgArray(array) {
   }).join(",")}}`;
 }
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/pg-core/columns/common.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/pg-core/columns/common.js
 var PgColumnBuilder = class extends ColumnBuilder {
   foreignKeyConfigs = [];
   static [entityKind] = "PgColumnBuilder";
@@ -559,7 +560,7 @@ var PgArray = class _PgArray extends PgColumn {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/pg-core/columns/enum.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/pg-core/columns/enum.js
 var PgEnumObjectColumnBuilder = class extends PgColumnBuilder {
   static [entityKind] = "PgEnumObjectColumnBuilder";
   constructor(name, enumInstance) {
@@ -617,7 +618,7 @@ var PgEnumColumn = class extends PgColumn {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/subquery.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/subquery.js
 var Subquery = class {
   static [entityKind] = "Subquery";
   constructor(sql2, fields, alias, isWith = false, usedTables = []) {
@@ -638,10 +639,10 @@ var WithSubquery = class extends Subquery {
   static [entityKind] = "WithSubquery";
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/version.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/version.js
 var version = "0.45.2";
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/tracing.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/tracing.js
 var otel;
 var rawTracer;
 var tracer = {
@@ -676,10 +677,10 @@ var tracer = {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/view-common.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/view-common.js
 var ViewBaseConfig = /* @__PURE__ */ Symbol.for("drizzle:ViewBaseConfig");
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/table.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/table.js
 var Schema = /* @__PURE__ */ Symbol.for("drizzle:Schema");
 var Columns = /* @__PURE__ */ Symbol.for("drizzle:Columns");
 var ExtraConfigColumns = /* @__PURE__ */ Symbol.for("drizzle:ExtraConfigColumns");
@@ -735,7 +736,7 @@ var Table = class {
   }
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/sql/sql.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/sql/sql.js
 var FakePrimitiveParam = class {
   static [entityKind] = "FakePrimitiveParam";
 };
@@ -847,13 +848,13 @@ var SQL = class _SQL {
         };
       }
       if (is(chunk, Column)) {
-        const columnName = casing.getColumnCasing(chunk);
+        const columnName2 = casing.getColumnCasing(chunk);
         if (_config.invokeSource === "indexes") {
-          return { sql: escapeName(columnName), params: [] };
+          return { sql: escapeName(columnName2), params: [] };
         }
         const schemaName = chunk.table[Table.Symbol.Schema];
         return {
-          sql: chunk.table[IsAlias] || schemaName === void 0 ? escapeName(chunk.table[Table.Symbol.Name]) + "." + escapeName(columnName) : escapeName(schemaName) + "." + escapeName(chunk.table[Table.Symbol.Name]) + "." + escapeName(columnName),
+          sql: chunk.table[IsAlias] || schemaName === void 0 ? escapeName(chunk.table[Table.Symbol.Name]) + "." + escapeName(columnName2) : escapeName(schemaName) + "." + escapeName(chunk.table[Table.Symbol.Name]) + "." + escapeName(columnName2),
           params: []
         };
       }
@@ -1112,13 +1113,13 @@ Subquery.prototype.getSQL = function() {
   return new SQL([this]);
 };
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/utils.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/utils.js
 function getTableColumns(table) {
   return table[Table.Symbol.Columns];
 }
 var textDecoder = typeof TextDecoder === "undefined" ? null : new TextDecoder();
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/sql/expressions/conditions.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/sql/expressions/conditions.js
 function bindIfParam(value, column) {
   if (isDriverValueEncoder(column) && !isSQLWrapper(value) && !is(value, Param) && !is(value, Placeholder) && !is(value, Column) && !is(value, Table) && !is(value, View)) {
     return new Param(value, column);
@@ -1173,7 +1174,7 @@ function isNull(value) {
   return sql`${value} is null`;
 }
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/sql/expressions/select.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/sql/expressions/select.js
 function asc(column) {
   return sql`${column} asc`;
 }
@@ -1181,11 +1182,101 @@ function desc(column) {
   return sql`${column} desc`;
 }
 
-// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_b372b29e6d5511672c7f9f9d2ac40572/node_modules/drizzle-orm/sql/functions/aggregate.js
+// ../../node_modules/.pnpm/drizzle-orm@0.45.2_@cloudfl_21866ab18c10d2d988b916e06105fbce/node_modules/drizzle-orm/sql/functions/aggregate.js
 function count(expression) {
   return sql`count(${expression || sql.raw("*")})`.mapWith(Number);
 }
 
+// src/server/drizzle-rows.ts
+function errorText(error) {
+  const parts = [];
+  for (let current = error, depth = 0; current && depth < 5; depth++) {
+    if (current instanceof Error) {
+      parts.push(current.message);
+      current = current.cause;
+    } else {
+      parts.push(String(current));
+      break;
+    }
+  }
+  return parts.join(" | ");
+}
+function drizzleRows(table, getDb) {
+  const columns = getTableColumns(table);
+  const idColumn = columns.id;
+  const byId = (id) => eq(idColumn, id);
+  function matching(query) {
+    const conditions = [];
+    if (query.search && query.search.fields.length > 0) {
+      const pattern = `%${query.search.term.replace(/[\\%_]/g, (char) => `\\${char}`)}%`;
+      const searchable = query.search.fields.map((key) => columns[key]);
+      conditions.push(or(...searchable.map((column) => sql`${column} LIKE ${pattern} ESCAPE '\\'`)));
+    }
+    for (const [key, value] of Object.entries(query.filters)) {
+      conditions.push(value === null ? isNull(columns[key]) : eq(columns[key], value));
+    }
+    return conditions;
+  }
+  return {
+    columns,
+    get db() {
+      return getDb();
+    },
+    async find(query) {
+      const conditions = matching(query);
+      const sortColumn = columns[query.sort.field];
+      const descending = query.sort.direction === "desc";
+      const order = descending ? [desc(sortColumn), desc(idColumn)] : [asc(sortColumn), asc(idColumn)];
+      if (query.cursor) {
+        const { value, id, greaterThan } = query.cursor;
+        conditions.push(
+          greaterThan ? or(sql`${sortColumn} > ${value}`, and(sql`${sortColumn} = ${value}`, sql`${idColumn} > ${id}`)) : or(sql`${sortColumn} < ${value}`, and(sql`${sortColumn} = ${value}`, sql`${idColumn} < ${id}`))
+        );
+      }
+      const where = conditions.length ? and(...conditions) : void 0;
+      const statement = getDb().select().from(table).where(where).orderBy(...order).limit(query.limit);
+      const rows = query.offset ? await statement.offset(query.offset) : await statement;
+      return rows;
+    },
+    async countUpTo(query, limit) {
+      const conditions = matching(query);
+      const where = conditions.length ? and(...conditions) : void 0;
+      const db = getDb();
+      const [counted] = await db.select({ total: count() }).from(db.select({ id: idColumn }).from(table).where(where).limit(limit).as("capped"));
+      return counted?.total ?? 0;
+    },
+    async byId(id) {
+      const [record] = await getDb().select().from(table).where(byId(id)).limit(1);
+      return record ?? null;
+    },
+    async titles(ids, titleField) {
+      const titleColumn = columns[titleField] ?? idColumn;
+      const rows = await getDb().select({ id: idColumn, title: titleColumn }).from(table).where(inArray(idColumn, ids));
+      return rows;
+    },
+    async insert(values) {
+      const [record] = await getDb().insert(table).values(values).returning();
+      return record;
+    },
+    async update(id, values) {
+      const [record] = await getDb().update(table).set(values).where(byId(id)).returning();
+      return record ?? null;
+    },
+    async remove(id) {
+      const deleted = await getDb().delete(table).where(byId(id)).returning({ id: idColumn });
+      return deleted.length > 0;
+    },
+    constraint(error) {
+      const text = errorText(error);
+      const unique = /UNIQUE constraint failed: ([\w.]+(?:, [\w.]+)*)/.exec(text);
+      if (unique) return { kind: "unique", column: unique[1].split(", ")[0].split(".").pop() };
+      if (/FOREIGN KEY constraint failed/.test(text)) return { kind: "foreignKey" };
+      if (/CHECK constraint failed/.test(text)) return { kind: "check" };
+      return void 0;
+    }
+  };
+}
+
 // src/server/query.ts
 function encodeCursor(cursor) {
   const json2 = JSON.stringify([cursor.value, cursor.id, cursor.direction === "before" ? 0 : 1]);
@@ -1284,45 +1375,36 @@ function toCursorValue(value) {
   if (typeof value === "object") return String(value);
   return value;
 }
-function errorText(error) {
-  const parts = [];
-  for (let current = error, depth = 0; current && depth < 5; depth++) {
-    if (current instanceof Error) {
-      parts.push(current.message);
-      current = current.cause;
-    } else {
-      parts.push(String(current));
-      break;
-    }
-  }
-  return parts.join(" | ");
-}
 function createResourceStore(options) {
-  const { resource, table, getDb } = options;
+  const { resource, table } = options;
   const validators = createValidators(resource);
-  const columns = getTableColumns(table);
   const fields = storedFields(resource);
-  for (const key of ["id", "createdAt", "updatedAt", ...fields.map(([key2]) => key2)]) {
-    if (!columns[key]) {
-      throw new Error(`Resource "${resource.name}": table has no column for "${key}". Run \`flare sync-types\` and create a migration.`);
+  if (!options.rows && !(table && options.getDb)) {
+    throw new Error(`Resource "${resource.name}": a store needs either a Drizzle table and getDb, or rows.`);
+  }
+  const rows = options.rows ?? drizzleRows(table, options.getDb);
+  const columns = "columns" in rows ? rows.columns : void 0;
+  if (columns) {
+    for (const key of ["id", "createdAt", "updatedAt", ...fields.map(([key2]) => key2)]) {
+      if (!columns[key]) {
+        throw new Error(`Resource "${resource.name}": table has no column for "${key}". Run \`flare sync-types\` and create a migration.`);
+      }
     }
   }
-  const idColumn = columns.id;
-  const columnKeyByName = new Map(Object.entries(columns).map(([key, column]) => [column.name, key]));
+  const keyForColumn = (name) => columns ? Object.entries(columns).find(([, column]) => column.name === name)?.[0] : ["id", "createdAt", "updatedAt", ...fields.map(([key]) => key)].find((key) => columnName(key) === name || key === name);
   const fail = (status, error, extra = {}) => ({ ok: false, status, error, ...extra });
   function constraintFailure(error, action) {
-    const text = errorText(error);
-    const unique = /UNIQUE constraint failed: ([\w.]+(?:, [\w.]+)*)/.exec(text);
-    if (unique) {
-      const key = columnKeyByName.get(unique[1].split(", ")[0].split(".").pop());
+    const hit = rows.constraint(error);
+    if (!hit) return void 0;
+    if (hit.kind === "unique") {
+      const key = hit.column ? keyForColumn(hit.column) : void 0;
       const label = key ? resource.fields[key]?.label ?? key : "Value";
       return fail(409, `${label} is already taken.`, key ? { field: key } : {});
     }
-    if (/FOREIGN KEY constraint failed/.test(text)) {
+    if (hit.kind === "foreignKey") {
       return action === "delete" ? fail(409, `This ${resource.label.toLowerCase()} is still referenced by other records.`) : fail(422, "A related record doesn't exist.");
     }
-    if (/CHECK constraint failed/.test(text)) return fail(422, "A value is outside its allowed options.");
-    return void 0;
+    return fail(422, "A value is outside its allowed options.");
   }
   async function guarded(action, work) {
     try {
@@ -1347,7 +1429,6 @@ function createResourceStore(options) {
     return result;
   }
   const invalid = (issues) => fail(422, "Validation failed.", { issues: issues.map((issue) => ({ path: issue.path.map(String).join("."), message: issue.message })) });
-  const byId = (id) => eq(idColumn, id);
   const notFound = () => fail(404, `${resource.label} not found.`);
   const computed = Object.entries(resource.computed ?? {});
   const withComputed = (row) => {
@@ -1363,7 +1444,7 @@ function createResourceStore(options) {
     return result;
   };
   const hooks = resource.hooks ?? {};
-  const hookContext = async () => ({ db: getDb(), user: await options.currentUser?.() ?? null });
+  const hookContext = async () => ({ db: rows.db, user: await options.currentUser?.() ?? null });
   return {
     resource,
     table,
@@ -1372,50 +1453,35 @@ function createResourceStore(options) {
       const parsed = parseListQuery(resource, params);
       if ("issues" in parsed) return fail(400, "Invalid query.", { queryIssues: parsed.issues });
       const { page, perPage, sort, q, filters, cursor } = parsed.query;
-      const conditions = [];
-      if (q) {
-        const pattern = `%${q.replace(/[\\%_]/g, (char) => `\\${char}`)}%`;
-        const searchable = fields.filter(([, def]) => isSearchable(def)).map(([key]) => columns[key]);
-        if (searchable.length) conditions.push(or(...searchable.map((column) => sql`${column} LIKE ${pattern} ESCAPE '\\'`)));
-      }
-      for (const [key, value] of Object.entries(filters)) {
-        conditions.push(value === null ? isNull(columns[key]) : eq(columns[key], value));
-      }
-      const filterWhere = conditions.length ? and(...conditions) : void 0;
-      const sortColumn = columns[sort.field];
+      const searchable = fields.filter(([, def]) => isSearchable(def)).map(([key]) => key);
+      const matching = { search: q ? { term: q, fields: searchable } : void 0, filters };
       const backwards = cursor?.direction === "before";
       const descending = backwards ? sort.direction === "asc" : sort.direction === "desc";
-      const order = descending ? [desc(sortColumn), desc(idColumn)] : [asc(sortColumn), asc(idColumn)];
-      const pageConditions = [...conditions];
-      if (cursor) {
-        const value = cursor.value;
-        pageConditions.push(
-          descending ? or(sql`${sortColumn} < ${value}`, and(sql`${sortColumn} = ${value}`, sql`${idColumn} < ${cursor.id}`)) : or(sql`${sortColumn} > ${value}`, and(sql`${sortColumn} = ${value}`, sql`${idColumn} > ${cursor.id}`))
-        );
-      }
-      const where = pageConditions.length ? and(...pageConditions) : void 0;
-      const db = getDb();
-      const query = db.select().from(table).where(where).orderBy(...order).limit(perPage + 1);
-      const [found, counted] = await Promise.all([
-        cursor ? query : query.offset((page - 1) * perPage),
+      const [found, counting] = await Promise.all([
         // One row past the limit is enough to know there's more without counting it all.
-        db.select({ total: count() }).from(db.select({ id: idColumn }).from(table).where(filterWhere).limit(COUNT_LIMIT + 1).as("capped"))
+        rows.find({
+          ...matching,
+          sort: { field: sort.field, direction: descending ? "desc" : "asc" },
+          cursor: cursor ? { field: sort.field, value: cursor.value, id: cursor.id, greaterThan: !descending } : void 0,
+          limit: perPage + 1,
+          offset: cursor ? void 0 : (page - 1) * perPage
+        }),
+        rows.countUpTo(matching, COUNT_LIMIT + 1)
       ]);
       const hasMore = found.length > perPage;
-      const rows = (hasMore ? found.slice(0, perPage) : found).map(withComputed);
-      if (backwards) rows.reverse();
-      const counting = counted[0]?.total ?? 0;
+      const page_ = (hasMore ? found.slice(0, perPage) : found).map(withComputed);
+      if (backwards) page_.reverse();
       const exactTotal = counting <= COUNT_LIMIT;
       const total = exactTotal ? counting : COUNT_LIMIT;
-      const first = rows[0];
-      const last = rows[rows.length - 1];
+      const first = page_[0];
+      const last = page_[page_.length - 1];
       const moreAfter = backwards ? true : hasMore;
       const moreBefore = backwards ? hasMore : Boolean(cursor) || page > 1;
       const cursorFor = (row, direction) => row ? encodeCursor({ value: toCursorValue(row[sort.field]), id: String(row.id), direction }) : void 0;
       return {
         ok: true,
         data: {
-          data: rows,
+          data: page_,
           meta: {
             page,
             perPage,
@@ -1429,40 +1495,40 @@ function createResourceStore(options) {
       };
     },
     async get(id) {
-      const [record] = await getDb().select().from(table).where(byId(id)).limit(1);
+      const record = await rows.byId(id);
       return record ? { ok: true, data: withComputed(record) } : notFound();
     },
     /** Title-field values for a set of ids (for showing relations). Missing ids are omitted. */
     async titles(ids) {
       const unique = [...new Set(ids.filter(Boolean))];
       if (unique.length === 0) return {};
-      const titleColumn = columns[resource.titleField] ?? idColumn;
-      const rows = await getDb().select({ id: idColumn, title: titleColumn }).from(table).where(inArray(idColumn, unique));
-      return Object.fromEntries(rows.map((row) => [row.id, row.title == null ? row.id : String(row.title)]));
+      const found = await rows.titles(unique, resource.titleField);
+      return Object.fromEntries(found.map((row) => [row.id, row.title == null ? row.id : String(row.title)]));
     },
-    create(input) {
-      const result = validators.create.safeParse(input);
-      if (!result.success) return Promise.resolve(invalid(result.error.issues));
+    create(raw) {
       return writing("create", async () => {
         const context = await hookContext();
-        const input2 = hooks.beforeCreate ? await hooks.beforeCreate({ ...result.data }, context) : result.data;
+        const supplied = hooks.beforeCreate ? await hooks.beforeCreate({ ...raw ?? {} }, context) : raw;
+        const result = validators.create.safeParse(supplied);
+        if (!result.success) return invalid(result.error.issues);
+        const input = result.data;
         const now = /* @__PURE__ */ new Date();
-        const [record] = await getDb().insert(table).values({ ...input2, id: crypto.randomUUID(), createdAt: now, updatedAt: now }).returning();
+        const record = await rows.insert({ ...input, id: crypto.randomUUID(), createdAt: now, updatedAt: now });
         const saved = withComputed(record);
         await hooks.afterCreate?.(saved, context);
         return { ok: true, data: saved };
       });
     },
     /** Partial update (PATCH semantics). */
-    update(id, input) {
-      const result = validators.update.safeParse(input);
-      if (!result.success) return Promise.resolve(invalid(result.error.issues));
+    update(id, raw) {
       return writing("update", async () => {
         const context = await hookContext();
-        const [existing] = hooks.beforeUpdate || hooks.afterUpdate ? await getDb().select().from(table).where(byId(id)).limit(1) : [];
-        const current = existing ?? null;
-        const input2 = hooks.beforeUpdate ? await hooks.beforeUpdate({ ...result.data }, { ...context, id, current }) : result.data;
-        const [record] = await getDb().update(table).set({ ...input2, updatedAt: /* @__PURE__ */ new Date() }).where(byId(id)).returning();
+        const current = hooks.beforeUpdate || hooks.afterUpdate ? await rows.byId(id) : null;
+        const supplied = hooks.beforeUpdate ? await hooks.beforeUpdate({ ...raw ?? {} }, { ...context, id, current }) : raw;
+        const result = validators.update.safeParse(supplied);
+        if (!result.success) return invalid(result.error.issues);
+        const input = result.data;
+        const record = await rows.update(id, { ...input, updatedAt: /* @__PURE__ */ new Date() });
         if (!record) return notFound();
         const saved = withComputed(record);
         await hooks.afterUpdate?.(saved, { ...context, previous: current });
@@ -1479,7 +1545,7 @@ function createResourceStore(options) {
           values[key] = "default" in def && def.default !== void 0 ? def.default : def.required ? void 0 : null;
         }
         Object.assign(values, result.data, { updatedAt: /* @__PURE__ */ new Date() });
-        const [record] = await getDb().update(table).set(values).where(byId(id)).returning();
+        const record = await rows.update(id, values);
         return record ? { ok: true, data: withComputed(record) } : notFound();
       });
     },
@@ -1487,11 +1553,9 @@ function createResourceStore(options) {
       return writing("delete", async () => {
         const context = await hookContext();
         if (hooks.beforeDelete) {
-          const [existing] = await getDb().select().from(table).where(byId(id)).limit(1);
-          await hooks.beforeDelete({ ...context, id, current: existing ?? null });
+          await hooks.beforeDelete({ ...context, id, current: await rows.byId(id) });
         }
-        const deleted = await getDb().delete(table).where(byId(id)).returning({ id: idColumn });
-        if (deleted.length === 0) return notFound();
+        if (!await rows.remove(id)) return notFound();
         await hooks.afterDelete?.({ ...context, id });
         return { ok: true, data: { id } };
       });
@@ -1584,6 +1648,99 @@ function createResourceHandlers(options) {
   };
 }
 
+// src/server/prisma-rows.ts
+var NOT_FOUND = "P2025";
+var codeOf = (error) => typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
+function uniqueColumn(error) {
+  const meta = error.meta;
+  if (!meta) return void 0;
+  const target = meta.target;
+  if (Array.isArray(target) && target.length > 0) return String(target[0]);
+  if (typeof target === "string") return fromIndexName(target);
+  const cause = meta.driverAdapterError?.cause;
+  const constraint = cause?.constraint;
+  if (constraint?.fields?.length) return constraint.fields[0];
+  if (constraint?.index) return fromIndexName(constraint.index);
+  return void 0;
+}
+function fromIndexName(name) {
+  const match = /^.*?_(.+)_key$/.exec(name);
+  return match ? match[1] : name;
+}
+function prismaRows(delegate, client) {
+  function matching(query) {
+    const where = { ...query.filters };
+    if (query.search && query.search.fields.length > 0) {
+      where.OR = query.search.fields.map((field) => ({ [field]: { contains: query.search.term, mode: "insensitive" } }));
+    }
+    return where;
+  }
+  return {
+    db: client,
+    async find(query) {
+      const where = matching(query);
+      if (query.cursor) {
+        const { field, value, id, greaterThan } = query.cursor;
+        const op = greaterThan ? "gt" : "lt";
+        const keyset = [{ [field]: { [op]: value } }, { AND: [{ [field]: value }, { id: { [op]: id } }] }];
+        where.AND = [...where.AND ?? [], { OR: keyset }];
+      }
+      return delegate.findMany({
+        where,
+        orderBy: [{ [query.sort.field]: query.sort.direction }, { id: query.sort.direction }],
+        take: query.limit,
+        ...query.offset ? { skip: query.offset } : {}
+      });
+    },
+    countUpTo(query, limit) {
+      return delegate.count({ where: matching(query), take: limit });
+    },
+    byId(id) {
+      return delegate.findUnique({ where: { id } });
+    },
+    async titles(ids, titleField) {
+      const rows = await delegate.findMany({ where: { id: { in: ids } }, select: { id: true, [titleField]: true } });
+      return rows.map((row) => ({ id: String(row.id), title: row[titleField] }));
+    },
+    insert(values) {
+      return delegate.create({ data: values });
+    },
+    async update(id, values) {
+      try {
+        return await delegate.update({ where: { id }, data: values });
+      } catch (error) {
+        if (codeOf(error) === NOT_FOUND) return null;
+        throw error;
+      }
+    },
+    async remove(id) {
+      try {
+        await delegate.delete({ where: { id } });
+        return true;
+      } catch (error) {
+        if (codeOf(error) === NOT_FOUND) return false;
+        throw error;
+      }
+    },
+    constraint(error) {
+      switch (codeOf(error)) {
+        case "P2002":
+          return { kind: "unique", column: uniqueColumn(error) };
+        case "P2003":
+        case "P2014":
+          return { kind: "foreignKey" };
+        // A value outside its type, too long for its column, or null where it can't be.
+        case "P2000":
+        case "P2011":
+        case "P2020":
+          return { kind: "check" };
+        default:
+          return void 0;
+      }
+    }
+  };
+}
+
 // src/server/openapi.ts
 var E164 = "^\\+[1-9]\\d{6,14}$";
 function fieldJsonSchema(def) {
@@ -1857,10 +2014,12 @@ function openApiDocument(options) {
 export {
   createResourceHandlers,
   createResourceStore,
+  drizzleRows,
   fieldJsonSchema,
   isFilterable,
   isSearchable,
   isSortable,
   openApiDocument,
-  parseListQuery
+  parseListQuery,
+  prismaRows
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/core",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Flare runtime: resource descriptors, field grammar, and Cloudflare-native helpers",
   "license": "MIT",
   "author": "Muke Johnbaptist",