@geekmidas/db 10.0.0-alpha.2 → 10.0.0-alpha.21

package/dist/pg/url.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"url.cjs","names":["schema: string","address: PostgresAddress","MissingDatabaseHost","MissingDatabaseName"],"sources":["../../src/pg/url.ts"],"sourcesContent":["/**\n * Composing a `postgres://` connection string.\n *\n * One direction only. Parsing exists in `pg` already — every consumer hands the\n * string straight to `new Pool({ connectionString })` — so a parser here would\n * be surface whose only caller is its own round-trip test.\n *\n * What is *not* already solved is composition: a provisioned instance exposes\n * host, port, database, username, and password as five separate values, and the\n * construct reads one URL. Doing that join by hand is where `search_path`\n * quietly goes missing.\n *\n * A URL built here is a secret — it carries the role's password. See\n * {@link redactDatabaseUrl} before writing one anywhere.\n */\n\nimport { MissingDatabaseHost, MissingDatabaseName } from '../errors';\n\n/** What a Postgres connection string addresses. */\nexport interface PostgresAddress {\n\thost: string;\n\tport?: number;\n\t/** The logical database. */\n\tdatabase: string;\n\t/** The role connecting — which is what decides DDL versus DML. */\n\tusername?: string;\n\tpassword?: string;\n\t/**\n\t * The schema to resolve unqualified names against.\n\t *\n\t * Normally pinned on the *role* instead (`ALTER ROLE … SET search_path`), so\n\t * it does not appear in the URL at all. It is carried here for the one case\n\t * with no role of its own to pin — connecting as the cluster master under\n\t * `roles: false` — where without it every query looks in `public`.\n\t *\n\t * Postgres-specific by nature, not just by spelling: it becomes a libpq\n\t * connection option, and no other engine accepts one. MySQL has no schemas\n\t * distinct from databases at all.\n\t */\n\tsearchPath?: string;\n\t/** Off only for local development, where there is no certificate to verify. */\n\tssl?: boolean;\n}\n\nconst SCHEME = 'postgres:';\n\nconst DEFAULT_PORT = 5432;\n\n/**\n * `search_path` travels as a libpq connection option, not a query parameter.\n * The server reads `options`; a plain `?search_path=app` is accepted by the URL\n * parser, ignored by the server, and produces a database that looks empty.\n * The `-c` prefix is what makes it a runtime configuration setting.\n */\nfunction searchPathOption(schema: string): string {\n\treturn `-c search_path=${schema}`;\n}\n\n/** Compose an address into a connection string. */\nexport function build(address: PostgresAddress): string {\n\tconst { host, port, database, username, password, searchPath, ssl } = address;\n\n\tif (!host) throw new MissingDatabaseHost();\n\tif (!database) throw new MissingDatabaseName();\n\n\tconst url = new URL(`${SCHEME}//`);\n\turl.hostname = host;\n\tif (port && port !== DEFAULT_PORT) url.port = String(port);\n\t// Username before password: WHATWG URL drops a password set without one.\n\tif (username) url.username = encodeURIComponent(username);\n\tif (password) url.password = encodeURIComponent(password);\n\turl.pathname = `/${database}`;\n\n\tif (searchPath) url.searchParams.set('options', searchPathOption(searchPath));\n\tif (ssl === false) url.searchParams.set('sslmode', 'disable');\n\n\treturn url.toString();\n}\n"],"mappings":";;;AA4CA,MAAM,SAAS;AAEf,MAAM,eAAe;;;;;;;AAQrB,SAAS,iBAAiBA,QAAwB;AACjD,SAAQ,iBAAiB,OAAO;AAChC;;AAGD,SAAgB,MAAMC,SAAkC;CACvD,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,YAAY,KAAK,GAAG;AAEtE,MAAK,KAAM,OAAM,IAAIC;AACrB,MAAK,SAAU,OAAM,IAAIC;CAEzB,MAAM,MAAM,IAAI,KAAK,EAAE,OAAO;AAC9B,KAAI,WAAW;AACf,KAAI,QAAQ,SAAS,aAAc,KAAI,OAAO,OAAO,KAAK;AAE1D,KAAI,SAAU,KAAI,WAAW,mBAAmB,SAAS;AACzD,KAAI,SAAU,KAAI,WAAW,mBAAmB,SAAS;AACzD,KAAI,YAAY,GAAG,SAAS;AAE5B,KAAI,WAAY,KAAI,aAAa,IAAI,WAAW,iBAAiB,WAAW,CAAC;AAC7E,KAAI,QAAQ,MAAO,KAAI,aAAa,IAAI,WAAW,UAAU;AAE7D,QAAO,IAAI,UAAU;AACrB"}
+{"version":3,"file":"url.cjs","names":["MissingDatabaseHost","MissingDatabaseName"],"sources":["../../src/pg/url.ts"],"sourcesContent":["/**\n * Composing a `postgres://` connection string.\n *\n * One direction only. Parsing exists in `pg` already — every consumer hands the\n * string straight to `new Pool({ connectionString })` — so a parser here would\n * be surface whose only caller is its own round-trip test.\n *\n * What is *not* already solved is composition: a provisioned instance exposes\n * host, port, database, username, and password as five separate values, and the\n * construct reads one URL. Doing that join by hand is where `search_path`\n * quietly goes missing.\n *\n * A URL built here is a secret — it carries the role's password. See\n * {@link redactDatabaseUrl} before writing one anywhere.\n */\n\nimport { MissingDatabaseHost, MissingDatabaseName } from '../errors';\n\n/** What a Postgres connection string addresses. */\nexport interface PostgresAddress {\n\thost: string;\n\tport?: number;\n\t/** The logical database. */\n\tdatabase: string;\n\t/** The role connecting — which is what decides DDL versus DML. */\n\tusername?: string;\n\tpassword?: string;\n\t/**\n\t * The schema to resolve unqualified names against.\n\t *\n\t * Normally pinned on the *role* instead (`ALTER ROLE … SET search_path`), so\n\t * it does not appear in the URL at all. It is carried here for the one case\n\t * with no role of its own to pin — connecting as the cluster master under\n\t * `roles: false` — where without it every query looks in `public`.\n\t *\n\t * Postgres-specific by nature, not just by spelling: it becomes a libpq\n\t * connection option, and no other engine accepts one. MySQL has no schemas\n\t * distinct from databases at all.\n\t */\n\tsearchPath?: string;\n\t/** Off only for local development, where there is no certificate to verify. */\n\tssl?: boolean;\n}\n\nconst SCHEME = 'postgres:';\n\nconst DEFAULT_PORT = 5432;\n\n/**\n * `search_path` travels as a libpq connection option, not a query parameter.\n * The server reads `options`; a plain `?search_path=app` is accepted by the URL\n * parser, ignored by the server, and produces a database that looks empty.\n * The `-c` prefix is what makes it a runtime configuration setting.\n */\nfunction searchPathOption(schema: string): string {\n\treturn `-c search_path=${schema}`;\n}\n\n/** Compose an address into a connection string. */\nexport function build(address: PostgresAddress): string {\n\tconst { host, port, database, username, password, searchPath, ssl } = address;\n\n\tif (!host) throw new MissingDatabaseHost();\n\tif (!database) throw new MissingDatabaseName();\n\n\tconst url = new URL(`${SCHEME}//`);\n\turl.hostname = host;\n\tif (port && port !== DEFAULT_PORT) url.port = String(port);\n\t// Username before password: WHATWG URL drops a password set without one.\n\tif (username) url.username = encodeURIComponent(username);\n\tif (password) url.password = encodeURIComponent(password);\n\turl.pathname = `/${database}`;\n\n\tif (searchPath) url.searchParams.set('options', searchPathOption(searchPath));\n\tif (ssl === false) url.searchParams.set('sslmode', 'disable');\n\n\treturn url.toString();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA4CA,MAAM,SAAS;AAEf,MAAM,eAAe;;;;;;;AAQrB,SAAS,iBAAiB,QAAwB;CACjD,OAAO,kBAAkB;AAC1B;;AAGA,SAAgB,MAAM,SAAkC;CACvD,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,YAAY,QAAQ;CAEtE,IAAI,CAAC,MAAM,MAAM,IAAIA,eAAAA,oBAAoB;CACzC,IAAI,CAAC,UAAU,MAAM,IAAIC,eAAAA,oBAAoB;CAE7C,MAAM,MAAM,IAAI,IAAI,GAAG,OAAO,GAAG;CACjC,IAAI,WAAW;CACf,IAAI,QAAQ,SAAS,cAAc,IAAI,OAAO,OAAO,IAAI;CAEzD,IAAI,UAAU,IAAI,WAAW,mBAAmB,QAAQ;CACxD,IAAI,UAAU,IAAI,WAAW,mBAAmB,QAAQ;CACxD,IAAI,WAAW,IAAI;CAEnB,IAAI,YAAY,IAAI,aAAa,IAAI,WAAW,iBAAiB,UAAU,CAAC;CAC5E,IAAI,QAAQ,OAAO,IAAI,aAAa,IAAI,WAAW,SAAS;CAE5D,OAAO,IAAI,SAAS;AACrB"}

package/dist/pg/url.d.cts

@@ -15,7 +15,7 @@
  * {@link redactDatabaseUrl} before writing one anywhere.
  */
 /** What a Postgres connection string addresses. */
-interface PostgresAddress {
+export interface PostgresAddress {
   host: string;
   port?: number;
   /** The logical database. */
@@ -40,8 +40,6 @@ interface PostgresAddress {
   ssl?: boolean;
 }
 /** Compose an address into a connection string. */
-declare function build(address: PostgresAddress): string;
-//# sourceMappingURL=url.d.ts.map
+export declare function build(address: PostgresAddress): string;
 //#endregion
-export { PostgresAddress, build };
 //# sourceMappingURL=url.d.cts.map

package/dist/pg/url.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.cts","names":[],"sources":["../../src/pg/url.ts"],"sourcesContent":[],"mappings":";;AAmBA;AAwCA;;;;;;;;;;;;;;UAxCiB,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;iBAwCD,KAAA,UAAe"}
+{"version":3,"file":"url.d.cts","names":[],"sources":["../../src/pg/url.ts"],"mappings":";;;;;;;;;;;;;;;;;iBAmBiB;EAChB;EACA;;EAEA;;EAEA;EACA;;;;;;;;;;;;;EAaA;;EAEA;;;wBAkBe,MAAM,SAAS"}

package/dist/pg/url.d.mts

@@ -15,7 +15,7 @@
  * {@link redactDatabaseUrl} before writing one anywhere.
  */
 /** What a Postgres connection string addresses. */
-interface PostgresAddress {
+export interface PostgresAddress {
   host: string;
   port?: number;
   /** The logical database. */
@@ -40,8 +40,6 @@ interface PostgresAddress {
   ssl?: boolean;
 }
 /** Compose an address into a connection string. */
-declare function build(address: PostgresAddress): string;
-//# sourceMappingURL=url.d.ts.map
+export declare function build(address: PostgresAddress): string;
 //#endregion
-export { PostgresAddress, build };
 //# sourceMappingURL=url.d.mts.map

package/dist/pg/url.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.mts","names":[],"sources":["../../src/pg/url.ts"],"sourcesContent":[],"mappings":";;AAmBA;AAwCA;;;;;;;;;;;;;;UAxCiB,eAAA;;;;;;;;;;;;;;;;;;;;;;;;;iBAwCD,KAAA,UAAe"}
+{"version":3,"file":"url.d.mts","names":[],"sources":["../../src/pg/url.ts"],"mappings":";;;;;;;;;;;;;;;;;iBAmBiB;EAChB;EACA;;EAEA;;EAEA;EACA;;;;;;;;;;;;;EAaA;;EAEA;;;wBAkBe,MAAM,SAAS"}

package/dist/pg/url.mjs

@@ -1,6 +1,20 @@
-import { MissingDatabaseHost, MissingDatabaseName } from "../errors-CfFCan-X.mjs";
-
+import { MissingDatabaseHost, MissingDatabaseName } from "../errors.mjs";
 //#region src/pg/url.ts
+/**
+* Composing a `postgres://` connection string.
+*
+* One direction only. Parsing exists in `pg` already — every consumer hands the
+* string straight to `new Pool({ connectionString })` — so a parser here would
+* be surface whose only caller is its own round-trip test.
+*
+* What is *not* already solved is composition: a provisioned instance exposes
+* host, port, database, username, and password as five separate values, and the
+* construct reads one URL. Doing that join by hand is where `search_path`
+* quietly goes missing.
+*
+* A URL built here is a secret — it carries the role's password. See
+* {@link redactDatabaseUrl} before writing one anywhere.
+*/
 const SCHEME = "postgres:";
 const DEFAULT_PORT = 5432;
 /**
@@ -27,7 +41,7 @@ function build(address) {
 	if (ssl === false) url.searchParams.set("sslmode", "disable");
 	return url.toString();
 }
-
 //#endregion
 export { build };
+
 //# sourceMappingURL=url.mjs.map

package/dist/pg/url.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"url.mjs","names":["schema: string","address: PostgresAddress"],"sources":["../../src/pg/url.ts"],"sourcesContent":["/**\n * Composing a `postgres://` connection string.\n *\n * One direction only. Parsing exists in `pg` already — every consumer hands the\n * string straight to `new Pool({ connectionString })` — so a parser here would\n * be surface whose only caller is its own round-trip test.\n *\n * What is *not* already solved is composition: a provisioned instance exposes\n * host, port, database, username, and password as five separate values, and the\n * construct reads one URL. Doing that join by hand is where `search_path`\n * quietly goes missing.\n *\n * A URL built here is a secret — it carries the role's password. See\n * {@link redactDatabaseUrl} before writing one anywhere.\n */\n\nimport { MissingDatabaseHost, MissingDatabaseName } from '../errors';\n\n/** What a Postgres connection string addresses. */\nexport interface PostgresAddress {\n\thost: string;\n\tport?: number;\n\t/** The logical database. */\n\tdatabase: string;\n\t/** The role connecting — which is what decides DDL versus DML. */\n\tusername?: string;\n\tpassword?: string;\n\t/**\n\t * The schema to resolve unqualified names against.\n\t *\n\t * Normally pinned on the *role* instead (`ALTER ROLE … SET search_path`), so\n\t * it does not appear in the URL at all. It is carried here for the one case\n\t * with no role of its own to pin — connecting as the cluster master under\n\t * `roles: false` — where without it every query looks in `public`.\n\t *\n\t * Postgres-specific by nature, not just by spelling: it becomes a libpq\n\t * connection option, and no other engine accepts one. MySQL has no schemas\n\t * distinct from databases at all.\n\t */\n\tsearchPath?: string;\n\t/** Off only for local development, where there is no certificate to verify. */\n\tssl?: boolean;\n}\n\nconst SCHEME = 'postgres:';\n\nconst DEFAULT_PORT = 5432;\n\n/**\n * `search_path` travels as a libpq connection option, not a query parameter.\n * The server reads `options`; a plain `?search_path=app` is accepted by the URL\n * parser, ignored by the server, and produces a database that looks empty.\n * The `-c` prefix is what makes it a runtime configuration setting.\n */\nfunction searchPathOption(schema: string): string {\n\treturn `-c search_path=${schema}`;\n}\n\n/** Compose an address into a connection string. */\nexport function build(address: PostgresAddress): string {\n\tconst { host, port, database, username, password, searchPath, ssl } = address;\n\n\tif (!host) throw new MissingDatabaseHost();\n\tif (!database) throw new MissingDatabaseName();\n\n\tconst url = new URL(`${SCHEME}//`);\n\turl.hostname = host;\n\tif (port && port !== DEFAULT_PORT) url.port = String(port);\n\t// Username before password: WHATWG URL drops a password set without one.\n\tif (username) url.username = encodeURIComponent(username);\n\tif (password) url.password = encodeURIComponent(password);\n\turl.pathname = `/${database}`;\n\n\tif (searchPath) url.searchParams.set('options', searchPathOption(searchPath));\n\tif (ssl === false) url.searchParams.set('sslmode', 'disable');\n\n\treturn url.toString();\n}\n"],"mappings":";;;AA4CA,MAAM,SAAS;AAEf,MAAM,eAAe;;;;;;;AAQrB,SAAS,iBAAiBA,QAAwB;AACjD,SAAQ,iBAAiB,OAAO;AAChC;;AAGD,SAAgB,MAAMC,SAAkC;CACvD,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,YAAY,KAAK,GAAG;AAEtE,MAAK,KAAM,OAAM,IAAI;AACrB,MAAK,SAAU,OAAM,IAAI;CAEzB,MAAM,MAAM,IAAI,KAAK,EAAE,OAAO;AAC9B,KAAI,WAAW;AACf,KAAI,QAAQ,SAAS,aAAc,KAAI,OAAO,OAAO,KAAK;AAE1D,KAAI,SAAU,KAAI,WAAW,mBAAmB,SAAS;AACzD,KAAI,SAAU,KAAI,WAAW,mBAAmB,SAAS;AACzD,KAAI,YAAY,GAAG,SAAS;AAE5B,KAAI,WAAY,KAAI,aAAa,IAAI,WAAW,iBAAiB,WAAW,CAAC;AAC7E,KAAI,QAAQ,MAAO,KAAI,aAAa,IAAI,WAAW,UAAU;AAE7D,QAAO,IAAI,UAAU;AACrB"}
+{"version":3,"file":"url.mjs","names":[],"sources":["../../src/pg/url.ts"],"sourcesContent":["/**\n * Composing a `postgres://` connection string.\n *\n * One direction only. Parsing exists in `pg` already — every consumer hands the\n * string straight to `new Pool({ connectionString })` — so a parser here would\n * be surface whose only caller is its own round-trip test.\n *\n * What is *not* already solved is composition: a provisioned instance exposes\n * host, port, database, username, and password as five separate values, and the\n * construct reads one URL. Doing that join by hand is where `search_path`\n * quietly goes missing.\n *\n * A URL built here is a secret — it carries the role's password. See\n * {@link redactDatabaseUrl} before writing one anywhere.\n */\n\nimport { MissingDatabaseHost, MissingDatabaseName } from '../errors';\n\n/** What a Postgres connection string addresses. */\nexport interface PostgresAddress {\n\thost: string;\n\tport?: number;\n\t/** The logical database. */\n\tdatabase: string;\n\t/** The role connecting — which is what decides DDL versus DML. */\n\tusername?: string;\n\tpassword?: string;\n\t/**\n\t * The schema to resolve unqualified names against.\n\t *\n\t * Normally pinned on the *role* instead (`ALTER ROLE … SET search_path`), so\n\t * it does not appear in the URL at all. It is carried here for the one case\n\t * with no role of its own to pin — connecting as the cluster master under\n\t * `roles: false` — where without it every query looks in `public`.\n\t *\n\t * Postgres-specific by nature, not just by spelling: it becomes a libpq\n\t * connection option, and no other engine accepts one. MySQL has no schemas\n\t * distinct from databases at all.\n\t */\n\tsearchPath?: string;\n\t/** Off only for local development, where there is no certificate to verify. */\n\tssl?: boolean;\n}\n\nconst SCHEME = 'postgres:';\n\nconst DEFAULT_PORT = 5432;\n\n/**\n * `search_path` travels as a libpq connection option, not a query parameter.\n * The server reads `options`; a plain `?search_path=app` is accepted by the URL\n * parser, ignored by the server, and produces a database that looks empty.\n * The `-c` prefix is what makes it a runtime configuration setting.\n */\nfunction searchPathOption(schema: string): string {\n\treturn `-c search_path=${schema}`;\n}\n\n/** Compose an address into a connection string. */\nexport function build(address: PostgresAddress): string {\n\tconst { host, port, database, username, password, searchPath, ssl } = address;\n\n\tif (!host) throw new MissingDatabaseHost();\n\tif (!database) throw new MissingDatabaseName();\n\n\tconst url = new URL(`${SCHEME}//`);\n\turl.hostname = host;\n\tif (port && port !== DEFAULT_PORT) url.port = String(port);\n\t// Username before password: WHATWG URL drops a password set without one.\n\tif (username) url.username = encodeURIComponent(username);\n\tif (password) url.password = encodeURIComponent(password);\n\turl.pathname = `/${database}`;\n\n\tif (searchPath) url.searchParams.set('options', searchPathOption(searchPath));\n\tif (ssl === false) url.searchParams.set('sslmode', 'disable');\n\n\treturn url.toString();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4CA,MAAM,SAAS;AAEf,MAAM,eAAe;;;;;;;AAQrB,SAAS,iBAAiB,QAAwB;CACjD,OAAO,kBAAkB;AAC1B;;AAGA,SAAgB,MAAM,SAAkC;CACvD,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,YAAY,QAAQ;CAEtE,IAAI,CAAC,MAAM,MAAM,IAAI,oBAAoB;CACzC,IAAI,CAAC,UAAU,MAAM,IAAI,oBAAoB;CAE7C,MAAM,MAAM,IAAI,IAAI,GAAG,OAAO,GAAG;CACjC,IAAI,WAAW;CACf,IAAI,QAAQ,SAAS,cAAc,IAAI,OAAO,OAAO,IAAI;CAEzD,IAAI,UAAU,IAAI,WAAW,mBAAmB,QAAQ;CACxD,IAAI,UAAU,IAAI,WAAW,mBAAmB,QAAQ;CACxD,IAAI,WAAW,IAAI;CAEnB,IAAI,YAAY,IAAI,aAAa,IAAI,WAAW,iBAAiB,UAAU,CAAC;CAC5E,IAAI,QAAQ,OAAO,IAAI,aAAa,IAAI,WAAW,SAAS;CAE5D,OAAO,IAAI,SAAS;AACrB"}

package/dist/rls.cjs

@@ -1,29 +1,6 @@
-//#region rolldown:runtime
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-
-//#endregion
-const require_kysely = require('./kysely-LWvS2ekY.cjs');
-const kysely = __toESM(require("kysely"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_kysely = require("./kysely.cjs");
+let kysely = require("kysely");
 //#region src/rls.ts
 /**
 * Execute a callback within a transaction with RLS context variables set.
@@ -55,8 +32,7 @@ async function withRlsContext(db, context, callback, options) {
 		for (const [key, value] of Object.entries(context)) {
 			if (value === null || value === void 0) continue;
 			const settingName = `${prefix}.${key}`;
-			const settingValue = String(value);
-			await kysely.sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(trx);
+			await kysely.sql`SELECT set_config(${settingName}, ${String(value)}, true)`.execute(trx);
 		}
 		return callback(trx);
 	}, options?.settings);
@@ -65,8 +41,8 @@ async function withRlsContext(db, context, callback, options) {
 * Bypass marker symbol for explicitly skipping RLS context.
 */
 const RLS_BYPASS = Symbol.for("geekmidas.rls.bypass");
-
 //#endregion
 exports.RLS_BYPASS = RLS_BYPASS;
 exports.withRlsContext = withRlsContext;
+
 //# sourceMappingURL=rls.cjs.map

package/dist/rls.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"rls.cjs","names":["db: DatabaseConnection<DB>","context: RlsContext","callback: (trx: Transaction<DB>) => Promise<T>","options?: WithRlsContextOptions"],"sources":["../src/rls.ts"],"sourcesContent":["import type { Transaction } from 'kysely';\nimport { sql } from 'kysely';\nimport {\n\ttype DatabaseConnection,\n\ttype TransactionSettings,\n\twithTransaction,\n} from './kysely';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n\t[key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Options for withRlsContext function.\n */\nexport interface WithRlsContextOptions {\n\t/** Prefix for PostgreSQL session variables (default: 'app') */\n\tprefix?: string;\n\t/** Transaction settings (isolation level) */\n\tsettings?: TransactionSettings;\n}\n\n/**\n * Execute a callback within a transaction with RLS context variables set.\n *\n * Sets PostgreSQL session variables using `SET LOCAL` which scopes them to the\n * current transaction. Variables are automatically cleared when the transaction\n * ends (commit or rollback).\n *\n * @example\n * ```ts\n * await withRlsContext(\n *   db,\n *   { user_id: session.userId, tenant_id: session.tenantId },\n *   async (trx) => {\n *     // RLS policies can now use current_setting('app.user_id')\n *     return trx.selectFrom('orders').selectAll().execute();\n *   }\n * );\n * ```\n *\n * @param db - Database connection (Kysely, Transaction, or ControlledTransaction)\n * @param context - Key-value pairs to set as session variables\n * @param callback - Function to execute within the RLS context\n * @param options - Optional prefix and transaction settings\n */\nexport async function withRlsContext<DB, T>(\n\tdb: DatabaseConnection<DB>,\n\tcontext: RlsContext,\n\tcallback: (trx: Transaction<DB>) => Promise<T>,\n\toptions?: WithRlsContextOptions,\n): Promise<T> {\n\tconst prefix = options?.prefix ?? 'app';\n\n\treturn withTransaction(\n\t\tdb,\n\t\tasync (trx) => {\n\t\t\t// Set each context variable using SET LOCAL (scoped to transaction)\n\t\t\tfor (const [key, value] of Object.entries(context)) {\n\t\t\t\tif (value === null || value === undefined) continue;\n\n\t\t\t\tconst settingName = `${prefix}.${key}`;\n\t\t\t\tconst settingValue = String(value);\n\n\t\t\t\t// Use raw SQL for SET LOCAL with proper escaping\n\t\t\t\t// The setting name is an identifier, value is a string literal\n\t\t\t\tawait sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(\n\t\t\t\t\ttrx,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\treturn callback(trx);\n\t\t},\n\t\toptions?.settings,\n\t);\n}\n\n/**\n * Bypass marker symbol for explicitly skipping RLS context.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,eAAsB,eACrBA,IACAC,SACAC,UACAC,SACa;CACb,MAAM,SAAS,SAAS,UAAU;AAElC,QAAO,+BACN,IACA,OAAO,QAAQ;AAEd,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,QAAQ,EAAE;AACnD,OAAI,UAAU,QAAQ,iBAAqB;GAE3C,MAAM,eAAe,EAAE,OAAO,GAAG,IAAI;GACrC,MAAM,eAAe,OAAO,MAAM;AAIlC,SAAM,WAAI,oBAAoB,YAAY,IAAI,aAAa,SAAS,QACnE,IACA;EACD;AAED,SAAO,SAAS,IAAI;CACpB,GACD,SAAS,SACT;AACD;;;;AAKD,MAAa,aAAa,OAAO,IAAI,uBAAuB"}
+{"version":3,"file":"rls.cjs","names":["withTransaction"],"sources":["../src/rls.ts"],"sourcesContent":["import type { Transaction } from 'kysely';\nimport { sql } from 'kysely';\nimport {\n\ttype DatabaseConnection,\n\ttype TransactionSettings,\n\twithTransaction,\n} from './kysely';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n\t[key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Options for withRlsContext function.\n */\nexport interface WithRlsContextOptions {\n\t/** Prefix for PostgreSQL session variables (default: 'app') */\n\tprefix?: string;\n\t/** Transaction settings (isolation level) */\n\tsettings?: TransactionSettings;\n}\n\n/**\n * Execute a callback within a transaction with RLS context variables set.\n *\n * Sets PostgreSQL session variables using `SET LOCAL` which scopes them to the\n * current transaction. Variables are automatically cleared when the transaction\n * ends (commit or rollback).\n *\n * @example\n * ```ts\n * await withRlsContext(\n *   db,\n *   { user_id: session.userId, tenant_id: session.tenantId },\n *   async (trx) => {\n *     // RLS policies can now use current_setting('app.user_id')\n *     return trx.selectFrom('orders').selectAll().execute();\n *   }\n * );\n * ```\n *\n * @param db - Database connection (Kysely, Transaction, or ControlledTransaction)\n * @param context - Key-value pairs to set as session variables\n * @param callback - Function to execute within the RLS context\n * @param options - Optional prefix and transaction settings\n */\nexport async function withRlsContext<DB, T>(\n\tdb: DatabaseConnection<DB>,\n\tcontext: RlsContext,\n\tcallback: (trx: Transaction<DB>) => Promise<T>,\n\toptions?: WithRlsContextOptions,\n): Promise<T> {\n\tconst prefix = options?.prefix ?? 'app';\n\n\treturn withTransaction(\n\t\tdb,\n\t\tasync (trx) => {\n\t\t\t// Set each context variable using SET LOCAL (scoped to transaction)\n\t\t\tfor (const [key, value] of Object.entries(context)) {\n\t\t\t\tif (value === null || value === undefined) continue;\n\n\t\t\t\tconst settingName = `${prefix}.${key}`;\n\t\t\t\tconst settingValue = String(value);\n\n\t\t\t\t// Use raw SQL for SET LOCAL with proper escaping\n\t\t\t\t// The setting name is an identifier, value is a string literal\n\t\t\t\tawait sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(\n\t\t\t\t\ttrx,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\treturn callback(trx);\n\t\t},\n\t\toptions?.settings,\n\t);\n}\n\n/**\n * Bypass marker symbol for explicitly skipping RLS context.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,eAAsB,eACrB,IACA,SACA,UACA,SACa;CACb,MAAM,SAAS,SAAS,UAAU;CAElC,OAAOA,eAAAA,gBACN,IACA,OAAO,QAAQ;EAEd,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;GACnD,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW;GAE3C,MAAM,cAAc,GAAG,OAAO,GAAG;GAKjC,MAAM,OAAA,GAAG,qBAAqB,YAAY,IAJrB,OAAO,KAI6B,EAAE,SAAS,QACnE,GACD;EACD;EAEA,OAAO,SAAS,GAAG;CACpB,GACA,SAAS,QACV;AACD;;;;AAKA,MAAa,aAAa,OAAO,IAAI,sBAAsB"}

package/dist/rls.d.cts

@@ -1,19 +1,17 @@
-import { DatabaseConnection, TransactionSettings } from "./kysely-D3eeuId4.cjs";
+import { DatabaseConnection, TransactionSettings } from "./kysely.cjs";
 import { Transaction } from "kysely";
-
 //#region src/rls.d.ts
-
 /**
  * RLS context - key-value pairs to set as PostgreSQL session variables.
  * Keys become `prefix.key` (e.g., `app.user_id`).
  */
-interface RlsContext {
+export interface RlsContext {
   [key: string]: string | number | boolean | null | undefined;
 }
 /**
  * Options for withRlsContext function.
  */
-interface WithRlsContextOptions {
+export interface WithRlsContextOptions {
   /** Prefix for PostgreSQL session variables (default: 'app') */
   prefix?: string;
   /** Transaction settings (isolation level) */
@@ -43,16 +41,14 @@ interface WithRlsContextOptions {
  * @param callback - Function to execute within the RLS context
  * @param options - Optional prefix and transaction settings
  */
-declare function withRlsContext<DB, T>(db: DatabaseConnection<DB>, context: RlsContext, callback: (trx: Transaction<DB>) => Promise<T>, options?: WithRlsContextOptions): Promise<T>;
+export declare function withRlsContext<DB, T>(db: DatabaseConnection<DB>, context: RlsContext, callback: (trx: Transaction<DB>) => Promise<T>, options?: WithRlsContextOptions): Promise<T>;
 /**
  * Bypass marker symbol for explicitly skipping RLS context.
  */
-declare const RLS_BYPASS: unique symbol;
+export declare const RLS_BYPASS: unique symbol;
 /**
  * Type for RLS bypass marker.
  */
-type RlsBypass = typeof RLS_BYPASS;
-//# sourceMappingURL=rls.d.ts.map
+export type RlsBypass = typeof RLS_BYPASS;
 //#endregion
-export { RLS_BYPASS, RlsBypass, RlsContext, WithRlsContextOptions, withRlsContext };
 //# sourceMappingURL=rls.d.cts.map

package/dist/rls.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"rls.d.cts","names":[],"sources":["../src/rls.ts"],"sourcesContent":[],"mappings":";;;;;;;AAYA;AAOA;AA+BsB,UAtCL,UAAA,CAsCmB;EAAA,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,MAAA,GAAA,OAAA,GAAA,IAAA,GAAA,SAAA;;;;;AAGnB,UAlCA,qBAAA,CAkCA;EAAW;EAAkB,MAAT,CAAA,EAAA,MAAA;EAAO;EACZ,QACrB,CAAA,EAhCC,mBAgCD;;AAAD;AA6BV;AAKA;;;;;;;;;;;;;;;;;;;;;;iBAvCsB,0BACjB,mBAAmB,cACd,4BACO,YAAY,QAAQ,QAAQ,cAClC,wBACR,QAAQ;;;;cA6BE;;;;KAKD,SAAA,UAAmB"}
+{"version":3,"file":"rls.d.cts","names":[],"sources":["../src/rls.ts"],"mappings":";;;;;;;iBAYiB;GACf;;;;;iBAMe;;EAEhB;;EAEA,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2BU,eAAe,IAAI,GACxC,IAAI,mBAAmB,KACvB,SAAS,YACT,WAAW,KAAK,YAAY,QAAQ,QAAQ,IAC5C,UAAU,wBACR,QAAQ;;;;qBA6BE;;;;YAKD,mBAAmB"}

package/dist/rls.d.mts

@@ -1,19 +1,17 @@
-import { DatabaseConnection, TransactionSettings } from "./kysely-BAedYsvn.mjs";
+import { DatabaseConnection, TransactionSettings } from "./kysely.mjs";
 import { Transaction } from "kysely";
-
 //#region src/rls.d.ts
-
 /**
  * RLS context - key-value pairs to set as PostgreSQL session variables.
  * Keys become `prefix.key` (e.g., `app.user_id`).
  */
-interface RlsContext {
+export interface RlsContext {
   [key: string]: string | number | boolean | null | undefined;
 }
 /**
  * Options for withRlsContext function.
  */
-interface WithRlsContextOptions {
+export interface WithRlsContextOptions {
   /** Prefix for PostgreSQL session variables (default: 'app') */
   prefix?: string;
   /** Transaction settings (isolation level) */
@@ -43,16 +41,14 @@ interface WithRlsContextOptions {
  * @param callback - Function to execute within the RLS context
  * @param options - Optional prefix and transaction settings
  */
-declare function withRlsContext<DB, T>(db: DatabaseConnection<DB>, context: RlsContext, callback: (trx: Transaction<DB>) => Promise<T>, options?: WithRlsContextOptions): Promise<T>;
+export declare function withRlsContext<DB, T>(db: DatabaseConnection<DB>, context: RlsContext, callback: (trx: Transaction<DB>) => Promise<T>, options?: WithRlsContextOptions): Promise<T>;
 /**
  * Bypass marker symbol for explicitly skipping RLS context.
  */
-declare const RLS_BYPASS: unique symbol;
+export declare const RLS_BYPASS: unique symbol;
 /**
  * Type for RLS bypass marker.
  */
-type RlsBypass = typeof RLS_BYPASS;
-//# sourceMappingURL=rls.d.ts.map
+export type RlsBypass = typeof RLS_BYPASS;
 //#endregion
-export { RLS_BYPASS, RlsBypass, RlsContext, WithRlsContextOptions, withRlsContext };
 //# sourceMappingURL=rls.d.mts.map

package/dist/rls.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"rls.d.mts","names":[],"sources":["../src/rls.ts"],"sourcesContent":[],"mappings":";;;;;;;AAYA;AAOA;AA+BsB,UAtCL,UAAA,CAsCmB;EAAA,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,MAAA,GAAA,OAAA,GAAA,IAAA,GAAA,SAAA;;;;;AAGnB,UAlCA,qBAAA,CAkCA;EAAW;EAAkB,MAAT,CAAA,EAAA,MAAA;EAAO;EACZ,QACrB,CAAA,EAhCC,mBAgCD;;AAAD;AA6BV;AAKA;;;;;;;;;;;;;;;;;;;;;;iBAvCsB,0BACjB,mBAAmB,cACd,4BACO,YAAY,QAAQ,QAAQ,cAClC,wBACR,QAAQ;;;;cA6BE;;;;KAKD,SAAA,UAAmB"}
+{"version":3,"file":"rls.d.mts","names":[],"sources":["../src/rls.ts"],"mappings":";;;;;;;iBAYiB;GACf;;;;;iBAMe;;EAEhB;;EAEA,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2BU,eAAe,IAAI,GACxC,IAAI,mBAAmB,KACvB,SAAS,YACT,WAAW,KAAK,YAAY,QAAQ,QAAQ,IAC5C,UAAU,wBACR,QAAQ;;;;qBA6BE;;;;YAKD,mBAAmB"}

package/dist/rls.mjs

@@ -1,6 +1,5 @@
-import { withTransaction } from "./kysely-Bo_Zg-D3.mjs";
+import { withTransaction } from "./kysely.mjs";
 import { sql } from "kysely";
-
 //#region src/rls.ts
 /**
 * Execute a callback within a transaction with RLS context variables set.
@@ -32,8 +31,7 @@ async function withRlsContext(db, context, callback, options) {
 		for (const [key, value] of Object.entries(context)) {
 			if (value === null || value === void 0) continue;
 			const settingName = `${prefix}.${key}`;
-			const settingValue = String(value);
-			await sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(trx);
+			await sql`SELECT set_config(${settingName}, ${String(value)}, true)`.execute(trx);
 		}
 		return callback(trx);
 	}, options?.settings);
@@ -42,7 +40,7 @@ async function withRlsContext(db, context, callback, options) {
 * Bypass marker symbol for explicitly skipping RLS context.
 */
 const RLS_BYPASS = Symbol.for("geekmidas.rls.bypass");
-
 //#endregion
 export { RLS_BYPASS, withRlsContext };
+
 //# sourceMappingURL=rls.mjs.map

package/dist/rls.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rls.mjs","names":["db: DatabaseConnection<DB>","context: RlsContext","callback: (trx: Transaction<DB>) => Promise<T>","options?: WithRlsContextOptions"],"sources":["../src/rls.ts"],"sourcesContent":["import type { Transaction } from 'kysely';\nimport { sql } from 'kysely';\nimport {\n\ttype DatabaseConnection,\n\ttype TransactionSettings,\n\twithTransaction,\n} from './kysely';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n\t[key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Options for withRlsContext function.\n */\nexport interface WithRlsContextOptions {\n\t/** Prefix for PostgreSQL session variables (default: 'app') */\n\tprefix?: string;\n\t/** Transaction settings (isolation level) */\n\tsettings?: TransactionSettings;\n}\n\n/**\n * Execute a callback within a transaction with RLS context variables set.\n *\n * Sets PostgreSQL session variables using `SET LOCAL` which scopes them to the\n * current transaction. Variables are automatically cleared when the transaction\n * ends (commit or rollback).\n *\n * @example\n * ```ts\n * await withRlsContext(\n *   db,\n *   { user_id: session.userId, tenant_id: session.tenantId },\n *   async (trx) => {\n *     // RLS policies can now use current_setting('app.user_id')\n *     return trx.selectFrom('orders').selectAll().execute();\n *   }\n * );\n * ```\n *\n * @param db - Database connection (Kysely, Transaction, or ControlledTransaction)\n * @param context - Key-value pairs to set as session variables\n * @param callback - Function to execute within the RLS context\n * @param options - Optional prefix and transaction settings\n */\nexport async function withRlsContext<DB, T>(\n\tdb: DatabaseConnection<DB>,\n\tcontext: RlsContext,\n\tcallback: (trx: Transaction<DB>) => Promise<T>,\n\toptions?: WithRlsContextOptions,\n): Promise<T> {\n\tconst prefix = options?.prefix ?? 'app';\n\n\treturn withTransaction(\n\t\tdb,\n\t\tasync (trx) => {\n\t\t\t// Set each context variable using SET LOCAL (scoped to transaction)\n\t\t\tfor (const [key, value] of Object.entries(context)) {\n\t\t\t\tif (value === null || value === undefined) continue;\n\n\t\t\t\tconst settingName = `${prefix}.${key}`;\n\t\t\t\tconst settingValue = String(value);\n\n\t\t\t\t// Use raw SQL for SET LOCAL with proper escaping\n\t\t\t\t// The setting name is an identifier, value is a string literal\n\t\t\t\tawait sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(\n\t\t\t\t\ttrx,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\treturn callback(trx);\n\t\t},\n\t\toptions?.settings,\n\t);\n}\n\n/**\n * Bypass marker symbol for explicitly skipping RLS context.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,eAAsB,eACrBA,IACAC,SACAC,UACAC,SACa;CACb,MAAM,SAAS,SAAS,UAAU;AAElC,QAAO,gBACN,IACA,OAAO,QAAQ;AAEd,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,QAAQ,EAAE;AACnD,OAAI,UAAU,QAAQ,iBAAqB;GAE3C,MAAM,eAAe,EAAE,OAAO,GAAG,IAAI;GACrC,MAAM,eAAe,OAAO,MAAM;AAIlC,SAAM,IAAI,oBAAoB,YAAY,IAAI,aAAa,SAAS,QACnE,IACA;EACD;AAED,SAAO,SAAS,IAAI;CACpB,GACD,SAAS,SACT;AACD;;;;AAKD,MAAa,aAAa,OAAO,IAAI,uBAAuB"}
+{"version":3,"file":"rls.mjs","names":[],"sources":["../src/rls.ts"],"sourcesContent":["import type { Transaction } from 'kysely';\nimport { sql } from 'kysely';\nimport {\n\ttype DatabaseConnection,\n\ttype TransactionSettings,\n\twithTransaction,\n} from './kysely';\n\n/**\n * RLS context - key-value pairs to set as PostgreSQL session variables.\n * Keys become `prefix.key` (e.g., `app.user_id`).\n */\nexport interface RlsContext {\n\t[key: string]: string | number | boolean | null | undefined;\n}\n\n/**\n * Options for withRlsContext function.\n */\nexport interface WithRlsContextOptions {\n\t/** Prefix for PostgreSQL session variables (default: 'app') */\n\tprefix?: string;\n\t/** Transaction settings (isolation level) */\n\tsettings?: TransactionSettings;\n}\n\n/**\n * Execute a callback within a transaction with RLS context variables set.\n *\n * Sets PostgreSQL session variables using `SET LOCAL` which scopes them to the\n * current transaction. Variables are automatically cleared when the transaction\n * ends (commit or rollback).\n *\n * @example\n * ```ts\n * await withRlsContext(\n *   db,\n *   { user_id: session.userId, tenant_id: session.tenantId },\n *   async (trx) => {\n *     // RLS policies can now use current_setting('app.user_id')\n *     return trx.selectFrom('orders').selectAll().execute();\n *   }\n * );\n * ```\n *\n * @param db - Database connection (Kysely, Transaction, or ControlledTransaction)\n * @param context - Key-value pairs to set as session variables\n * @param callback - Function to execute within the RLS context\n * @param options - Optional prefix and transaction settings\n */\nexport async function withRlsContext<DB, T>(\n\tdb: DatabaseConnection<DB>,\n\tcontext: RlsContext,\n\tcallback: (trx: Transaction<DB>) => Promise<T>,\n\toptions?: WithRlsContextOptions,\n): Promise<T> {\n\tconst prefix = options?.prefix ?? 'app';\n\n\treturn withTransaction(\n\t\tdb,\n\t\tasync (trx) => {\n\t\t\t// Set each context variable using SET LOCAL (scoped to transaction)\n\t\t\tfor (const [key, value] of Object.entries(context)) {\n\t\t\t\tif (value === null || value === undefined) continue;\n\n\t\t\t\tconst settingName = `${prefix}.${key}`;\n\t\t\t\tconst settingValue = String(value);\n\n\t\t\t\t// Use raw SQL for SET LOCAL with proper escaping\n\t\t\t\t// The setting name is an identifier, value is a string literal\n\t\t\t\tawait sql`SELECT set_config(${settingName}, ${settingValue}, true)`.execute(\n\t\t\t\t\ttrx,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\treturn callback(trx);\n\t\t},\n\t\toptions?.settings,\n\t);\n}\n\n/**\n * Bypass marker symbol for explicitly skipping RLS context.\n */\nexport const RLS_BYPASS = Symbol.for('geekmidas.rls.bypass');\n\n/**\n * Type for RLS bypass marker.\n */\nexport type RlsBypass = typeof RLS_BYPASS;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,eAAsB,eACrB,IACA,SACA,UACA,SACa;CACb,MAAM,SAAS,SAAS,UAAU;CAElC,OAAO,gBACN,IACA,OAAO,QAAQ;EAEd,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;GACnD,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW;GAE3C,MAAM,cAAc,GAAG,OAAO,GAAG;GAKjC,MAAM,GAAG,qBAAqB,YAAY,IAJrB,OAAO,KAI6B,EAAE,SAAS,QACnE,GACD;EACD;EAEA,OAAO,SAAS,GAAG;CACpB,GACA,SAAS,QACV;AACD;;;;AAKA,MAAa,aAAa,OAAO,IAAI,sBAAsB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/db",
-  "version": "10.0.0-alpha.2",
+  "version": "10.0.0-alpha.21",
   "private": false,
   "type": "module",
   "exports": {
@@ -89,10 +89,10 @@
     "dist"
   ],
   "dependencies": {
-    "@faker-js/faker": "~9.9.0"
+    "@faker-js/faker": "~10.6.0"
   },
   "devDependencies": {
-    "@types/pg": "~8.15.4"
+    "@types/pg": "~8.23.1"
   },
   "repository": {
     "type": "git",
@@ -103,12 +103,12 @@
     "access": "public"
   },
   "peerDependencies": {
-    "kysely": ">=0.28.2 <0.30.0",
-    "pg": "~8.16.3",
-    "knex": "~3.1.0",
-    "objection": "~3.1.5",
+    "kysely": "~0.29.6",
+    "pg": ">=8.23.0",
+    "knex": ">=3.3.0",
+    "objection": ">=3.1.5",
     "db-errors": "~0.2.3",
-    "vitest": "~3.2.4"
+    "vitest": "~5.0.2"
   },
   "scripts": {
     "ts": "tsc --noEmit --skipLibCheck src/**/*.ts"

package/dist/errors-CfFCan-X.mjs

@@ -1,69 +0,0 @@
-//#region src/errors.ts
-/**
-* Database URL errors and redaction — engine-neutral.
-*
-* Nothing here is Postgres-specific: every engine addresses itself as a URL
-* carrying a password, and "must name a host" holds for all of them. The parts
-* that differ — libpq's `options=-c search_path=…`, which no other engine
-* accepts — live under the driver they belong to.
-*
-* Messages state the rule, which is constant; the offending value is a field.
-* An interpolated message cannot be matched on and carries user input into
-* every log line that touches it.
-*/
-/**
-* Replace the password in a connection string with `***`.
-*
-* A connection string is a secret, and the places it is most likely to be
-* written down — a log line, an error, a crash report shipped to a third party
-* — are the places nobody is reading carefully. This exists so that redacting
-* is the easy thing to do at each of them.
-*
-* Safe on input that is not a URL: it returns a constant rather than throwing,
-* because this runs on paths that must not fail. Anything unparseable is
-* treated as potentially secret and withheld entirely rather than echoed.
-*/
-function redactDatabaseUrl(url) {
-	try {
-		const parsed = new URL(url);
-		if (!parsed.password) return url;
-		parsed.password = "***";
-		return parsed.toString();
-	} catch {
-		return "<unparseable url>";
-	}
-}
-/**
-* Base for an address that cannot become a connection string.
-*
-* Deliberately carries no URL field: these are thrown while *composing* one, so
-* there is no URL yet — only the parts, which include the password.
-*/
-var DatabaseAddressError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = new.target.name;
-	}
-};
-/** An address with no host to connect to. */
-var MissingDatabaseHost = class extends DatabaseAddressError {
-	constructor() {
-		super("A database address must name a host");
-	}
-};
-/**
-* An address with no database name.
-*
-* Postgres silently falls back to the connecting role's name, so the app
-* connects successfully to the wrong database and fails later with confusing
-* "relation does not exist" errors. Rejecting it here is much cheaper.
-*/
-var MissingDatabaseName = class extends DatabaseAddressError {
-	constructor() {
-		super("A database address must name a database");
-	}
-};
-
-//#endregion
-export { DatabaseAddressError, MissingDatabaseHost, MissingDatabaseName, redactDatabaseUrl };
-//# sourceMappingURL=errors-CfFCan-X.mjs.map

package/dist/errors-CfFCan-X.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors-CfFCan-X.mjs","names":["url: string","message: string"],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Database URL errors and redaction — engine-neutral.\n *\n * Nothing here is Postgres-specific: every engine addresses itself as a URL\n * carrying a password, and \"must name a host\" holds for all of them. The parts\n * that differ — libpq's `options=-c search_path=…`, which no other engine\n * accepts — live under the driver they belong to.\n *\n * Messages state the rule, which is constant; the offending value is a field.\n * An interpolated message cannot be matched on and carries user input into\n * every log line that touches it.\n */\n\n/**\n * Replace the password in a connection string with `***`.\n *\n * A connection string is a secret, and the places it is most likely to be\n * written down — a log line, an error, a crash report shipped to a third party\n * — are the places nobody is reading carefully. This exists so that redacting\n * is the easy thing to do at each of them.\n *\n * Safe on input that is not a URL: it returns a constant rather than throwing,\n * because this runs on paths that must not fail. Anything unparseable is\n * treated as potentially secret and withheld entirely rather than echoed.\n */\nexport function redactDatabaseUrl(url: string): string {\n\ttry {\n\t\tconst parsed = new URL(url);\n\t\tif (!parsed.password) return url;\n\t\tparsed.password = '***';\n\t\treturn parsed.toString();\n\t} catch {\n\t\treturn '<unparseable url>';\n\t}\n}\n\n/**\n * Base for an address that cannot become a connection string.\n *\n * Deliberately carries no URL field: these are thrown while *composing* one, so\n * there is no URL yet — only the parts, which include the password.\n */\nexport abstract class DatabaseAddressError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = new.target.name;\n\t}\n}\n\n/** An address with no host to connect to. */\nexport class MissingDatabaseHost extends DatabaseAddressError {\n\tconstructor() {\n\t\tsuper('A database address must name a host');\n\t}\n}\n\n/**\n * An address with no database name.\n *\n * Postgres silently falls back to the connecting role's name, so the app\n * connects successfully to the wrong database and fails later with confusing\n * \"relation does not exist\" errors. Rejecting it here is much cheaper.\n */\nexport class MissingDatabaseName extends DatabaseAddressError {\n\tconstructor() {\n\t\tsuper('A database address must name a database');\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,kBAAkBA,KAAqB;AACtD,KAAI;EACH,MAAM,SAAS,IAAI,IAAI;AACvB,OAAK,OAAO,SAAU,QAAO;AAC7B,SAAO,WAAW;AAClB,SAAO,OAAO,UAAU;CACxB,QAAO;AACP,SAAO;CACP;AACD;;;;;;;AAQD,IAAsB,uBAAtB,cAAmD,MAAM;CACxD,YAAYC,SAAiB;AAC5B,QAAM,QAAQ;AACd,OAAK,OAAO,IAAI,OAAO;CACvB;AACD;;AAGD,IAAa,sBAAb,cAAyC,qBAAqB;CAC7D,cAAc;AACb,QAAM,sCAAsC;CAC5C;AACD;;;;;;;;AASD,IAAa,sBAAb,cAAyC,qBAAqB;CAC7D,cAAc;AACb,QAAM,0CAA0C;CAChD;AACD"}

package/dist/errors-Cs5jlAv-.cjs

@@ -1,93 +0,0 @@
-
-//#region src/errors.ts
-/**
-* Database URL errors and redaction — engine-neutral.
-*
-* Nothing here is Postgres-specific: every engine addresses itself as a URL
-* carrying a password, and "must name a host" holds for all of them. The parts
-* that differ — libpq's `options=-c search_path=…`, which no other engine
-* accepts — live under the driver they belong to.
-*
-* Messages state the rule, which is constant; the offending value is a field.
-* An interpolated message cannot be matched on and carries user input into
-* every log line that touches it.
-*/
-/**
-* Replace the password in a connection string with `***`.
-*
-* A connection string is a secret, and the places it is most likely to be
-* written down — a log line, an error, a crash report shipped to a third party
-* — are the places nobody is reading carefully. This exists so that redacting
-* is the easy thing to do at each of them.
-*
-* Safe on input that is not a URL: it returns a constant rather than throwing,
-* because this runs on paths that must not fail. Anything unparseable is
-* treated as potentially secret and withheld entirely rather than echoed.
-*/
-function redactDatabaseUrl(url) {
-	try {
-		const parsed = new URL(url);
-		if (!parsed.password) return url;
-		parsed.password = "***";
-		return parsed.toString();
-	} catch {
-		return "<unparseable url>";
-	}
-}
-/**
-* Base for an address that cannot become a connection string.
-*
-* Deliberately carries no URL field: these are thrown while *composing* one, so
-* there is no URL yet — only the parts, which include the password.
-*/
-var DatabaseAddressError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = new.target.name;
-	}
-};
-/** An address with no host to connect to. */
-var MissingDatabaseHost = class extends DatabaseAddressError {
-	constructor() {
-		super("A database address must name a host");
-	}
-};
-/**
-* An address with no database name.
-*
-* Postgres silently falls back to the connecting role's name, so the app
-* connects successfully to the wrong database and fails later with confusing
-* "relation does not exist" errors. Rejecting it here is much cheaper.
-*/
-var MissingDatabaseName = class extends DatabaseAddressError {
-	constructor() {
-		super("A database address must name a database");
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'DatabaseAddressError', {
-  enumerable: true,
-  get: function () {
-    return DatabaseAddressError;
-  }
-});
-Object.defineProperty(exports, 'MissingDatabaseHost', {
-  enumerable: true,
-  get: function () {
-    return MissingDatabaseHost;
-  }
-});
-Object.defineProperty(exports, 'MissingDatabaseName', {
-  enumerable: true,
-  get: function () {
-    return MissingDatabaseName;
-  }
-});
-Object.defineProperty(exports, 'redactDatabaseUrl', {
-  enumerable: true,
-  get: function () {
-    return redactDatabaseUrl;
-  }
-});
-//# sourceMappingURL=errors-Cs5jlAv-.cjs.map

package/dist/errors-Cs5jlAv-.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors-Cs5jlAv-.cjs","names":["url: string","message: string"],"sources":["../src/errors.ts"],"sourcesContent":["/**\n * Database URL errors and redaction — engine-neutral.\n *\n * Nothing here is Postgres-specific: every engine addresses itself as a URL\n * carrying a password, and \"must name a host\" holds for all of them. The parts\n * that differ — libpq's `options=-c search_path=…`, which no other engine\n * accepts — live under the driver they belong to.\n *\n * Messages state the rule, which is constant; the offending value is a field.\n * An interpolated message cannot be matched on and carries user input into\n * every log line that touches it.\n */\n\n/**\n * Replace the password in a connection string with `***`.\n *\n * A connection string is a secret, and the places it is most likely to be\n * written down — a log line, an error, a crash report shipped to a third party\n * — are the places nobody is reading carefully. This exists so that redacting\n * is the easy thing to do at each of them.\n *\n * Safe on input that is not a URL: it returns a constant rather than throwing,\n * because this runs on paths that must not fail. Anything unparseable is\n * treated as potentially secret and withheld entirely rather than echoed.\n */\nexport function redactDatabaseUrl(url: string): string {\n\ttry {\n\t\tconst parsed = new URL(url);\n\t\tif (!parsed.password) return url;\n\t\tparsed.password = '***';\n\t\treturn parsed.toString();\n\t} catch {\n\t\treturn '<unparseable url>';\n\t}\n}\n\n/**\n * Base for an address that cannot become a connection string.\n *\n * Deliberately carries no URL field: these are thrown while *composing* one, so\n * there is no URL yet — only the parts, which include the password.\n */\nexport abstract class DatabaseAddressError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = new.target.name;\n\t}\n}\n\n/** An address with no host to connect to. */\nexport class MissingDatabaseHost extends DatabaseAddressError {\n\tconstructor() {\n\t\tsuper('A database address must name a host');\n\t}\n}\n\n/**\n * An address with no database name.\n *\n * Postgres silently falls back to the connecting role's name, so the app\n * connects successfully to the wrong database and fails later with confusing\n * \"relation does not exist\" errors. Rejecting it here is much cheaper.\n */\nexport class MissingDatabaseName extends DatabaseAddressError {\n\tconstructor() {\n\t\tsuper('A database address must name a database');\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,kBAAkBA,KAAqB;AACtD,KAAI;EACH,MAAM,SAAS,IAAI,IAAI;AACvB,OAAK,OAAO,SAAU,QAAO;AAC7B,SAAO,WAAW;AAClB,SAAO,OAAO,UAAU;CACxB,QAAO;AACP,SAAO;CACP;AACD;;;;;;;AAQD,IAAsB,uBAAtB,cAAmD,MAAM;CACxD,YAAYC,SAAiB;AAC5B,QAAM,QAAQ;AACd,OAAK,OAAO,IAAI,OAAO;CACvB;AACD;;AAGD,IAAa,sBAAb,cAAyC,qBAAqB;CAC7D,cAAc;AACb,QAAM,sCAAsC;CAC5C;AACD;;;;;;;;AASD,IAAa,sBAAb,cAAyC,qBAAqB;CAC7D,cAAc;AACb,QAAM,0CAA0C;CAChD;AACD"}

package/dist/kysely-BAedYsvn.d.mts

@@ -1,13 +0,0 @@
-import { ControlledTransaction, IsolationLevel, Kysely, Transaction } from "kysely";
-
-//#region src/kysely.d.ts
-interface TransactionSettings {
-  isolationLevel?: IsolationLevel;
-}
-declare function withTransaction<DB, T>(db: DatabaseConnection<DB>, cb: (trx: Transaction<DB>) => Promise<T>, settings?: TransactionSettings): Promise<T>;
-type DatabaseConnection<T> = ControlledTransaction<T> | Kysely<T> | Transaction<T>;
-//# sourceMappingURL=kysely.d.ts.map
-
-//#endregion
-export { DatabaseConnection, TransactionSettings, withTransaction };
-//# sourceMappingURL=kysely-BAedYsvn.d.mts.map

package/dist/kysely-BAedYsvn.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kysely-BAedYsvn.d.mts","names":[],"sources":["../src/kysely.ts"],"sourcesContent":[],"mappings":";;;UAOiB,mBAAA;mBACC;AADlB;AAIgB,iBAAA,eAAe,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA,EAAA,EAC1B,kBAD0B,CACP,EADO,CAAA,EAAA,EAAA,EAAA,CAAA,GAAA,EAEpB,WAFoB,CAER,EAFQ,CAAA,EAAA,GAEA,OAFA,CAEQ,CAFR,CAAA,EAAA,QAAA,CAAA,EAGnB,mBAHmB,CAAA,EAI5B,OAJ4B,CAIpB,CAJoB,CAAA;AAAA,KAkBnB,kBAlBmB,CAAA,CAAA,CAAA,GAmB5B,qBAnB4B,CAmBN,CAnBM,CAAA,GAoB5B,MApB4B,CAoBrB,CApBqB,CAAA,GAqB5B,WArB4B,CAqBhB,CArBgB,CAAA"}

package/dist/kysely-Bo_Zg-D3.mjs

@@ -1,11 +0,0 @@
-//#region src/kysely.ts
-function withTransaction(db, cb, settings) {
-	if (db.isTransaction) return cb(db);
-	const builder = db.transaction();
-	if (settings?.isolationLevel) return builder.setIsolationLevel(settings.isolationLevel).execute(cb);
-	return builder.execute(cb);
-}
-
-//#endregion
-export { withTransaction };
-//# sourceMappingURL=kysely-Bo_Zg-D3.mjs.map

package/dist/kysely-Bo_Zg-D3.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"kysely-Bo_Zg-D3.mjs","names":["db: DatabaseConnection<DB>","cb: (trx: Transaction<DB>) => Promise<T>","settings?: TransactionSettings"],"sources":["../src/kysely.ts"],"sourcesContent":["import type {\n\tControlledTransaction,\n\tIsolationLevel,\n\tKysely,\n\tTransaction,\n} from 'kysely';\n\nexport interface TransactionSettings {\n\tisolationLevel?: IsolationLevel;\n}\n\nexport function withTransaction<DB, T>(\n\tdb: DatabaseConnection<DB>,\n\tcb: (trx: Transaction<DB>) => Promise<T>,\n\tsettings?: TransactionSettings,\n): Promise<T> {\n\tif (db.isTransaction) {\n\t\treturn cb(db as Transaction<DB>);\n\t}\n\n\tconst builder = db.transaction();\n\n\tif (settings?.isolationLevel) {\n\t\treturn builder.setIsolationLevel(settings.isolationLevel).execute(cb);\n\t}\n\n\treturn builder.execute(cb);\n}\n\nexport type DatabaseConnection<T> =\n\t| ControlledTransaction<T>\n\t| Kysely<T>\n\t| Transaction<T>;\n"],"mappings":";AAWA,SAAgB,gBACfA,IACAC,IACAC,UACa;AACb,KAAI,GAAG,cACN,QAAO,GAAG,GAAsB;CAGjC,MAAM,UAAU,GAAG,aAAa;AAEhC,KAAI,UAAU,eACb,QAAO,QAAQ,kBAAkB,SAAS,eAAe,CAAC,QAAQ,GAAG;AAGtE,QAAO,QAAQ,QAAQ,GAAG;AAC1B"}

package/dist/kysely-D3eeuId4.d.cts

@@ -1,13 +0,0 @@
-import { ControlledTransaction, IsolationLevel, Kysely, Transaction } from "kysely";
-
-//#region src/kysely.d.ts
-interface TransactionSettings {
-  isolationLevel?: IsolationLevel;
-}
-declare function withTransaction<DB, T>(db: DatabaseConnection<DB>, cb: (trx: Transaction<DB>) => Promise<T>, settings?: TransactionSettings): Promise<T>;
-type DatabaseConnection<T> = ControlledTransaction<T> | Kysely<T> | Transaction<T>;
-//# sourceMappingURL=kysely.d.ts.map
-
-//#endregion
-export { DatabaseConnection, TransactionSettings, withTransaction };
-//# sourceMappingURL=kysely-D3eeuId4.d.cts.map

package/dist/kysely-D3eeuId4.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kysely-D3eeuId4.d.cts","names":[],"sources":["../src/kysely.ts"],"sourcesContent":[],"mappings":";;;UAOiB,mBAAA;mBACC;AADlB;AAIgB,iBAAA,eAAe,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA,EAAA,EAC1B,kBAD0B,CACP,EADO,CAAA,EAAA,EAAA,EAAA,CAAA,GAAA,EAEpB,WAFoB,CAER,EAFQ,CAAA,EAAA,GAEA,OAFA,CAEQ,CAFR,CAAA,EAAA,QAAA,CAAA,EAGnB,mBAHmB,CAAA,EAI5B,OAJ4B,CAIpB,CAJoB,CAAA;AAAA,KAkBnB,kBAlBmB,CAAA,CAAA,CAAA,GAmB5B,qBAnB4B,CAmBN,CAnBM,CAAA,GAoB5B,MApB4B,CAoBrB,CApBqB,CAAA,GAqB5B,WArB4B,CAqBhB,CArBgB,CAAA"}