@happyvertical/smrt-core 0.54.2 → 0.54.3

package/AGENTS.md

@@ -104,7 +104,12 @@ and repository rules.
   (`decorator-different-packages-qualified-coexist`); bundled output needs
   a resolved table that differs first (#3106). Stack
   attribution skips smrt-core (including source-mapped installed
-  `smrt-core/src` frames, #3109), decorator-helper, and module-runner frames.
+  `smrt-core/src` frames, #3109), decorator-helper, and module-runner frames,
+  and drops a frame's Vite `?v=` query (#3490). Library builds stamp each
+  decorated class with `static __smrtPackage__` (own property, read at
+  decoration as its explicit package) and publish `stampsConstructors`; an
+  unstamped class never takes a stamping package's entry by name and table,
+  in either order (#3490, `issue-3490-*.test.ts`, `package-stamp.test.ts`).
   Qualified names are `@scope/pkg:Class`; the scope is a deliberate
   discriminator, so manifest generation (`generateManifest`,
   `applyGenerationPasses`, hence `pnpm build`) throws

package/README.md

@@ -774,3 +774,11 @@ restrictions. Manifests should qualify cross-package
 `extends` names. The deepest subtype wins, including parent replay and late
 intermediate manifests. Unrelated classes and sibling subtypes do not choose a
 winner by registration order: sharing their table still raises a collision.
+
+## Consumer integration fixtures
+
+Consumer integration tests create disposable applications in
+`src/consumer-plugin/__test-consumer-*`. These applications have their own
+compiler configuration and aliases. Core's production, test typecheck, and
+declaration builds exclude these directories, including leftovers from an
+interrupted test run; the authored consumer integration tests remain included.

package/agents/change-feed.md

@@ -81,18 +81,13 @@ emitted), so no call site needs a special case. A wildcard `If-None-Match: *`
 still 304s; the read paths evaluate it only after the payload is built, so it
 distinguishes nothing an unconditional request would not.
 
-Registration derives the declared name from config and manifest; the writer uses
-`instance.tableName`, which resolves through the STI base's schema and then the
-class's own. Where those two derivations disagree the declaration lands on a
-name nothing writes under, and the real table keeps appending. STI is *not* such
-a case today — `@smrt()` already resolves an STI child to its base's table, so a
-child declaring `sensitive` declares `<base>` (verified) — but the manifest-stub
-and manifest-merge paths derive the name differently again, so registration
-declares every candidate name. The authoritative check is at the write path:
-`isChangeFeedSensitiveWrite()` asks the registry about the instance's own class
-through a resolver hook on the leaf module (so `change-feed.ts` never imports
-the registry), sees the exact name being recorded with no derivation to keep in
-sync, and declares it — closing the read path and signal bus for that table.
+STI sensitivity is table-wide. Manifest generation and registration refuse a
+hierarchy mixing classes declaring `sensitive: true` with classes omitting it or
+declaring false (`CONFIG_STI_MIXED_SENSITIVITY`, #3456). Mark every class sensitive
+or put the sensitive and public models on separate tables. This preserves the
+historical-read and live-signal protections without introducing a discriminator
+into old feed rows. A uniformly sensitive hierarchy declares its shared table;
+the authoritative write-path check still verifies the instance's actual table.
 
 Scope note: the generated `_changes`/`_events` routes — both the SvelteKit
 routes and the runtime REST generator's — authorize on an authenticated

package/agents/generators.md

@@ -268,6 +268,19 @@ uses it for class allow-lists, tenant checks, and compatible workflow guards;
 those consumers must not reverse protocol aliases. The alias remains the sole
 wire tool name and is still the key for public patterns and generic tool policy.
 
+`MCPConfig.classNames` scopes generation (simple names, case-insensitive, or
+qualified `@scope/pkg:Class`); omitted, every registered class is a candidate.
+A simple name matching more than one registered class throws (scope it by
+qualified name). Each tool keeps its class's registry key, and configuration,
+fields, methods, dispatch, tasks and collections resolve through that key —
+never through the first same-named class. Generated servers (single-file and
+modular) carry it as `registryKey` in their tool targets and task actions and
+use it for every emitted collection, policy, class and STI-base lookup;
+`objectName` stays the wire/display name.
+A host with an allow-list passes it so the duplicate-name check runs over the
+published set only: an unrelated collision among classes it never lists must
+not fail its catalog or calls (#3490). App MCP always scopes its generators.
+
 ## Generated route collection access (#3416)
 
 There is no generated route-access module. Every generated SvelteKit route

package/agents/object-runtime.md

@@ -2,6 +2,14 @@
 
 `constructor(options)` → `initialize()` → ready for `save()`/`delete()`/`loadFromId()`
 
+Models declaring `audit: true` use transactional collection CRUD with trusted
+`SmrtCollectionOptions.auditTrail` identity and writer. `collection.update()` checks
+registered mutable fields; audited creates refuse natural-key overwrites.
+Direct object writes and custom overrides need explicit service recording.
+Cascade reuse of a no-savepoint transaction requires an active framework-owned
+transaction handle; raw caller transactions retain the ordinary delete limitation.
+See [audit contract](../../../docs/content/audit-trail.md).
+
 - `initialize()`: loads field initializers, applies option values (options override initializers), loads from DB if id/slug provided
 - `save()`: upsert with STI validation, interceptor execution, auto-embeddings. Persisted objects (`isPersisted` — set by DB hydration and successful saves) upsert on `['id']` so natural-key edits (e.g. slug renames) update in place; new objects upsert on the natural-key conflict columns for ingestion-style dedup (#1472)
 - Persisted `save()` uses loaded `updated_at` in its `UPDATE`; zero rows throws

package/agents/schema-paths.md

@@ -896,3 +896,17 @@ connection. This mode is not atomic. Unfinished indexes are `failed`, not
 allows reruns to resume index work without replaying committed DDL. Inspect
 `pg_index.indisvalid` and drop INVALID indexes before rebuild (`pg_indexes`
 alone cannot detect them). Operational commands: `packages/cli/AGENTS.md`.
+
+### Subclass conflict identities (#3456)
+
+An STI child's explicit `conflictColumns` owns a partial unique index restricted
+to its qualified discriminator. The root conflict index excludes these children;
+registry and manifest paths emit the same predicates. Natural-key lookups include
+that scope, PostgreSQL atomic inserts include the index predicate, and adopted
+rows update by id. Bulk writes use per-item guards for these targets. Normal
+migrations replace the root index by name and add the child index; repair any
+existing duplicate child natural keys before migrating. Stop old writers for this
+index migration and load the complete consumer manifest on every shared-table
+writer before resuming: a provider-only manifest lacks the child predicates.
+DuckDB/JSON reject
+these schemas because partial unique conflict identities cannot be enforced.

package/dist/audit-context.d.ts

@@ -0,0 +1,4 @@
+import type { CollectionAuditOptions } from './audit.js';
+/** Bind trusted identity/sink to this async request, including generated CRUD. */
+export declare function withAuditContext<T>(options: CollectionAuditOptions, operation: () => T): T;
+//# sourceMappingURL=audit-context.d.ts.map

package/dist/audit-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-context.d.ts","sourceRoot":"","sources":["../src/audit-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAWzD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,CAAC,EAChC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,EAAE,MAAM,CAAC,GACjB,CAAC,CAEH"}

package/dist/audit-context.js

@@ -0,0 +1,16 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/audit-context.ts
+var STORAGE = Symbol.for("smrt.audit.storage");
+var CONTEXT = Symbol.for("smrt.audit.context");
+var shared = globalThis;
+if (!shared[STORAGE]) shared[STORAGE] = new AsyncLocalStorage();
+var storage = shared[STORAGE];
+shared[CONTEXT] = () => storage.getStore();
+/** Bind trusted identity/sink to this async request, including generated CRUD. */
+function withAuditContext(options, operation) {
+	return storage.run(Object.freeze({ ...options }), operation);
+}
+//#endregion
+export { withAuditContext };
+
+//# sourceMappingURL=audit-context.js.map

package/dist/audit-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-context.js","names":[],"sources":["../src/audit-context.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks';\nimport type { CollectionAuditOptions } from './audit.js';\n\nconst STORAGE = Symbol.for('smrt.audit.storage');\nconst CONTEXT = Symbol.for('smrt.audit.context');\nconst shared = globalThis as unknown as Record<symbol, unknown>;\nif (!shared[STORAGE]) {\n  shared[STORAGE] = new AsyncLocalStorage<CollectionAuditOptions>();\n}\nconst storage = shared[STORAGE] as AsyncLocalStorage<CollectionAuditOptions>;\nshared[CONTEXT] = () => storage.getStore();\n\n/** Bind trusted identity/sink to this async request, including generated CRUD. */\nexport function withAuditContext<T>(\n  options: CollectionAuditOptions,\n  operation: () => T,\n): T {\n  return storage.run(Object.freeze({ ...options }), operation);\n}\n"],"mappings":";;AAGA,IAAM,UAAU,OAAO,IAAI,oBAAoB;AAC/C,IAAM,UAAU,OAAO,IAAI,oBAAoB;AAC/C,IAAM,SAAS;AACf,IAAI,CAAC,OAAO,UACV,OAAO,WAAW,IAAI,kBAA0C;AAElE,IAAM,UAAU,OAAO;AACvB,OAAO,iBAAiB,QAAQ,SAAS;;AAGzC,SAAgB,iBACd,SACA,WACG;CACH,OAAO,QAAQ,IAAI,OAAO,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,SAAS;AAC7D"}

package/dist/audit.d.ts

@@ -0,0 +1,34 @@
+import type { DatabaseInterface } from '@happyvertical/sql';
+import type { SmrtObject } from './object.js';
+/** Caller identity comes from trusted server context, never a request body. */
+export interface AuditContext {
+    actorId: string;
+    reason?: string;
+    source?: 'web' | 'cli' | 'ci' | 'webhook' | 'mcp';
+    onBehalfOfId?: string | null;
+}
+export interface AuditChange {
+    before: unknown;
+    after: unknown;
+}
+export interface AuditEntry extends AuditContext {
+    action: string;
+    resourceType: string;
+    resourceId: string;
+    tenantId: string | null;
+    changes: Record<string, AuditChange>;
+}
+/** Writers MUST use this exact transaction handle and propagate failures. */
+export type AuditWriter = (entry: AuditEntry, db: DatabaseInterface) => Promise<void>;
+export interface CollectionAuditOptions extends AuditContext {
+    writer: AuditWriter;
+}
+/** Dependency-inverted lookup; the Node-only context module owns async scope. */
+export declare function getActiveAuditOptions(): CollectionAuditOptions | undefined;
+export declare function isAudited(instance: SmrtObject): boolean;
+/** Snapshot the public projection: credentials and permission-gated fields are omitted. */
+export declare function auditSnapshot(instance: SmrtObject): Record<string, unknown>;
+export declare function auditChanges(before: Record<string, unknown>, after: Record<string, unknown>): Record<string, AuditChange>;
+export declare function requireAuditOptions(options: CollectionAuditOptions | undefined, context?: Partial<AuditContext>): CollectionAuditOptions;
+export declare function writeAudit(instance: SmrtObject, action: string, before: Record<string, unknown>, after: Record<string, unknown>, options: CollectionAuditOptions): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACtC;AAED,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,CACxB,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,iBAAiB,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D,MAAM,EAAE,WAAW,CAAC;CACrB;AAID,iFAAiF;AACjF,wBAAgB,qBAAqB,IAAI,sBAAsB,GAAG,SAAS,CAG1E;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CASvD;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAO3E;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAQ7B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,sBAAsB,GAAG,SAAS,EAC3C,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC9B,sBAAsB,CAaxB;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/audit.js

@@ -0,0 +1,63 @@
+import { toSnakeCase } from "./utils/naming.js";
+import { ObjectRegistry } from "./registry.js";
+//#region src/audit.ts
+var CONTEXT = Symbol.for("smrt.audit.context");
+/** Dependency-inverted lookup; the Node-only context module owns async scope. */
+function getActiveAuditOptions() {
+	const resolver = globalThis[CONTEXT];
+	return typeof resolver === "function" ? resolver() : void 0;
+}
+function isAudited(instance) {
+	const registered = ObjectRegistry.getClassByConstructor(instance.constructor);
+	const name = registered?.qualifiedName || registered?.name || instance.constructor.name;
+	return [name, ...ObjectRegistry.getInheritanceChain(name)].some((key) => ObjectRegistry.getConfig(key).audit === true);
+}
+/** Snapshot the public projection: credentials and permission-gated fields are omitted. */
+function auditSnapshot(instance) {
+	const snapshot = JSON.parse(JSON.stringify(instance.toPublicJSON()));
+	delete snapshot.created_at;
+	delete snapshot.updated_at;
+	return snapshot;
+}
+function auditChanges(before, after) {
+	const changes = {};
+	for (const key of /* @__PURE__ */ new Set([...Object.keys(before), ...Object.keys(after)])) if (JSON.stringify(before[key]) !== JSON.stringify(after[key])) changes[key] = {
+		before: before[key] ?? null,
+		after: after[key] ?? null
+	};
+	return changes;
+}
+function requireAuditOptions(options, context) {
+	const defaults = options ?? getActiveAuditOptions();
+	const resolved = defaults && {
+		...defaults,
+		...context
+	};
+	if (!resolved || typeof resolved.writer !== "function" || !resolved.actorId?.trim()) throw new Error("Audited mutation requires a writer and an authenticated actorId");
+	return resolved;
+}
+async function writeAudit(instance, action, before, after, options) {
+	const registered = ObjectRegistry.getClassByConstructor(instance.constructor);
+	const resourceType = registered?.qualifiedName || registered?.name || instance.constructor.name;
+	const runtimeColumns = ObjectRegistry.getRuntimeOwnershipColumns(resourceType);
+	if (runtimeColumns.size > 1) throw new Error("Audited mutation has ambiguous runtime tenant ownership");
+	const tenantColumn = runtimeColumns.size === 1 ? runtimeColumns.values().next().value : ObjectRegistry.getOwnershipTenantColumn(resourceType);
+	const fields = await ObjectRegistry.getAllFields(resourceType);
+	const tenantField = tenantColumn ? [...fields.keys()].find((key) => toSnakeCase(key) === tenantColumn) : void 0;
+	const tenantId = tenantField ? instance[tenantField] : null;
+	await options.writer({
+		actorId: options.actorId,
+		reason: options.reason,
+		source: options.source,
+		onBehalfOfId: options.onBehalfOfId,
+		action,
+		resourceType,
+		resourceId: instance.id,
+		tenantId: typeof tenantId === "string" ? tenantId : null,
+		changes: auditChanges(before, after)
+	}, instance.db);
+}
+//#endregion
+export { auditChanges, auditSnapshot, getActiveAuditOptions, isAudited, requireAuditOptions, writeAudit };
+
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","names":[],"sources":["../src/audit.ts"],"sourcesContent":["import type { DatabaseInterface } from '@happyvertical/sql';\nimport type { SmrtObject } from './object.js';\nimport type { SmrtObjectConstructor } from './registry/types.js';\nimport { ObjectRegistry } from './registry.js';\nimport { toSnakeCase } from './utils/naming.js';\n\n/** Caller identity comes from trusted server context, never a request body. */\nexport interface AuditContext {\n  actorId: string;\n  reason?: string;\n  source?: 'web' | 'cli' | 'ci' | 'webhook' | 'mcp';\n  onBehalfOfId?: string | null;\n}\n\nexport interface AuditChange {\n  before: unknown;\n  after: unknown;\n}\n\nexport interface AuditEntry extends AuditContext {\n  action: string;\n  resourceType: string;\n  resourceId: string;\n  tenantId: string | null;\n  changes: Record<string, AuditChange>;\n}\n\n/** Writers MUST use this exact transaction handle and propagate failures. */\nexport type AuditWriter = (\n  entry: AuditEntry,\n  db: DatabaseInterface,\n) => Promise<void>;\n\nexport interface CollectionAuditOptions extends AuditContext {\n  writer: AuditWriter;\n}\n\nconst CONTEXT = Symbol.for('smrt.audit.context');\n\n/** Dependency-inverted lookup; the Node-only context module owns async scope. */\nexport function getActiveAuditOptions(): CollectionAuditOptions | undefined {\n  const resolver = (globalThis as unknown as Record<symbol, unknown>)[CONTEXT];\n  return typeof resolver === 'function' ? resolver() : undefined;\n}\n\nexport function isAudited(instance: SmrtObject): boolean {\n  const registered = ObjectRegistry.getClassByConstructor(\n    instance.constructor as SmrtObjectConstructor,\n  );\n  const name =\n    registered?.qualifiedName || registered?.name || instance.constructor.name;\n  return [name, ...ObjectRegistry.getInheritanceChain(name)].some(\n    (key) => ObjectRegistry.getConfig(key).audit === true,\n  );\n}\n\n/** Snapshot the public projection: credentials and permission-gated fields are omitted. */\nexport function auditSnapshot(instance: SmrtObject): Record<string, unknown> {\n  const snapshot = JSON.parse(\n    JSON.stringify(instance.toPublicJSON()),\n  ) as Record<string, unknown>;\n  delete snapshot.created_at;\n  delete snapshot.updated_at;\n  return snapshot;\n}\n\nexport function auditChanges(\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n): Record<string, AuditChange> {\n  const changes: Record<string, AuditChange> = {};\n  for (const key of new Set([...Object.keys(before), ...Object.keys(after)])) {\n    if (JSON.stringify(before[key]) !== JSON.stringify(after[key])) {\n      changes[key] = { before: before[key] ?? null, after: after[key] ?? null };\n    }\n  }\n  return changes;\n}\n\nexport function requireAuditOptions(\n  options: CollectionAuditOptions | undefined,\n  context?: Partial<AuditContext>,\n): CollectionAuditOptions {\n  const defaults = options ?? getActiveAuditOptions();\n  const resolved = defaults && { ...defaults, ...context };\n  if (\n    !resolved ||\n    typeof resolved.writer !== 'function' ||\n    !resolved.actorId?.trim()\n  ) {\n    throw new Error(\n      'Audited mutation requires a writer and an authenticated actorId',\n    );\n  }\n  return resolved;\n}\n\nexport async function writeAudit(\n  instance: SmrtObject,\n  action: string,\n  before: Record<string, unknown>,\n  after: Record<string, unknown>,\n  options: CollectionAuditOptions,\n): Promise<void> {\n  const registered = ObjectRegistry.getClassByConstructor(\n    instance.constructor as SmrtObjectConstructor,\n  );\n  const resourceType =\n    registered?.qualifiedName || registered?.name || instance.constructor.name;\n  const runtimeColumns =\n    ObjectRegistry.getRuntimeOwnershipColumns(resourceType);\n  if (runtimeColumns.size > 1) {\n    throw new Error('Audited mutation has ambiguous runtime tenant ownership');\n  }\n  const tenantColumn =\n    runtimeColumns.size === 1\n      ? runtimeColumns.values().next().value\n      : ObjectRegistry.getOwnershipTenantColumn(resourceType);\n  const fields = await ObjectRegistry.getAllFields(resourceType);\n  const tenantField = tenantColumn\n    ? [...fields.keys()].find((key) => toSnakeCase(key) === tenantColumn)\n    : undefined;\n  const tenantId = tenantField\n    ? (instance as unknown as Record<string, unknown>)[tenantField]\n    : null;\n  await options.writer(\n    {\n      actorId: options.actorId,\n      reason: options.reason,\n      source: options.source,\n      onBehalfOfId: options.onBehalfOfId,\n      action,\n      resourceType,\n      resourceId: instance.id as string,\n      tenantId: typeof tenantId === 'string' ? tenantId : null,\n      changes: auditChanges(before, after),\n    },\n    instance.db,\n  );\n}\n"],"mappings":";;;AAqCA,IAAM,UAAU,OAAO,IAAI,oBAAoB;;AAG/C,SAAgB,wBAA4D;CAC1E,MAAM,WAAY,WAAkD;CACpE,OAAO,OAAO,aAAa,aAAa,SAAS,IAAI,KAAA;AACvD;AAEA,SAAgB,UAAU,UAA+B;CACvD,MAAM,aAAa,eAAe,sBAChC,SAAS,WACX;CACA,MAAM,OACJ,YAAY,iBAAiB,YAAY,QAAQ,SAAS,YAAY;CACxE,OAAO,CAAC,MAAM,GAAG,eAAe,oBAAoB,IAAI,CAAC,CAAC,CAAC,MACxD,QAAQ,eAAe,UAAU,GAAG,CAAC,CAAC,UAAU,IACnD;AACF;;AAGA,SAAgB,cAAc,UAA+C;CAC3E,MAAM,WAAW,KAAK,MACpB,KAAK,UAAU,SAAS,aAAa,CAAC,CACxC;CACA,OAAO,SAAS;CAChB,OAAO,SAAS;CAChB,OAAO;AACT;AAEA,SAAgB,aACd,QACA,OAC6B;CAC7B,MAAM,UAAuC,CAAC;CAC9C,KAAK,MAAM,uBAAO,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,GACvE,IAAI,KAAK,UAAU,OAAO,IAAI,MAAM,KAAK,UAAU,MAAM,IAAI,GAC3D,QAAQ,OAAO;EAAE,QAAQ,OAAO,QAAQ;EAAM,OAAO,MAAM,QAAQ;CAAK;CAG5E,OAAO;AACT;AAEA,SAAgB,oBACd,SACA,SACwB;CACxB,MAAM,WAAW,WAAW,sBAAsB;CAClD,MAAM,WAAW,YAAY;EAAE,GAAG;EAAU,GAAG;CAAQ;CACvD,IACE,CAAC,YACD,OAAO,SAAS,WAAW,cAC3B,CAAC,SAAS,SAAS,KAAK,GAExB,MAAM,IAAI,MACR,iEACF;CAEF,OAAO;AACT;AAEA,eAAsB,WACpB,UACA,QACA,QACA,OACA,SACe;CACf,MAAM,aAAa,eAAe,sBAChC,SAAS,WACX;CACA,MAAM,eACJ,YAAY,iBAAiB,YAAY,QAAQ,SAAS,YAAY;CACxE,MAAM,iBACJ,eAAe,2BAA2B,YAAY;CACxD,IAAI,eAAe,OAAO,GACxB,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,eACJ,eAAe,SAAS,IACpB,eAAe,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,QAC/B,eAAe,yBAAyB,YAAY;CAC1D,MAAM,SAAS,MAAM,eAAe,aAAa,YAAY;CAC7D,MAAM,cAAc,eAChB,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,QAAQ,YAAY,GAAG,MAAM,YAAY,IAClE,KAAA;CACJ,MAAM,WAAW,cACZ,SAAgD,eACjD;CACJ,MAAM,QAAQ,OACZ;EACE,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,QAAQ,QAAQ;EAChB,cAAc,QAAQ;EACtB;EACA;EACA,YAAY,SAAS;EACrB,UAAU,OAAO,aAAa,WAAW,WAAW;EACpD,SAAS,aAAa,QAAQ,KAAK;CACrC,GACA,SAAS,EACX;AACF"}

package/dist/browser.d.ts

@@ -15,6 +15,7 @@
  * import { ... } from '@happyvertical/smrt-core';
  */
 export * from './adapters/index';
+export * from './audit.js';
 export * from './class';
 export * from './collection';
 export type { AiUsageConfig, GlobalSignalConfig, MetricsConfig, PubSubConfig, } from './config';
@@ -23,7 +24,7 @@ export { classifyDatabaseError, classifyDialectMessage, type DatabaseErrorClassi
 export * from './decisions';
 export * from './errors';
 export { type HierarchyView, SmrtHierarchical } from './hierarchical';
-export { type JunctionAttachOptions, type JunctionFilterOptions, SmrtJunction, } from './junction';
+export { type JunctionAttachOptions, type JunctionFilterOptions, SmrtJunction, SmrtJunctionBase, } from './junction';
 export * from './object';
 export { SmrtPolymorphicAssociation, type SmrtPolymorphicAssociationOptions, } from './polymorphic-association';
 export * from './registry';

package/dist/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,cAAc,kBAAkB,CAAC;AAEjC,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAOlC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAIrB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,cAAc,UAAU,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,2BAA2B,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAElD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,cAAc,eAAe,CAAC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAE3B,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAOlC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAIrB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,OAAO,EAAE,KAAK,aAAa,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,cAAc,UAAU,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,GACvC,MAAM,2BAA2B,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAElD,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,cAAc,eAAe,CAAC"}

package/dist/browser.js

@@ -13,15 +13,16 @@ import { SignalBus } from "./signals/bus.js";
 import { assertPostgresSystemTimestampsCurrent, ensureBootstrapSystemTableCompatibility, ensureDeferredSystemTableCompatibility, ensureDispatchSubscriptionsSystemTableCompatibility, ensureDispatchSystemTableCompatibility, ensureJobEventsSystemTableCompatibility, ensureJobsSystemTableCompatibility, ensureLegacySystemTableCompatibility, getDatabaseEngine, migratePostgresSystemTimestamps, planPostgresSystemTimestampMigrations, tableExists } from "./system/compatibility.js";
 import { ensureSystemTables } from "./system/bootstrap.js";
 import { SmrtClass } from "./class.js";
+import { DEFAULT_FACET_LIMIT, EmbeddingUnavailableError, MAX_FACET_FIELDS, MAX_FACET_LIMIT, MAX_STI_READ_SCOPE_TYPES, SmrtCollection } from "./collection.js";
 import { convertTypeToJsonSchema, generateToolFromMethod, generateToolManifest, shouldIncludeMethod } from "./tools/tool-generator.js";
 import { executeToolCall, executeToolCalls, formatToolResults, validateToolCall } from "./tools/tool-executor.js";
 import { SmrtObject } from "./object.js";
 import { isFrameworkBaseClass } from "./registry/framework-base-classes.js";
 import { SMRT_COLLECTION_BASE_NAMES, isSmrtCollectionExtendsName } from "./registry/collection-resolution.js";
 import { ObjectRegistry, smrt } from "./registry.js";
-import { DEFAULT_FACET_LIMIT, EmbeddingUnavailableError, MAX_FACET_FIELDS, MAX_FACET_LIMIT, MAX_STI_READ_SCOPE_TYPES, SmrtCollection } from "./collection.js";
+import { auditChanges, auditSnapshot, getActiveAuditOptions, isAudited, requireAuditOptions, writeAudit } from "./audit.js";
 import { SmrtHierarchical } from "./hierarchical.js";
-import { SmrtJunction } from "./junction.js";
+import { SmrtJunction, SmrtJunctionBase } from "./junction.js";
 import { SmrtPolymorphicAssociation } from "./polymorphic-association.js";
 import "./signals/index.js";
 import { DIAGNOSTICS_DEFAULT_LIMIT, SYSTEM_DIAGNOSTICS_TABLES, readDispatchHealth, readJobHealth, readMigrationStatus, readRecentChanges, readRegistryDrift, readScheduleHealth, readSystemDiagnostics } from "./system/diagnostics.js";
@@ -29,4 +30,4 @@ import { BOOTED_PROVENANCE, assertPlainJson, sanitizeMessagePaths, snapshotRegis
 import { DEFAULT_RETENTION_POLICY, clearRetentionTasks, getRetentionTasks, pruneAiUsage, pruneExpiredContexts, pruneRunOnceClaims, registerRetentionTask, runRetentionSweep, unregisterRetentionTask } from "./system/retention.js";
 import "./system/index.js";
 import "./tools/index.js";
-export { AIError, AiUsageCollector, AiUsagePersistenceHandler, BOOTED_PROVENANCE, ConfigurationError, DEFAULT_AI_COST_RATES, DEFAULT_FACET_LIMIT, DEFAULT_RETENTION_POLICY, DIAGNOSTICS_DEFAULT_LIMIT, DatabaseError, EmbeddingUnavailableError, ErrorUtils, FilesystemError, MAX_FACET_FIELDS, MAX_FACET_LIMIT, MAX_STI_READ_SCOPE_TYPES, MetricsAdapter, NetworkError, ObjectRegistry, PubSubAdapter, RunOnceClaimError, RuntimeError, SMRT_COLLECTION_BASE_NAMES, SMRT_SCHEMA_VERSION, SYSTEM_DIAGNOSTICS_TABLES, SignalBus, SignalSanitizer, SmrtClass, SmrtCollection, SmrtError, SmrtHierarchical, SmrtJunction, SmrtObject, SmrtPolymorphicAssociation, TenantIsolationError, ValidationError, ValidationReport, ValidationUtils, assertFiniteUnitInterval, assertPlainJson, assertPostgresSystemTimestampsCurrent, classifyDatabaseError, classifyDialectMessage, clearRetentionTasks, config, convertTypeToJsonSchema, ensureBootstrapSystemTableCompatibility, ensureDeferredSystemTableCompatibility, ensureDispatchSubscriptionsSystemTableCompatibility, ensureDispatchSystemTableCompatibility, ensureJobEventsSystemTableCompatibility, ensureJobsSystemTableCompatibility, ensureLegacySystemTableCompatibility, ensureSystemTables, estimateAiUsageCost, executeDecision, executeToolCall, executeToolCalls, formatToolResults, generateToolFromMethod, generateToolManifest, getDatabaseEngine, getRetentionTasks, isAbortedTransactionError, isDeterministicDatabaseError, isFrameworkBaseClass, isNotNullViolationError, isSmrtCollectionExtendsName, isTransientDatabaseError, isUniqueViolationError, migratePostgresSystemTimestamps, planPostgresSystemTimestampMigrations, pruneAiUsage, pruneExpiredContexts, pruneRunOnceClaims, readDispatchHealth, readJobHealth, readMigrationStatus, readRecentChanges, readRegistryDrift, readScheduleHealth, readSystemDiagnostics, registerRetentionTask, runRetentionSweep, sanitizeMessagePaths, shouldIncludeMethod, smrt, smrt as smrtRegistry, snapshotRegistry, tableExists, unregisterRetentionTask, validateToolCall };
+export { AIError, AiUsageCollector, AiUsagePersistenceHandler, BOOTED_PROVENANCE, ConfigurationError, DEFAULT_AI_COST_RATES, DEFAULT_FACET_LIMIT, DEFAULT_RETENTION_POLICY, DIAGNOSTICS_DEFAULT_LIMIT, DatabaseError, EmbeddingUnavailableError, ErrorUtils, FilesystemError, MAX_FACET_FIELDS, MAX_FACET_LIMIT, MAX_STI_READ_SCOPE_TYPES, MetricsAdapter, NetworkError, ObjectRegistry, PubSubAdapter, RunOnceClaimError, RuntimeError, SMRT_COLLECTION_BASE_NAMES, SMRT_SCHEMA_VERSION, SYSTEM_DIAGNOSTICS_TABLES, SignalBus, SignalSanitizer, SmrtClass, SmrtCollection, SmrtError, SmrtHierarchical, SmrtJunction, SmrtJunctionBase, SmrtObject, SmrtPolymorphicAssociation, TenantIsolationError, ValidationError, ValidationReport, ValidationUtils, assertFiniteUnitInterval, assertPlainJson, assertPostgresSystemTimestampsCurrent, auditChanges, auditSnapshot, classifyDatabaseError, classifyDialectMessage, clearRetentionTasks, config, convertTypeToJsonSchema, ensureBootstrapSystemTableCompatibility, ensureDeferredSystemTableCompatibility, ensureDispatchSubscriptionsSystemTableCompatibility, ensureDispatchSystemTableCompatibility, ensureJobEventsSystemTableCompatibility, ensureJobsSystemTableCompatibility, ensureLegacySystemTableCompatibility, ensureSystemTables, estimateAiUsageCost, executeDecision, executeToolCall, executeToolCalls, formatToolResults, generateToolFromMethod, generateToolManifest, getActiveAuditOptions, getDatabaseEngine, getRetentionTasks, isAbortedTransactionError, isAudited, isDeterministicDatabaseError, isFrameworkBaseClass, isNotNullViolationError, isSmrtCollectionExtendsName, isTransientDatabaseError, isUniqueViolationError, migratePostgresSystemTimestamps, planPostgresSystemTimestampMigrations, pruneAiUsage, pruneExpiredContexts, pruneRunOnceClaims, readDispatchHealth, readJobHealth, readMigrationStatus, readRecentChanges, readRegistryDrift, readScheduleHealth, readSystemDiagnostics, registerRetentionTask, requireAuditOptions, runRetentionSweep, sanitizeMessagePaths, shouldIncludeMethod, smrt, smrt as smrtRegistry, snapshotRegistry, tableExists, unregisterRetentionTask, validateToolCall, writeAudit };

package/dist/cascade.d.ts

@@ -64,7 +64,7 @@
  * @see https://github.com/happyvertical/smrt/issues/2371
  * @module
  */
-import type { DatabaseInterface } from '@happyvertical/sql';
+import { type DatabaseInterface } from '@happyvertical/sql';
 import type { ObjectRegistry } from './registry.js';
 import type { ForeignKeyAction } from './schema/types.js';
 /**

package/dist/cascade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cascade.d.ts","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAK5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAM1D;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAsB9C,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,cAAc,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,mEAAmE;AACnE,MAAM,WAAW,2BAA2B;IAC1C,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,mEAAmE;IACnE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IAC3C,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CACpC,OAAO,cAAc,EACnB,oBAAoB,GACpB,WAAW,GACX,oBAAoB,GACpB,cAAc,GACd,uBAAuB,GACvB,UAAU,GACV,YAAY,GACZ,gBAAgB,CACnB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAE5E;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,EAAE,MAAM,GAChB,WAAW,CAkJb;AAqZD,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;OAIG;IACH,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D,OAAO,CAAC,aAAa,CAAC,CAwBxB;AASD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAC/B,EACD,UAAU,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC,aAAa,CAAC,CAuDxB"}
+{"version":3,"file":"cascade.d.ts","sourceRoot":"","sources":["../src/cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAGH,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAWxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAM1D;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAsB9C,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,cAAc,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,mEAAmE;AACnE,MAAM,WAAW,2BAA2B;IAC1C,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,mEAAmE;IACnE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IAC3C,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CACpC,OAAO,cAAc,EACnB,oBAAoB,GACpB,WAAW,GACX,oBAAoB,GACpB,cAAc,GACd,uBAAuB,GACvB,UAAU,GACV,YAAY,GACZ,gBAAgB,CACnB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAE5E;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,EAAE,MAAM,GAChB,WAAW,CAkJb;AAyZD,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;OAIG;IACH,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D,OAAO,CAAC,aAAa,CAAC,CAwBxB;AASD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAC/B,EACD,UAAU,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC,aAAa,CAAC,CAyDxB"}

package/dist/cascade.js

@@ -1,9 +1,11 @@
 import { classifyDatabaseError } from "./db-errors.js";
+import { isEmbeddedDatabase, isFrameworkTransactionHandle, isPostgresDatabase, withEmbeddedWriteTransaction } from "./embedded-write-queue.js";
 import { ConfigurationError, DatabaseError } from "./errors.js";
 import { normalizeForeignKeyAction, resolveForeignKeyDeleteAction } from "./schema/foreign-key-policy.js";
 import { chunkArray } from "./utils/chunk.js";
 import { toSnakeCase } from "./utils/naming.js";
 import { createLogger } from "@happyvertical/logger";
+import { buildWhere } from "@happyvertical/sql";
 //#region src/cascade.ts
 /**
 * App-side referential integrity for `SmrtObject.delete()` (#2371).
@@ -283,7 +285,10 @@ async function tolerateMissingSystemTable(operation, fallback, context) {
 async function selectIds(db, tableName, column, ids) {
 	const found = [];
 	for (const batch of chunkArray(ids, 900)) {
-		const rows = await tolerateMissingTable(() => db.list(tableName, idPredicate(column, batch)), [], {
+		const dialect = isPostgresDatabase(db) ? "postgres" : "sqlite";
+		const where = buildWhere(idPredicate(column, batch), 1, dialect);
+		const sql = `SELECT CAST("id" AS VARCHAR) AS "id" FROM ${`"${tableName.replaceAll("\"", "\"\"")}"`} ${where.sql}`;
+		const rows = await tolerateMissingTable(() => db.query(sql, ...where.values).then((result) => result.rows), [], {
 			table: tableName,
 			action: "CASCADE select"
 		});
@@ -449,9 +454,8 @@ async function runCascadeDelete(db, registry, target, deleteSelf) {
 				affectedTableClasses: /* @__PURE__ */ new Map()
 			};
 		};
-		const transaction = db.transaction;
-		if (typeof transaction !== "function") return runWithoutReferences(db);
-		return transaction.call(db, runWithoutReferences);
+		if (typeof db.transaction !== "function") return runWithoutReferences(db);
+		return withEmbeddedWriteTransaction(db, isEmbeddedDatabase(db), runWithoutReferences, isFrameworkTransactionHandle(db));
 	}
 	const run = async (bound) => {
 		const result = await cascadeReferencesTo(bound, registry, {
@@ -462,9 +466,8 @@ async function runCascadeDelete(db, registry, target, deleteSelf) {
 		await deleteSelf(bound);
 		return result;
 	};
-	const transaction = db.transaction;
-	if (typeof transaction !== "function") return run(db);
-	return transaction.call(db, run);
+	if (typeof db.transaction !== "function") return run(db);
+	return withEmbeddedWriteTransaction(db, isEmbeddedDatabase(db), run, isFrameworkTransactionHandle(db));
 }
 //#endregion
 export { buildCascadePlan, cascadeReferencesTo, normalizeOnDelete, runCascadeDelete };