@korajs/store 1.0.0-beta.0 → 1.0.0-beta.2

package/dist/internal.cjs

@@ -233,6 +233,9 @@ function serializeValue(value, descriptor) {
     case "boolean":
       return value ? 1 : 0;
     case "array":
+    case "object":
+    case "json":
+    case "blob":
       return JSON.stringify(value);
     case "richtext":
       return encodeRichtext(value);
@@ -249,6 +252,13 @@ function deserializeValue(value, descriptor) {
         return JSON.parse(value);
       }
       return value;
+    case "object":
+    case "json":
+    case "blob":
+      if (typeof value === "string") {
+        return JSON.parse(value);
+      }
+      return value;
     case "richtext":
       return decodeRichtext(value);
     default:
@@ -256,6 +266,9 @@ function deserializeValue(value, descriptor) {
   }
 }
 
+// src/query/sql-builder.ts
+var import_core5 = require("@korajs/core");
+
 // src/errors.ts
 var import_core3 = require("@korajs/core");
 var QueryError = class extends import_core3.KoraError {
@@ -300,7 +313,7 @@ function lwwVersionWhereClause(remoteVersion) {
 // src/query/sql-builder.ts
 function buildSelectQuery(descriptor, fields) {
   const params = [];
-  const parts = [`SELECT * FROM ${descriptor.collection}`];
+  const parts = [`SELECT * FROM ${(0, import_core5.quoteIdent)(descriptor.collection)}`];
   const whereClause = buildWhereClauseParts(descriptor.where, fields, params);
   const deletedFilter = "_deleted = 0";
   if (whereClause) {
@@ -311,7 +324,7 @@ function buildSelectQuery(descriptor, fields) {
   if (descriptor.orderBy.length > 0) {
     const orderParts = descriptor.orderBy.map((o) => {
       validateFieldName(o.field, fields);
-      return `${o.field} ${o.direction.toUpperCase()}`;
+      return `${(0, import_core5.quoteIdent)(o.field)} ${o.direction.toUpperCase()}`;
     });
     parts.push(`ORDER BY ${orderParts.join(", ")}`);
   }
@@ -325,7 +338,7 @@ function buildSelectQuery(descriptor, fields) {
 }
 function buildCountQuery(descriptor, fields) {
   const params = [];
-  const parts = [`SELECT COUNT(*) as count FROM ${descriptor.collection}`];
+  const parts = [`SELECT COUNT(*) as count FROM ${(0, import_core5.quoteIdent)(descriptor.collection)}`];
   const whereClause = buildWhereClauseParts(descriptor.where, fields, params);
   const deletedFilter = "_deleted = 0";
   if (whereClause) {
@@ -339,38 +352,39 @@ function buildInsertQuery(collection, record) {
   const columns = Object.keys(record);
   const placeholders = columns.map(() => "?");
   const params = Object.values(record);
-  const sql = `INSERT INTO ${collection} (${columns.join(", ")}) VALUES (${placeholders.join(", ")})`;
+  const quotedColumns = columns.map((col) => (0, import_core5.quoteIdent)(col));
+  const sql = `INSERT INTO ${(0, import_core5.quoteIdent)(collection)} (${quotedColumns.join(", ")}) VALUES (${placeholders.join(", ")})`;
   return { sql, params };
 }
 function buildUpdateQuery(collection, id, changes) {
-  const setClauses = Object.keys(changes).map((col) => `${col} = ?`);
+  const setClauses = Object.keys(changes).map((col) => `${(0, import_core5.quoteIdent)(col)} = ?`);
   const params = [...Object.values(changes), id];
-  const sql = `UPDATE ${collection} SET ${setClauses.join(", ")} WHERE id = ?`;
+  const sql = `UPDATE ${(0, import_core5.quoteIdent)(collection)} SET ${setClauses.join(", ")} WHERE id = ?`;
   return { sql, params };
 }
 function buildSoftDeleteQuery(collection, id, updatedAt, version) {
   if (version !== void 0) {
     return {
-      sql: `UPDATE ${collection} SET _deleted = 1, _updated_at = ?, _version = ? WHERE id = ?`,
+      sql: `UPDATE ${(0, import_core5.quoteIdent)(collection)} SET _deleted = 1, _updated_at = ?, _version = ? WHERE id = ?`,
       params: [updatedAt, version, id]
     };
   }
   return {
-    sql: `UPDATE ${collection} SET _deleted = 1, _updated_at = ? WHERE id = ?`,
+    sql: `UPDATE ${(0, import_core5.quoteIdent)(collection)} SET _deleted = 1, _updated_at = ? WHERE id = ?`,
     params: [updatedAt, id]
   };
 }
 function buildLwwUpdateQuery(collection, id, changes, remoteVersion) {
-  const setClauses = Object.keys(changes).map((col) => `${col} = ?`);
+  const setClauses = Object.keys(changes).map((col) => `${(0, import_core5.quoteIdent)(col)} = ?`);
   const lww = lwwVersionWhereClause(remoteVersion);
-  const sql = `UPDATE ${collection} SET ${setClauses.join(", ")} WHERE id = ? AND ${lww.sql}`;
+  const sql = `UPDATE ${(0, import_core5.quoteIdent)(collection)} SET ${setClauses.join(", ")} WHERE id = ? AND ${lww.sql}`;
   const params = [...Object.values(changes), id, ...lww.params];
   return { sql, params };
 }
 function buildLwwSoftDeleteQuery(collection, id, updatedAt, version) {
   const lww = lwwVersionWhereClause(version);
   return {
-    sql: `UPDATE ${collection} SET _deleted = 1, _updated_at = ?, _version = ? WHERE id = ? AND ${lww.sql}`,
+    sql: `UPDATE ${(0, import_core5.quoteIdent)(collection)} SET _deleted = 1, _updated_at = ?, _version = ? WHERE id = ? AND ${lww.sql}`,
     params: [updatedAt, version, id, ...lww.params]
   };
 }
@@ -407,31 +421,32 @@ function buildWhereClauseParts(where, fields, params) {
 }
 function buildOperatorCondition(fieldName, operator, value, descriptor, params) {
   const sqlValue = descriptor?.kind === "boolean" && typeof value === "boolean" ? value ? 1 : 0 : value;
+  const column = (0, import_core5.quoteIdent)(fieldName);
   switch (operator) {
     case "$eq":
       if (sqlValue === null) {
-        return `${fieldName} IS NULL`;
+        return `${column} IS NULL`;
       }
       params.push(sqlValue);
-      return `${fieldName} = ?`;
+      return `${column} = ?`;
     case "$ne":
       if (sqlValue === null) {
-        return `${fieldName} IS NOT NULL`;
+        return `${column} IS NOT NULL`;
       }
       params.push(sqlValue);
-      return `${fieldName} != ?`;
+      return `${column} != ?`;
     case "$gt":
       params.push(sqlValue);
-      return `${fieldName} > ?`;
+      return `${column} > ?`;
     case "$gte":
       params.push(sqlValue);
-      return `${fieldName} >= ?`;
+      return `${column} >= ?`;
     case "$lt":
       params.push(sqlValue);
-      return `${fieldName} < ?`;
+      return `${column} < ?`;
     case "$lte":
       params.push(sqlValue);
-      return `${fieldName} <= ?`;
+      return `${column} <= ?`;
     case "$in": {
       if (!Array.isArray(sqlValue)) {
         throw new QueryError(`$in operator requires an array value for field "${fieldName}"`, {
@@ -445,7 +460,7 @@ function buildOperatorCondition(fieldName, operator, value, descriptor, params)
           descriptor?.kind === "boolean" && typeof item === "boolean" ? item ? 1 : 0 : item
         );
       }
-      return `${fieldName} IN (${placeholders.join(", ")})`;
+      return `${column} IN (${placeholders.join(", ")})`;
     }
     default:
       throw new QueryError(`Unknown operator "${operator}"`, { operator });
@@ -469,7 +484,7 @@ function validateFieldName(fieldName, fields) {
 }
 
 // src/mutations/execute-insert.ts
-var import_core5 = require("@korajs/core");
+var import_core6 = require("@korajs/core");
 
 // src/lww/field-versions.ts
 function parseFieldVersions(raw) {
@@ -536,19 +551,24 @@ function resolveCausalDeps(ctx) {
 
 // src/mutations/execute-insert.ts
 async function executeInsert(ctx, data) {
-  const validated = (0, import_core5.validateRecord)(ctx.collection, ctx.definition, data, "insert");
-  const recordId = (0, import_core5.generateUUIDv7)();
+  const validated = (0, import_core6.validateRecord)(ctx.collection, ctx.definition, data, "insert");
+  const recordId = (0, import_core6.generateUUIDv7)();
   for (const [fieldName, descriptor] of Object.entries(ctx.definition.fields)) {
     if (descriptor.auto && descriptor.kind === "timestamp") {
       validated[fieldName] = Date.now();
     }
   }
+  const writeData = await (0, import_core6.transformSecretFieldsForWrite)(
+    validated,
+    ctx.definition,
+    ctx.secretKeyProvider
+  );
   const causalDeps = resolveCausalDeps(ctx);
   let operation;
   let record;
   await ctx.adapter.transaction(async (tx) => {
     const sequenceNumber = await allocateNextSequenceInTransaction(tx, ctx.nodeId);
-    operation = await (0, import_core5.createOperation)(
+    operation = await (0, import_core6.createOperation)(
       {
         nodeId: ctx.nodeId,
         type: "insert",
@@ -557,7 +577,7 @@ async function executeInsert(ctx, data) {
         // Binary richtext values are tagged as canonical JSON BEFORE the
         // operation is content-hashed, so the hash input, persisted JSON,
         // and wire payload are the identical value.
-        data: encodeRichtextFieldsForOpData(validated, ctx.definition.fields),
+        data: encodeRichtextFieldsForOpData(writeData, ctx.definition.fields),
         previousData: null,
         sequenceNumber,
         causalDeps,
@@ -566,7 +586,7 @@ async function executeInsert(ctx, data) {
       ctx.clock
     );
     ctx.causalTracker?.afterOperation(ctx.collection, operation.id, ctx.inTransaction);
-    const serializedData = serializeRecord(validated, ctx.definition.fields);
+    const serializedData = serializeRecord(writeData, ctx.definition.fields);
     const version = serializeRowVersion(operation.timestamp);
     record = {
       id: recordId,
@@ -591,18 +611,18 @@ async function executeInsert(ctx, data) {
   ctx.onMutation(ctx.collection, operation);
   return {
     id: recordId,
-    ...validated,
+    ...writeData,
     createdAt: operation.timestamp.wallTime,
     updatedAt: operation.timestamp.wallTime
   };
 }
 
 // src/mutations/execute-update.ts
-var import_core7 = require("@korajs/core");
+var import_core8 = require("@korajs/core");
 
 // src/state-machine/state-validator.ts
-var import_core6 = require("@korajs/core");
-var InvalidStateTransitionError = class extends import_core6.KoraError {
+var import_core7 = require("@korajs/core");
+var InvalidStateTransitionError = class extends import_core7.KoraError {
   constructor(collection, recordId, field, fromState, toState, allowedStates) {
     super(
       `Invalid state transition in collection "${collection}": cannot transition field "${field}" from "${fromState}" to "${toState}". Allowed transitions from "${fromState}": ${allowedStates.length > 0 ? allowedStates.join(", ") : "(none -- terminal state)"}`,
@@ -636,7 +656,7 @@ function validateStateTransition(collectionName, recordId, stateMachine, current
     collection: collectionName,
     transitions: stateMachine.transitions
   };
-  const transitionResult = (0, import_core6.validateTransition)(constraint, currentState, newState);
+  const transitionResult = (0, import_core7.validateTransition)(constraint, currentState, newState);
   if (transitionResult.valid) {
     return { valid: true, allowedStates: transitionResult.allowedTargets };
   }
@@ -685,14 +705,14 @@ function validateUpdateStateMachine(collectionName, recordId, collectionDef, cur
 // src/mutations/execute-update.ts
 async function executeUpdate(ctx, id, data) {
   const currentRows = await ctx.adapter.query(
-    `SELECT * FROM ${ctx.collection} WHERE id = ? AND _deleted = 0`,
+    `SELECT * FROM ${(0, import_core8.quoteIdent)(ctx.collection)} WHERE id = ? AND _deleted = 0`,
     [id]
   );
   const currentRow = currentRows[0];
   if (!currentRow) {
     throw new RecordNotFoundError(ctx.collection, id);
   }
-  let validated = (0, import_core7.validateRecord)(ctx.collection, ctx.definition, data, "update");
+  let validated = (0, import_core8.validateRecord)(ctx.collection, ctx.definition, data, "update");
   const currentRecord = deserializeRecord(currentRow, ctx.definition.fields);
   validated = validateUpdateStateMachine(
     ctx.collection,
@@ -710,19 +730,24 @@ async function executeUpdate(ctx, id, data) {
   for (const key of Object.keys(validated)) {
     const value = validated[key];
     previousData[key] = currentRecord[key];
-    if ((0, import_core7.isAtomicOp)(value)) {
-      resolvedData[key] = (0, import_core7.resolveAtomicOp)(currentRecord[key], value);
-      atomicOps[key] = (0, import_core7.toAtomicOp)(value);
+    if ((0, import_core8.isAtomicOp)(value)) {
+      resolvedData[key] = (0, import_core8.resolveAtomicOp)(currentRecord[key], value);
+      atomicOps[key] = (0, import_core8.toAtomicOp)(value);
     } else {
       resolvedData[key] = value;
     }
   }
+  const writeData = await (0, import_core8.transformSecretFieldsForWrite)(
+    resolvedData,
+    ctx.definition,
+    ctx.secretKeyProvider
+  );
   const hasAtomicOps = Object.keys(atomicOps).length > 0;
   const causalDeps = resolveCausalDeps(ctx);
   let operation;
   await ctx.adapter.transaction(async (tx) => {
     const sequenceNumber = await allocateNextSequenceInTransaction(tx, ctx.nodeId);
-    operation = await (0, import_core7.createOperation)(
+    operation = await (0, import_core8.createOperation)(
       {
         nodeId: ctx.nodeId,
         type: "update",
@@ -731,7 +756,7 @@ async function executeUpdate(ctx, id, data) {
         // Binary richtext values (new and previous) are tagged as canonical
         // JSON BEFORE the operation is content-hashed, so the hash input,
         // persisted JSON, and wire payload are the identical value.
-        data: encodeRichtextFieldsForOpData(resolvedData, ctx.definition.fields),
+        data: encodeRichtextFieldsForOpData(writeData, ctx.definition.fields),
         previousData: encodeRichtextFieldsForOpData(previousData, ctx.definition.fields),
         sequenceNumber,
         causalDeps,
@@ -741,7 +766,7 @@ async function executeUpdate(ctx, id, data) {
       ctx.clock
     );
     ctx.causalTracker?.afterOperation(ctx.collection, operation.id, ctx.inTransaction);
-    const serializedChanges = serializeRecord(resolvedData, ctx.definition.fields);
+    const serializedChanges = serializeRecord(writeData, ctx.definition.fields);
     const version = serializeRowVersion(operation.timestamp);
     const mergedFieldVersions = parseFieldVersions(currentRow._field_versions);
     for (const changedField of Object.keys(serializedChanges)) {
@@ -762,7 +787,7 @@ async function executeUpdate(ctx, id, data) {
   });
   ctx.onMutation(ctx.collection, operation);
   const rows = await ctx.adapter.query(
-    `SELECT * FROM ${ctx.collection} WHERE id = ? AND _deleted = 0`,
+    `SELECT * FROM ${(0, import_core8.quoteIdent)(ctx.collection)} WHERE id = ? AND _deleted = 0`,
     [id]
   );
   const row = rows[0];
@@ -773,10 +798,10 @@ async function executeUpdate(ctx, id, data) {
 }
 
 // src/mutations/execute-delete.ts
-var import_core8 = require("@korajs/core");
+var import_core9 = require("@korajs/core");
 async function executeDelete(ctx, id, options) {
   const currentRows = await ctx.adapter.query(
-    `SELECT * FROM ${ctx.collection} WHERE id = ? AND _deleted = 0`,
+    `SELECT * FROM ${(0, import_core9.quoteIdent)(ctx.collection)} WHERE id = ? AND _deleted = 0`,
     [id]
   );
   if (!currentRows[0]) {
@@ -788,7 +813,7 @@ async function executeDelete(ctx, id, options) {
   await ctx.adapter.transaction(async (tx) => {
     if (!operation) {
       const sequenceNumber = await allocateNextSequenceInTransaction(tx, ctx.nodeId);
-      operation = await (0, import_core8.createOperation)(
+      operation = await (0, import_core9.createOperation)(
         {
           nodeId: ctx.nodeId,
           type: "delete",