@palbase/backend 24.0.0 → 24.0.1

package/dist/bin/palbase-backend.cjs

@@ -1374,11 +1374,17 @@ function offsetClause(offset, limit) {
 }
 function compileWhere(table, colSet, where, add, caller = "search") {
   const parts = [];
+  const transforms = transformsOf(currentSchema, table);
+  const bindFor = (col) => {
+    const t = transforms.get(col);
+    return t?.toDb === void 0 ? add : (v) => add(v === null || v === void 0 ? v : t.toDb(v));
+  };
   for (const [col, cond] of Object.entries(where)) {
     if (colSet !== null && !colSet.has(col)) {
       throw new Error(`${caller}(${table}): where kolonu "${col}" tabloda yok (FR-016)`);
     }
     const q = `t.${quoteIdent(col)}`;
+    const bind = bindFor(col);
     if (cond !== null && typeof cond === "object" && !Array.isArray(cond)) {
       for (const [op, v] of Object.entries(cond)) {
         if (op === "in") {
@@ -1387,15 +1393,15 @@ function compileWhere(table, colSet, where, add, caller = "search") {
             parts.push("false");
             continue;
           }
-          parts.push(`${q} IN (${v.map((x) => add(x)).join(", ")})`);
+          parts.push(`${q} IN (${v.map((x) => bind(x)).join(", ")})`);
         } else if (op in WHERE_OPS) {
-          parts.push(`${q} ${WHERE_OPS[op]} ${add(v)}`);
+          parts.push(`${q} ${WHERE_OPS[op]} ${bind(v)}`);
         } else {
           throw new Error(`${caller}(${table}): where.${col} bilinmeyen operat\xF6r "${op}" (gt/gte/lt/lte/neq/in)`);
         }
       }
     } else {
-      parts.push(`${q} = ${add(cond)}`);
+      parts.push(`${q} = ${bind(cond)}`);
     }
   }
   return parts.length === 0 ? "" : ` AND ${parts.join(" AND ")}`;
@@ -1594,10 +1600,9 @@ function createOps(tx) {
      */
     async updateMany(table, where, set) {
       const cols = Object.keys(set);
-      if (cols.length === 0) return [];
-      if (Object.keys(where).length === 0) {
+      if (cols.length === 0) {
         throw new Error(
-          `updateMany(${table}): bo\u015F filtre T\xDCM sat\u0131rlar\u0131 g\xFCncellerdi \u2014 bir filtre verin, ya da her sat\u0131ra uyan bir ko\u015Ful yaz\u0131n`
+          `updateMany(${table}): nothing to set. An update with no columns is not a no-op worth pretending happened \u2014 pass the columns to write.`
         );
       }
       const params = [];
@@ -1608,6 +1613,7 @@ function createOps(tx) {
       const assignments = cols.map((c) => `${quoteIdent(c)} = ${add(asBindParams(table, [c], set)[0])}`).join(", ");
       const known = schemaColumns(table);
       const whereSql = compileWhere(table, known, where, add, "updateMany");
+      assertHasPredicate(whereSql, "updateMany", table);
       const sql = `UPDATE ${quoteIdent(table)} AS t SET ${assignments} WHERE true${whereSql} RETURNING *`;
       return asTableRows(table, await (await at()).unsafe(sql, params));
     },
@@ -1617,11 +1623,6 @@ function createOps(tx) {
      * {@link updateMany} — and here the accident is worse.
      */
     async deleteMany(table, where) {
-      if (Object.keys(where).length === 0) {
-        throw new Error(
-          `deleteMany(${table}): bo\u015F filtre T\xDCM sat\u0131rlar\u0131 silerdi \u2014 bir filtre verin, ya da her sat\u0131ra uyan bir ko\u015Ful yaz\u0131n`
-        );
-      }
       const params = [];
       const add = (v) => {
         params.push(v);
@@ -1629,6 +1630,7 @@ function createOps(tx) {
       };
       const known = schemaColumns(table);
       const whereSql = compileWhere(table, known, where, add, "deleteMany");
+      assertHasPredicate(whereSql, "deleteMany", table);
       const sql = `DELETE FROM ${quoteIdent(table)} AS t WHERE true${whereSql} RETURNING 1`;
       const rows = await (await at()).unsafe(sql, params);
       return rows.length;
@@ -2179,6 +2181,12 @@ function isAbortedTransaction(e) {
   const message = String(e?.message ?? "");
   return sqlstateOf(e) === "25P02" || /current transaction is aborted/i.test(message);
 }
+function assertHasPredicate(whereSql, op, table) {
+  if (whereSql.trim().length > 0) return;
+  throw new Error(
+    `${op}(${table}): the filter compiled to no condition, so this would have written EVERY row. An empty filter \u2014 or an operator object with no operators in it, like { col: {} } \u2014 is refused. Name a condition.`
+  );
+}
 function sqlstateOf(e) {
   const err = e;
   const isState = (v) => typeof v === "string" && /^[0-9A-Z]{5}$/.test(v);