@palbase/backend 24.0.1 → 24.1.0

package/dist/bin/palbase-backend.js

@@ -3,12 +3,12 @@ import {
   BootRefused,
   createApp,
   loadConfig
-} from "../chunk-YSQBC2VL.js";
+} from "../chunk-HPUSV4AZ.js";
 import "../chunk-7Z6MGMXQ.js";
 import "../chunk-P2Q27SGP.js";
 import {
   getRegisteredControllers
-} from "../chunk-H3JAISUY.js";
+} from "../chunk-UWSYTUGM.js";
 import "../chunk-7D4SUZUM.js";
 
 // src/bin/palbase-backend.ts

package/dist/{chunk-T5IOSOE5.js → chunk-ERDL5VAE.js}

@@ -1,6 +1,6 @@
 import {
   HttpError
-} from "./chunk-H3JAISUY.js";
+} from "./chunk-UWSYTUGM.js";
 
 // src/error-registry.ts
 import {
@@ -119,4 +119,4 @@ export {
   getErrorRegistry,
   defineError
 };
-//# sourceMappingURL=chunk-T5IOSOE5.js.map
+//# sourceMappingURL=chunk-ERDL5VAE.js.map

package/dist/{chunk-YSQBC2VL.js → chunk-HPUSV4AZ.js}

@@ -7,9 +7,11 @@ import {
   UniqueViolation,
   assertZeroArgConstructor,
   getRoutes,
+  isEngineRaised,
   isHttpError,
+  markEngineRaised,
   resolveEffectiveAuth
-} from "./chunk-H3JAISUY.js";
+} from "./chunk-UWSYTUGM.js";
 
 // src/engine/config.ts
 var BootRefused = class extends Error {
@@ -450,7 +452,14 @@ function asTableRows(table, rows) {
   const transforms = transformsOf(currentSchema, table);
   return rows.map((row) => applyFromDb(reviveVectors(asWireRow(row), vectorCols), transforms));
 }
-function asBindParams(table, cols, data) {
+function asBindParams(table, cols, data, caller) {
+  for (const c of cols) {
+    if (data[c] === void 0) {
+      throw new Error(
+        `${caller}(${table}): "${c}" de\u011Feri undefined \u2014 bu bir yazma de\u011Feri de\u011Fil. Kolonu bo\u015Faltmak istiyorsan null yaz; kolonu de\u011Fi\u015Ftirmek istemiyorsan nesneye hi\xE7 koyma (bir eksik istek alan\u0131 sessizce NULL yaz\u0131yordu \u2014 FR-016).`
+      );
+    }
+  }
   const vectorCols = vectorColumnsOf(currentSchema, table);
   const transforms = transformsOf(currentSchema, table);
   return cols.map((c) => {
@@ -677,23 +686,49 @@ function compileWhere(table, colSet, where, add, caller = "search") {
     if (colSet !== null && !colSet.has(col)) {
       throw new Error(`${caller}(${table}): where kolonu "${col}" tabloda yok (FR-016)`);
     }
+    if (cond === void 0) {
+      throw new Error(
+        `${caller}(${table}): where.${col} de\u011Feri undefined \u2014 bu bir filtre de\u011Feri de\u011Fil. Ba\u011Flan\u0131nca NULL olur ve '= NULL' hi\xE7bir sat\u0131ra uymaz, yani sorgu sessizce bo\u015F sonu\xE7 d\xF6nerdi. De\u011Fer yoksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n.`
+      );
+    }
     const q = `t.${quoteIdent(col)}`;
     const bind = bindFor(col);
     if (cond !== null && typeof cond === "object" && !Array.isArray(cond)) {
+      if (Object.keys(cond).length === 0) {
+        throw new Error(
+          `${caller}(${table}): where.${col} bo\u015F bir operat\xF6r nesnesi ({}) \u2014 hi\xE7bir ko\u015Ful \xFCretmez, yani bu alan filtreden sessizce D\xDC\u015EERD\u0130. Ko\u015Ful kurulmayacaksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n (D-21).`
+        );
+      }
       for (const [op, v] of Object.entries(cond)) {
         if (op === "in") {
           if (!Array.isArray(v)) throw new Error(`${caller}(${table}): where.${col}.in bir dizi olmal\u0131`);
+          if (v.some((x) => x === void 0)) {
+            throw new Error(
+              `${caller}(${table}): where.${col}.in listesinde undefined var \u2014 sessizce NULL'a ba\u011Flan\u0131r ve o eleman hi\xE7bir sat\u0131rla e\u015Fle\u015Fmez. Listeyi kurarken eleyin.`
+            );
+          }
           if (v.length === 0) {
             parts.push("false");
             continue;
           }
           parts.push(`${q} IN (${v.map((x) => bind(x)).join(", ")})`);
         } else if (op in WHERE_OPS) {
+          if (v === void 0) {
+            throw new Error(
+              `${caller}(${table}): where.${col}.${op} de\u011Feri undefined \u2014 kar\u015F\u0131la\u015Ft\u0131rman\u0131n sa\u011F taraf\u0131 NULL olur ve sonu\xE7 hi\xE7bir sat\u0131ra uymaz. Ko\u015Fulu kurmay\u0131n.`
+            );
+          }
+          if (v === null && (op === "neq" || op === "eq")) {
+            parts.push(`${q} IS ${op === "neq" ? "NOT " : ""}NULL`);
+            continue;
+          }
           parts.push(`${q} ${WHERE_OPS[op]} ${bind(v)}`);
         } else {
           throw new Error(`${caller}(${table}): where.${col} bilinmeyen operat\xF6r "${op}" (gt/gte/lt/lte/neq/in)`);
         }
       }
+    } else if (cond === null) {
+      parts.push(`${q} IS NULL`);
     } else {
       parts.push(`${q} = ${bind(cond)}`);
     }
@@ -786,7 +821,7 @@ function createOps(tx) {
       if (cols.length === 0) throw new Error(`insert into ${table}: no columns given`);
       const placeholders = cols.map((_, i) => `$${i + 1}`).join(", ");
       const sql = `INSERT INTO ${quoteIdent(table)} (${cols.map(quoteIdent).join(", ")}) VALUES (${placeholders}) RETURNING *`;
-      const rows = await (await at()).unsafe(sql, asBindParams(table, cols, data));
+      const rows = await (await at()).unsafe(sql, asBindParams(table, cols, data, "insert"));
       const inserted = rows[0];
       if (!inserted) {
         throw new Error(
@@ -820,7 +855,7 @@ function createOps(tx) {
         const ph = cols.map((_, i) => `$${i + 1}`).join(", ");
         const insertSql = `INSERT INTO ${quoteIdent(table)} (${cols.map(quoteIdent).join(", ")}) VALUES (${ph}) ON CONFLICT (${conflict.map(quoteIdent).join(", ")}) WHERE "valid_to" IS NULL DO NOTHING RETURNING *`;
         const live = await at();
-        const bindData = asBindParams(table, cols, data);
+        const bindData = asBindParams(table, cols, data, "upsert");
         const first = await live.unsafe(insertSql, bindData);
         if (first[0]) return asTableRow(table, first[0]);
         const condSql = conflict.map((c, i) => `${quoteIdent(c)} = $${i + 1}`).join(" AND ");
@@ -854,7 +889,7 @@ function createOps(tx) {
       const assignments = cols.filter((c) => !conflictSet.has(c)).map((c) => `${quoteIdent(c)} = EXCLUDED.${quoteIdent(c)}`);
       const action = assignments.length ? `DO UPDATE SET ${assignments.join(", ")}` : `DO UPDATE SET ${quoteIdent(conflict[0])} = EXCLUDED.${quoteIdent(conflict[0])}`;
       const sql = `INSERT INTO ${quoteIdent(table)} (${cols.map(quoteIdent).join(", ")}) VALUES (${placeholders}) ON CONFLICT (${conflict.map(quoteIdent).join(", ")}) ${action} RETURNING *`;
-      const rows = await (await at()).unsafe(sql, asBindParams(table, cols, data));
+      const rows = await (await at()).unsafe(sql, asBindParams(table, cols, data, "upsert"));
       const row = rows[0];
       if (!row) {
         throw new Error(
@@ -868,7 +903,7 @@ function createOps(tx) {
       if (cols.length === 0) return ops.findById(table, id);
       const assignments = cols.map((c, i) => `${quoteIdent(c)} = $${i + 1}`).join(", ");
       const sql = `UPDATE ${quoteIdent(table)} SET ${assignments} WHERE id = $${cols.length + 1} RETURNING *`;
-      const rows = await (await at()).unsafe(sql, [...asBindParams(table, cols, data), id]);
+      const rows = await (await at()).unsafe(sql, [...asBindParams(table, cols, data, "update"), id]);
       return rows[0] ? asTableRow(table, rows[0]) : null;
     },
     async delete(table, id) {
@@ -899,13 +934,20 @@ function createOps(tx) {
           `updateMany(${table}): nothing to set. An update with no columns is not a no-op worth pretending happened \u2014 pass the columns to write.`
         );
       }
+      const known = schemaColumns(table);
+      if (known !== null) {
+        for (const c of cols) {
+          if (!known.has(c)) {
+            throw new Error(`updateMany(${table}): set kolonu "${c}" tabloda yok (FR-016)`);
+          }
+        }
+      }
       const params = [];
       const add = (v) => {
         params.push(v);
         return `$${params.length}`;
       };
-      const assignments = cols.map((c) => `${quoteIdent(c)} = ${add(asBindParams(table, [c], set)[0])}`).join(", ");
-      const known = schemaColumns(table);
+      const assignments = cols.map((c) => `${quoteIdent(c)} = ${add(asBindParams(table, [c], set, "updateMany")[0])}`).join(", ");
       const whereSql = compileWhere(table, known, where, add, "updateMany");
       assertHasPredicate(whereSql, "updateMany", table);
       const sql = `UPDATE ${quoteIdent(table)} AS t SET ${assignments} WHERE true${whereSql} RETURNING *`;
@@ -1377,7 +1419,7 @@ function createOps(tx) {
         const placeholders = cols.map((_, i) => `$${i + 1}`).join(", ");
         const rows = await sp.unsafe(
           `INSERT INTO ${quoteIdent(table)} (${cols.map(quoteIdent).join(", ")}) VALUES (${placeholders}) RETURNING *`,
-          asBindParams(table, cols, data)
+          asBindParams(table, cols, data, "supersede")
         );
         if (!rows[0]) {
           throw new Error(
@@ -1517,7 +1559,7 @@ function diagnosingDriver(sql, surface = "service") {
       );
     }
     if (isUniqueViolation(e)) {
-      return new UniqueViolation(constraintOf(e));
+      return markEngineRaised(new UniqueViolation(constraintOf(e)));
     }
     if (surface === "service" && isForeignKeyViolation(e)) {
       return new Error(
@@ -1589,7 +1631,7 @@ function isRef(v) {
 function isExpr(v) {
   return typeof v === "object" && v !== null && "$expr" in v;
 }
-function renderValue(value, column, args, results, vectorCols) {
+function renderValue(value, column, args, results, vectorCols, transforms) {
   if (isRef(value)) {
     const source = results[value.$ref.op];
     const row = source?.rows[0];
@@ -1598,15 +1640,15 @@ function renderValue(value, column, args, results, vectorCols) {
         error_code: "tx_ref_unresolved"
       });
     }
-    return bindMaybeVector(args, column, vectorCols, row[value.$ref.field]);
+    return bindMaybeVector(args, column, vectorCols, row[value.$ref.field], transforms);
   }
   if (isExpr(value)) {
     const fn = value.$expr;
     if (fn.fn === "now") return "now()";
     const operator = fn.fn === "inc" ? "+" : "-";
-    return `${quoteIdent(column)} ${operator} ${bindMaybeVector(args, column, vectorCols, fn.by)}`;
+    return `${quoteIdent(column)} ${operator} ${bindMaybeVector(args, column, vectorCols, fn.by, transforms)}`;
   }
-  return bindMaybeVector(args, column, vectorCols, value);
+  return bindMaybeVector(args, column, vectorCols, value, transforms);
 }
 function renderWhere(where, args, results) {
   const cols = Object.keys(where ?? {});
@@ -1618,21 +1660,26 @@ function renderWhere(where, args, results) {
   });
   return ` WHERE ${terms.join(" AND ")}`;
 }
-function bindMaybeVector(args, column, vectorCols, value) {
+function bindMaybeVector(args, column, vectorCols, value, transforms) {
   if (column !== void 0 && vectorCols?.has(column) && Array.isArray(value)) {
     return args.bind(toVectorLiteral(value));
   }
+  const t = column !== void 0 ? transforms?.get(column) : void 0;
+  if (t?.toDb !== void 0 && value !== null && value !== void 0) {
+    return args.bind(t.toDb(value));
+  }
   return args.bind(value);
 }
 async function runPlanOp(sp, op, results) {
   const opVectorCols = vectorColumnsOf(currentSchema, op.table);
+  const opTransforms = transformsOf(currentSchema, op.table);
   const args = new Args();
   const table = quoteIdent(op.table);
   let sql;
   switch (op.op) {
     case "insert": {
       const cols = Object.keys(op.values ?? {});
-      const rendered = cols.map((c) => renderValue(op.values[c], c, args, results, opVectorCols));
+      const rendered = cols.map((c) => renderValue(op.values[c], c, args, results, opVectorCols, opTransforms));
       sql = cols.length ? `INSERT INTO ${table} (${cols.map(quoteIdent).join(", ")}) VALUES (${rendered.join(", ")}) RETURNING *` : `INSERT INTO ${table} DEFAULT VALUES RETURNING *`;
       break;
     }
@@ -1645,7 +1692,7 @@ async function runPlanOp(sp, op, results) {
         });
       }
       const rendered = cols.map(
-        (c) => renderValue(op.values[c], c, args, results, opVectorCols)
+        (c) => renderValue(op.values[c], c, args, results, opVectorCols, opTransforms)
       );
       sql = `INSERT INTO ${table} (${cols.map(quoteIdent).join(", ")}) VALUES (${rendered.join(", ")}) ${onConflictTail(cols, conflict, "update")} RETURNING *`;
       break;
@@ -1655,7 +1702,7 @@ async function runPlanOp(sp, op, results) {
       if (rows.length === 0 || !rows[0]) return [];
       const cols = Object.keys(rows[0]);
       const tuples = rows.map(
-        (r) => `(${cols.map((c) => renderValue(r[c], c, args, results, opVectorCols)).join(", ")})`
+        (r) => `(${cols.map((c) => renderValue(r[c], c, args, results, opVectorCols, opTransforms)).join(", ")})`
       );
       const conflictCols = op.onConflict ?? [];
       const tail = op.action !== void 0 && conflictCols.length > 0 ? ` ${onConflictTail(cols, conflictCols, op.action)}` : "";
@@ -1666,7 +1713,7 @@ async function runPlanOp(sp, op, results) {
       const cols = Object.keys(op.set ?? {});
       if (cols.length === 0) throw new Error(`update ${op.table}: nothing to set`);
       const assignments = cols.map(
-        (c) => `${quoteIdent(c)} = ${renderValue(op.set[c], c, args, results, opVectorCols)}`
+        (c) => `${quoteIdent(c)} = ${renderValue(op.set[c], c, args, results, opVectorCols, opTransforms)}`
       );
       sql = `UPDATE ${table} SET ${assignments.join(", ")}${renderWhere(op.where, args, results)} RETURNING *`;
       break;
@@ -1961,6 +2008,7 @@ async function defaultSqlDriver(config) {
   }
   return new g.Bun.SQL({ url: config.databaseUrl, max: config.poolMax });
 }
+var AUTHOR_ANSWERED = /* @__PURE__ */ new Set([400, 401, 403, 404, 409, 429]);
 async function createApp(opts) {
   const { config, controllers } = opts;
   setSchema(opts.schema ?? {});
@@ -2346,6 +2394,9 @@ async function createApp(opts) {
     } catch (err) {
       await db.rollback(err);
       if (isHttpError(err)) {
+        if (isEngineRaised(err) || !AUTHOR_ANSWERED.has(err.status)) {
+          log.error(`[engine] unhandled ${err.error} in ${hit.entry.id}`, err);
+        }
         return envelope(
           err.error,
           err.errorDescription,
@@ -2401,4 +2452,4 @@ export {
   installEgressFence,
   createApp
 };
-//# sourceMappingURL=chunk-YSQBC2VL.js.map
+//# sourceMappingURL=chunk-HPUSV4AZ.js.map