@palbase/backend 24.1.0 → 24.1.1

package/dist/bin/palbase-backend.cjs

@@ -1037,6 +1037,56 @@ function makeMemoryCache(opts = {}) {
   };
 }
 
+// src/db/input-guards.ts
+var KNOWN_OPS = /* @__PURE__ */ new Set(["gt", "gte", "lt", "lte", "neq", "eq", "in"]);
+function assertUsableFilter(caller, table, where) {
+  if (!where) return;
+  for (const [col, cond] of Object.entries(where)) {
+    if (cond === void 0) {
+      throw new Error(
+        `${caller}(${table}): where.${col} de\u011Feri undefined \u2014 bu bir filtre de\u011Feri de\u011Fil. Ba\u011Flan\u0131nca NULL olur ve '= NULL' hi\xE7bir sat\u0131ra uymaz, yani sorgu sessizce bo\u015F sonu\xE7 d\xF6nerdi. De\u011Fer yoksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n.`
+      );
+    }
+    if (cond === null || typeof cond !== "object" || Array.isArray(cond)) continue;
+    const entries = Object.entries(cond);
+    if (entries.length === 0) {
+      throw new Error(
+        `${caller}(${table}): where.${col} bo\u015F bir operat\xF6r nesnesi ({}) \u2014 hi\xE7bir ko\u015Ful \xFCretmez, yani bu alan filtreden sessizce D\xDC\u015EERD\u0130. Ko\u015Ful kurulmayacaksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n (D-21).`
+      );
+    }
+    for (const [op, v] of entries) {
+      if (op === "in") {
+        if (!Array.isArray(v)) throw new Error(`${caller}(${table}): where.${col}.in bir dizi olmal\u0131`);
+        if (v.some((x) => x === void 0)) {
+          throw new Error(
+            `${caller}(${table}): where.${col}.in listesinde undefined var \u2014 sessizce NULL'a ba\u011Flan\u0131r ve o eleman hi\xE7bir sat\u0131rla e\u015Fle\u015Fmez. Listeyi kurarken eleyin.`
+          );
+        }
+        continue;
+      }
+      if (!KNOWN_OPS.has(op)) {
+        throw new Error(
+          `${caller}(${table}): where.${col} bilinmeyen operat\xF6r "${op}" (gt/gte/lt/lte/neq/in)`
+        );
+      }
+      if (v === void 0) {
+        throw new Error(
+          `${caller}(${table}): where.${col}.${op} de\u011Feri undefined \u2014 kar\u015F\u0131la\u015Ft\u0131rman\u0131n sa\u011F taraf\u0131 NULL olur ve sonu\xE7 hi\xE7bir sat\u0131ra uymaz. Ko\u015Fulu kurmay\u0131n.`
+        );
+      }
+    }
+  }
+}
+function assertUsableWriteValues(caller, table, cols, data) {
+  for (const c of cols) {
+    if (data[c] === void 0) {
+      throw new Error(
+        `${caller}(${table}): "${c}" de\u011Feri undefined \u2014 bu bir yazma de\u011Feri de\u011Fil. Kolonu bo\u015Faltmak istiyorsan null yaz; kolonu de\u011Fi\u015Ftirmek istemiyorsan nesneye hi\xE7 koyma (bir eksik istek alan\u0131 sessizce NULL yaz\u0131yordu \u2014 FR-016).`
+      );
+    }
+  }
+}
+
 // src/engine/db.ts
 function quoteIdent(name) {
   return `"${name.replace(/"/g, '""')}"`;
@@ -1165,13 +1215,7 @@ function asTableRows(table, rows) {
   return rows.map((row) => applyFromDb(reviveVectors(asWireRow(row), vectorCols), transforms));
 }
 function asBindParams(table, cols, data, caller) {
-  for (const c of cols) {
-    if (data[c] === void 0) {
-      throw new Error(
-        `${caller}(${table}): "${c}" de\u011Feri undefined \u2014 bu bir yazma de\u011Feri de\u011Fil. Kolonu bo\u015Faltmak istiyorsan null yaz; kolonu de\u011Fi\u015Ftirmek istemiyorsan nesneye hi\xE7 koyma (bir eksik istek alan\u0131 sessizce NULL yaz\u0131yordu \u2014 FR-016).`
-      );
-    }
-  }
+  assertUsableWriteValues(caller, table, cols, data);
   const vectorCols = vectorColumnsOf(currentSchema, table);
   const transforms = transformsOf(currentSchema, table);
   return cols.map((c) => {
@@ -1394,42 +1438,23 @@ function compileWhere(table, colSet, where, add, caller = "search") {
     const t = transforms.get(col);
     return t?.toDb === void 0 ? add : (v) => add(v === null || v === void 0 ? v : t.toDb(v));
   };
+  assertUsableFilter(caller, table, where);
   for (const [col, cond] of Object.entries(where)) {
     if (colSet !== null && !colSet.has(col)) {
       throw new Error(`${caller}(${table}): where kolonu "${col}" tabloda yok (FR-016)`);
     }
-    if (cond === void 0) {
-      throw new Error(
-        `${caller}(${table}): where.${col} de\u011Feri undefined \u2014 bu bir filtre de\u011Feri de\u011Fil. Ba\u011Flan\u0131nca NULL olur ve '= NULL' hi\xE7bir sat\u0131ra uymaz, yani sorgu sessizce bo\u015F sonu\xE7 d\xF6nerdi. De\u011Fer yoksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n.`
-      );
-    }
     const q = `t.${quoteIdent(col)}`;
     const bind = bindFor(col);
     if (cond !== null && typeof cond === "object" && !Array.isArray(cond)) {
-      if (Object.keys(cond).length === 0) {
-        throw new Error(
-          `${caller}(${table}): where.${col} bo\u015F bir operat\xF6r nesnesi ({}) \u2014 hi\xE7bir ko\u015Ful \xFCretmez, yani bu alan filtreden sessizce D\xDC\u015EERD\u0130. Ko\u015Ful kurulmayacaksa anahtar\u0131 filtreye hi\xE7 koymay\u0131n (D-21).`
-        );
-      }
       for (const [op, v] of Object.entries(cond)) {
         if (op === "in") {
           if (!Array.isArray(v)) throw new Error(`${caller}(${table}): where.${col}.in bir dizi olmal\u0131`);
-          if (v.some((x) => x === void 0)) {
-            throw new Error(
-              `${caller}(${table}): where.${col}.in listesinde undefined var \u2014 sessizce NULL'a ba\u011Flan\u0131r ve o eleman hi\xE7bir sat\u0131rla e\u015Fle\u015Fmez. Listeyi kurarken eleyin.`
-            );
-          }
           if (v.length === 0) {
             parts.push("false");
             continue;
           }
           parts.push(`${q} IN (${v.map((x) => bind(x)).join(", ")})`);
         } else if (op in WHERE_OPS) {
-          if (v === void 0) {
-            throw new Error(
-              `${caller}(${table}): where.${col}.${op} de\u011Feri undefined \u2014 kar\u015F\u0131la\u015Ft\u0131rman\u0131n sa\u011F taraf\u0131 NULL olur ve sonu\xE7 hi\xE7bir sat\u0131ra uymaz. Ko\u015Fulu kurmay\u0131n.`
-            );
-          }
           if (v === null && (op === "neq" || op === "eq")) {
             parts.push(`${q} IS ${op === "neq" ? "NOT " : ""}NULL`);
             continue;