@photostructure/sqlite 0.0.1 → 0.2.1

package/SECURITY.md

@@ -2,113 +2,57 @@
 
 ## Supported Versions
 
-Currently, we support security updates for the following versions:
-
-| Version | Supported          |
-| ------- | ------------------ |
-| 0.1.x   | :white_check_mark: |
-| < 0.1   | :x:                |
+Security updates are provided for the latest released version only.
 
 ## Reporting a Vulnerability
 
-We take the security of @photostructure/sqlite seriously. If you believe you have found a security vulnerability, please report it to us as described below.
-
-### How to Report
-
-**Please do not report security vulnerabilities through public GitHub issues.**
-
-Instead, please report them via one of the following methods:
+**Do not report security vulnerabilities through public GitHub issues.**
 
-1. Email us at security@photostructure.com
-2. Use GitHub's private vulnerability reporting feature (if available)
+Report via:
 
-### What to Include
+- Email: security@photostructure.com
+- GitHub's private vulnerability reporting
 
-Please include the following information in your report:
+Include: issue type, affected source files, reproduction steps, and potential impact.
 
-- Type of issue (e.g., buffer overflow, SQL injection, cross-site scripting, etc.)
-- Full paths of source file(s) related to the manifestation of the issue
-- The location of the affected source code (tag/branch/commit or direct URL)
-- Any special configuration required to reproduce the issue
-- Step-by-step instructions to reproduce the issue
-- Proof-of-concept or exploit code (if possible)
-- Impact of the issue, including how an attacker might exploit it
-
-### Response Timeline
-
-- We will acknowledge receipt of your vulnerability report within 48 hours
-- We will provide a more detailed response within 7 days
-- We will work on fixes and coordinate disclosure timeline with you
+We acknowledge reports within 48 hours and provide detailed response within 7 days.
 
 ## Security Measures
 
-### Automated Security Scanning
-
-This project employs multiple layers of automated security scanning:
-
-1. **npm audit** - Scans for known vulnerabilities in dependencies
-2. **Snyk** - Advanced vulnerability detection and remediation
-3. **OSV Scanner** - Google's Open Source Vulnerabilities scanner
-4. **CodeQL** - GitHub's semantic code analysis for both JavaScript/TypeScript and C++
-5. **TruffleHog** - Secrets detection in code
+### Automated Scanning
 
-These scans run automatically on:
+- **npm audit** and **OSV Scanner** for dependency vulnerabilities
+- **CodeQL** for JS/TS and C++ semantic analysis
+- **TruffleHog** for secrets detection
+- **ESLint Security Plugin** for static analysis
 
-- Every push to the main branch
-- Every pull request
-- Weekly scheduled scans
-- Manual workflow dispatch
-
-### Development Practices
-
-- All dependencies are regularly updated via Dependabot
-- Security patches are prioritized and released quickly
-- Native C++ code is analyzed with clang-tidy and ASAN
-- Memory safety is validated through comprehensive testing
+Scans run on every push, PR, and weekly.
 
 ### Native Code Security
 
-Since this package includes native C++ bindings to SQLite:
-
-- We use the official SQLite amalgamation source
-- SQLite is compiled with recommended security flags
-- Buffer overflows are prevented through careful memory management
-- All user inputs are properly validated before passing to SQLite
+- Uses official SQLite amalgamation source with recommended security flags
+- C++ code analyzed with clang-tidy and ASAN
+- Memory safety validated through comprehensive testing
 
 ## Security Configuration
 
-### SQLite Security Features
-
-The following SQLite security features are available:
-
 ```javascript
-// Restrict file access to read-only
-const db = new DatabaseSync("database.db", {
-  readonly: true,
-});
-
-// Disable extension loading by default
-// Extensions must be explicitly enabled
-db.allowExtension(); // Required first
-db.enableLoadExtension(true); // Then enable
+// Read-only mode
+const db = new DatabaseSync("database.db", { readonly: true });
+
+// Extension loading (disabled by default)
+db.allowExtension();
+db.enableLoadExtension(true);
 db.loadExtension("path/to/extension");
 ```
 
 ### Best Practices
 
-1. **Always validate and sanitize user input** before using in SQL queries
-2. **Use parameterized queries** to prevent SQL injection
-3. **Run with minimal permissions** when possible
-4. **Keep dependencies updated** regularly
-5. **Monitor security advisories** for SQLite and Node.js
+1. Use parameterized queries to prevent SQL injection
+2. Validate user input before use in queries
+3. Run with minimal permissions
+4. Keep dependencies updated
 
 ## Disclosure Policy
 
-When we receive a security report, we will:
-
-1. Confirm the problem and determine affected versions
-2. Audit code to find similar problems
-3. Prepare fixes for all supported versions
-4. Coordinate disclosure with the reporter
-
-We aim to disclose vulnerabilities responsibly, balancing the need for users to be informed with giving them time to update.
+Upon receiving a report, we confirm the issue, audit for similar problems, prepare fixes, and coordinate disclosure with the reporter.

package/binding.gyp

@@ -19,13 +19,15 @@
       "dependencies": [
         "<!(node -p \"require('node-addon-api').gyp\")"
       ],
+      # SQLite build flags - see doc/build-flags.md for comprehensive documentation
+      # including comparison with Node.js configuration and rationale for our choices
       "defines": [
         "NAPI_CPP_EXCEPTIONS",
         "HAVE_STDINT_H=1",
         "HAVE_USLEEP=1",
-        "SQLITE_DEFAULT_CACHE_SIZE=-16000",
+        # "SQLITE_DEFAULT_CACHE_SIZE=-16000", # Default is 2000.
         "SQLITE_DEFAULT_FOREIGN_KEYS=1",
-        # "SQLITE_DEFAULT_MEMSTATUS=0", https://www.sqlite.org/forum/forumpost/c1cc8b057a
+        "SQLITE_DEFAULT_MEMSTATUS=0", # See https://www.sqlite.org/forum/forumpost/c1cc8b057a
         "SQLITE_DEFAULT_WAL_SYNCHRONOUS=1",
         "SQLITE_DQS=0",
         "SQLITE_ENABLE_COLUMN_METADATA",
@@ -49,7 +51,8 @@
         "SQLITE_OMIT_DEPRECATED",
         "SQLITE_OMIT_SHARED_CACHE",
         "SQLITE_SOUNDEX",
-        "SQLITE_THREADSAFE=2"
+        # "SQLITE_THREADSAFE=2", # default is SQLITE_THREADSAFE=1 (serialized)
+        "SQLITE_USE_URI=1" # https://www.sqlite.org/uri.html
       ],
       # cflags apply only to C files (not C++), so these warnings suppressions
       # are specific to SQLite's C code and don't affect our C++ code:
@@ -70,25 +73,69 @@
         "CLANG_CXX_LIBRARY": "libc++",
         "MACOSX_DEPLOYMENT_TARGET": "10.15"
       },
-      "msvs_settings": {
-        "VCCLCompilerTool": {
-          "AdditionalOptions": [
-            "/Qspectre",
-            "/guard:cf",
-            "/ZH:SHA_256",
-            "/sdl"
-          ],
-          "ExceptionHandling": 1,
-          "RuntimeTypeInfo": "true"
-        },
-        "VCLinkerTool": {
-          "AdditionalOptions": [
-            "/guard:cf",
-            "/DYNAMICBASE",
-            "/CETCOMPAT"
-          ]
-        }
-      }
+      "conditions": [
+        [
+          "OS=='win'",
+          {
+            "conditions": [
+              [
+                "target_arch=='x64'",
+                {
+                  "defines": [
+                    "_M_X64",
+                    "_WIN64"
+                  ],
+                  "msvs_settings": {
+                    "VCCLCompilerTool": {
+                      "AdditionalOptions": [
+                        "/Qspectre",
+                        "/guard:cf",
+                        "/ZH:SHA_256",
+                        "/sdl"
+                      ],
+                      "ExceptionHandling": 1,
+                      "RuntimeTypeInfo": "true"
+                    },
+                    "VCLinkerTool": {
+                      "AdditionalOptions": [
+                        "/guard:cf",
+                        "/DYNAMICBASE",
+                        "/CETCOMPAT"
+                      ]
+                    }
+                  }
+                }
+              ],
+              [
+                "target_arch=='arm64'",
+                {
+                  "defines": [
+                    "_M_ARM64",
+                    "_WIN64"
+                  ],
+                  "msvs_settings": {
+                    "VCCLCompilerTool": {
+                      "AdditionalOptions": [
+                        "/guard:cf",
+                        "/ZH:SHA_256",
+                        "/sdl"
+                      ],
+                      "ExceptionHandling": 1,
+                      "RuntimeTypeInfo": "true"
+                    },
+                    "VCLinkerTool": {
+                      "AdditionalOptions": [
+                        "/guard:cf",
+                        "/DYNAMICBASE"
+                      ]
+                    }
+                  }
+                }
+              ]
+            ]
+          }
+        ]
+      ]
     }
   ]
 }

package/dist/index.cjs

@@ -31,8 +31,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   DatabaseSync: () => DatabaseSync,
+  SQLTagStore: () => SQLTagStore,
   Session: () => Session,
   StatementSync: () => StatementSync,
+  backup: () => backup,
   constants: () => constants,
   default: () => index_default
 });
@@ -40,7 +42,7 @@ module.exports = __toCommonJS(index_exports);
 var import_node_gyp_build = __toESM(require("node-gyp-build"));
 var import_node_path2 = require("path");
 
-// src/stack_path.ts
+// src/stack-path.ts
 var import_node_path = require("path");
 function getCallerDirname() {
   const e = new Error();
@@ -50,6 +52,10 @@ function getCallerDirname() {
   return (0, import_node_path.dirname)(extractCallerPath(e.stack));
 }
 var patterns = process.platform === "win32" ? [
+  // File URLs: "at functionName (file:///C:/path/file.js:1:1)"
+  /\bat\s.+?\((?<path>file:\/\/\/.+?):\d+:\d+\)$/,
+  // File URLs direct: "at file:///C:/path/file.js:1:1"
+  /\bat\s(?<path>file:\/\/\/.+?):\d+:\d+$/,
   // Standard: "at functionName (C:\path\file.js:1:1)"
   /\bat\s.+?\((?<path>[A-Z]:\\.+):\d+:\d+\)$/,
   // direct: "at C:\path\file.js:1:1"
@@ -62,7 +68,8 @@ var patterns = process.platform === "win32" ? [
   // Standard: "at functionName (/path/file.js:1:1)"
   /\bat\s.+?\((?<path>\/.+?):\d+:\d+\)$/,
   // Anonymous or direct: "at /path/file.js:1:1"
-  /\bat\s(.+[^/]\s)?(?<path>\/.+?):\d+:\d+$/
+  // eslint-disable-next-line security/detect-unsafe-regex -- Pattern is safe: no nested quantifiers
+  /\bat\s(?:[^\s()]+\s)?(?<path>\/[^:]+):\d+:\d+$/
 ];
 var MaybeUrlRE = /^[a-z]{2,5}:\/\//i;
 function extractCallerPath(stack) {
@@ -101,34 +108,194 @@ function _dirname() {
   return getCallerDirname();
 }
 
-// src/index.ts
-var binding = (0, import_node_gyp_build.default)((0, import_node_path2.join)(_dirname(), ".."));
-if (binding.DatabaseSync && typeof Symbol.dispose !== "undefined") {
-  binding.DatabaseSync.prototype[Symbol.dispose] = function() {
-    try {
-      this.close();
-    } catch {
+// src/lru-cache.ts
+var LRUCache = class {
+  cache = /* @__PURE__ */ new Map();
+  maxCapacity;
+  constructor(capacity) {
+    if (capacity < 1) {
+      throw new RangeError("LRU cache capacity must be at least 1");
     }
-  };
-}
-if (binding.StatementSync && typeof Symbol.dispose !== "undefined") {
-  binding.StatementSync.prototype[Symbol.dispose] = function() {
-    try {
-      this.finalize();
-    } catch {
+    this.maxCapacity = capacity;
+  }
+  /**
+   * Get a value from the cache.
+   * If found, moves the entry to the end (most recently used).
+   */
+  get(key) {
+    const value = this.cache.get(key);
+    if (value !== void 0) {
+      this.cache.delete(key);
+      this.cache.set(key, value);
     }
-  };
-}
+    return value;
+  }
+  /**
+   * Set a value in the cache.
+   * If key exists, updates and moves to end.
+   * If at capacity, evicts the oldest entry first.
+   */
+  set(key, value) {
+    if (this.cache.has(key)) {
+      this.cache.delete(key);
+    } else if (this.cache.size >= this.maxCapacity) {
+      const oldestKey = this.cache.keys().next().value;
+      if (oldestKey !== void 0) {
+        this.cache.delete(oldestKey);
+      }
+    }
+    this.cache.set(key, value);
+  }
+  /**
+   * Delete an entry from the cache.
+   */
+  delete(key) {
+    return this.cache.delete(key);
+  }
+  /**
+   * Check if a key exists in the cache.
+   * Does NOT update recency.
+   */
+  has(key) {
+    return this.cache.has(key);
+  }
+  /**
+   * Clear all entries from the cache.
+   */
+  clear() {
+    this.cache.clear();
+  }
+  /**
+   * Get the current number of entries in the cache.
+   */
+  size() {
+    return this.cache.size;
+  }
+  /**
+   * Get the maximum capacity of the cache.
+   */
+  capacity() {
+    return this.maxCapacity;
+  }
+};
+
+// src/sql-tag-store.ts
+var DEFAULT_CAPACITY = 1e3;
+var SQLTagStore = class {
+  database;
+  cache;
+  maxCapacity;
+  constructor(db, capacity = DEFAULT_CAPACITY) {
+    if (!db.isOpen) {
+      throw new Error("Database is not open");
+    }
+    this.database = db;
+    this.maxCapacity = capacity;
+    this.cache = new LRUCache(capacity);
+  }
+  /**
+   * Returns the associated database instance.
+   */
+  get db() {
+    return this.database;
+  }
+  /**
+   * Returns the maximum capacity of the statement cache.
+   */
+  get capacity() {
+    return this.maxCapacity;
+  }
+  /**
+   * Returns the current number of cached statements.
+   */
+  size() {
+    return this.cache.size();
+  }
+  /**
+   * Clears all cached statements.
+   */
+  clear() {
+    this.cache.clear();
+  }
+  /**
+   * Execute an INSERT, UPDATE, DELETE or other statement that doesn't return rows.
+   * Returns an object with `changes` and `lastInsertRowid`.
+   */
+  run(strings, ...values) {
+    const stmt = this.getOrPrepare(strings);
+    return stmt.run(...values);
+  }
+  /**
+   * Execute a query and return the first row, or undefined if no rows.
+   */
+  get(strings, ...values) {
+    const stmt = this.getOrPrepare(strings);
+    return stmt.get(...values);
+  }
+  /**
+   * Execute a query and return all rows as an array.
+   */
+  all(strings, ...values) {
+    const stmt = this.getOrPrepare(strings);
+    return stmt.all(...values);
+  }
+  /**
+   * Execute a query and return an iterator over the rows.
+   */
+  iterate(strings, ...values) {
+    const stmt = this.getOrPrepare(strings);
+    return stmt.iterate(...values);
+  }
+  /**
+   * Get a cached statement or prepare a new one.
+   * If a cached statement has been finalized, it's evicted and a new one is prepared.
+   */
+  getOrPrepare(strings) {
+    if (!this.database.isOpen) {
+      throw new Error("Database is not open");
+    }
+    const sql = this.buildSQL(strings);
+    const cached = this.cache.get(sql);
+    if (cached) {
+      if (!cached.finalized) {
+        return cached;
+      }
+      this.cache.delete(sql);
+    }
+    const stmt = this.database.prepare(sql);
+    this.cache.set(sql, stmt);
+    return stmt;
+  }
+  /**
+   * Build the SQL string by joining template parts with `?` placeholders.
+   */
+  buildSQL(strings) {
+    let sql = strings[0] ?? "";
+    for (let i = 1; i < strings.length; i++) {
+      sql += "?" + (strings[i] ?? "");
+    }
+    return sql;
+  }
+};
+
+// src/index.ts
+var binding = (0, import_node_gyp_build.default)((0, import_node_path2.join)(_dirname(), ".."));
 var DatabaseSync = binding.DatabaseSync;
+DatabaseSync.prototype.createTagStore = function(capacity) {
+  return new SQLTagStore(this, capacity);
+};
 var StatementSync = binding.StatementSync;
 var Session = binding.Session;
 var constants = binding.constants;
+var backup = binding.backup;
 var index_default = binding;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DatabaseSync,
+  SQLTagStore,
   Session,
   StatementSync,
+  backup,
   constants
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/stack_path.ts","../src/dirname.ts"],"sourcesContent":["// Load the native binding with support for both CJS and ESM\nimport nodeGypBuild from \"node-gyp-build\";\nimport { join } from \"node:path\";\nimport { _dirname } from \"./dirname\";\n\n// Use _dirname() helper that works in both CJS/ESM and Jest\nconst binding = nodeGypBuild(join(_dirname(), \"..\"));\n\n/**\n * Configuration options for opening a database.\n * This interface matches Node.js sqlite module's DatabaseSyncOptions.\n */\nexport interface DatabaseSyncOptions {\n  /** Path to the database file. Use ':memory:' for an in-memory database. */\n  readonly location?: string;\n  /** If true, the database is opened in read-only mode. @default false */\n  readonly readOnly?: boolean;\n  /** If true, foreign key constraints are enforced. @default true */\n  readonly enableForeignKeyConstraints?: boolean;\n  /** \n   * If true, double-quoted string literals are allowed. \n   *\n   * If enabled, double quotes can be misinterpreted as identifiers instead of\n   * string literals, leading to confusing errors. \n   *\n   * **The SQLite documentation strongly recommends avoiding double-quoted\n   * strings entirely.**\n\n   * @see https://sqlite.org/quirks.html#dblquote\n   * @default false \n   */\n  readonly enableDoubleQuotedStringLiterals?: boolean;\n  /**\n   * Sets the busy timeout in milliseconds.\n   * @default 5000\n   */\n  readonly timeout?: number;\n  /** If true, enables loading of SQLite extensions. @default false */\n  readonly allowExtension?: boolean;\n}\n\n/**\n * Options for creating a prepared statement.\n */\nexport interface StatementOptions {\n  /** If true, the prepared statement's expandedSQL property will contain the expanded SQL. @default false */\n  readonly expandedSQL?: boolean;\n  /** If true, anonymous parameters are enabled for the statement. @default false */\n  readonly anonymousParameters?: boolean;\n}\n\n/**\n * A prepared SQL statement that can be executed multiple times with different parameters.\n * This interface represents an instance of the StatementSync class.\n */\nexport interface StatementSyncInstance {\n  /** The original SQL source string. */\n  readonly sourceSQL: string;\n  /** The expanded SQL string with bound parameters, if expandedSQL option was set. */\n  readonly expandedSQL: string | undefined;\n  /**\n   * This method executes a prepared statement and returns an object.\n   * @param parameters Optional named and anonymous parameters to bind to the statement.\n   * @returns An object with the number of changes and the last insert rowid.\n   */\n  run(...parameters: any[]): {\n    changes: number;\n    lastInsertRowid: number | bigint;\n  };\n  /**\n   * This method executes a prepared statement and returns the first result row.\n   * @param parameters Optional named and anonymous parameters to bind to the statement.\n   * @returns The first row from the query results, or undefined if no rows.\n   */\n  get(...parameters: any[]): any;\n  /**\n   * This method executes a prepared statement and returns all results as an array.\n   * @param parameters Optional named and anonymous parameters to bind to the statement.\n   * @returns An array of row objects from the query results.\n   */\n  all(...parameters: any[]): any[];\n  /**\n   * This method executes a prepared statement and returns an iterable iterator of objects.\n   * Each object represents a row from the query results.\n   * @param parameters Optional named and anonymous parameters to bind to the statement.\n   * @returns An iterable iterator of row objects.\n   */\n  iterate(...parameters: any[]): IterableIterator<any>;\n  /**\n   * Set whether to read integer values as JavaScript BigInt.\n   * @param readBigInts If true, read integers as BigInts. @default false\n   */\n  setReadBigInts(readBigInts: boolean): void;\n  /**\n   * Set whether to allow bare named parameters in SQL.\n   * @param allowBareNamedParameters If true, allows bare named parameters. @default false\n   */\n  setAllowBareNamedParameters(allowBareNamedParameters: boolean): void;\n  /**\n   * Set whether to return results as arrays rather than objects.\n   * @param returnArrays If true, return results as arrays. @default false\n   */\n  setReturnArrays(returnArrays: boolean): void;\n  /**\n   * Returns an array of objects, each representing a column in the statement's result set.\n   * Each object has a 'name' property for the column name and a 'type' property for the SQLite type.\n   * @returns Array of column metadata objects.\n   */\n  columns(): Array<{ name: string; type?: string }>;\n  /**\n   * Finalizes the prepared statement and releases its resources.\n   * Called automatically by Symbol.dispose.\n   */\n  finalize(): void;\n  /** Dispose of the statement resources using the explicit resource management protocol. */\n  [Symbol.dispose](): void;\n}\n\nexport interface UserFunctionOptions {\n  /** If `true`, sets the `SQLITE_DETERMINISTIC` flag. @default false */\n  readonly deterministic?: boolean;\n  /** If `true`, sets the `SQLITE_DIRECTONLY` flag. @default false */\n  readonly directOnly?: boolean;\n  /** If `true`, converts integer arguments to `BigInt`s. @default false */\n  readonly useBigIntArguments?: boolean;\n  /** If `true`, allows function to be invoked with variable arguments. @default false */\n  readonly varargs?: boolean;\n}\n\nexport interface AggregateOptions {\n  /** The initial value for the aggregation. */\n  readonly start?: any;\n  /** Function called for each row to update the aggregate state. */\n  readonly step: (accumulator: any, ...args: any[]) => any;\n  /** Optional function for window function support to reverse a step. */\n  readonly inverse?: (accumulator: any, ...args: any[]) => any;\n  /** Optional function to compute the final result from the accumulator. */\n  readonly result?: (accumulator: any) => any;\n  /** If `true`, sets the `SQLITE_DETERMINISTIC` flag. @default false */\n  readonly deterministic?: boolean;\n  /** If `true`, sets the `SQLITE_DIRECTONLY` flag. @default false */\n  readonly directOnly?: boolean;\n  /** If `true`, converts integer arguments to `BigInt`s. @default false */\n  readonly useBigIntArguments?: boolean;\n  /** If `true`, allows function to be invoked with variable arguments. @default false */\n  readonly varargs?: boolean;\n}\n\nexport interface SessionOptions {\n  /** The table to track changes for. If omitted, all tables are tracked. */\n  readonly table?: string;\n  /** The database name. @default \"main\" */\n  readonly db?: string;\n}\n\nexport interface Session {\n  /**\n   * Generate a changeset containing all changes recorded by the session.\n   * @returns A Buffer containing the changeset data.\n   */\n  changeset(): Buffer;\n  /**\n   * Generate a patchset containing all changes recorded by the session.\n   * @returns A Buffer containing the patchset data.\n   */\n  patchset(): Buffer;\n  /**\n   * Close the session and release its resources.\n   */\n  close(): void;\n}\n\nexport interface ChangesetApplyOptions {\n  /**\n   * Function called when a conflict is detected during changeset application.\n   * @param conflictType The type of conflict (SQLITE_CHANGESET_CONFLICT, etc.)\n   * @returns One of SQLITE_CHANGESET_OMIT, SQLITE_CHANGESET_REPLACE, or SQLITE_CHANGESET_ABORT\n   */\n  readonly onConflict?: (conflictType: number) => number;\n  /**\n   * Function called to filter which tables to apply changes to.\n   * @param tableName The name of the table\n   * @returns true to include the table, false to skip it\n   */\n  readonly filter?: (tableName: string) => boolean;\n}\n\n/**\n * Represents a SQLite database connection.\n * This interface represents an instance of the DatabaseSync class.\n */\nexport interface DatabaseSyncInstance {\n  /** Indicates whether the database connection is open. */\n  readonly isOpen: boolean;\n  /** Indicates whether a transaction is currently active. */\n  readonly isTransaction: boolean;\n\n  /**\n   * Opens a database connection. This method is called automatically when creating\n   * a DatabaseSync instance, so typically should not be called directly.\n   * @param configuration Optional configuration for opening the database.\n   */\n  open(configuration?: DatabaseSyncOptions): void;\n  /**\n   * Closes the database connection. This method should be called to ensure that\n   * the database connection is properly cleaned up. Once a database is closed,\n   * it cannot be used again.\n   */\n  close(): void;\n  /**\n   * Returns the location of the database file. For attached databases, you can specify\n   * the database name. Returns null for in-memory databases.\n   * @param dbName The name of the database. Defaults to 'main' (the primary database).\n   * @returns The file path of the database, or null for in-memory databases.\n   */\n  location(dbName?: string): string | null;\n  /**\n   * Compiles an SQL statement and returns a StatementSyncInstance object.\n   * @param sql The SQL statement to prepare.\n   * @param options Optional configuration for the statement.\n   * @returns A StatementSyncInstance object that can be executed multiple times.\n   */\n  prepare(sql: string, options?: StatementOptions): StatementSyncInstance;\n  /**\n   * This method allows one or more SQL statements to be executed without\n   * returning any results. This is useful for commands like CREATE TABLE,\n   * INSERT, UPDATE, or DELETE.\n   * @param sql The SQL statement(s) to execute.\n   */\n  exec(sql: string): void;\n\n  /**\n   * This method creates SQLite user-defined functions, wrapping sqlite3_create_function_v2().\n   * @param name The name of the SQLite function to create.\n   * @param func The JavaScript function to call when the SQLite function is invoked.\n   */\n  function(name: string, func: Function): void;\n  /**\n   * This method creates SQLite user-defined functions, wrapping sqlite3_create_function_v2().\n   * @param name The name of the SQLite function to create.\n   * @param options Optional configuration settings.\n   * @param func The JavaScript function to call when the SQLite function is invoked.\n   */\n  function(name: string, options: UserFunctionOptions, func: Function): void;\n\n  /**\n   * This method creates SQLite aggregate functions, wrapping sqlite3_create_window_function().\n   * @param name The name of the SQLite aggregate function to create.\n   * @param options Configuration object containing step function and other settings.\n   */\n  aggregate(name: string, options: AggregateOptions): void;\n  /**\n   * Create a new session to record database changes.\n   * @param options Optional configuration for the session.\n   * @returns A Session object for recording changes.\n   */\n  createSession(options?: SessionOptions): Session;\n  /**\n   * Apply a changeset to the database.\n   * @param changeset The changeset data to apply.\n   * @param options Optional configuration for applying the changeset.\n   * @returns true if successful, false if aborted.\n   */\n  applyChangeset(changeset: Buffer, options?: ChangesetApplyOptions): boolean;\n  /**\n   * Enables or disables the loading of SQLite extensions.\n   * @param enable If true, enables extension loading. If false, disables it.\n   */\n  enableLoadExtension(enable: boolean): void;\n  /**\n   * Loads an SQLite extension from the specified file path.\n   * @param path The path to the extension library.\n   * @param entryPoint Optional entry point function name. If not provided, uses the default entry point.\n   */\n  loadExtension(path: string, entryPoint?: string): void;\n\n  /**\n   * Makes a backup of the database. This method abstracts the sqlite3_backup_init(),\n   * sqlite3_backup_step() and sqlite3_backup_finish() functions.\n   *\n   * The backed-up database can be used normally during the backup process. Mutations\n   * coming from the same connection will be reflected in the backup right away.\n   * However, mutations from other connections will cause the backup process to restart.\n   *\n   * @param path The path where the backup will be created. If the file already exists, the contents will be overwritten.\n   * @param options Optional configuration for the backup operation.\n   * @param options.rate Number of pages to be transmitted in each batch of the backup. @default 100\n   * @param options.source Name of the source database. This can be 'main' (the default primary database) or any other database that have been added with ATTACH DATABASE. @default 'main'\n   * @param options.target Name of the target database. This can be 'main' (the default primary database) or any other database that have been added with ATTACH DATABASE. @default 'main'\n   * @param options.progress Callback function that will be called with the number of pages copied and the total number of pages.\n   * @returns A promise that resolves when the backup is completed and rejects if an error occurs.\n   *\n   * @example\n   * // Basic backup\n   * await db.backup('./backup.db');\n   *\n   * @example\n   * // Backup with progress\n   * await db.backup('./backup.db', {\n   *   rate: 10,\n   *   progress: ({ totalPages, remainingPages }) => {\n   *     console.log(`Progress: ${totalPages - remainingPages}/${totalPages}`);\n   *   }\n   * });\n   */\n  backup(\n    path: string | Buffer | URL,\n    options?: {\n      rate?: number;\n      source?: string;\n      target?: string;\n      progress?: (info: { totalPages: number; remainingPages: number }) => void;\n    },\n  ): Promise<number>;\n\n  /** Dispose of the database resources using the explicit resource management protocol. */\n  [Symbol.dispose](): void;\n}\n\n/**\n * The main SQLite module interface.\n */\nexport interface SqliteModule {\n  /**\n   * The DatabaseSync class represents a synchronous connection to a SQLite database.\n   * All operations are performed synchronously, blocking until completion.\n   */\n  DatabaseSync: new (\n    location?: string | Buffer | URL,\n    options?: DatabaseSyncOptions,\n  ) => DatabaseSyncInstance;\n  /**\n   * The StatementSync class represents a synchronous prepared statement.\n   * This class should not be instantiated directly; use Database.prepare() instead.\n   */\n  StatementSync: new (\n    database: DatabaseSyncInstance,\n    sql: string,\n    options?: StatementOptions,\n  ) => StatementSyncInstance;\n  /**\n   * The Session class for recording database changes.\n   * This class should not be instantiated directly; use Database.createSession() instead.\n   */\n  Session: new () => Session;\n  /**\n   * SQLite constants for various operations and flags.\n   */\n  constants: {\n    /** Open database for reading only. */\n    SQLITE_OPEN_READONLY: number;\n    /** Open database for reading and writing. */\n    SQLITE_OPEN_READWRITE: number;\n    /** Create database if it doesn't exist. */\n    SQLITE_OPEN_CREATE: number;\n    // Changeset constants\n    /** Skip conflicting changes. */\n    SQLITE_CHANGESET_OMIT: number;\n    /** Replace conflicting changes. */\n    SQLITE_CHANGESET_REPLACE: number;\n    /** Abort on conflict. */\n    SQLITE_CHANGESET_ABORT: number;\n    /** Data conflict type. */\n    SQLITE_CHANGESET_DATA: number;\n    /** Row not found conflict. */\n    SQLITE_CHANGESET_NOTFOUND: number;\n    /** General conflict. */\n    SQLITE_CHANGESET_CONFLICT: number;\n    /** Constraint violation. */\n    SQLITE_CHANGESET_CONSTRAINT: number;\n    /** Foreign key constraint violation. */\n    SQLITE_CHANGESET_FOREIGN_KEY: number;\n    // ... more constants\n  };\n}\n\n// Add Symbol.dispose to the native classes\nif (binding.DatabaseSync && typeof Symbol.dispose !== \"undefined\") {\n  binding.DatabaseSync.prototype[Symbol.dispose] = function () {\n    try {\n      this.close();\n    } catch {\n      // Ignore errors during disposal\n    }\n  };\n}\n\nif (binding.StatementSync && typeof Symbol.dispose !== \"undefined\") {\n  binding.StatementSync.prototype[Symbol.dispose] = function () {\n    try {\n      this.finalize();\n    } catch {\n      // Ignore errors during disposal\n    }\n  };\n}\n\n// Export the native binding with TypeScript types\n\n/**\n * The DatabaseSync class represents a synchronous connection to a SQLite database.\n * All database operations are performed synchronously, blocking the thread until completion.\n *\n * @example\n * ```typescript\n * import { DatabaseSync } from '@photostructure/sqlite';\n *\n * // Create an in-memory database\n * const db = new DatabaseSync(':memory:');\n *\n * // Create a file-based database\n * const fileDb = new DatabaseSync('./mydata.db');\n *\n * // Create with options\n * const readOnlyDb = new DatabaseSync('./data.db', { readOnly: true });\n * ```\n */\nexport const DatabaseSync =\n  binding.DatabaseSync as SqliteModule[\"DatabaseSync\"];\n\n/**\n * The StatementSync class represents a prepared SQL statement.\n * This class should not be instantiated directly; use DatabaseSync.prepare() instead.\n *\n * @example\n * ```typescript\n * const stmt = db.prepare('SELECT * FROM users WHERE id = ?');\n * const user = stmt.get(123);\n * stmt.finalize();\n * ```\n */\nexport const StatementSync =\n  binding.StatementSync as SqliteModule[\"StatementSync\"];\n\n/**\n * The Session class for recording database changes.\n * This class should not be instantiated directly; use DatabaseSync.createSession() instead.\n *\n * @example\n * ```typescript\n * const session = db.createSession({ table: 'users' });\n * // Make some changes to the users table\n * const changeset = session.changeset();\n * session.close();\n * ```\n */\nexport const Session = binding.Session as SqliteModule[\"Session\"];\n\n/**\n * SQLite constants for various operations and flags.\n *\n * @example\n * ```typescript\n * import { constants } from '@photostructure/sqlite';\n *\n * const db = new DatabaseSync('./data.db', {\n *   readOnly: true,\n *   // Uses SQLITE_OPEN_READONLY internally\n * });\n * ```\n */\nexport const constants = binding.constants as SqliteModule[\"constants\"];\n\n// Default export for CommonJS compatibility\nexport default binding as SqliteModule;\n","import { dirname } from \"node:path\";\n\nexport function getCallerDirname(): string {\n  const e = new Error();\n  if (e.stack == null) {\n    Error.captureStackTrace(e);\n  }\n  return dirname(extractCallerPath(e.stack as string));\n}\n\n// Comprehensive regex patterns for different stack frame formats\nconst patterns =\n  process.platform === \"win32\"\n    ? [\n        // Standard: \"at functionName (C:\\path\\file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>[A-Z]:\\\\.+):\\d+:\\d+\\)$/,\n        // direct: \"at C:\\path\\file.js:1:1\"\n        /\\bat\\s(?<path>[A-Z]:\\\\.+):\\d+:\\d+$/,\n        // UNC: \"at functionName (\\\\server\\share\\path\\file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>\\\\\\\\.+):\\d+:\\d+\\)$/,\n        // direct: \"at \\\\server\\share\\path\\file.js:1:1\"\n        /\\bat\\s(?<path>\\\\\\\\.+):\\d+:\\d+$/,\n      ]\n    : [\n        // Standard: \"at functionName (/path/file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>\\/.+?):\\d+:\\d+\\)$/,\n        // Anonymous or direct: \"at /path/file.js:1:1\"\n        /\\bat\\s(.+[^/]\\s)?(?<path>\\/.+?):\\d+:\\d+$/,\n      ];\n\nconst MaybeUrlRE = /^[a-z]{2,5}:\\/\\//i;\n\n// only exposed for tests:\nexport function extractCallerPath(stack: string): string {\n  const frames = stack.split(\"\\n\").filter(Boolean);\n\n  // First find getCallerDirname() in the stack:\n  const callerFrame = frames.findIndex((frame) =>\n    frame.includes(\"getCallerDirname\"),\n  );\n  if (callerFrame === -1) {\n    throw new Error(\"Invalid stack trace format: missing caller frame\");\n  }\n  for (let i = callerFrame + 1; i < frames.length; i++) {\n    const frame = frames[i];\n    for (const pattern of patterns) {\n      const g = frame?.trim().match(pattern)?.groups;\n      if (g != null && g[\"path\"]) {\n        const path = g[\"path\"];\n        // Windows requires us to check if it's a reasonable URL, as URL accepts\n        // \"C:\\\\path\\\\file.txt\" as valid (!!)\n        if (MaybeUrlRE.test(path)) {\n          try {\n            return new URL(path).pathname;\n          } catch {\n            // ignore\n          }\n        }\n        return path;\n      }\n    }\n  }\n  throw new Error(\"Invalid stack trace format: no parsable frames\");\n}\n","import { getCallerDirname } from \"./stack_path\";\n\n// Thanks to tsup shims, __dirname should always be defined except when run by\n// jest (which will use the stack_path shim)\nexport function _dirname() {\n  try {\n    if (typeof __dirname !== \"undefined\") return __dirname;\n  } catch {\n    // ignore\n  }\n  // we must be in jest. Use the stack_path ~~hack~~ shim:\n  return getCallerDirname();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,4BAAyB;AACzB,IAAAA,oBAAqB;;;ACFrB,uBAAwB;AAEjB,SAAS,mBAA2B;AACzC,QAAM,IAAI,IAAI,MAAM;AACpB,MAAI,EAAE,SAAS,MAAM;AACnB,UAAM,kBAAkB,CAAC;AAAA,EAC3B;AACA,aAAO,0BAAQ,kBAAkB,EAAE,KAAe,CAAC;AACrD;AAGA,IAAM,WACJ,QAAQ,aAAa,UACjB;AAAA;AAAA,EAEE;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF,IACA;AAAA;AAAA,EAEE;AAAA;AAAA,EAEA;AACF;AAEN,IAAM,aAAa;AAGZ,SAAS,kBAAkB,OAAuB;AACvD,QAAM,SAAS,MAAM,MAAM,IAAI,EAAE,OAAO,OAAO;AAG/C,QAAM,cAAc,OAAO;AAAA,IAAU,CAAC,UACpC,MAAM,SAAS,kBAAkB;AAAA,EACnC;AACA,MAAI,gBAAgB,IAAI;AACtB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,WAAS,IAAI,cAAc,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpD,UAAM,QAAQ,OAAO,CAAC;AACtB,eAAW,WAAW,UAAU;AAC9B,YAAM,IAAI,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG;AACxC,UAAI,KAAK,QAAQ,EAAE,MAAM,GAAG;AAC1B,cAAM,OAAO,EAAE,MAAM;AAGrB,YAAI,WAAW,KAAK,IAAI,GAAG;AACzB,cAAI;AACF,mBAAO,IAAI,IAAI,IAAI,EAAE;AAAA,UACvB,QAAQ;AAAA,UAER;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,QAAM,IAAI,MAAM,gDAAgD;AAClE;;;AC3DO,SAAS,WAAW;AACzB,MAAI;AACF,QAAI,OAAO,cAAc,YAAa,QAAO;AAAA,EAC/C,QAAQ;AAAA,EAER;AAEA,SAAO,iBAAiB;AAC1B;;;AFNA,IAAM,cAAU,sBAAAC,aAAa,wBAAK,SAAS,GAAG,IAAI,CAAC;AAmXnD,IAAI,QAAQ,gBAAgB,OAAO,OAAO,YAAY,aAAa;AACjE,UAAQ,aAAa,UAAU,OAAO,OAAO,IAAI,WAAY;AAC3D,QAAI;AACF,WAAK,MAAM;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,IAAI,QAAQ,iBAAiB,OAAO,OAAO,YAAY,aAAa;AAClE,UAAQ,cAAc,UAAU,OAAO,OAAO,IAAI,WAAY;AAC5D,QAAI;AACF,WAAK,SAAS;AAAA,IAChB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAsBO,IAAM,eACX,QAAQ;AAaH,IAAM,gBACX,QAAQ;AAcH,IAAM,UAAU,QAAQ;AAexB,IAAM,YAAY,QAAQ;AAGjC,IAAO,gBAAQ;","names":["import_node_path","nodeGypBuild"]}
+{"version":3,"sources":["../src/index.ts","../src/stack-path.ts","../src/dirname.ts","../src/lru-cache.ts","../src/sql-tag-store.ts"],"sourcesContent":["// Load the native binding with support for both CJS and ESM\nimport nodeGypBuild from \"node-gyp-build\";\nimport { join } from \"node:path\";\nimport { _dirname } from \"./dirname\";\nimport { SQLTagStore } from \"./sql-tag-store\";\nimport { DatabaseSyncInstance } from \"./types/database-sync-instance\";\nimport { DatabaseSyncOptions } from \"./types/database-sync-options\";\nimport { SQLTagStoreInstance } from \"./types/sql-tag-store-instance\";\nimport { SqliteAuthorizationActions } from \"./types/sqlite-authorization-actions\";\nimport { SqliteAuthorizationResults } from \"./types/sqlite-authorization-results\";\nimport { SqliteChangesetConflictTypes } from \"./types/sqlite-changeset-conflict-types\";\nimport { SqliteChangesetResolution } from \"./types/sqlite-changeset-resolution\";\nimport { SqliteOpenFlags } from \"./types/sqlite-open-flags\";\nimport { StatementSyncInstance } from \"./types/statement-sync-instance\";\n\nexport type { AggregateOptions } from \"./types/aggregate-options\";\nexport type { ChangesetApplyOptions } from \"./types/changeset-apply-options\";\nexport type { DatabaseSyncInstance } from \"./types/database-sync-instance\";\nexport type { DatabaseSyncOptions } from \"./types/database-sync-options\";\nexport type { SessionOptions } from \"./types/session-options\";\nexport type { SQLTagStoreInstance } from \"./types/sql-tag-store-instance\";\nexport type { SqliteAuthorizationActions } from \"./types/sqlite-authorization-actions\";\nexport type { SqliteAuthorizationResults } from \"./types/sqlite-authorization-results\";\nexport type { SqliteChangesetConflictTypes } from \"./types/sqlite-changeset-conflict-types\";\nexport type { SqliteChangesetResolution } from \"./types/sqlite-changeset-resolution\";\nexport type { SqliteOpenFlags } from \"./types/sqlite-open-flags\";\nexport type { StatementSyncInstance } from \"./types/statement-sync-instance\";\nexport type { UserFunctionOptions } from \"./types/user-functions-options\";\n\n// Use _dirname() helper that works in both CJS/ESM and Jest\nconst binding = nodeGypBuild(join(_dirname(), \"..\"));\n\n/**\n * All SQLite constants exported by this module.\n *\n * This is a union of all constant category interfaces:\n * - {@link SqliteOpenFlags} - Database open flags (extension beyond `node:sqlite`)\n * - {@link SqliteChangesetResolution} - Changeset conflict resolution values\n * - {@link SqliteChangesetConflictTypes} - Changeset conflict type codes\n * - {@link SqliteAuthorizationResults} - Authorization return values\n * - {@link SqliteAuthorizationActions} - Authorization action codes\n *\n * **Note:** The categorized interfaces (`SqliteOpenFlags`, etc.) are extensions\n * provided by `@photostructure/sqlite`. The `node:sqlite` module exports only\n * a flat `constants` object without these type categories.\n */\nexport type SqliteConstants = SqliteOpenFlags &\n  SqliteChangesetResolution &\n  SqliteChangesetConflictTypes &\n  SqliteAuthorizationResults &\n  SqliteAuthorizationActions;\n\n/**\n * Options for creating a prepared statement.\n */\nexport interface StatementOptions {\n  /** If true, the prepared statement's expandedSQL property will contain the expanded SQL. @default false */\n  readonly expandedSQL?: boolean;\n  /** If true, anonymous parameters are enabled for the statement. @default false */\n  readonly anonymousParameters?: boolean;\n}\n\nexport interface Session {\n  /**\n   * Generate a changeset containing all changes recorded by the session.\n   * @returns A Buffer containing the changeset data.\n   */\n  changeset(): Buffer;\n  /**\n   * Generate a patchset containing all changes recorded by the session.\n   * @returns A Buffer containing the patchset data.\n   */\n  patchset(): Buffer;\n  /**\n   * Close the session and release its resources.\n   */\n  close(): void;\n}\n\n/**\n * The main SQLite module interface.\n */\nexport interface SqliteModule {\n  /**\n   * The DatabaseSync class represents a synchronous connection to a SQLite database.\n   * All operations are performed synchronously, blocking until completion.\n   */\n  DatabaseSync: new (\n    location?: string | Buffer | URL,\n    options?: DatabaseSyncOptions,\n  ) => DatabaseSyncInstance;\n  /**\n   * The StatementSync class represents a synchronous prepared statement.\n   * This class should not be instantiated directly; use Database.prepare() instead.\n   */\n  StatementSync: new (\n    database: DatabaseSyncInstance,\n    sql: string,\n    options?: StatementOptions,\n  ) => StatementSyncInstance;\n  /**\n   * The Session class for recording database changes.\n   * This class should not be instantiated directly; use Database.createSession() instead.\n   */\n  Session: new () => Session;\n  /**\n   * SQLite constants for various operations and flags.\n   * @see {@link SqliteConstants} for the type definition\n   * @see {@link SqliteOpenFlags} for database open flags (extension beyond `node:sqlite`)\n   * @see {@link SqliteChangesetResolution} for changeset conflict resolution values\n   * @see {@link SqliteChangesetConflictTypes} for changeset conflict type codes\n   * @see {@link SqliteAuthorizationResults} for authorization return values\n   * @see {@link SqliteAuthorizationActions} for authorization action codes\n   */\n  constants: SqliteConstants;\n}\n\n/**\n * The DatabaseSync class represents a synchronous connection to a SQLite database.\n * All database operations are performed synchronously, blocking the thread until completion.\n *\n * @example\n * ```typescript\n * import { DatabaseSync } from '@photostructure/sqlite';\n *\n * // Create an in-memory database\n * const db = new DatabaseSync(':memory:');\n *\n * // Create a file-based database\n * const fileDb = new DatabaseSync('./mydata.db');\n *\n * // Create with options\n * const readOnlyDb = new DatabaseSync('./data.db', { readOnly: true });\n * ```\n */\nexport const DatabaseSync =\n  binding.DatabaseSync as SqliteModule[\"DatabaseSync\"];\n\n// node:sqlite implements createTagStore and SQLTagStore entirely in native C++.\n// We use a TypeScript implementation instead, attached via prototype extension.\n// This maintains API compatibility with node:sqlite while avoiding the complexity\n// of a native LRU cache. Performance is equivalent since the real cost is SQLite\n// execution, not cache lookups - V8's Map is highly optimized for string keys.\n(DatabaseSync.prototype as DatabaseSyncInstance).createTagStore = function (\n  this: DatabaseSyncInstance,\n  capacity?: number,\n): SQLTagStoreInstance {\n  return new SQLTagStore(this, capacity);\n};\n\n/**\n * The StatementSync class represents a prepared SQL statement.\n * This class should not be instantiated directly; use DatabaseSync.prepare() instead.\n *\n * @example\n * ```typescript\n * const stmt = db.prepare('SELECT * FROM users WHERE id = ?');\n * const user = stmt.get(123);\n * stmt.finalize();\n * ```\n */\nexport const StatementSync =\n  binding.StatementSync as SqliteModule[\"StatementSync\"];\n\n/**\n * The Session class for recording database changes.\n * This class should not be instantiated directly; use DatabaseSync.createSession() instead.\n *\n * @example\n * ```typescript\n * const session = db.createSession({ table: 'users' });\n * // Make some changes to the users table\n * const changeset = session.changeset();\n * session.close();\n * ```\n */\nexport const Session = binding.Session as SqliteModule[\"Session\"];\n\n/**\n * The SQLTagStore class for cached prepared statements via tagged template syntax.\n * This class should not be instantiated directly; use DatabaseSync.createTagStore() instead.\n *\n * @example\n * ```typescript\n * const sql = db.createTagStore();\n * sql.run`INSERT INTO users VALUES (${id}, ${name})`;\n * const user = sql.get`SELECT * FROM users WHERE id = ${id}`;\n * ```\n */\nexport { SQLTagStore };\n\n/**\n * SQLite constants for various operations and flags.\n *\n * @example\n * ```typescript\n * import { constants } from '@photostructure/sqlite';\n *\n * const db = new DatabaseSync('./data.db', {\n *   readOnly: true,\n *   // Uses SQLITE_OPEN_READONLY internally\n * });\n * ```\n */\nexport const constants: SqliteConstants = binding.constants;\n\n/**\n * Options for the backup() function.\n */\nexport interface BackupOptions {\n  /** Number of pages to be transmitted in each batch of the backup. @default 100 */\n  rate?: number;\n  /** Name of the source database. Can be 'main' or any attached database. @default 'main' */\n  source?: string;\n  /** Name of the target database. Can be 'main' or any attached database. @default 'main' */\n  target?: string;\n  /** Callback function that will be called with progress information. */\n  progress?: (info: { totalPages: number; remainingPages: number }) => void;\n}\n\n/**\n * Standalone function to make a backup of a database.\n *\n * This function matches the Node.js `node:sqlite` module API which exports\n * `backup()` as a standalone function in addition to the `db.backup()` method.\n *\n * @param sourceDb The database to backup from.\n * @param destination The path where the backup will be created.\n * @param options Optional configuration for the backup operation.\n * @returns A promise that resolves when the backup is completed.\n *\n * @example\n * ```typescript\n * import { DatabaseSync, backup } from '@photostructure/sqlite';\n *\n * const db = new DatabaseSync('./source.db');\n * await backup(db, './backup.db');\n *\n * // With options\n * await backup(db, './backup.db', {\n *   rate: 10,\n *   progress: ({ totalPages, remainingPages }) => {\n *     console.log(`Progress: ${totalPages - remainingPages}/${totalPages}`);\n *   }\n * });\n * ```\n */\nexport const backup: (\n  sourceDb: DatabaseSyncInstance,\n  destination: string | Buffer | URL,\n  options?: BackupOptions,\n) => Promise<number> = binding.backup;\n\n// Default export for CommonJS compatibility\nexport default binding as SqliteModule;\n","import { dirname } from \"node:path\";\n\nexport function getCallerDirname(): string {\n  const e = new Error();\n  if (e.stack == null) {\n    Error.captureStackTrace(e);\n  }\n  return dirname(extractCallerPath(e.stack as string));\n}\n\n// Comprehensive regex patterns for different stack frame formats\nconst patterns =\n  process.platform === \"win32\"\n    ? [\n        // File URLs: \"at functionName (file:///C:/path/file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>file:\\/\\/\\/.+?):\\d+:\\d+\\)$/,\n        // File URLs direct: \"at file:///C:/path/file.js:1:1\"\n        /\\bat\\s(?<path>file:\\/\\/\\/.+?):\\d+:\\d+$/,\n        // Standard: \"at functionName (C:\\path\\file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>[A-Z]:\\\\.+):\\d+:\\d+\\)$/,\n        // direct: \"at C:\\path\\file.js:1:1\"\n        /\\bat\\s(?<path>[A-Z]:\\\\.+):\\d+:\\d+$/,\n        // UNC: \"at functionName (\\\\server\\share\\path\\file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>\\\\\\\\.+):\\d+:\\d+\\)$/,\n        // direct: \"at \\\\server\\share\\path\\file.js:1:1\"\n        /\\bat\\s(?<path>\\\\\\\\.+):\\d+:\\d+$/,\n      ]\n    : [\n        // Standard: \"at functionName (/path/file.js:1:1)\"\n        /\\bat\\s.+?\\((?<path>\\/.+?):\\d+:\\d+\\)$/,\n        // Anonymous or direct: \"at /path/file.js:1:1\"\n        // eslint-disable-next-line security/detect-unsafe-regex -- Pattern is safe: no nested quantifiers\n        /\\bat\\s(?:[^\\s()]+\\s)?(?<path>\\/[^:]+):\\d+:\\d+$/,\n      ];\n\nconst MaybeUrlRE = /^[a-z]{2,5}:\\/\\//i;\n\n// only exposed for tests:\nexport function extractCallerPath(stack: string): string {\n  const frames = stack.split(\"\\n\").filter(Boolean);\n\n  // First find getCallerDirname() in the stack:\n  const callerFrame = frames.findIndex((frame) =>\n    frame.includes(\"getCallerDirname\"),\n  );\n  if (callerFrame === -1) {\n    throw new Error(\"Invalid stack trace format: missing caller frame\");\n  }\n  for (let i = callerFrame + 1; i < frames.length; i++) {\n    // eslint-disable-next-line security/detect-object-injection -- Index is from controlled for-loop\n    const frame = frames[i];\n    for (const pattern of patterns) {\n      const g = frame?.trim().match(pattern)?.groups;\n      if (g != null && g[\"path\"]) {\n        const path = g[\"path\"];\n        // Windows requires us to check if it's a reasonable URL, as URL accepts\n        // \"C:\\\\path\\\\file.txt\" as valid (!!)\n        if (MaybeUrlRE.test(path)) {\n          try {\n            return new URL(path).pathname;\n          } catch {\n            // ignore\n          }\n        }\n        return path;\n      }\n    }\n  }\n  throw new Error(\"Invalid stack trace format: no parsable frames\");\n}\n","import { getCallerDirname } from \"./stack-path\";\n\n// Thanks to tsup shims, __dirname should always be defined except when run by\n// jest (which will use the stack_path shim)\nexport function _dirname() {\n  try {\n    if (typeof __dirname !== \"undefined\") return __dirname;\n  } catch {\n    // ignore\n  }\n  // we must be in jest. Use the stack_path ~~hack~~ shim:\n  return getCallerDirname();\n}\n","/**\n * Simple LRU (Least Recently Used) cache implementation.\n * Uses Map's insertion order to track recency - first key is oldest.\n */\nexport class LRUCache<K, V> {\n  private cache = new Map<K, V>();\n  private readonly maxCapacity: number;\n\n  constructor(capacity: number) {\n    if (capacity < 1) {\n      throw new RangeError(\"LRU cache capacity must be at least 1\");\n    }\n    this.maxCapacity = capacity;\n  }\n\n  /**\n   * Get a value from the cache.\n   * If found, moves the entry to the end (most recently used).\n   */\n  get(key: K): V | undefined {\n    const value = this.cache.get(key);\n    if (value !== undefined) {\n      // Move to end (most recently used) by reinserting\n      this.cache.delete(key);\n      this.cache.set(key, value);\n    }\n    return value;\n  }\n\n  /**\n   * Set a value in the cache.\n   * If key exists, updates and moves to end.\n   * If at capacity, evicts the oldest entry first.\n   */\n  set(key: K, value: V): void {\n    if (this.cache.has(key)) {\n      // Update existing - delete and reinsert at end\n      this.cache.delete(key);\n    } else if (this.cache.size >= this.maxCapacity) {\n      // Evict oldest (first key in Map iteration order)\n      const oldestKey = this.cache.keys().next().value;\n      if (oldestKey !== undefined) {\n        this.cache.delete(oldestKey);\n      }\n    }\n    this.cache.set(key, value);\n  }\n\n  /**\n   * Delete an entry from the cache.\n   */\n  delete(key: K): boolean {\n    return this.cache.delete(key);\n  }\n\n  /**\n   * Check if a key exists in the cache.\n   * Does NOT update recency.\n   */\n  has(key: K): boolean {\n    return this.cache.has(key);\n  }\n\n  /**\n   * Clear all entries from the cache.\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /**\n   * Get the current number of entries in the cache.\n   */\n  size(): number {\n    return this.cache.size;\n  }\n\n  /**\n   * Get the maximum capacity of the cache.\n   */\n  capacity(): number {\n    return this.maxCapacity;\n  }\n}\n","import { LRUCache } from \"./lru-cache\";\nimport { DatabaseSyncInstance } from \"./types/database-sync-instance\";\nimport type { StatementSyncInstance } from \"./types/statement-sync-instance\";\n\n/**\n * Default capacity for the statement cache.\n * Matches Node.js SQLTagStore default.\n */\nconst DEFAULT_CAPACITY = 1000;\n\n/**\n * SQLTagStore provides cached prepared statements via tagged template syntax.\n *\n * @example\n * ```js\n * const sql = db.createTagStore();\n * sql.run`INSERT INTO users VALUES (${id}, ${name})`;\n * const user = sql.get`SELECT * FROM users WHERE id = ${id}`;\n * ```\n */\nexport class SQLTagStore {\n  private readonly database: DatabaseSyncInstance;\n  private readonly cache: LRUCache<string, StatementSyncInstance>;\n  private readonly maxCapacity: number;\n\n  constructor(db: DatabaseSyncInstance, capacity: number = DEFAULT_CAPACITY) {\n    if (!db.isOpen) {\n      throw new Error(\"Database is not open\");\n    }\n    this.database = db;\n    this.maxCapacity = capacity;\n    this.cache = new LRUCache(capacity);\n  }\n\n  /**\n   * Returns the associated database instance.\n   */\n  get db(): DatabaseSyncInstance {\n    return this.database;\n  }\n\n  /**\n   * Returns the maximum capacity of the statement cache.\n   */\n  get capacity(): number {\n    return this.maxCapacity;\n  }\n\n  /**\n   * Returns the current number of cached statements.\n   */\n  size(): number {\n    return this.cache.size();\n  }\n\n  /**\n   * Clears all cached statements.\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /**\n   * Execute an INSERT, UPDATE, DELETE or other statement that doesn't return rows.\n   * Returns an object with `changes` and `lastInsertRowid`.\n   */\n  run(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ): { changes: number; lastInsertRowid: number | bigint } {\n    const stmt = this.getOrPrepare(strings);\n    return stmt.run(...values);\n  }\n\n  /**\n   * Execute a query and return the first row, or undefined if no rows.\n   */\n  get(strings: TemplateStringsArray, ...values: unknown[]): unknown {\n    const stmt = this.getOrPrepare(strings);\n    return stmt.get(...values);\n  }\n\n  /**\n   * Execute a query and return all rows as an array.\n   */\n  all(strings: TemplateStringsArray, ...values: unknown[]): unknown[] {\n    const stmt = this.getOrPrepare(strings);\n    return stmt.all(...values);\n  }\n\n  /**\n   * Execute a query and return an iterator over the rows.\n   */\n  iterate(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ): IterableIterator<unknown> {\n    const stmt = this.getOrPrepare(strings);\n    return stmt.iterate(...values);\n  }\n\n  /**\n   * Get a cached statement or prepare a new one.\n   * If a cached statement has been finalized, it's evicted and a new one is prepared.\n   */\n  private getOrPrepare(strings: TemplateStringsArray): StatementSyncInstance {\n    if (!this.database.isOpen) {\n      throw new Error(\"Database is not open\");\n    }\n\n    const sql = this.buildSQL(strings);\n\n    // Check cache - evict if finalized\n    const cached = this.cache.get(sql);\n    if (cached) {\n      if (!cached.finalized) {\n        return cached;\n      }\n      // Statement was finalized externally - remove from cache\n      this.cache.delete(sql);\n    }\n\n    // Prepare new statement and cache it\n    const stmt = this.database.prepare(sql);\n    this.cache.set(sql, stmt);\n    return stmt;\n  }\n\n  /**\n   * Build the SQL string by joining template parts with `?` placeholders.\n   */\n  private buildSQL(strings: TemplateStringsArray): string {\n    let sql = strings[0] ?? \"\";\n    for (let i = 1; i < strings.length; i++) {\n      // eslint-disable-next-line security/detect-object-injection -- Index is from controlled for-loop\n      sql += \"?\" + (strings[i] ?? \"\");\n    }\n    return sql;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,4BAAyB;AACzB,IAAAA,oBAAqB;;;ACFrB,uBAAwB;AAEjB,SAAS,mBAA2B;AACzC,QAAM,IAAI,IAAI,MAAM;AACpB,MAAI,EAAE,SAAS,MAAM;AACnB,UAAM,kBAAkB,CAAC;AAAA,EAC3B;AACA,aAAO,0BAAQ,kBAAkB,EAAE,KAAe,CAAC;AACrD;AAGA,IAAM,WACJ,QAAQ,aAAa,UACjB;AAAA;AAAA,EAEE;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF,IACA;AAAA;AAAA,EAEE;AAAA;AAAA;AAAA,EAGA;AACF;AAEN,IAAM,aAAa;AAGZ,SAAS,kBAAkB,OAAuB;AACvD,QAAM,SAAS,MAAM,MAAM,IAAI,EAAE,OAAO,OAAO;AAG/C,QAAM,cAAc,OAAO;AAAA,IAAU,CAAC,UACpC,MAAM,SAAS,kBAAkB;AAAA,EACnC;AACA,MAAI,gBAAgB,IAAI;AACtB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,WAAS,IAAI,cAAc,GAAG,IAAI,OAAO,QAAQ,KAAK;AAEpD,UAAM,QAAQ,OAAO,CAAC;AACtB,eAAW,WAAW,UAAU;AAC9B,YAAM,IAAI,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG;AACxC,UAAI,KAAK,QAAQ,EAAE,MAAM,GAAG;AAC1B,cAAM,OAAO,EAAE,MAAM;AAGrB,YAAI,WAAW,KAAK,IAAI,GAAG;AACzB,cAAI;AACF,mBAAO,IAAI,IAAI,IAAI,EAAE;AAAA,UACvB,QAAQ;AAAA,UAER;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,QAAM,IAAI,MAAM,gDAAgD;AAClE;;;ACjEO,SAAS,WAAW;AACzB,MAAI;AACF,QAAI,OAAO,cAAc,YAAa,QAAO;AAAA,EAC/C,QAAQ;AAAA,EAER;AAEA,SAAO,iBAAiB;AAC1B;;;ACRO,IAAM,WAAN,MAAqB;AAAA,EAClB,QAAQ,oBAAI,IAAU;AAAA,EACb;AAAA,EAEjB,YAAY,UAAkB;AAC5B,QAAI,WAAW,GAAG;AAChB,YAAM,IAAI,WAAW,uCAAuC;AAAA,IAC9D;AACA,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,KAAuB;AACzB,UAAM,QAAQ,KAAK,MAAM,IAAI,GAAG;AAChC,QAAI,UAAU,QAAW;AAEvB,WAAK,MAAM,OAAO,GAAG;AACrB,WAAK,MAAM,IAAI,KAAK,KAAK;AAAA,IAC3B;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,KAAQ,OAAgB;AAC1B,QAAI,KAAK,MAAM,IAAI,GAAG,GAAG;AAEvB,WAAK,MAAM,OAAO,GAAG;AAAA,IACvB,WAAW,KAAK,MAAM,QAAQ,KAAK,aAAa;AAE9C,YAAM,YAAY,KAAK,MAAM,KAAK,EAAE,KAAK,EAAE;AAC3C,UAAI,cAAc,QAAW;AAC3B,aAAK,MAAM,OAAO,SAAS;AAAA,MAC7B;AAAA,IACF;AACA,SAAK,MAAM,IAAI,KAAK,KAAK;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,KAAiB;AACtB,WAAO,KAAK,MAAM,OAAO,GAAG;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,KAAiB;AACnB,WAAO,KAAK,MAAM,IAAI,GAAG;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,MAAM,MAAM;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAe;AACb,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,WAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;;;AC3EA,IAAM,mBAAmB;AAYlB,IAAM,cAAN,MAAkB;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,IAA0B,WAAmB,kBAAkB;AACzE,QAAI,CAAC,GAAG,QAAQ;AACd,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AACA,SAAK,WAAW;AAChB,SAAK,cAAc;AACnB,SAAK,QAAQ,IAAI,SAAS,QAAQ;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,KAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,WAAmB;AACrB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,OAAe;AACb,WAAO,KAAK,MAAM,KAAK;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,MAAM,MAAM;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IACE,YACG,QACoD;AACvD,UAAM,OAAO,KAAK,aAAa,OAAO;AACtC,WAAO,KAAK,IAAI,GAAG,MAAM;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAkC,QAA4B;AAChE,UAAM,OAAO,KAAK,aAAa,OAAO;AACtC,WAAO,KAAK,IAAI,GAAG,MAAM;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAkC,QAA8B;AAClE,UAAM,OAAO,KAAK,aAAa,OAAO;AACtC,WAAO,KAAK,IAAI,GAAG,MAAM;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,QACE,YACG,QACwB;AAC3B,UAAM,OAAO,KAAK,aAAa,OAAO;AACtC,WAAO,KAAK,QAAQ,GAAG,MAAM;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,aAAa,SAAsD;AACzE,QAAI,CAAC,KAAK,SAAS,QAAQ;AACzB,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAEA,UAAM,MAAM,KAAK,SAAS,OAAO;AAGjC,UAAM,SAAS,KAAK,MAAM,IAAI,GAAG;AACjC,QAAI,QAAQ;AACV,UAAI,CAAC,OAAO,WAAW;AACrB,eAAO;AAAA,MACT;AAEA,WAAK,MAAM,OAAO,GAAG;AAAA,IACvB;AAGA,UAAM,OAAO,KAAK,SAAS,QAAQ,GAAG;AACtC,SAAK,MAAM,IAAI,KAAK,IAAI;AACxB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,SAAuC;AACtD,QAAI,MAAM,QAAQ,CAAC,KAAK;AACxB,aAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;AAEvC,aAAO,OAAO,QAAQ,CAAC,KAAK;AAAA,IAC9B;AACA,WAAO;AAAA,EACT;AACF;;;AJ7GA,IAAM,cAAU,sBAAAC,aAAa,wBAAK,SAAS,GAAG,IAAI,CAAC;AAyG5C,IAAM,eACX,QAAQ;AAOT,aAAa,UAAmC,iBAAiB,SAEhE,UACqB;AACrB,SAAO,IAAI,YAAY,MAAM,QAAQ;AACvC;AAaO,IAAM,gBACX,QAAQ;AAcH,IAAM,UAAU,QAAQ;AA4BxB,IAAM,YAA6B,QAAQ;AA2C3C,IAAM,SAIU,QAAQ;AAG/B,IAAO,gBAAQ;","names":["import_node_path","nodeGypBuild"]}