@revealui/db 0.2.0

package/dist/client/index.js

@@ -0,0 +1,396 @@
+/**
+ * @revealui/db - Database Client
+ *
+ * Provides a configured Drizzle ORM client for PostgreSQL databases.
+ * Supports dual database architecture:
+ * - REST Database (NeonDB): Uses @neondatabase/serverless with drizzle-orm/neon-http
+ * - Vector Database (Supabase): Uses postgres-js with drizzle-orm/postgres-js
+ *
+ * This dual-driver approach avoids the Neon driver's compatibility issue with Supabase,
+ * where it incorrectly transforms Supabase hostnames (aws-0-*.pooler.supabase.com → api.pooler.supabase.com).
+ *
+ * Connection String Format:
+ * - NeonDB: postgresql://...@neon.tech/...
+ * - Supabase: postgresql://...@*.supabase.co:6543/postgres (transaction pooler)
+ * - Supabase: postgresql://...@*.supabase.co:5432/postgres (direct/session pooler)
+ *
+ * Reference:
+ * - Neon: https://orm.drizzle.team/docs/connect-neon
+ * - Supabase: https://orm.drizzle.team/docs/tutorials/drizzle-with-supabase
+ */
+import { neon } from '@neondatabase/serverless';
+// Import config module (ESM)
+// Config uses proxy for lazy loading, so import is safe - validation only happens on property access
+// Direct ESM import - the Proxy ensures no validation occurs until properties are accessed
+import configModule from '@revealui/config';
+import { getSSLConfig } from '@revealui/utils/database';
+import { drizzle as drizzleNeon } from 'drizzle-orm/neon-http';
+import { drizzle as drizzlePg } from 'drizzle-orm/node-postgres';
+import { Pool } from 'pg';
+import * as schema from '../schema/index.js'; // Full schema for backward compatibility
+import * as restSchema from '../schema/rest.js';
+import * as vectorSchema from '../schema/vector.js';
+// =============================================================================
+// Client Creation
+// =============================================================================
+/**
+ * Creates a Drizzle database client for Neon Postgres.
+ *
+ * Uses the official Drizzle pattern for neon-http driver:
+ * https://orm.drizzle.team/docs/connect-neon
+ *
+ * @param config - Database configuration
+ * @param dbSchema - Optional schema to use (defaults to full schema for backward compatibility)
+ *
+ * @example
+ * ```typescript
+ * import { createClient } from '@revealui/db/client'
+ *
+ * const db = createClient({
+ *   connectionString: process.env.POSTGRES_URL!,
+ * })
+ *
+ * // Query users
+ * const users = await db.query.users.findMany()
+ * ```
+ */
+/**
+ * Detects if a connection string requires node-postgres driver.
+ * Returns true for Supabase connections and localhost/test connections.
+ * Supabase connection strings contain '.supabase.co' or 'pooler.supabase.com'.
+ * Localhost connections are used for testing and development.
+ */
+function isSupabaseConnection(connectionString) {
+    return (connectionString.includes('.supabase.co') ||
+        connectionString.includes('pooler.supabase.com') ||
+        connectionString.includes('localhost') ||
+        connectionString.includes('127.0.0.1'));
+}
+/**
+ * Creates a Drizzle database client, automatically selecting the appropriate driver:
+ * - Supabase/localhost connections: Uses node-postgres with drizzle-orm/node-postgres
+ * - NeonDB connections: Uses @neondatabase/serverless with drizzle-orm/neon-http
+ *
+ * This dual-driver approach fixes the Neon driver's compatibility issue with Supabase,
+ * where it incorrectly transforms Supabase hostnames. It also enables local testing
+ * with localhost PostgreSQL databases.
+ *
+ * @param config - Database configuration
+ * @param dbSchema - Optional schema to use (defaults to full schema for backward compatibility)
+ *
+ * @example
+ * ```typescript
+ * import { createClient } from '@revealui/db/client'
+ *
+ * // Automatically uses node-postgres for Supabase
+ * const supabaseDb = createClient({
+ *   connectionString: process.env.DATABASE_URL!, // Supabase URL
+ * })
+ *
+ * // Automatically uses node-postgres for localhost (testing)
+ * const testDb = createClient({
+ *   connectionString: 'postgresql://test:test@localhost:5432/test',
+ * })
+ *
+ * // Automatically uses Neon driver for NeonDB
+ * const neonDb = createClient({
+ *   connectionString: process.env.POSTGRES_URL!, // NeonDB URL
+ * })
+ * ```
+ */
+export function createClient(config, dbSchema = schema) {
+    const isSupabase = isSupabaseConnection(config.connectionString);
+    if (isSupabase) {
+        // Use pg for Supabase connections
+        // This avoids the Neon driver's hostname transformation bug
+        const pool = new Pool({
+            connectionString: config.connectionString,
+            ssl: getSSLConfig(config.connectionString), // Auto-detect SSL from connection string
+            max: 10, // Connection limit
+            idleTimeoutMillis: 30_000, // 30 seconds
+            connectionTimeoutMillis: 10_000, // 10 seconds
+        });
+        // Track pool and register cleanup
+        const poolId = `pool-${activePools.size + 1}`;
+        activePools.set(poolId, pool);
+        registerPoolCleanup();
+        return drizzlePg({
+            client: pool,
+            schema: dbSchema,
+            logger: config.logger ?? false,
+        });
+    }
+    else {
+        // Use Neon serverless driver for NeonDB connections
+        const sql = neon(config.connectionString);
+        return drizzleNeon({
+            client: sql,
+            schema: dbSchema,
+            logger: config.logger ?? false,
+        });
+    }
+}
+// =============================================================================
+// Global Client (for singleton usage)
+// =============================================================================
+let restClient = null;
+let vectorClient = null;
+// Track all pg.Pool instances for monitoring and cleanup
+const activePools = new Map();
+// Register cleanup handler
+let cleanupHandlerRegistered = false;
+function registerPoolCleanup() {
+    if (cleanupHandlerRegistered)
+        return;
+    // Monitoring integration removed to avoid circular dependency
+    // Application layer should handle cleanup registration instead
+    // const monitoring = await getMonitoring()
+    // if (monitoring?.registerCleanupHandler) {
+    //   monitoring.registerCleanupHandler(
+    //     'database-pools',
+    //     async () => {
+    //       await closeAllPools()
+    //     },
+    //     'Close all database connection pools',
+    //     100, // High priority
+    //   )
+    // }
+    cleanupHandlerRegistered = true;
+}
+/**
+ * Gets or creates a global database client.
+ * Supports dual database architecture with separate clients for REST and Vector operations.
+ * Uses config module if available, otherwise falls back to process.env for backward compatibility.
+ *
+ * @param typeOrConnectionString - Database type ('rest' | 'vector') or connection string (legacy API)
+ * @returns Database client instance
+ *
+ * @example
+ * ```typescript
+ * import { getClient } from '@revealui/db/client'
+ *
+ * // New API: Specify database type
+ * const restDb = getClient('rest')
+ * const vectorDb = getClient('vector')
+ *
+ * // Legacy API: Still supported for backward compatibility
+ * const db = getClient() // defaults to 'rest'
+ * const db2 = getClient('postgresql://...') // uses provided connection string as 'rest'
+ * ```
+ */
+// Note: DatabaseType | string union is intentional for backward compatibility (allows both type strings and connection strings)
+// eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents
+export function getClient(typeOrConnectionString) {
+    // Legacy API: If first argument is a string and not 'rest' or 'vector', treat as connection string
+    if (typeOrConnectionString && typeof typeOrConnectionString === 'string') {
+        if (typeOrConnectionString === 'rest' || typeOrConnectionString === 'vector') {
+            // New API: Type specified
+            const type = typeOrConnectionString;
+            return getClientByType(type);
+        }
+        else if (typeOrConnectionString.startsWith('postgresql://') ||
+            typeOrConnectionString.startsWith('postgres://')) {
+            // Legacy API: Connection string provided, use as REST client
+            if (!restClient) {
+                restClient = createClient({ connectionString: typeOrConnectionString });
+            }
+            return restClient;
+        }
+    }
+    // Default to 'rest' for backward compatibility
+    return getClientByType('rest');
+}
+/**
+ * Internal function to get client by type
+ */
+function getClientByType(type) {
+    if (type === 'vector') {
+        if (!vectorClient) {
+            const url = process.env.DATABASE_URL;
+            if (!url || typeof url !== 'string') {
+                throw new Error('DATABASE_URL environment variable is required for vector database. ' +
+                    'Set DATABASE_URL to your Supabase connection string.');
+            }
+            vectorClient = createClient({ connectionString: url }, vectorSchema);
+        }
+        return vectorClient;
+    }
+    // type === 'rest'
+    if (!restClient) {
+        // Try to get from config module (ESM - lazy validation via Proxy)
+        let url;
+        try {
+            const configUrl = configModule.database?.url;
+            if (typeof configUrl === 'string') {
+                url = configUrl;
+            }
+        }
+        catch {
+            // Config validation failed or module unavailable - will use process.env fallback
+            url = undefined;
+        }
+        // Fallback to process.env (use || to also catch empty strings)
+        url = url || process.env.POSTGRES_URL || process.env.DATABASE_URL;
+        if (!url || typeof url !== 'string') {
+            throw new Error('Database connection string not provided for REST database. ' +
+                'Either use @revealui/config, or set POSTGRES_URL (or DATABASE_URL) environment variable.');
+        }
+        restClient = createClient({ connectionString: url }, restSchema);
+    }
+    return restClient;
+}
+/**
+ * Gets or creates the REST database client (NeonDB).
+ * Convenience function for accessing the REST database.
+ *
+ * @example
+ * ```typescript
+ * import { getRestClient } from '@revealui/db/client'
+ *
+ * const db = getRestClient()
+ * const users = await db.query.users.findMany()
+ * ```
+ */
+export function getRestClient() {
+    return getClient('rest');
+}
+/**
+ * Gets or creates the Vector database client (Supabase).
+ * Convenience function for accessing the vector database.
+ *
+ * @example
+ * ```typescript
+ * import { getVectorClient } from '@revealui/db/client'
+ *
+ * const db = getVectorClient()
+ * const memories = await db.query.agentMemories.findMany()
+ * ```
+ */
+export function getVectorClient() {
+    return getClient('vector');
+}
+/**
+ * Resets the global clients (useful for testing).
+ * Clears both REST and Vector client instances.
+ */
+export function resetClient() {
+    restClient = null;
+    vectorClient = null;
+}
+// =============================================================================
+// Pool Monitoring and Cleanup
+// =============================================================================
+/**
+ * Gets metrics for all active database connection pools.
+ *
+ * @returns Array of pool metrics
+ *
+ * @example
+ * ```typescript
+ * import { getPoolMetrics } from '@revealui/db/client'
+ *
+ * const metrics = getPoolMetrics()
+ * for (const pool of metrics) {
+ *   // Log pool statistics
+ *   logger.info(`${pool.name}: ${pool.totalCount} total, ${pool.idleCount} idle`)
+ * }
+ * ```
+ */
+export function getPoolMetrics() {
+    const metrics = [];
+    for (const [name, pool] of activePools) {
+        metrics.push({
+            name,
+            totalCount: pool.totalCount,
+            idleCount: pool.idleCount,
+            waitingCount: pool.waitingCount,
+        });
+    }
+    return metrics;
+}
+/**
+ * Closes all active database connection pools.
+ * This should be called during graceful shutdown.
+ *
+ * @example
+ * ```typescript
+ * import { closeAllPools } from '@revealui/db/client'
+ *
+ * process.on('SIGTERM', async () => {
+ *   await closeAllPools()
+ *   process.exit(0)
+ * })
+ * ```
+ */
+export async function closeAllPools() {
+    const closePromises = [];
+    for (const [_name, pool] of activePools) {
+        closePromises.push(pool.end().catch((_error) => {
+            // Silently handle pool close errors during shutdown
+            // Pool is being removed from activePools regardless
+        }));
+    }
+    await Promise.all(closePromises);
+    activePools.clear();
+    // Reset global clients
+    restClient = null;
+    vectorClient = null;
+}
+// =============================================================================
+// Transaction Helper
+// =============================================================================
+/**
+ * Execute a database transaction with automatic BEGIN/COMMIT/ROLLBACK.
+ *
+ * ⚠️ IMPORTANT: Transaction support depends on the database driver:
+ * - ✅ Supabase/localhost (pg Pool): Full transaction support
+ * - ❌ NeonDB (HTTP driver): Transactions NOT supported
+ *
+ * The Neon HTTP driver (@neondatabase/serverless with neon-http) does not support
+ * transactions because it uses stateless HTTP requests. Each query is independent.
+ *
+ * For transaction support, use:
+ * 1. Supabase with connection pooling (recommended for production)
+ * 2. Localhost PostgreSQL (for development/testing)
+ * 3. Neon with WebSocket driver (coming in future versions)
+ *
+ * @param db - Database client (must be created with pg Pool driver)
+ * @param fn - Transaction callback that receives a transaction context
+ * @returns Result from the transaction callback
+ * @throws {Error} If using Neon HTTP driver (no transaction support)
+ * @throws {Error} If transaction fails (automatic ROLLBACK is performed)
+ *
+ * @example
+ * ```typescript
+ * // ✅ Works with Supabase/localhost (pg Pool driver)
+ * const supabaseDb = getClient('vector') // Uses pg Pool
+ * const result = await withTransaction(supabaseDb, async (tx) => {
+ *   const site = await tx.insert(sites).values({ ... }).returning()
+ *   await tx.insert(pages).values({ siteId: site[0].id, ... })
+ *   return site[0]
+ * })
+ *
+ * // ❌ Throws error with NeonDB (HTTP driver)
+ * const neonDb = getClient('rest') // Uses Neon HTTP
+ * await withTransaction(neonDb, async (tx) => { ... }) // Error!
+ * ```
+ */
+export async function withTransaction(db, fn) {
+    // Check if this is a pg Pool-based client (supports transactions)
+    // The pg Pool client has a 'transaction' method from drizzle-orm/node-postgres
+    const hasPgTransaction = 'transaction' in db && typeof db.transaction === 'function';
+    if (!hasPgTransaction) {
+        throw new Error('Transaction not supported: Database client is using Neon HTTP driver which does not support transactions. ' +
+            'To use transactions, configure your database with Supabase or localhost connection string. ' +
+            'Neon HTTP driver uses stateless requests and cannot maintain transaction state. ' +
+            'See docs/PRODUCTION_BLOCKERS.md for migration guide.');
+    }
+    // Use Drizzle's built-in transaction API
+    // This automatically handles BEGIN/COMMIT/ROLLBACK
+    return db.transaction(fn);
+}
+// =============================================================================
+// Re-exports
+// =============================================================================
+export { schema };
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAA;AAC/C,6BAA6B;AAC7B,qGAAqG;AACrG,2FAA2F;AAC3F,OAAO,YAAY,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAyB,MAAM,uBAAuB,CAAA;AACrF,OAAO,EAAE,OAAO,IAAI,SAAS,EAAuB,MAAM,2BAA2B,CAAA;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AACzB,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAA,CAAC,yCAAyC;AACtF,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAA;AA0DnD,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,gBAAwB;IACpD,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC;QACzC,gBAAgB,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAChD,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,CACvC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,WAAoE,MAAM;IAE1E,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEhE,IAAI,UAAU,EAAE,CAAC;QACf,kCAAkC;QAClC,4DAA4D;QAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;YACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,yCAAyC;YACrF,GAAG,EAAE,EAAE,EAAE,mBAAmB;YAC5B,iBAAiB,EAAE,MAAM,EAAE,aAAa;YACxC,uBAAuB,EAAE,MAAM,EAAE,aAAa;SAC/C,CAAC,CAAA;QAEF,kCAAkC;QAClC,MAAM,MAAM,GAAG,QAAQ,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAA;QAC7C,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC7B,mBAAmB,EAAE,CAAA;QAErB,OAAO,SAAS,CAAC;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;SAC/B,CAAa,CAAA;IAChB,CAAC;SAAM,CAAC;QACN,oDAAoD;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAEzC,OAAO,WAAW,CAAC;YACjB,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;SAC/B,CAAa,CAAA;IAChB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF,IAAI,UAAU,GAAoB,IAAI,CAAA;AACtC,IAAI,YAAY,GAAoB,IAAI,CAAA;AAExC,yDAAyD;AACzD,MAAM,WAAW,GAAsB,IAAI,GAAG,EAAE,CAAA;AAEhD,2BAA2B;AAC3B,IAAI,wBAAwB,GAAG,KAAK,CAAA;AACpC,SAAS,mBAAmB;IAC1B,IAAI,wBAAwB;QAAE,OAAM;IAEpC,8DAA8D;IAC9D,+DAA+D;IAC/D,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,wBAAwB;IACxB,oBAAoB;IACpB,8BAA8B;IAC9B,SAAS;IACT,6CAA6C;IAC7C,4BAA4B;IAC5B,MAAM;IACN,IAAI;IAEJ,wBAAwB,GAAG,IAAI,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,gIAAgI;AAChI,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,sBAA8C;IACtE,mGAAmG;IACnG,IAAI,sBAAsB,IAAI,OAAO,sBAAsB,KAAK,QAAQ,EAAE,CAAC;QACzE,IAAI,sBAAsB,KAAK,MAAM,IAAI,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC7E,0BAA0B;YAC1B,MAAM,IAAI,GAAG,sBAAsC,CAAA;YACnD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;aAAM,IACL,sBAAsB,CAAC,UAAU,CAAC,eAAe,CAAC;YAClD,sBAAsB,CAAC,UAAU,CAAC,aAAa,CAAC,EAChD,CAAC;YACD,6DAA6D;YAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,YAAY,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC,CAAA;YACzE,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAkB;IACzC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,qEAAqE;oBACnE,sDAAsD,CACzD,CAAA;YACH,CAAC;YACD,YAAY,GAAG,YAAY,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,YAAY,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,kEAAkE;QAClE,IAAI,GAAuB,CAAA;QAC3B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAA;YAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,GAAG,GAAG,SAAS,CAAA;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iFAAiF;YACjF,GAAG,GAAG,SAAS,CAAA;QACjB,CAAC;QAED,+DAA+D;QAC/D,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;QAEjE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,6DAA6D;gBAC3D,0FAA0F,CAC7F,CAAA;QACH,CAAC;QAED,UAAU,GAAG,YAAY,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,UAAU,GAAG,IAAI,CAAA;IACjB,YAAY,GAAG,IAAI,CAAA;AACrB,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAkB,EAAE,CAAA;IAEjC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,aAAa,GAAoB,EAAE,CAAA;IAEzC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,aAAa,CAAC,IAAI,CAChB,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1B,oDAAoD;YACpD,oDAAoD;QACtD,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,WAAW,CAAC,KAAK,EAAE,CAAA;IAEnB,uBAAuB;IACvB,UAAU,GAAG,IAAI,CAAA;IACjB,YAAY,GAAG,IAAI,CAAA;AACrB,CAAC;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAY,EACZ,EAAgC;IAEhC,kEAAkE;IAClE,+EAA+E;IAC/E,MAAM,gBAAgB,GAAG,aAAa,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,UAAU,CAAA;IAEpF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,4GAA4G;YAC1G,6FAA6F;YAC7F,kFAAkF;YAClF,sDAAsD,CACzD,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,mDAAmD;IACnD,OAAQ,EAAoC,CAAC,WAAW,CACtD,EAAuD,CACxD,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/client/types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Database Client Type Utilities
+ *
+ * Provides type utilities for working with the database client,
+ * including query builder types, transaction types, and other utilities.
+ *
+ * @module @revealui/db/client/types
+ */
+import type { NeonHttpDatabase } from 'drizzle-orm/neon-http';
+import type * as schema from '../schema/index.js';
+import type { Database } from '../types/index.js';
+/**
+ * Re-export the centralized Database type for convenience
+ */
+export type { Database };
+/**
+ * Database client type (Drizzle ORM client)
+ *
+ * This is the actual database client returned by createClient/getClient.
+ */
+export type DatabaseClient = NeonHttpDatabase<typeof schema>;
+/**
+ * Extract query result type for a table
+ *
+ * @template T - The Database type
+ * @template N - The table name
+ */
+export type QueryResult<T extends Database, N extends keyof T['public']['Tables']> = T['public']['Tables'][N] extends {
+    Row: infer R;
+} ? R : never;
+/**
+ * Extract query results type for multiple tables
+ *
+ * @template T - The Database type
+ * @template N - Array of table names
+ */
+export type QueryResults<T extends Database, N extends Array<keyof T['public']['Tables']>> = {
+    [K in N[number]]: T['public']['Tables'][K] extends {
+        Row: infer R;
+    } ? R : never;
+};
+/**
+ * Transaction type for database operations
+ *
+ * Note: Neon HTTP driver doesn't support true transactions,
+ * but this type provides API consistency for future migration.
+ */
+export type Transaction = DatabaseClient;
+/**
+ * Type-safe query utilities
+ *
+ * Note: Drizzle ORM already provides excellent type safety through its native API.
+ * Use Drizzle's native API directly for type-safe queries - no wrapper interface needed.
+ *
+ * @example
+ * ```typescript
+ * import { getClient } from '@revealui/db/client'
+ * import { users } from '@revealui/db/schema'
+ * import { eq } from 'drizzle-orm'
+ * import type { Database } from '@revealui/db/types'
+ *
+ * const db = getClient()
+ *
+ * // Drizzle provides full type safety
+ * const allUsers = await db.query.users.findMany()
+ * const user = await db.query.users.findFirst({
+ *   where: eq(users.id, 'user-123')
+ * })
+ *
+ * // Type-safe inserts
+ * const newUser: Database['public']['Tables']['users']['Insert'] = {
+ *   id: 'user-123',
+ *   email: 'user@example.com',
+ *   name: 'User',
+ *   schemaVersion: '1',
+ *   type: 'human',
+ * }
+ * await db.insert(users).values(newUser)
+ *
+ * // Type-safe updates
+ * await db.update(users)
+ *   .set({ name: 'Updated Name' })
+ *   .where(eq(users.id, 'user-123'))
+ * ```
+ *
+ * Drizzle's native API is fully type-safe and provides all the functionality
+ * you need. No wrapper interface is necessary.
+ */
+/**
+ * Extract table relationships for a specific table
+ *
+ * @template T - The Database type
+ * @template N - The table name
+ */
+export type TableRelationships<T extends Database, N extends keyof T['public']['Tables']> = T['public']['Tables'][N] extends {
+    Relationships: infer R;
+} ? R : never;
+/**
+ * Helper type to extract all related table names for a table
+ *
+ * @template T - The Database type
+ * @template N - The table name
+ */
+export type RelatedTables<T extends Database, N extends keyof T['public']['Tables']> = T['public']['Tables'][N] extends {
+    Relationships: infer R;
+} ? R extends ReadonlyArray<{
+    referencedRelation: infer Rel;
+}> ? Rel extends keyof T['public']['Tables'] ? Rel : never : never : never;
+//# sourceMappingURL=types.d.ts.map

package/dist/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/client/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAEjD;;GAEG;AACH,YAAY,EAAE,QAAQ,EAAE,CAAA;AAExB;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,MAAM,CAAC,CAAA;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,WAAW,CACrB,CAAC,SAAS,QAAQ,EAClB,CAAC,SAAS,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IACnC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;IAEnC,GAAG,EAAE,MAAM,CAAC,CAAA;CACb,GACG,CAAC,GACD,KAAK,CAAA;AAET;;;;;GAKG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI;KAC1F,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAEjD,GAAG,EAAE,MAAM,CAAC,CAAA;KACb,GACG,CAAC,GACD,KAAK;CACV,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,cAAc,CAAA;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,CAC5B,CAAC,SAAS,QAAQ,EAClB,CAAC,SAAS,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IACnC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;IAEnC,aAAa,EAAE,MAAM,CAAC,CAAA;CACvB,GACG,CAAC,GACD,KAAK,CAAA;AAET;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CACvB,CAAC,SAAS,QAAQ,EAClB,CAAC,SAAS,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IACnC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;IAEnC,aAAa,EAAE,MAAM,CAAC,CAAA;CACvB,GACG,CAAC,SAAS,aAAa,CAAC;IAAE,kBAAkB,EAAE,MAAM,GAAG,CAAA;CAAE,CAAC,GACxD,GAAG,SAAS,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GACrC,GAAG,GACH,KAAK,GACP,KAAK,GACP,KAAK,CAAA"}

package/dist/client/types.js

@@ -0,0 +1,10 @@
+/**
+ * Database Client Type Utilities
+ *
+ * Provides type utilities for working with the database client,
+ * including query builder types, transaction types, and other utilities.
+ *
+ * @module @revealui/db/client/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/client/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/crypto.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @revealui/db/crypto — AES-256-GCM envelope encryption for BYOK API keys
+ *
+ * Uses a Key Encryption Key (KEK) sourced from the REVEALUI_KEK environment
+ * variable (64 hex chars = 32 bytes). Each key is encrypted with a random
+ * 96-bit IV; the output is a dot-separated base64url string:
+ *
+ *   <iv>.<authTag>.<ciphertext>
+ *
+ * The auth tag provides tamper detection (GCM authenticated encryption).
+ */
+/**
+ * Encrypt a plaintext API key using AES-256-GCM.
+ * Returns a dot-separated base64url string: `<iv>.<authTag>.<ciphertext>`
+ */
+export declare function encryptApiKey(plaintext: string): string;
+/**
+ * Decrypt an encrypted API key produced by `encryptApiKey`.
+ * Throws if tampered (GCM auth tag mismatch) or if KEK is wrong.
+ */
+export declare function decryptApiKey(encrypted: string): string;
+/**
+ * Return a redacted hint showing only the last 4 characters of an API key.
+ * Safe to store in plaintext and display in the UI.
+ */
+export declare function redactApiKey(plaintext: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAkBH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAavD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGtD"}

package/dist/crypto.js

@@ -0,0 +1,68 @@
+/**
+ * @revealui/db/crypto — AES-256-GCM envelope encryption for BYOK API keys
+ *
+ * Uses a Key Encryption Key (KEK) sourced from the REVEALUI_KEK environment
+ * variable (64 hex chars = 32 bytes). Each key is encrypted with a random
+ * 96-bit IV; the output is a dot-separated base64url string:
+ *
+ *   <iv>.<authTag>.<ciphertext>
+ *
+ * The auth tag provides tamper detection (GCM authenticated encryption).
+ */
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12; // 96-bit IV — recommended for AES-GCM
+function getKek() {
+    const kekHex = process.env.REVEALUI_KEK;
+    if (!kekHex) {
+        throw new Error('REVEALUI_KEK environment variable is not set');
+    }
+    if (kekHex.length !== 64) {
+        throw new Error('REVEALUI_KEK must be exactly 64 hex characters (32 bytes / 256 bits)');
+    }
+    return Buffer.from(kekHex, 'hex');
+}
+/**
+ * Encrypt a plaintext API key using AES-256-GCM.
+ * Returns a dot-separated base64url string: `<iv>.<authTag>.<ciphertext>`
+ */
+export function encryptApiKey(plaintext) {
+    const kek = getKek();
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, kek, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    return [
+        iv.toString('base64url'),
+        authTag.toString('base64url'),
+        ciphertext.toString('base64url'),
+    ].join('.');
+}
+/**
+ * Decrypt an encrypted API key produced by `encryptApiKey`.
+ * Throws if tampered (GCM auth tag mismatch) or if KEK is wrong.
+ */
+export function decryptApiKey(encrypted) {
+    const kek = getKek();
+    const parts = encrypted.split('.');
+    if (parts.length !== 3) {
+        throw new Error('Invalid encrypted key format — expected <iv>.<authTag>.<ciphertext>');
+    }
+    const [ivB64, authTagB64, ciphertextB64] = parts;
+    const iv = Buffer.from(ivB64, 'base64url');
+    const authTag = Buffer.from(authTagB64, 'base64url');
+    const ciphertext = Buffer.from(ciphertextB64, 'base64url');
+    const decipher = createDecipheriv(ALGORITHM, kek, iv);
+    decipher.setAuthTag(authTag);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+}
+/**
+ * Return a redacted hint showing only the last 4 characters of an API key.
+ * Safe to store in plaintext and display in the UI.
+ */
+export function redactApiKey(plaintext) {
+    if (plaintext.length <= 4)
+        return '...';
+    return `...${plaintext.slice(-4)}`;
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE3E,MAAM,SAAS,GAAG,aAAa,CAAA;AAC/B,MAAM,SAAS,GAAG,EAAE,CAAA,CAAC,sCAAsC;AAE3D,SAAS,MAAM;IACb,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACnC,OAAO;QACL,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;KACjC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,KAAiC,CAAA;IAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACrD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @revealui/db - Database Package
+ *
+ * Provides Drizzle ORM schema definitions and database client for RevealUI.
+ * Designed for Neon Postgres with pgvector extension.
+ *
+ * ## Usage
+ *
+ * ### Core (Schema)
+ * ```typescript
+ * import { users, sites, pages } from '@revealui/db/schema'
+ * ```
+ *
+ * ### Client
+ * ```typescript
+ * import { getClient } from '@revealui/db/client'
+ * const db = getClient()
+ * ```
+ *
+ * ### Full Package
+ * ```typescript
+ * import { getClient, users, sites, pages } from '@revealui/db'
+ * ```
+ */
+export { DrizzleAuditStore } from './audit-store.js';
+export { closeAllPools, createClient, type Database as DatabaseClient, type DatabaseConfig, type DatabaseType, getClient, getPoolMetrics, getRestClient, getVectorClient, resetClient, schema, withTransaction, } from './client/index.js';
+export * from './schema/index.js';
+export type { Database, TableInsert, TableRelationships, TableRow, TableUpdate, } from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,KAAK,QAAQ,IAAI,cAAc,EAC/B,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,SAAS,EACT,cAAc,EACd,aAAa,EACb,eAAe,EACf,WAAW,EACX,MAAM,EACN,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAE1B,cAAc,mBAAmB,CAAA;AAGjC,YAAY,EACV,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,WAAW,GACZ,MAAM,kBAAkB,CAAA"}