@shohaghinfo/aerojs 0.4.2 → 0.4.3

package/README.md

@@ -20,6 +20,19 @@
 
 ---
 
+## 🚀 Official Starter Kits & Real-World Showcases
+
+Jumpstart your next enterprise application with production-ready starter templates built on **AeroJS**:
+
+| Starter Application | Stack | Architecture | Key Features |
+| :--- | :--- | :--- | :--- |
+| **[AeroSaaS-React](https://github.com/atifsoftware/AeroSaaS-React)** | React 18 + Inertia.js + Tailwind CSS | Single Page App (SPA) | Kanban board, Executive Dashboard, Scrypt Auth, Signed Invites |
+| **[AeroSaaS-Vue](https://github.com/atifsoftware/AeroSaaS-Vue)** | Vue 3 (Composition API) + Inertia.js + Tailwind | Single Page App (SPA) | Optimistic UI updates, Kanban board, Swagger docs, Native SQLite |
+| **[AeroSaaS-Edge](https://github.com/atifsoftware/AeroSaaS-Edge)** | AdonisJS Edge.js 6 + Tailwind CSS | Server-Side Rendered (MPA) | Instant FCP, 100% SEO score, In-memory AST caching, Zero client JS |
+| **[AeroSaaS-EJS](https://github.com/atifsoftware/AeroSaaS-EJS)** | EJS Templates + Tailwind CSS | Server-Side Rendered (MPA) | Classic async node streaming, Full dark theme, OpenAPI Swagger |
+
+---
+
 ## 📑 Table of Contents
 
 - [Overview & Philosophy](#-overview--philosophy)

package/dist/database/index.d.ts

@@ -3,7 +3,7 @@
  * @description AeroJS Database & Active Record ORM Layer.
  */
 export { Database, DB, MemoryDatabaseAdapter, type DatabaseAdapter, type DatabaseRow, } from './connection.js';
-export { QueryBuilder, type WhereClause, type JoinClause, type PaginationResult, } from './query-builder.js';
+export { QueryBuilder, validateIdentifier, quoteIdentifier, type WhereClause, type JoinClause, type PaginationResult, } from './query-builder.js';
 export { Model, Relation, computed, encrypted, type RelationDefinition, type ManyToManyOptions, type HasManyThroughOptions, } from './model.js';
 export { getHookRegistry, registerHook, ModelHookRegistry, beforeCreate, afterCreate, beforeSave, afterSave, beforeUpdate, afterUpdate, beforeDelete, afterDelete, beforeFind, afterFind, beforeFetch, afterFetch, type ModelHookEvent, type ModelHookHandler, } from './model-hooks.js';
 export { Schema, TableBlueprint, type ColumnDefinition, } from './schema.js';
@@ -13,5 +13,5 @@ export { ModelFactory, type FactoryDefinition, } from './factory.js';
 export { KnexDatabaseAdapter, useKnex, } from './knex.js';
 export { usePrisma, type PrismaIntegrationOptions, } from './prisma.js';
 export { useDrizzle, } from './drizzle.js';
-export { SqliteDatabaseAdapter, useSqlite, } from './sqlite.js';
+export { SqliteDatabaseAdapter, useSqlite, isSqliteSupported, } from './sqlite.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/database/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/database/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,QAAQ,EACR,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,EACT,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,SAAS,GACV,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/database/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,QAAQ,EACR,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,EACT,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/database/index.js

@@ -3,7 +3,7 @@
  * @description AeroJS Database & Active Record ORM Layer.
  */
 export { Database, DB, MemoryDatabaseAdapter, } from './connection.js';
-export { QueryBuilder, } from './query-builder.js';
+export { QueryBuilder, validateIdentifier, quoteIdentifier, } from './query-builder.js';
 export { Model, Relation, computed, encrypted, } from './model.js';
 export { getHookRegistry, registerHook, ModelHookRegistry, beforeCreate, afterCreate, beforeSave, afterSave, beforeUpdate, afterUpdate, beforeDelete, afterDelete, beforeFind, afterFind, beforeFetch, afterFetch, } from './model-hooks.js';
 export { Schema, TableBlueprint, } from './schema.js';
@@ -13,5 +13,5 @@ export { ModelFactory, } from './factory.js';
 export { KnexDatabaseAdapter, useKnex, } from './knex.js';
 export { usePrisma, } from './prisma.js';
 export { useDrizzle, } from './drizzle.js';
-export { SqliteDatabaseAdapter, useSqlite, } from './sqlite.js';
+export { SqliteDatabaseAdapter, useSqlite, isSqliteSupported, } from './sqlite.js';
 //# sourceMappingURL=index.js.map

package/dist/database/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/database/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,qBAAqB,GAGtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,SAAS,GAIV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,MAAM,EACN,cAAc,GAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,QAAQ,GAET,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,GAEb,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,GAEV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,SAAS,GACV,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/database/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,qBAAqB,GAGtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAIhB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,SAAS,GAIV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,MAAM,EACN,cAAc,GAEf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,QAAQ,GAET,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,YAAY,GAEb,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,GAEV,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/database/query-builder.d.ts

@@ -4,6 +4,17 @@
  * Supports chainable filtering, joins, eager loading, pagination, and SQL compilation.
  */
 import type { DatabaseAdapter, DatabaseRow } from './connection.js';
+/**
+ * Validates a SQL identifier (table name, column name, or alias) to prevent SQL injection.
+ * Supports /^[a-zA-Z0-9_.*]+$/ and alias 'as' patterns.
+ */
+export declare function validateIdentifier(identifier: string): string;
+/**
+ * Dialect-aware column and table identifier quoting to prevent injection and keyword collisions.
+ * MySQL: `backtick`
+ * PostgreSQL / SQLite: "double quote"
+ */
+export declare function quoteIdentifier(identifier: string, dialect?: string): string;
 export interface WhereClause {
     type: 'and' | 'or';
     column: string;
@@ -26,6 +37,8 @@ export interface PaginationResult<T> {
     hasMore: boolean;
 }
 export declare class QueryBuilder<T extends DatabaseRow = DatabaseRow> {
+    static validateIdentifier: typeof validateIdentifier;
+    static quoteIdentifier: typeof quoteIdentifier;
     tableName: string;
     protected adapter: DatabaseAdapter;
     protected columns: string[];
@@ -47,7 +60,14 @@ export declare class QueryBuilder<T extends DatabaseRow = DatabaseRow> {
     _eagerLoads: string[];
     protected preferWriteConnection: boolean;
     protected customReadAdapter?: DatabaseAdapter;
+    protected shouldQuote: boolean;
     constructor(tableName: string, adapter: DatabaseAdapter);
+    /**
+     * Enables or disables automatic dialect-aware identifier quoting for this query.
+     */
+    quoteIdentifiers(enable?: boolean): this;
+    validateIdentifier(identifier: string): string;
+    quoteIdentifier(identifier: string, dialect?: string): string;
     /**
      * Forces this query to execute against the primary write connection (for read-your-own-writes consistency).
      */
@@ -83,8 +103,8 @@ export declare class QueryBuilder<T extends DatabaseRow = DatabaseRow> {
     distinct(): this;
     groupBy(...columns: string[]): this;
     having(column: string, operator: string, value: unknown): this;
-    join(table: string, first: string, operator: string, second: string): this;
-    leftJoin(table: string, first: string, operator: string, second: string): this;
+    join(table: string, first: string, operatorOrSecond: string, maybeSecond?: string): this;
+    leftJoin(table: string, first: string, operatorOrSecond: string, maybeSecond?: string): this;
     orderBy(column: string, direction?: 'asc' | 'desc' | 'ASC' | 'DESC'): this;
     limit(count: number): this;
     offset(count: number): this;
@@ -93,21 +113,25 @@ export declare class QueryBuilder<T extends DatabaseRow = DatabaseRow> {
     /**
      * Compiles where clauses into a standalone SQL WHERE fragment and parameter bindings.
      */
-    compileWhere(): {
+    compileWhere(options?: {
+        quote?: boolean;
+    }): {
         sql: string;
         bindings: unknown[];
     };
     /**
      * Compiles the current builder state to raw SQL and bindings.
      */
-    toSQL(): {
+    toSQL(options?: {
+        quote?: boolean;
+    }): {
         sql: string;
         bindings: unknown[];
     };
     /**
      * Executes query and returns array of records.
      */
-    get(): Promise<T[]>;
+    get(adapterOrName?: DatabaseAdapter | string): Promise<T[]>;
     /**
      * Executes query and returns first record, or null.
      */
@@ -119,7 +143,7 @@ export declare class QueryBuilder<T extends DatabaseRow = DatabaseRow> {
     /**
      * Counts the matching records.
      */
-    count(column?: string): Promise<number>;
+    count(columnOrAdapter?: string | unknown): Promise<number>;
     /**
      * Sums the given column.
      */

package/dist/database/query-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query-builder.d.ts","sourceRoot":"","sources":["../../src/database/query-builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,YAAY,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IACpD,SAAS,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;IAEnC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,CAAS;IACpC,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,CAAM;IAC3C,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,CAAM;IACzC,SAAS,CAAC,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAM;IAC7E,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,UAAU,UAAS;IAC7B,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,CAAM;IACtC,SAAS,CAAC,aAAa,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAM;IAE9E,WAAW,EAAE,MAAM,EAAE,CAAM;IAClC,SAAS,CAAC,qBAAqB,UAAS;IACxC,SAAS,CAAC,iBAAiB,CAAC,EAAE,eAAe,CAAC;gBAElC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;IAKvD;;OAEG;IACI,kBAAkB,IAAI,IAAI;IAKjC;;OAEG;IACI,iBAAiB,CAAC,aAAa,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI;IAUxE;;;OAGG;IACI,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC;IAkB/B;;OAEG;IACI,kBAAkB,IAAI,eAAe;IAS5C;;OAEG;IACI,mBAAmB,IAAI,eAAe;IAOtC,MAAM,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAOlC,KAAK,CACV,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,OAAO,EACxB,KAAK,CAAC,EAAE,OAAO,GACd,IAAI;IAkBA,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,OAAO,EACxB,KAAK,CAAC,EAAE,OAAO,GACd,IAAI;IAkBA,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIlC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI;IAInD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;IAI7D,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;IAIhE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,OAAO,EAAO,GAAG,IAAI;IAUrD,QAAQ,IAAI,IAAI;IAKhB,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAKnC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAU9D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAU1E,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAU9E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAc,GAAG,IAAI;IAajF,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK1B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,IAAI,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAKlC,OAAO,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAI5C;;OAEG;IACI,YAAY,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAiC3D;;OAEG;IACI,KAAK,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IA4DpD;;OAEG;IACU,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;IAShC;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAOvC;;OAEG;IACU,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,UAAU,SAAO,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAI5E;;OAEG;IACU,KAAK,CAAC,MAAM,SAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBjD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBjD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBjD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkBxD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkBxD;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAOvC;;OAEG;IACU,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAOjE;;OAEG;IACU,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAuCnH;;OAEG;IACU,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBtD;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAqBtC;;OAEG;IACU,QAAQ,CAAC,IAAI,SAAI,EAAE,OAAO,SAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAmB3E;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB,OAAO,CAAC,YAAY;IAkDpB,OAAO,CAAC,eAAe;IAiBvB,SAAS,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IAE5C;;;;;;;;;;;;;;;;;OAiBG;IACI,aAAa,IAAI,IAAI;IAK5B;;;;;OAKG;IACI,UAAU,IAAI,IAAI;CAI1B"}
+{"version":3,"file":"query-builder.d.ts","sourceRoot":"","sources":["../../src/database/query-builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGpE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAkB7D;AAmBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CA+B5E;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,YAAY,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IAC3D,OAAc,kBAAkB,4BAAsB;IACtD,OAAc,eAAe,yBAAmB;IAEzC,SAAS,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;IAEnC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,CAAS;IACpC,SAAS,CAAC,YAAY,EAAE,WAAW,EAAE,CAAM;IAC3C,SAAS,CAAC,WAAW,EAAE,UAAU,EAAE,CAAM;IACzC,SAAS,CAAC,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAM;IAC7E,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,UAAU,UAAS;IAC7B,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,CAAM;IACtC,SAAS,CAAC,aAAa,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAM;IAE9E,WAAW,EAAE,MAAM,EAAE,CAAM;IAClC,SAAS,CAAC,qBAAqB,UAAS;IACxC,SAAS,CAAC,iBAAiB,CAAC,EAAE,eAAe,CAAC;IAC9C,SAAS,CAAC,WAAW,UAAS;gBAElB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;IAMvD;;OAEG;IACI,gBAAgB,CAAC,MAAM,UAAO,GAAG,IAAI;IAKrC,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAI9C,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAIpE;;OAEG;IACI,kBAAkB,IAAI,IAAI;IAKjC;;OAEG;IACI,iBAAiB,CAAC,aAAa,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI;IAUxE;;;OAGG;IACI,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC;IAmB/B;;OAEG;IACI,kBAAkB,IAAI,eAAe;IAS5C;;OAEG;IACI,mBAAmB,IAAI,eAAe;IAOtC,MAAM,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAQlC,KAAK,CACV,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,OAAO,EACxB,KAAK,CAAC,EAAE,OAAO,GACd,IAAI;IA6BA,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,OAAO,EACxB,KAAK,CAAC,EAAE,OAAO,GACd,IAAI;IA6BA,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIlC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI;IAInD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;IAI7D,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;IAIhE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,OAAO,EAAO,GAAG,IAAI;IAUrD,QAAQ,IAAI,IAAI;IAKhB,OAAO,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI;IAMnC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAW9D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAoBxF,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAoB5F,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,GAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAc,GAAG,IAAI;IAcjF,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK1B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,IAAI,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAKlC,OAAO,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAI5C;;OAEG;IACI,YAAY,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAsCxF;;OAEG;IACI,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE;IAgEjF;;OAEG;IACU,GAAG,CAAC,aAAa,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAYxE;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAOvC;;OAEG;IACU,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,UAAU,SAAO,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAI5E;;OAEG;IACU,KAAK,CAAC,eAAe,GAAE,MAAM,GAAG,OAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IA+B5E;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBjD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBjD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmBxD;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmBxD;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAOvC;;OAEG;IACU,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAQjE;;OAEG;IACU,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAyCnH;;OAEG;IACU,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BtD;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAqBtC;;OAEG;IACU,QAAQ,CAAC,IAAI,SAAI,EAAE,OAAO,SAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAmB3E;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB,OAAO,CAAC,YAAY;IAkDpB,OAAO,CAAC,eAAe;IAiBvB,SAAS,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IAE5C;;;;;;;;;;;;;;;;;OAiBG;IACI,aAAa,IAAI,IAAI;IAK5B;;;;;OAKG;IACI,UAAU,IAAI,IAAI;CAI1B"}

package/dist/database/query-builder.js

@@ -4,7 +4,79 @@
  * Supports chainable filtering, joins, eager loading, pagination, and SQL compilation.
  */
 import { Database, MemoryDatabaseAdapter } from './connection.js';
+/**
+ * Validates a SQL identifier (table name, column name, or alias) to prevent SQL injection.
+ * Supports /^[a-zA-Z0-9_.*]+$/ and alias 'as' patterns.
+ */
+export function validateIdentifier(identifier) {
+    const trimmed = String(identifier || '').trim();
+    if (!trimmed) {
+        throw new Error('Security Violation: SQL identifier cannot be empty');
+    }
+    // Handle alias pattern e.g., "column as alias" or "table.column AS alias"
+    const asMatch = trimmed.match(/^(.+?)\s+as\s+(.+)$/i);
+    if (asMatch) {
+        const expr = asMatch[1].trim();
+        const alias = asMatch[2].trim();
+        validateIdentifierPart(expr, true);
+        validateIdentifierPart(alias, false);
+        return trimmed;
+    }
+    validateIdentifierPart(trimmed, true);
+    return trimmed;
+}
+function validateIdentifierPart(part, allowStar) {
+    // Allow segments separated by dots: e.g., table.column or schema.table.column
+    const segments = part.split('.');
+    for (let i = 0; i < segments.length; i++) {
+        let seg = segments[i].trim();
+        if ((seg.startsWith('`') && seg.endsWith('`')) || (seg.startsWith('"') && seg.endsWith('"'))) {
+            seg = seg.slice(1, -1);
+        }
+        if (allowStar && seg === '*') {
+            continue;
+        }
+        if (!/^[a-zA-Z0-9_]+$/.test(seg)) {
+            throw new Error(`Security Violation: Invalid identifier: "${part}"`);
+        }
+    }
+}
+/**
+ * Dialect-aware column and table identifier quoting to prevent injection and keyword collisions.
+ * MySQL: `backtick`
+ * PostgreSQL / SQLite: "double quote"
+ */
+export function quoteIdentifier(identifier, dialect) {
+    validateIdentifier(identifier);
+    const d = String(dialect || '').toLowerCase();
+    const isMysql = d.includes('mysql');
+    const isPgOrSqlite = d.includes('pg') || d.includes('postgres') || d.includes('sqlite');
+    if (!isMysql && !isPgOrSqlite) {
+        return identifier;
+    }
+    const quoteChar = isMysql ? '`' : '"';
+    // Alias pattern: "col as alias" -> "`col` AS `alias`" or `"col" AS "alias"`
+    const asMatch = identifier.trim().match(/^(.+?)\s+as\s+(.+)$/i);
+    if (asMatch) {
+        const expr = quoteIdentifier(asMatch[1].trim(), dialect);
+        const alias = quoteIdentifier(asMatch[2].trim(), dialect);
+        return `${expr} AS ${alias}`;
+    }
+    const segments = identifier.trim().split('.');
+    const quoted = segments.map((seg) => {
+        let s = seg.trim();
+        if ((s.startsWith('`') && s.endsWith('`')) || (s.startsWith('"') && s.endsWith('"'))) {
+            s = s.slice(1, -1);
+        }
+        if (s === '*')
+            return '*';
+        return `${quoteChar}${s}${quoteChar}`;
+    });
+    return quoted.join('.');
+}
 export class QueryBuilder {
+    static validateIdentifier = validateIdentifier;
+    static quoteIdentifier = quoteIdentifier;
     tableName;
     adapter;
     columns = ['*'];
@@ -19,10 +91,25 @@ export class QueryBuilder {
     _eagerLoads = [];
     preferWriteConnection = false;
     customReadAdapter;
+    shouldQuote = false;
     constructor(tableName, adapter) {
+        validateIdentifier(tableName);
         this.tableName = tableName;
         this.adapter = adapter;
     }
+    /**
+     * Enables or disables automatic dialect-aware identifier quoting for this query.
+     */
+    quoteIdentifiers(enable = true) {
+        this.shouldQuote = enable;
+        return this;
+    }
+    validateIdentifier(identifier) {
+        return validateIdentifier(identifier);
+    }
+    quoteIdentifier(identifier, dialect) {
+        return quoteIdentifier(identifier, dialect || this.resolveReadAdapter().dialect);
+    }
     /**
      * Forces this query to execute against the primary write connection (for read-your-own-writes consistency).
      */
@@ -61,6 +148,7 @@ export class QueryBuilder {
         copy.preferWriteConnection = this.preferWriteConnection;
         copy.customReadAdapter = this.customReadAdapter;
         copy.lockMode = this.lockMode;
+        copy.shouldQuote = this.shouldQuote;
         return copy;
     }
     /**
@@ -87,17 +175,28 @@ export class QueryBuilder {
     }
     select(...columns) {
         if (columns.length > 0) {
+            columns.forEach(validateIdentifier);
             this.columns = columns;
         }
         return this;
     }
     where(column, operatorOrValue, value) {
+        validateIdentifier(column);
         let operator = '=';
         let val = operatorOrValue;
         if (value !== undefined) {
-            operator = String(operatorOrValue).toUpperCase();
+            operator = String(operatorOrValue).toUpperCase().trim();
             val = value;
         }
+        const validOperators = [
+            '=', '!=', '<>', '>', '<', '>=', '<=',
+            'LIKE', 'NOT LIKE', 'ILIKE', 'NOT ILIKE',
+            'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN',
+            'IS', 'IS NOT', '=='
+        ];
+        if (!validOperators.includes(operator)) {
+            throw new Error(`Security Violation: Unsupported operator in where: "${operator}"`);
+        }
         this.whereClauses.push({
             type: 'and',
             column,
@@ -107,12 +206,22 @@ export class QueryBuilder {
         return this;
     }
     orWhere(column, operatorOrValue, value) {
+        validateIdentifier(column);
         let operator = '=';
         let val = operatorOrValue;
         if (value !== undefined) {
-            operator = String(operatorOrValue).toUpperCase();
+            operator = String(operatorOrValue).toUpperCase().trim();
             val = value;
         }
+        const validOperators = [
+            '=', '!=', '<>', '>', '<', '>=', '<=',
+            'LIKE', 'NOT LIKE', 'ILIKE', 'NOT ILIKE',
+            'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN',
+            'IS', 'IS NOT', '=='
+        ];
+        if (!validOperators.includes(operator)) {
+            throw new Error(`Security Violation: Unsupported operator in orWhere: "${operator}"`);
+        }
         this.whereClauses.push({
             type: 'or',
             column,
@@ -156,10 +265,12 @@ export class QueryBuilder {
         return this;
     }
     groupBy(...columns) {
+        columns.forEach(validateIdentifier);
         this.groupClauses.push(...columns);
         return this;
     }
     having(column, operator, value) {
+        validateIdentifier(column);
         const validOperators = ['=', '!=', '<>', '>', '<', '>=', '<=', 'LIKE', 'NOT LIKE'];
         const op = operator.toUpperCase().trim();
         if (!validOperators.includes(op)) {
@@ -168,33 +279,50 @@ export class QueryBuilder {
         this.havingClauses.push({ column, operator: op, value });
         return this;
     }
-    join(table, first, operator, second) {
+    join(table, first, operatorOrSecond, maybeSecond) {
+        validateIdentifier(table);
+        validateIdentifier(first);
+        let op = '=';
+        let second = operatorOrSecond;
+        if (maybeSecond !== undefined) {
+            op = operatorOrSecond.trim();
+            second = maybeSecond;
+        }
+        validateIdentifier(second);
         const validOperators = ['=', '!=', '<>', '>', '<', '>=', '<='];
-        const op = operator.trim();
         if (!validOperators.includes(op)) {
-            throw new Error(`Security Violation: Unsupported operator in join: "${operator}"`);
+            throw new Error(`Security Violation: Unsupported operator in join: "${op}"`);
         }
         this.joinClauses.push({ type: 'inner', table, first, operator: op, second });
         return this;
     }
-    leftJoin(table, first, operator, second) {
+    leftJoin(table, first, operatorOrSecond, maybeSecond) {
+        validateIdentifier(table);
+        validateIdentifier(first);
+        let op = '=';
+        let second = operatorOrSecond;
+        if (maybeSecond !== undefined) {
+            op = operatorOrSecond.trim();
+            second = maybeSecond;
+        }
+        validateIdentifier(second);
         const validOperators = ['=', '!=', '<>', '>', '<', '>=', '<='];
-        const op = operator.trim();
         if (!validOperators.includes(op)) {
-            throw new Error(`Security Violation: Unsupported operator in leftJoin: "${operator}"`);
+            throw new Error(`Security Violation: Unsupported operator in leftJoin: "${op}"`);
         }
         this.joinClauses.push({ type: 'left', table, first, operator: op, second });
         return this;
     }
     orderBy(column, direction = 'ASC') {
-        const cleanDir = String(direction).toUpperCase() === 'DESC' ? 'DESC' : 'ASC';
         const trimmedCol = column.trim();
-        if (!/^[a-zA-Z0-9_.]+$/.test(trimmedCol) && !/^`[a-zA-Z0-9_.]+`$/.test(trimmedCol) && !/^"[a-zA-Z0-9_.]+"$/.test(trimmedCol)) {
-            throw new Error(`Security Violation: Invalid column identifier in orderBy: "${column}"`);
+        validateIdentifier(trimmedCol);
+        const dirUpper = String(direction || 'ASC').trim().toUpperCase();
+        if (dirUpper !== 'ASC' && dirUpper !== 'DESC') {
+            throw new Error(`Security Violation: Invalid order direction in orderBy: "${direction}". Allowed directions are ASC or DESC.`);
         }
         this.orderClauses.push({
             column: trimmedCol,
-            direction: cleanDir,
+            direction: dirUpper,
         });
         return this;
     }
@@ -216,11 +344,14 @@ export class QueryBuilder {
     /**
      * Compiles where clauses into a standalone SQL WHERE fragment and parameter bindings.
      */
-    compileWhere() {
+    compileWhere(options) {
         const bindings = [];
         if (this.whereClauses.length === 0) {
             return { sql: '', bindings };
         }
+        const quote = options?.quote ?? this.shouldQuote;
+        const dialect = this.resolveReadAdapter().dialect;
+        const q = (id) => (quote ? this.quoteIdentifier(id, dialect) : id);
         const parts = this.whereClauses.map((clause, idx) => {
             const prefix = idx > 0 ? `${clause.type.toUpperCase()} ` : '';
             if (clause.operator === 'RAW') {
@@ -229,56 +360,60 @@ export class QueryBuilder {
                 }
                 return `${prefix}${clause.column}`;
             }
+            const col = q(clause.column);
             if ((clause.operator === 'IN' || clause.operator === 'NOT IN') && Array.isArray(clause.value)) {
                 const placeholders = clause.value.map(() => '?').join(', ');
                 bindings.push(...clause.value);
-                return `${prefix}${clause.column} ${clause.operator} (${placeholders})`;
+                return `${prefix}${col} ${clause.operator} (${placeholders})`;
             }
             if ((clause.operator === 'BETWEEN' || clause.operator === 'NOT BETWEEN') && Array.isArray(clause.value)) {
                 bindings.push(clause.value[0], clause.value[1]);
-                return `${prefix}${clause.column} ${clause.operator} ? AND ?`;
+                return `${prefix}${col} ${clause.operator} ? AND ?`;
             }
             if (clause.value === null) {
-                return `${prefix}${clause.column} ${clause.operator} NULL`;
+                return `${prefix}${col} ${clause.operator} NULL`;
             }
             bindings.push(clause.value);
-            return `${prefix}${clause.column} ${clause.operator} ?`;
+            return `${prefix}${col} ${clause.operator} ?`;
         });
         return { sql: ` WHERE ${parts.join(' ')}`, bindings };
     }
     /**
      * Compiles the current builder state to raw SQL and bindings.
      */
-    toSQL() {
+    toSQL(options) {
         const bindings = [];
-        let sql = `SELECT ${this.isDistinct ? 'DISTINCT ' : ''}${this.columns.join(', ')} FROM ${this.tableName}`;
+        const quote = options?.quote ?? this.shouldQuote;
+        const dialect = this.resolveReadAdapter().dialect;
+        const q = (id) => (quote ? this.quoteIdentifier(id, dialect) : id);
+        let sql = `SELECT ${this.isDistinct ? 'DISTINCT ' : ''}${this.columns.map(q).join(', ')} FROM ${q(this.tableName)}`;
         // Joins
         for (const join of this.joinClauses) {
             const joinType = join.type === 'left' ? 'LEFT JOIN' : 'INNER JOIN';
-            sql += ` ${joinType} ${join.table} ON ${join.first} ${join.operator} ${join.second}`;
+            sql += ` ${joinType} ${q(join.table)} ON ${q(join.first)} ${join.operator} ${q(join.second)}`;
         }
         // Wheres
-        const where = this.compileWhere();
+        const where = this.compileWhere({ quote });
         if (where.sql) {
             sql += where.sql;
             bindings.push(...where.bindings);
         }
         // Group By
         if (this.groupClauses.length > 0) {
-            sql += ` GROUP BY ${this.groupClauses.join(', ')}`;
+            sql += ` GROUP BY ${this.groupClauses.map(q).join(', ')}`;
         }
         // Having
         if (this.havingClauses.length > 0) {
             const havingParts = this.havingClauses.map((h, i) => {
                 const pfx = i > 0 ? 'AND ' : '';
                 bindings.push(h.value);
-                return `${pfx}${h.column} ${h.operator} ?`;
+                return `${pfx}${q(h.column)} ${h.operator} ?`;
             });
             sql += ` HAVING ${havingParts.join(' ')}`;
         }
         // Order By
         if (this.orderClauses.length > 0) {
-            const orders = this.orderClauses.map((o) => `${o.column} ${o.direction}`).join(', ');
+            const orders = this.orderClauses.map((o) => `${q(o.column)} ${o.direction}`).join(', ');
             sql += ` ORDER BY ${orders}`;
         }
         // Limit and Offset
@@ -291,12 +426,12 @@ export class QueryBuilder {
         // Pessimistic Locking
         if (this.lockMode) {
             const adapter = this.resolveReadAdapter();
-            const dialect = String(adapter.dialect || '').toLowerCase();
+            const d = String(adapter.dialect || '').toLowerCase();
             if (this.lockMode === 'FOR UPDATE') {
                 sql += ' FOR UPDATE';
             }
             else if (this.lockMode === 'SHARE') {
-                sql += dialect.includes('mysql') ? ' LOCK IN SHARE MODE' : ' FOR SHARE';
+                sql += d.includes('mysql') ? ' LOCK IN SHARE MODE' : ' FOR SHARE';
             }
         }
         return { sql, bindings };
@@ -304,9 +439,12 @@ export class QueryBuilder {
     /**
      * Executes query and returns array of records.
      */
-    async get() {
-        const adapter = this.resolveReadAdapter();
-        if (adapter instanceof MemoryDatabaseAdapter) {
+    async get(adapterOrName) {
+        let adapter = this.resolveReadAdapter();
+        if (adapterOrName) {
+            adapter = typeof adapterOrName === 'string' ? Database.getAdapter(adapterOrName) : adapterOrName;
+        }
+        if (adapter instanceof MemoryDatabaseAdapter || adapter.getTableData) {
             return this.executeInMemory(adapter);
         }
         const { sql, bindings } = this.toSQL();
@@ -330,9 +468,23 @@ export class QueryBuilder {
     /**
      * Counts the matching records.
      */
-    async count(column = '*') {
-        const adapter = this.resolveReadAdapter();
-        if (adapter instanceof MemoryDatabaseAdapter) {
+    async count(columnOrAdapter = '*') {
+        let column = '*';
+        let targetAdapter;
+        if (typeof columnOrAdapter === 'object' && columnOrAdapter !== null) {
+            targetAdapter = columnOrAdapter;
+        }
+        else if (typeof columnOrAdapter === 'string') {
+            if (columnOrAdapter !== '*' && Database.getAdapter(columnOrAdapter) && Database.getAdapter(columnOrAdapter) !== Database.getAdapter('default')) {
+                targetAdapter = Database.getAdapter(columnOrAdapter);
+            }
+            else {
+                column = columnOrAdapter;
+                validateIdentifier(column);
+            }
+        }
+        const adapter = targetAdapter || this.resolveReadAdapter();
+        if (adapter instanceof MemoryDatabaseAdapter || adapter.getTableData) {
             const rows = this.filterMemoryRows(adapter.getTableData(this.tableName));
             return rows.length;
         }
@@ -350,6 +502,7 @@ export class QueryBuilder {
      * Sums the given column.
      */
     async sum(column) {
+        validateIdentifier(column);
         const adapter = this.resolveReadAdapter();
         if (adapter instanceof MemoryDatabaseAdapter) {
             const rows = this.filterMemoryRows(adapter.getTableData(this.tableName));
@@ -369,6 +522,7 @@ export class QueryBuilder {
      * Calculates the average of the given column.
      */
     async avg(column) {
+        validateIdentifier(column);
         const adapter = this.resolveReadAdapter();
         if (adapter instanceof MemoryDatabaseAdapter) {
             const rows = this.filterMemoryRows(adapter.getTableData(this.tableName));
@@ -391,6 +545,7 @@ export class QueryBuilder {
      * Finds the minimum value of the given column.
      */
     async min(column) {
+        validateIdentifier(column);
         const adapter = this.resolveReadAdapter();
         if (adapter instanceof MemoryDatabaseAdapter) {
             const rows = this.filterMemoryRows(adapter.getTableData(this.tableName));
@@ -412,6 +567,7 @@ export class QueryBuilder {
      * Finds the maximum value of the given column.
      */
     async max(column) {
+        validateIdentifier(column);
         const adapter = this.resolveReadAdapter();
         if (adapter instanceof MemoryDatabaseAdapter) {
             const rows = this.filterMemoryRows(adapter.getTableData(this.tableName));
@@ -442,6 +598,7 @@ export class QueryBuilder {
      * Plucks an array of single column values from matching records.
      */
     async pluck(column) {
+        validateIdentifier(String(column));
         const qb = this.clone();
         qb.columns = [String(column)];
         const rows = await qb.get();
@@ -455,6 +612,8 @@ export class QueryBuilder {
         if (records.length === 0)
             return { affectedRows: 0 };
         const adapter = this.resolveWriteAdapter();
+        const keys = Object.keys(records[0]);
+        keys.forEach(validateIdentifier);
         if (adapter instanceof MemoryDatabaseAdapter) {
             const tableRows = adapter.getTableData(this.tableName);
             const defaults = Database.tableDefaults.get(this.tableName) || {};
@@ -467,7 +626,6 @@ export class QueryBuilder {
             }
             return { insertId: lastId, affectedRows: records.length };
         }
-        const keys = Object.keys(records[0]);
         const cols = keys.join(', ');
         const rowPlaceholders = `(${keys.map(() => '?').join(', ')})`;
         const allPlaceholders = records.map(() => rowPlaceholders).join(', ');
@@ -489,6 +647,8 @@ export class QueryBuilder {
      */
     async update(data) {
         const adapter = this.resolveWriteAdapter();
+        const keys = Object.keys(data);
+        keys.forEach(validateIdentifier);
         if (adapter instanceof MemoryDatabaseAdapter) {
             const tableRows = adapter.getTableData(this.tableName);
             let updatedCount = 0;
@@ -500,7 +660,6 @@ export class QueryBuilder {
             }
             return updatedCount;
         }
-        const keys = Object.keys(data);
         const setClause = keys.map((k) => `${k} = ?`).join(', ');
         const setBindings = keys.map((k) => data[k]);
         const { sql: whereSql, bindings: whereBindings } = this.compileWhere();