@stacksjs/orm 0.75.318 → 0.75.321

package/dist/models/Error.ts

@@ -15,6 +15,8 @@ export default defineModel({
   ],
 
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 10 },
     useTimestamps: true,
   },
 
@@ -32,6 +34,7 @@ export default defineModel({
 
     message: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string().required(),
         message: {
@@ -43,6 +46,7 @@ export default defineModel({
 
     stack: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
         message: {
@@ -86,6 +90,7 @@ export default defineModel({
 
     additional_info: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
         message: {

package/dist/models/Forms/Form.ts

@@ -28,6 +28,8 @@ export default defineModel({
   ownership: siteOwnership(),
 
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 3 },
     useUuid: true,
     useTimestamps: true,
     useApi: {

package/dist/models/Forms/FormField.ts

@@ -27,6 +27,8 @@ export default defineModel({
   ownership: parentOwnership('Form', 'form_id'),
 
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 10 },
     useTimestamps: true,
     useApi: {
       middleware: ['auth'],

package/dist/models/Forms/FormSubmission.ts

@@ -18,6 +18,8 @@ export default defineModel({
   autoIncrement: true,
 
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 10 },
     gdpr: { subject: { email: 'email' }, erasure: 'anonymize', basis: 'consent', purpose: 'Form submissions' },
     useUuid: true,
     useTimestamps: true,

package/dist/models/Label.ts

@@ -47,7 +47,6 @@ export default defineModel({
       order: 1,
       fillable: true,
       validation: { rule: schema.number().required() },
-      factory: () => 1,
     },
 
     name: {

package/dist/models/Log.ts

@@ -49,7 +49,9 @@ export default defineModel({
       order: 1,
       fillable: true,
       validation: {
-        rule: schema.number().required(),
+        // Milliseconds since the epoch, so a bigint column, as on Websocket.time
+        // (stacksjs/stacks#2996).
+        rule: schema.unix().required(),
         message: {
           date: 'Timestamp must be a valid date',
         },

package/dist/models/MagicLinkToken.ts

@@ -15,13 +15,6 @@ export default defineModel({
   primaryKey: 'id',
   autoIncrement: true,
 
-  indexes: [
-    {
-      name: 'magic_link_tokens_token_unique',
-      columns: ['token'],
-      unique: true,
-    },
-  ],
 
   traits: {
     gdpr: { erasure: 'delete', basis: 'contract', purpose: 'Passwordless sign-in links' },

package/dist/models/PaymentProduct.ts

@@ -28,6 +28,7 @@ export default defineModel({
 
     description: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
         message: {

package/dist/models/PaymentTransaction.ts

@@ -32,6 +32,7 @@ export default defineModel({
 
     description: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
         message: {

package/dist/models/Release.ts

@@ -8,6 +8,8 @@ export default defineModel({
   autoIncrement: true,
 
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 5 },
     useUuid: true,
     useTimestamps: true,
     useSearch: {
@@ -59,6 +61,7 @@ export default defineModel({
     notes: {
       order: 4,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/Request.ts

@@ -132,6 +132,7 @@ export default defineModel({
 
     error_message: {
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
         message: {

package/dist/models/SenderDomain.ts

@@ -6,6 +6,8 @@ export default defineModel({
   table: 'sender_domains',
   belongsTo: ['Team'],
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 3 },
     useUuid: true,
     useTimestamps: true,
     useApi: { uri: 'sender-domains', routes: ['index', 'store', 'show', 'update', 'destroy'], middleware: ['auth', 'team'] },

package/dist/models/SmsOptOut.ts

@@ -13,13 +13,6 @@ export default defineModel({
   primaryKey: 'id',
   autoIncrement: true,
 
-  indexes: [
-    {
-      name: 'sms_opt_outs_phone_unique',
-      columns: ['phone'],
-      unique: true,
-    },
-  ],
 
   traits: {
     gdpr: { erasure: 'keep', basis: 'legal_obligation', purpose: 'Honouring SMS STOP replies, keyed by phone number' },

package/dist/models/Subscription.ts

@@ -8,6 +8,8 @@ export default defineModel({
   autoIncrement: true, // defaults to true
   belongsTo: ['User'],
   traits: {
+    // So a fresh seed fills its dashboard page (stacksjs/stacks#3000).
+    useSeeder: { count: 10 },
     gdpr: { erasure: 'keep', basis: 'legal_obligation', purpose: 'Billing records' },
     useUuid: true,
   },

package/dist/models/commerce/Auction.ts

@@ -75,6 +75,7 @@ export default defineModel({
     description: {
       order: 3,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/AuctionItem.ts

@@ -74,6 +74,7 @@ export default defineModel({
     description: {
       order: 3,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/Cart.ts

@@ -136,9 +136,90 @@ export default defineModel({
       order: 10,
       fillable: true,
       validation: {
-        rule: schema.string().required(),
+        // Optional: a cart without a coupon is the common case.
+        rule: schema.string(),
+      },
+      // Stored and shown, never resolved: nothing redeems or joins on it yet,
+      // so what it holds is left to the feature that does. No factory, so a
+      // seed does not invent one (stacksjs/stacks#3002).
+    },
+
+    // The storefront's anonymous cart: the shopper's signed stacks_cart cookie
+    // carries this token, checkout records its progress and the address, and
+    // the order is placed from them (stacksjs/stacks#3017). A cart made any
+    // other way has none of them.
+
+    /** Bearer for an anonymous cart, so never returned by the API. No factory: a seeded cart is no shopper's. */
+    sessionToken: {
+      order: 11,
+      unique: true,
+      hidden: true,
+      validation: {
+        rule: schema.string().max(255),
+      },
+    },
+
+    checkoutStep: {
+      default: 'cart',
+      order: 12,
+      fillable: true,
+      validation: {
+        rule: schema.enum(['cart', 'shipping', 'payment', 'placed']),
+      },
+    },
+
+    email: {
+      personal: true,
+      order: 13,
+      fillable: true,
+      validation: {
+        rule: schema.string().email().max(255),
+      },
+    },
+
+    shippingName: {
+      personal: true,
+      order: 14,
+      fillable: true,
+      validation: {
+        rule: schema.string().max(255),
+      },
+    },
+
+    shippingAddress: {
+      personal: true,
+      order: 15,
+      fillable: true,
+      validation: {
+        rule: schema.string().max(255),
+      },
+    },
+
+    shippingCity: {
+      personal: true,
+      order: 16,
+      fillable: true,
+      validation: {
+        rule: schema.string().max(255),
+      },
+    },
+
+    shippingState: {
+      personal: true,
+      order: 17,
+      fillable: true,
+      validation: {
+        rule: schema.string().max(100),
+      },
+    },
+
+    shippingZip: {
+      personal: true,
+      order: 18,
+      fillable: true,
+      validation: {
+        rule: schema.string().max(20),
       },
-      factory: () => 'test-coupon-id',
     },
   },
 

package/dist/models/commerce/Category.ts

@@ -64,6 +64,7 @@ export default defineModel({
     description: {
       order: 2,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },
@@ -101,7 +102,10 @@ export default defineModel({
       order: 5,
       fillable: true,
       validation: {
-        rule: schema.string(),
+        // Another category's id, so a number like the id it points at. As a
+        // string it was a text column, and joining it to categories.id failed
+        // on PostgreSQL with "text = bigint" (stacksjs/stacks#3002).
+        rule: schema.number(),
       },
       factory: () => null, // Most categories won't have a parent
     },

package/dist/models/commerce/Coupon.ts

@@ -55,6 +55,7 @@ export default defineModel({
     description: {
       order: 2,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },
@@ -145,7 +146,9 @@ export default defineModel({
       validation: {
         rule: schema.string(),
       },
-      factory: faker => faker.string.uuid(),
+      // Stored and shown, never resolved: nothing redeems or joins on it yet,
+      // so what it holds is left to the feature that does. No factory, so a
+      // seed does not invent one (stacksjs/stacks#3002).
     },
 
     usageLimit: {

package/dist/models/commerce/DigitalDelivery.ts

@@ -56,6 +56,7 @@ export default defineModel({
     description: {
       order: 3,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string().required(),
       },

package/dist/models/commerce/GiftCard.ts

@@ -125,6 +125,7 @@ export default defineModel({
       personal: true,
       order: 9,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/LoyaltyPoint.ts

@@ -81,6 +81,7 @@ export default defineModel({
     description: {
       order: 5,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/LoyaltyReward.ts

@@ -98,7 +98,9 @@ export default defineModel({
       validation: {
         rule: schema.string(),
       },
-      factory: faker => faker.helpers.maybe(() => faker.string.uuid(), { probability: 0.4 }),
+      // Stored and shown, never resolved: nothing redeems or joins on it yet,
+      // so what it holds is left to the feature that does. No factory, so a
+      // seed does not invent one (stacksjs/stacks#3002).
     },
 
     isActive: {

package/dist/models/commerce/Order.ts

@@ -142,6 +142,7 @@ export default defineModel({
       personal: true,
       order: 11,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },
@@ -199,7 +200,9 @@ export default defineModel({
       validation: {
         rule: schema.string(),
       },
-      factory: faker => faker.helpers.maybe(() => faker.string.uuid(), { probability: 0.2 }),
+      // Stored and shown, never resolved: nothing redeems or joins on it yet,
+      // so what it holds is left to the feature that does. No factory, so a
+      // seed does not invent one (stacksjs/stacks#3002).
     },
   },
 

package/dist/models/commerce/OrderItem.ts

@@ -45,6 +45,7 @@ export default defineModel({
       personal: true,
       order: 5,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/Payment.ts

@@ -179,6 +179,7 @@ export default defineModel({
       personal: true,
       order: 15,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/Product.ts

@@ -1,4 +1,5 @@
 import { defineModel } from '@stacksjs/orm'
+import { slug } from '@stacksjs/strings'
 import { schema } from '@stacksjs/validation/runtime'
 
 export default defineModel({
@@ -56,9 +57,22 @@ export default defineModel({
       factory: faker => faker.commerce.productName(),
     },
 
+    // The storefront's address for a product: /products/{slug}, and what a
+    // cart line keeps in product_sku (stacksjs/stacks#3005).
+    slug: {
+      order: 1,
+      unique: true,
+      fillable: true,
+      validation: {
+        rule: schema.string().required().max(255),
+      },
+      factory: (_faker, attributes) => slug(String(attributes.name)),
+    },
+
     description: {
       order: 2,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },
@@ -139,6 +153,7 @@ export default defineModel({
     nutritionalInfo: {
       order: 10,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/ProductVariant.ts

@@ -77,6 +77,7 @@ export default defineModel({
     description: {
       order: 5,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },
@@ -86,6 +87,7 @@ export default defineModel({
     options: {
       order: 6,
       fillable: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/Receipt.ts

@@ -136,6 +136,7 @@ export default defineModel({
       order: 8,
       fillable: true,
       default: '{}',
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/commerce/Review.ts

@@ -34,7 +34,9 @@ export default defineModel({
     observe: true,
   },
 
-  belongsTo: ['Product', 'Customer'],
+  // The order a storefront review was left for: one review per product per
+  // order, and the proof the reviewer bought it (stacksjs/stacks#3017).
+  belongsTo: ['Product', 'Customer', 'Order'],
 
   attributes: {
     /**

package/dist/models/commerce/Transaction.ts

@@ -71,6 +71,7 @@ export default defineModel({
       order: 5,
       fillable: true,
       hidden: true,
+      type: 'text',
       validation: {
         rule: schema.string(),
       },

package/dist/models/realtime/Websocket.ts

@@ -72,7 +72,10 @@ export default defineModel({
       order: 4,
       fillable: true,
       validation: {
-        rule: schema.number(),
+        // A Unix timestamp in milliseconds, so a bigint column: `number()`
+        // generated a 32-bit integer that Date.now() overflows on PostgreSQL
+        // and MySQL (stacksjs/stacks#2996).
+        rule: schema.unix(),
         message: {
           date: 'Time must be a valid timestamp',
         },

package/dist/native.d.ts

@@ -0,0 +1,29 @@
+import { Database } from 'bun:sqlite';
+import { MODEL_DEFINITION } from './define-model';
+import type { StacksModelDefinition } from './define-model';
+/**
+ * Own one SQLite database in a native backend process. Schema comes from the
+ * same migration planner as Buddy; additive upgrades and the snapshot commit
+ * atomically. Destructive upgrades require an explicit application migration.
+ */
+export declare function openNativeDatabase(options: { path: string, models: Record<string, NativeModel> }): Database;
+/**
+ * Model-declared CRUD for an authenticated native transport. Authorization is
+ * mandatory and evaluated before queries; web middleware is never bypassed.
+ * Use only behind stx's authenticated native backend, or supply an equivalent
+ * per-request authorization implementation. Native models explicitly declare
+ * middleware: [] because their session is enforced by this transport.
+ */
+export declare function createNativeModelApi(options: {
+  models: Record<string, NativeModel>
+  authorize: (request: Request, model: string, ability: string) => boolean | Promise<boolean>
+}): (request: Request) => Promise<Response | null>;
+/** Explicit model registry: the compiled app never discovers source files at runtime. */
+export declare interface NativeModel {
+  [MODEL_DEFINITION]: StacksModelDefinition
+  find: (id: number) => Promise<unknown>
+  create: (data: Record<string, unknown>) => Promise<unknown>
+  update: (id: number, data: Record<string, unknown>) => Promise<unknown>
+  destroy: (id: number) => Promise<unknown>
+  limit: (count: number) => { offset: (offset: number) => { get: () => Promise<unknown> } }
+}

package/dist/native.js

@@ -0,0 +1 @@
+import{Database}from"bun:sqlite";import{chmodSync,mkdirSync}from"node:fs";import{dirname,isAbsolute}from"node:path";import{buildMigrationPlan,configureOrm,generateDiffOperations}from"@stacksjs/query-builder";import{apiBasePath,filterFillable,getWritableFields,mapWriteError,resolveIndexPageArgs}from"./auto-crud";import{MODEL_DEFINITION,toAttrs}from"./define-model";export function openNativeDatabase(options){if(options.path!==":memory:"&&!isAbsolute(options.path))throw Error("A native database requires an absolute Application Support path");if(options.path!==":memory:")mkdirSync(dirname(options.path),{recursive:!0,mode:448});const db=new Database(options.path,{create:!0});try{if(options.path!==":memory:")chmodSync(options.path,384);db.exec("PRAGMA foreign_keys = ON; PRAGMA busy_timeout = 5000;");const models=Object.fromEntries(Object.entries(options.models).map(([name,model])=>[name,model[MODEL_DEFINITION]])),next=buildMigrationPlan(models,{dialect:"sqlite"});db.transaction(()=>{db.exec("CREATE TABLE IF NOT EXISTS _stacks_native_schema (id INTEGER PRIMARY KEY CHECK (id = 1), snapshot TEXT NOT NULL)");const saved=db.query("SELECT snapshot FROM _stacks_native_schema WHERE id = 1").get(),previous=saved?JSON.parse(saved.snapshot):void 0,diff=generateDiffOperations(previous,next);if(diff.operations.some((operation)=>operation.destructive))throw Error("Native model upgrade contains destructive changes; provide an explicit data migration");for(const statement of diff.statements)if(statement.replace(/--[^\n]*/g,"").trim())db.exec(statement);db.query("INSERT INTO _stacks_native_schema (id, snapshot) VALUES (1, ?) ON CONFLICT (id) DO UPDATE SET snapshot = excluded.snapshot").run(JSON.stringify(next))}).immediate();configureOrm({database:db});return db}catch(error){db.close();throw error}}export function createNativeModelApi(options){const models=Object.entries(options.models).flatMap(([name,model])=>{const definition=model[MODEL_DEFINITION],api=definition.traits?.useApi;if(!api||typeof api!=="object")return[];if(!Array.isArray(api.middleware)||api.middleware.length)throw Error(`${name}: native CRUD requires explicit middleware: [] and transport authorization`);if(!api.uri)throw Error(`${name}: native CRUD requires a useApi uri`);return[{name,model,definition,api,base:apiBasePath(api.uri,api.prefix)}]}),json=(data,status=200)=>Response.json(data,{status,headers:{"cache-control":"private, no-store"}});return async(request)=>{const url=new URL(request.url);for(const entry of models){const{name,model,definition,api,base}=entry,suffix=url.pathname.slice(base.length);if(!url.pathname.startsWith(base)||suffix&&!/^\/\d+$/.test(suffix))continue;const id=suffix?Number(suffix.slice(1)):void 0,ability=request.method==="GET"?id===void 0?"index":"show":request.method==="POST"&&id===void 0?"store":["PATCH","PUT"].includes(request.method)&&id!==void 0?"update":request.method==="DELETE"&&id!==void 0?"destroy":void 0;if(!ability||!api.routes?.includes(ability))return json({error:"Method not allowed"},405);if(!await options.authorize(request,name,ability))return json({error:"Forbidden"},403);try{if(ability==="index"){const{perPage,offset}=resolveIndexPageArgs(url.searchParams);return json({data:toAttrs(await model.limit(perPage).offset(offset).get())})}if(id!==void 0&&!await model.find(id))return json({error:"Not found"},404);if(ability==="show")return json({data:toAttrs(await model.find(id))});if(ability==="destroy"){await model.destroy(id);return new Response(null,{status:204})}let body;try{body=await request.json()}catch{return json({error:"Invalid JSON"},400)}if(!body||typeof body!=="object"||Array.isArray(body))return json({error:"Expected an object"},422);const fields=getWritableFields({attributes:definition.attributes,belongsTo:Object.values(definition.belongsTo??{})}),data=filterFillable(body,fields),row=ability==="store"?await model.create(data):await model.update(id,data);return json({data:toAttrs(row)},ability==="store"?201:200)}catch(error){const result=mapWriteError(error,name,ability==="store"?"create":"update"),body={...result.body};delete body.detail;return json(body,result.status)}}return null}}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/orm",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.318",
+  "version": "0.75.321",
   "description": "The Stacks ORM integration",
   "author": "Chris Breuer",
   "contributors": [
@@ -63,31 +63,31 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@stacksjs/cache": "0.75.318",
-    "@stacksjs/cli": "0.75.318",
-    "@stacksjs/config": "0.75.318",
-    "@stacksjs/database": "0.75.318",
-    "@stacksjs/env": "0.75.318",
-    "@stacksjs/error-handling": "0.75.318",
-    "@stacksjs/events": "0.75.318",
-    "@stacksjs/logging": "0.75.318",
-    "@stacksjs/model-meta": "0.75.318",
-    "@stacksjs/pagination": "0.75.318",
-    "@stacksjs/path": "0.75.318",
-    "@stacksjs/query-builder": "0.75.318",
-    "@stacksjs/realtime": "0.75.318",
-    "@stacksjs/router": "0.75.318",
-    "@stacksjs/storage": "0.75.318",
-    "@stacksjs/strings": "0.75.318",
+    "@stacksjs/cache": "0.75.321",
+    "@stacksjs/cli": "0.75.321",
+    "@stacksjs/config": "0.75.321",
+    "@stacksjs/database": "0.75.321",
+    "@stacksjs/env": "0.75.321",
+    "@stacksjs/error-handling": "0.75.321",
+    "@stacksjs/events": "0.75.321",
+    "@stacksjs/logging": "0.75.321",
+    "@stacksjs/model-meta": "0.75.321",
+    "@stacksjs/pagination": "0.75.321",
+    "@stacksjs/path": "0.75.321",
+    "@stacksjs/query-builder": "0.75.321",
+    "@stacksjs/realtime": "0.75.321",
+    "@stacksjs/router": "0.75.321",
+    "@stacksjs/storage": "0.75.321",
+    "@stacksjs/strings": "0.75.321",
     "@stacksjs/ts-validation": "^0.5.6",
-    "@stacksjs/validation": "0.75.318",
-    "bun-query-builder": "^0.3.8"
+    "@stacksjs/validation": "0.75.321",
+    "bun-query-builder": "^0.3.22"
   },
   "peerDependencies": {
-    "@stacksjs/auth": "0.75.318",
-    "@stacksjs/payments": "0.75.318",
-    "@stacksjs/queue": "0.75.318",
-    "@stacksjs/search-engine": "0.75.318",
+    "@stacksjs/auth": "0.75.321",
+    "@stacksjs/payments": "0.75.321",
+    "@stacksjs/queue": "0.75.321",
+    "@stacksjs/search-engine": "0.75.321",
     "stripe": "23.0.0"
   },
   "peerDependenciesMeta": {
@@ -108,7 +108,7 @@
     }
   },
   "devDependencies": {
-    "@stacksjs/types": "0.75.318",
+    "@stacksjs/types": "0.75.321",
     "better-dx": "^0.2.24",
     "stripe": "23.0.0"
   }