@truto/sqlite-builder 2.0.2-canary.22 → 2.0.2-canary.25

package/README.md

@@ -1,28 +1,28 @@
-  ],
-}
-```
+- **Length Limits**: Queries exceeding 100KB are rejected; `compileFilter()` enforces the same cap on its output
+- **Pattern Limits**: `like`/`ilike`/`regex` patterns are capped at 1024 characters to bound matching cost at the SQLite layer
+- **Filter Security**: JSON filters validate operators, identifiers, and enforce limits
 
-### Integration with SQL Template
+### What's Your Responsibility
 
-```typescript
-import { sql, compileFilter } from '@truto/sqlite-builder'
+- **Never use `sql.raw()` with user input**
+- **Validate identifiers before using `sql.ident()`** (though it has built-in validation)
+- **Use `sql.in()` instead of string concatenation** for arrays
+- **Keep your SQLite driver updated**
+- **Load REGEXP extension safely** if using regex filters
 
-// Build the WHERE clause
-const filter = {
-  status: 'ACTIVE',
-  age: { gte: 18 },
-  role: { in: ['USER', 'ADMIN'] },
-}
+### Supported Value Types
 
-// Use in complete query — the filter fragment and the LIMIT value are
-// collected in order, so query.values lines up with the placeholders.
+```typescript
+// ✅ Safe types (automatically parameterized)
 const query = sql`
-  SELECT id, name, email, created_at
-  FROM users
-  WHERE ${compileFilter(filter)}
-  ORDER BY created_at DESC
-  LIMIT ${limit}
+  INSERT INTO users (name, age, active, created_at, data, deleted_at)
+  VALUES (
+    ${'John'},           // string
+    ${30},               // number  
+    ${true},             // boolean
+    ${new Date()},       // Date → 'YYYY-MM-DD HH:MM:SS'
+    ${null},             // null
+    ${undefined}         // undefined → null
+  )
 `
 
-// Execute with driver
-const results = db.prepare(query.text).all(...query.values)

package/package.json

@@ -1 +1 @@
-{"name":"@truto/sqlite-builder","version":"2.0.2-canary.22","description":"debug canary","license":"MIT","main":"index.js"}
+{"name":"@truto/sqlite-builder","version":"2.0.2-canary.25","description":"debug canary","license":"MIT","main":"index.js"}