@vibeorm/schema 4.3.0 → 5.1.0

package/dist/capabilities.d.ts

@@ -82,7 +82,7 @@ export type DialectCapabilities = {
     readonly nativeEnums: boolean;
     /** Native ILIKE operator. False ⇒ LOWER() LIKE LOWER() strategy. */
     readonly ilike: boolean;
-    /** LATERAL JOIN relation strategy ("join") availability. */
+    /** LATERAL JOIN relation strategy ("join") availability (mysql: 8.0.14 or later, not MariaDB). */
     readonly lateralJoin: boolean;
     /** Native DISTINCT ON. */
     readonly distinctOn: boolean;
@@ -90,6 +90,14 @@ export type DialectCapabilities = {
     readonly partialIndexes: boolean;
     /** Named-constraint conflict targets (`ON CONFLICT ON CONSTRAINT …`). */
     readonly conflictTargetConstraint: boolean;
+    /**
+     * A guard on the conflict's update arm: `ON CONFLICT (…) DO UPDATE SET …
+     * WHERE <guard>` — the existing row is updated (and returned) only when the
+     * guard admits it, in the same atomic statement. Tenant-scoped (`$scoped`)
+     * and `$withPolicy` upserts use it; MySQL's `ON DUPLICATE KEY UPDATE` has no
+     * WHERE, so there they keep the transactional find-then-write path.
+     */
+    readonly conflictUpdateWhere: boolean;
     /** DDL participates in transactions (mysql auto-commits DDL). */
     readonly transactionalDdl: boolean;
     /** createManyAndReturn support (requires multi-row RETURNING). */
@@ -134,6 +142,13 @@ export type DialectCapabilities = {
     readonly uuidColumns: "native" | "text" | "unsupported";
     /** String-backed Gregorian calendar days: native DATE, or TEXT with an owned CHECK on SQLite. */
     readonly localDateColumns: boolean;
+    /**
+     * Calendar truncation of a timestamp in a named time zone — the `groupBy`
+     * key `{ field, truncate, timeZone }` (PostgreSQL `date_trunc` with a zone,
+     * PostgreSQL 12 or later). Without it the key is refused when the query is
+     * built.
+     */
+    readonly dateTruncation: boolean;
 };
 export declare const POSTGRES_CAPABILITIES: DialectCapabilities;
 export declare const SQLITE_CAPABILITIES: DialectCapabilities;

package/dist/date-truncation.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Calendar truncation of a timestamp — the `groupBy` key form
+ * `{ field, truncate, timeZone }` (one group per hour, day, ISO week, month
+ * or year of a `DateTime` field, in a named time zone).
+ *
+ * ONE rule decides which fields can take it: the runtime's refusal, the
+ * renderer's expression and the generator's `by` type all call
+ * {@link dateTruncationStorage}, so they can never disagree.
+ */
+import type { FieldType } from "./ir.ts";
+/** A calendar period a timestamp can be truncated to (PostgreSQL `date_trunc` units; `week` is the ISO week, starting on Monday). */
+export type DateTruncationUnit = "hour" | "day" | "week" | "month" | "year";
+/** Every {@link DateTruncationUnit}, in increasing length. */
+export declare const DATE_TRUNCATION_UNITS: readonly DateTruncationUnit[];
+/**
+ * How a truncatable field stores its value on PostgreSQL. `"timestamptz"`: an
+ * instant (the canonical `DateTime` mapping, `@db.Timestamptz(n)`).
+ * `"timestamp"`: a zone-less column (`@db.Timestamp(n)`), which by VibeORM's
+ * contract holds the UTC wall-clock of the instant on every postgres driver.
+ */
+export type DateTruncationStorage = "timestamptz" | "timestamp";
+/**
+ * The storage form of a field a timestamp truncation can read, or `undefined`
+ * when the field cannot be truncated: not a `DateTime`, a list, an
+ * unsupported type, or a native type that is not a timestamp (`@db.Date`,
+ * `@db.Time`, `@db.Timetz`). A `DateTime` without a native type takes the
+ * canonical mapping, `timestamptz`.
+ */
+export declare function dateTruncationStorage(params: {
+    readonly field: {
+        readonly type: FieldType;
+        readonly nativeType?: string;
+        readonly isList: boolean;
+        readonly isUnsupported?: boolean;
+    };
+}): DateTruncationStorage | undefined;
+//# sourceMappingURL=date-truncation.d.ts.map

package/dist/errors.d.ts

@@ -126,8 +126,15 @@ export declare function internalError(params: {
     message: string;
     meta?: Record<string, unknown>;
 }): VibeError;
-/** Stable lifecycle categories; metadata never includes identity values. */
-export declare const RLS_CONTEXT_REASONS: readonly ["missing", "invalid", "expired", "conflicting"];
+/**
+ * Stable lifecycle categories; metadata never includes identity values.
+ * `"null-claim"`: a key listed in `nativeRls.refuseNull` is bound to `null` and
+ * the operation reaches a model whose rule reads it (or runs raw SQL).
+ * `"context-switched"`: the handle's transaction is running a `tx.$inContext`
+ * switch under another identity; the handle (and every handle derived from it)
+ * is refused until the switch has restored its claims.
+ */
+export declare const RLS_CONTEXT_REASONS: readonly ["missing", "invalid", "expired", "conflicting", "null-claim", "context-switched"];
 export type RlsContextReason = (typeof RLS_CONTEXT_REASONS)[number];
 /** Native RLS binding/lifecycle failure, distinct from database permissions. */
 export declare class RlsContextError extends VibeError {
@@ -135,6 +142,7 @@ export declare class RlsContextError extends VibeError {
     constructor(params: {
         reason: RlsContextReason;
         key?: string;
+        model?: string;
     });
 }
 /**

package/dist/index.d.ts

@@ -26,6 +26,8 @@ export { assertMigrationObjects, isSqlObjectDefinition, isSqlObjectIdentity, sql
 export type { MigrationObjectIR, QualifiedSqlName, SqlObjectDefinition, SqlObjectDefinitionFormat, SqlObjectFacts, SqlObjectIdentity } from "./migration-objects.ts";
 export type { AdvisoryLockMode, DialectCapabilities, FullTextEngine, RowLockStrength, RowLockWaitPolicy, TimeOfDayType, } from "./capabilities.ts";
 export { timeOfDayType } from "./time-of-day.ts";
+export { DATE_TRUNCATION_UNITS, dateTruncationStorage } from "./date-truncation.ts";
+export type { DateTruncationStorage, DateTruncationUnit } from "./date-truncation.ts";
 export { isLocalDateField, isCanonicalLocalDate, localDateCheckName } from "./local-date.ts";
 export { READ_ONLY_REFUSAL_REASONS, ReadOnlyClientError, SCOPED_REFUSAL_REASONS, ScopedQueryError, VIBE_ERROR_CODES, VibeError, internalError, invalidStoredData, unsupportedCapability, } from "./errors.ts";
 export type { ReadOnlyRefusalReason, ScopedRefusalReason, VibeErrorCode } from "./errors.ts";

package/dist/index.js

@@ -70,7 +70,9 @@ var RLS_CONTEXT_REASONS = Object.freeze([
   "missing",
   "invalid",
   "expired",
-  "conflicting"
+  "conflicting",
+  "null-claim",
+  "context-switched"
 ]);
 
 class RlsContextError extends VibeError {
@@ -78,8 +80,8 @@ class RlsContextError extends VibeError {
   constructor(params) {
     super({
       code: "VIBE_RLS_CONTEXT",
-      message: `Native RLS context is ${params.reason}${params.key === undefined ? "" : ` at key ${JSON.stringify(params.key)}`}`,
-      meta: { reason: params.reason, ...params.key === undefined ? {} : { key: params.key } }
+      message: params.reason === "null-claim" ? `Native RLS context key ${JSON.stringify(params.key)} is null and refused${params.model === undefined ? " for raw SQL" : ` for model ${JSON.stringify(params.model)}`}` : `Native RLS context is ${params.reason}${params.key === undefined ? "" : ` at key ${JSON.stringify(params.key)}`}`,
+      meta: { reason: params.reason, ...params.key === undefined ? {} : { key: params.key }, ...params.model === undefined ? {} : { model: params.model } }
     });
     this.name = "RlsContextError";
     this.reason = params.reason;
@@ -230,6 +232,7 @@ var RESERVED_CLIENT_NAMES = [
   "$executeRaw",
   "$executeRawUnsafe",
   "$on",
+  "$observe",
   "$extends",
   "$defineView",
   "$withPolicy",
@@ -445,6 +448,7 @@ var POSTGRES_CAPABILITIES = Object.freeze({
   distinctOn: true,
   partialIndexes: true,
   conflictTargetConstraint: true,
+  conflictUpdateWhere: true,
   transactionalDdl: true,
   createManyAndReturn: true,
   jsonColumnType: true,
@@ -455,7 +459,8 @@ var POSTGRES_CAPABILITIES = Object.freeze({
   advisoryLocks: true,
   timeOfDayTypes: Object.freeze(["time", "timetz"]),
   uuidColumns: "native",
-  localDateColumns: true
+  localDateColumns: true,
+  dateTruncation: true
 });
 var SQLITE_CAPABILITIES = Object.freeze({
   rowRuleAppendOnly: true,
@@ -483,6 +488,7 @@ var SQLITE_CAPABILITIES = Object.freeze({
   distinctOn: false,
   partialIndexes: true,
   conflictTargetConstraint: false,
+  conflictUpdateWhere: true,
   transactionalDdl: true,
   createManyAndReturn: true,
   jsonColumnType: false,
@@ -493,7 +499,8 @@ var SQLITE_CAPABILITIES = Object.freeze({
   advisoryLocks: false,
   timeOfDayTypes: Object.freeze([]),
   uuidColumns: "text",
-  localDateColumns: true
+  localDateColumns: true,
+  dateTruncation: false
 });
 var MYSQL_CAPABILITIES = Object.freeze({
   rowRuleAppendOnly: true,
@@ -517,10 +524,11 @@ var MYSQL_CAPABILITIES = Object.freeze({
   scalarArrays: false,
   nativeEnums: true,
   ilike: false,
-  lateralJoin: false,
+  lateralJoin: true,
   distinctOn: false,
   partialIndexes: false,
   conflictTargetConstraint: false,
+  conflictUpdateWhere: false,
   transactionalDdl: false,
   createManyAndReturn: false,
   jsonColumnType: true,
@@ -531,7 +539,8 @@ var MYSQL_CAPABILITIES = Object.freeze({
   advisoryLocks: false,
   timeOfDayTypes: Object.freeze(["time"]),
   uuidColumns: "unsupported",
-  localDateColumns: true
+  localDateColumns: true,
+  dateTruncation: false
 });
 var DIALECT_CAPABILITIES = Object.freeze({
   postgres: POSTGRES_CAPABILITIES,
@@ -2412,6 +2421,23 @@ function timeOfDayType(params) {
     return "timetz";
   return "time";
 }
+// packages/schema/src/date-truncation.ts
+var DATE_TRUNCATION_UNITS = Object.freeze(["hour", "day", "week", "month", "year"]);
+var ZONED_NATIVE_TYPE = /^timestamptz(?:\(\d+\))?$|^timestamp(?:\(\d+\))?withtimezone$/;
+var ZONE_LESS_NATIVE_TYPE = /^timestamp(?:\(\d+\))?(?:withouttimezone)?$/;
+function dateTruncationStorage(params) {
+  const { field } = params;
+  if (field.type !== "DateTime" || field.isList || field.isUnsupported === true)
+    return;
+  if (field.nativeType === undefined)
+    return "timestamptz";
+  const native = field.nativeType.toLowerCase().replace(/\s+/g, "");
+  if (ZONED_NATIVE_TYPE.test(native))
+    return "timestamptz";
+  if (ZONE_LESS_NATIVE_TYPE.test(native))
+    return "timestamp";
+  return;
+}
 // packages/schema/src/computed.ts
 function buildComputedManifest(params) {
   const { computed } = params;
@@ -2776,6 +2802,8 @@ var RESERVED_ENUM_NAMES = [
   "KeysetPage",
   "KeysetOptions",
   "RowLockRequest",
+  "GroupByTruncateUnit",
+  "GroupByKeyName",
   "JsonValue",
   "InputJsonValue",
   "InputJsonArray",
@@ -2803,8 +2831,12 @@ var RESERVED_ENUM_NAMES = [
   "ClientContext",
   "QueryOperation",
   "QueryEvent",
+  "QueryObserver",
+  "QueryObserverFailure",
   "Skip",
   "TransactionOptions",
+  "CallbackTransactionOptions",
+  "RawStatement",
   "AdvisoryLockOptions",
   "StatementDiagnosticsOptions",
   "SchemaIR",
@@ -2867,6 +2899,7 @@ var GENERATED_TYPE_NAMES = {
     "MaxAggregateOrderByInput",
     "HavingInput",
     "GroupByOrderByInput",
+    "GroupByTruncatedKey",
     "FindManyArgs",
     "FindPageArgs",
     "FindFirstArgs",
@@ -2998,7 +3031,11 @@ function validateGeneratedNames(params) {
     owners.set("RlsContext", "native RLS client");
     owners.set("BoundVibeClientInstance", "native RLS client");
     owners.set("BoundVibeTransactionClientInstance", "native RLS client");
+    owners.set("OperatorVibeClientInstance", "native RLS client");
+    owners.set("OperatorVibeTransactionClientInstance", "native RLS client");
   }
+  if (schema.models.some((model) => model.policy !== undefined))
+    owners.set("PolicyClientInstance", "policy client");
   if (schema.models.some((model) => model.fields.some((field) => isLocalDateField({ field })))) {
     for (const name of ["LocalDate", "LocalDateFilter", "LocalDateNullableFilter"])
       owners.set(name, "local-date filters");
@@ -4362,6 +4399,7 @@ function validRlsForeignKey(params) {
 }
 export {
   CHECK_RULE_GROUP_MAX,
+  DATE_TRUNCATION_UNITS,
   DIALECTS,
   DIALECT_CAPABILITIES,
   EMPTY_EXTENSION_REGISTRY,
@@ -4406,6 +4444,7 @@ export {
   buildComputedManifest,
   buildExtensionRegistry,
   checkRulePredicate,
+  dateTruncationStorage,
   decodePrismaString,
   defaultExpressionIndexName,
   defaultForeignKeyName,
@@ -4496,4 +4535,4 @@ export {
   validatorRefIssue
 };
 
-//# debugId=2B926380FFCA323B64756E2164756E21
+//# debugId=92D7E56C6E6AF7A964756E2164756E21