@voltro/database 0.11.3 → 0.12.0

package/dist/sql.d.ts

@@ -305,6 +305,19 @@ declare interface ColumnDefinition<TsType, Type extends ColumnType = ColumnType,
      * no cipher is registered.
      */
     readonly encrypted?: boolean;
+    /**
+     * Wire-exposure flag, set by `.serverOnly()`. When `true` the column is
+     * SERVER-INTERNAL: server code reads it normally (an auth middleware verifying
+     * a `keyHash`, say), but it must NEVER be serialized to a client. This is the
+     * EXPOSURE axis, orthogonal to `.encrypted()` (which is storage-at-rest): a
+     * column can be either, both, or neither — a hash you never ship is serverOnly
+     * but not encrypted; a private note the owner may read is encrypted but not
+     * serverOnly. The default is exposed to BOTH server and client; `.serverOnly()`
+     * opts a column OUT of the client. The table-aware read paths (`crud.*`) strip
+     * it automatically, and the boot audit flags a wire-reachable query whose
+     * `source` table carries a serverOnly column that its output declares.
+     */
+    readonly serverOnly?: boolean;
     /**
      * Data-sensitivity classification, set by `.sensitive(class)`. Declares that
      * this column holds personal / sensitive data of a given CLASS (`'email'`,

package/dist/sql.js

@@ -1,4 +1,4 @@
-import { R as e, U as t, a as n, c as r, ct as i, i as a, n as o, nt as s, r as c, t as l, z as u } from "./fileBased-BrYB2u6E.js";
+import { R as e, U as t, a as n, c as r, ct as i, i as a, n as o, nt as s, r as c, t as l, z as u } from "./fileBased-DEW2BvnP.js";
 import { Effect as d } from "effect";
 import { createLogger as f } from "@voltro/logger";
 import { SqlClient as p } from "@effect/sql";
@@ -637,9 +637,9 @@ BEGIN
 	}
 	return t;
 }, Xe = (e) => {
-	if (!e.idScheme) return e;
-	let { idScheme: t, ...n } = e;
-	return n;
+	if (!e.idScheme && !e.sensitive && !e.safe) return e;
+	let { idScheme: t, sensitive: n, safe: r, ...i } = e;
+	return i;
 }, Ze = (e) => [...e].map(Xe).sort((e, t) => e.name.localeCompare(t.name)), Qe = (e) => [...e].sort((e, t) => e.name.localeCompare(t.name)), $e = (e) => [...e].map((e) => ({
 	name: e.name,
 	columns: Ze(e.columns),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/database",
-  "version": "0.11.3",
+  "version": "0.12.0",
   "description": "Browser-safe schema DSL, query builder, and cross-dialect migration planner for Voltro — one schema, every SQL backend.",
   "keywords": [
     "voltro",
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@effect/sql": "^0.51.1",
-    "@voltro/logger": "0.11.3",
+    "@voltro/logger": "0.12.0",
     "typeid-js": "^1.2.0",
     "ulidx": "^2.4.1"
   },