@voltro/database 0.85.0 → 0.87.0

package/dist/dbCause.js

@@ -0,0 +1,222 @@
+import { Cause as e, Exit as t } from "effect";
+//#region src/dbCause.ts
+var n = (n) => e.isCause(n) ? n : t.isExit(n) && t.isFailure(n) ? n.cause : typeof n == "object" && n && e.isCause(n.voltroCause) ? n.voltroCause : void 0, r = (t) => {
+	let r = n(t);
+	return r === void 0 ? t : e.squash(r);
+}, i = (t, r = 0) => {
+	let a = r >= 4 ? void 0 : n(t);
+	if (a === void 0) return [t];
+	let o = a.reasons.flatMap((t) => e.isFailReason(t) ? [t.error] : e.isDieReason(t) ? [t.defect] : []);
+	if (o.length === 0) return [e.squash(a)];
+	let s = [];
+	for (let e of o.slice(0, 8)) s.push(...i(e, r + 1));
+	return s;
+}, a = (e) => e.dbCode !== void 0 || e.dbErrno !== void 0 || e.dbNumber !== void 0 || e.dbSqlState !== void 0 || e.dbConstraint !== void 0, o = {
+	9: "SQLITE_INTERRUPT",
+	275: "SQLITE_CONSTRAINT_CHECK",
+	787: "SQLITE_CONSTRAINT_FOREIGNKEY",
+	1299: "SQLITE_CONSTRAINT_NOTNULL",
+	1555: "SQLITE_CONSTRAINT_PRIMARYKEY",
+	2067: "SQLITE_CONSTRAINT_UNIQUE"
+}, s = (e) => {
+	let t = {}, n = [], i = r(e);
+	for (let e = 0; e < 8 && typeof i == "object" && i; e++) {
+		let e = i;
+		t.dbCode === void 0 && (typeof e.code == "string" || typeof e.code == "number") && (t.dbCode = e.code), t.dbErrno === void 0 && typeof e.errno == "number" && (t.dbErrno = e.errno), t.dbErrno === void 0 && typeof e.errcode == "number" && (t.dbErrno = e.errcode), t.dbCode === "ERR_SQLITE_ERROR" && typeof t.dbErrno == "number" && (t.dbCode = o[t.dbErrno] ?? t.dbCode), t.dbNumber === void 0 && typeof e.number == "number" && (t.dbNumber = e.number), t.dbSqlState === void 0 && typeof e.sqlState == "string" && (t.dbSqlState = e.sqlState), t.dbBindings === void 0 && typeof e.voltroBindings == "string" && (t.dbBindings = e.voltroBindings), t.dbStatement === void 0 && typeof e.sql == "string" && e.sql.includes("?") && (t.dbStatement = e.sql, t.dbPlaceholders = (e.sql.match(/\?/g) ?? []).length), t.dbFatal === void 0 && typeof e.fatal == "boolean" && (t.dbFatal = e.fatal), t.dbConstraint === void 0 && typeof e.constraint == "string" && (t.dbConstraint = e.constraint), t.dbTable === void 0 && typeof e.table == "string" && (t.dbTable = e.table), t.dbColumn === void 0 && typeof e.column == "string" && (t.dbColumn = e.column), t.dbSchema === void 0 && typeof e.schema == "string" && (t.dbSchema = e.schema);
+		let a = e.sqlMessage ?? e.detail;
+		t.dbMessage === void 0 && typeof a == "string" && (t.dbMessage = a);
+		let s = typeof e.constructor == "function" ? e.constructor.name : void 0, c = typeof e._tag == "string" && e._tag || typeof e.name == "string" && e.name || (typeof s == "string" && s !== "Object" ? s : void 0), l = typeof e.message == "string" ? e.message : void 0;
+		(c || l) && n.push(`${c || "Error"}${l ? `: ${l.slice(0, 200)}` : ""}`), i = r(e.reason ?? e.cause);
+	}
+	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
+}, c = (e) => {
+	let t = i(e).map(s);
+	if (t.length <= 1) return t[0] ?? {};
+	let n = t.find(a) ?? t[0], r = t.filter((e) => e !== n).map((e) => e.dbCauseChain).filter((e) => typeof e == "string");
+	if (r.length === 0) return n;
+	let o = typeof n.dbCauseChain == "string" ? n.dbCauseChain : void 0;
+	return {
+		...n,
+		dbCauseChain: [o, ...r].filter(Boolean).join(" ‖ ")
+	};
+}, l = (e, t) => {
+	let n = f(e);
+	if (n !== void 0) return n;
+	let r = c(e), i = b(r, t);
+	if (i !== void 0) {
+		let e = i.constraint ?? i.column;
+		return e === void 0 ? i.kind : `${i.kind}: ${e}`;
+	}
+	let a = r.dbCode ?? r.dbSqlState ?? r.dbErrno ?? r.dbNumber, o = h(e);
+	return a !== void 0 && p.test(String(a)) ? `${o} (${String(a)})` : o;
+}, u = Symbol.for("@voltro/database/authoredMessage"), d = (e, t) => {
+	let n = t === void 0 ? Error(e) : Error(e, t);
+	return Object.defineProperty(n, u, {
+		value: !0,
+		enumerable: !1
+	}), n;
+}, f = (e) => {
+	for (let t of i(e)) {
+		let e = t;
+		for (let t = 0; typeof e == "object" && e && t < 8; t += 1) {
+			if (e[u] === !0) {
+				let t = e.message;
+				if (typeof t == "string" && t.length > 0) return t;
+			}
+			e = e.cause;
+		}
+	}
+}, p = /^[A-Za-z0-9_]{1,32}$/, m = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/, h = (e) => {
+	let t = e?._tag, n = e?.name, r = (typeof t == "string" ? t : typeof n == "string" ? n : "").split(/[^A-Za-z0-9_]+/).filter(Boolean).pop();
+	return r !== void 0 && m.test(r) ? r : "unknown";
+}, g = /^[A-Za-z_][A-Za-z0-9_$]*$/, _ = (e) => e !== void 0 && e.length <= 128 && g.test(e) ? e : void 0, v = (e) => e === void 0 ? void 0 : e.split(".").pop() ?? e, y = (e, ...t) => {
+	for (let n of t) {
+		let t = n.exec(e);
+		if (t?.[1] !== void 0) return t[1];
+	}
+}, b = (e, t) => {
+	let n = e.dbCode, r = e.dbErrno, i = e.dbNumber, a = typeof e.dbMessage == "string" ? e.dbMessage : "", o = `${typeof e.dbCauseChain == "string" ? e.dbCauseChain : ""} ${a}`;
+	if (n === "23503") {
+		let t = _(e.dbConstraint);
+		return {
+			kind: /is still referenced from table/i.test(o) ? "foreignKeyInUse" : "foreignKey",
+			...t === void 0 ? {} : { constraint: t }
+		};
+	}
+	if (n === "23505") {
+		let t = _(e.dbConstraint);
+		return {
+			kind: "unique",
+			...t === void 0 ? {} : { constraint: t }
+		};
+	}
+	if (n === "23502") {
+		let t = _(e.dbColumn);
+		return {
+			kind: "notNull",
+			...t === void 0 ? {} : { column: t }
+		};
+	}
+	if (n === "23514") {
+		let t = _(e.dbConstraint);
+		return {
+			kind: "check",
+			...t === void 0 ? {} : { constraint: t }
+		};
+	}
+	if (r === 1452 || r === 1451) {
+		let e = _(y(o, /CONSTRAINT `([^`]+)`/));
+		return {
+			kind: r === 1451 ? "foreignKeyInUse" : "foreignKey",
+			...e === void 0 ? {} : { constraint: e }
+		};
+	}
+	if (r === 1062) {
+		let e = _(v(y(o, /for key '([^']+)'/)));
+		return {
+			kind: "unique",
+			...e === void 0 ? {} : { constraint: e }
+		};
+	}
+	if (r === 1048 || r === 1364) {
+		let e = _(y(o, /Column '([^']+)' cannot be null/, /Field '([^']+)' doesn't have a default value/));
+		return {
+			kind: "notNull",
+			...e === void 0 ? {} : { column: e }
+		};
+	}
+	if (r === 3819 || r === 4025) {
+		let e = _(y(o, /Check constraint '([^']+)'/, /CONSTRAINT `([^`]+)` failed/));
+		return {
+			kind: "check",
+			...e === void 0 ? {} : { constraint: e }
+		};
+	}
+	if (i === 547) {
+		let e = y(o, /(?:FOREIGN KEY|REFERENCE) constraint "([^"]+)"/), t = y(o, /CHECK constraint "([^"]+)"/);
+		if (t !== void 0 && e === void 0) {
+			let e = _(t);
+			return {
+				kind: "check",
+				...e === void 0 ? {} : { constraint: e }
+			};
+		}
+		let n = /REFERENCE constraint/.test(o), r = _(e);
+		return {
+			kind: n ? "foreignKeyInUse" : "foreignKey",
+			...r === void 0 ? {} : { constraint: r }
+		};
+	}
+	if (i === 2627 || i === 2601) {
+		let e = _(y(o, /(?:UNIQUE KEY|PRIMARY KEY) constraint '([^']+)'/, /index '([^']+)'/));
+		return {
+			kind: "unique",
+			...e === void 0 ? {} : { constraint: e }
+		};
+	}
+	if (i === 515) {
+		let e = _(y(o, /Cannot insert the value NULL into column '([^']+)'/));
+		return {
+			kind: "notNull",
+			...e === void 0 ? {} : { column: e }
+		};
+	}
+	if (n === "SQLITE_CONSTRAINT_FOREIGNKEY") return { kind: t === "delete" || t === "deleteMany" || t === "hardDelete" ? "foreignKeyInUse" : "foreignKey" };
+	if (n === "SQLITE_CONSTRAINT_UNIQUE" || n === "SQLITE_CONSTRAINT_PRIMARYKEY") {
+		let e = _(v(y(o, /UNIQUE constraint failed: ([^,\s]+)/)));
+		return {
+			kind: "unique",
+			...e === void 0 ? {} : { column: e }
+		};
+	}
+	if (n === "SQLITE_CONSTRAINT_NOTNULL") {
+		let e = _(v(y(o, /NOT NULL constraint failed: ([^,\s]+)/)));
+		return {
+			kind: "notNull",
+			...e === void 0 ? {} : { column: e }
+		};
+	}
+	if (n === "SQLITE_CONSTRAINT_CHECK") {
+		let e = _(y(a, /CHECK constraint failed: (.+)$/));
+		return {
+			kind: "check",
+			...e === void 0 ? {} : { constraint: e }
+		};
+	}
+}, x = (e) => {
+	let t = b(e)?.kind;
+	return t === "foreignKey" || t === "foreignKeyInUse";
+}, S = (e) => {
+	let t = e.dbCode, n = e.dbErrno;
+	return t === "57014" || n === 3024 || n === 1969 || t === "ETIMEOUT" || t === "SQLITE_INTERRUPT";
+}, C = (e) => {
+	if (e.dbErrno !== 1366) return;
+	let t = `${typeof e.dbCauseChain == "string" ? e.dbCauseChain : ""} ${typeof e.dbMessage == "string" ? e.dbMessage : ""}`;
+	if (/Incorrect string value: '\\x(F[0-4])/i.exec(t) === null) return;
+	let n = y(t, /for column [`']?(?:[^`'.]+[`']?\.[`']?)*([^`'.]+)[`']? at row/);
+	return `${n === void 0 ? "the column" : `column '${n}'`} is stored in a character set that cannot hold a 4-byte character (utf8mb3). Declare the store's character set in app.config.ts — store: { dialect: 'mariadb' | 'mysql', charset: 'utf8mb4' } — and run \`voltro db plan\`: every declared table is created with it and converted to it.`;
+}, w = (e) => {
+	let t = c(e), n = [
+		t.dbCode === void 0 ? void 0 : `code=${String(t.dbCode)}`,
+		t.dbErrno === void 0 ? void 0 : `errno=${String(t.dbErrno)}`,
+		t.dbNumber === void 0 ? void 0 : `number=${String(t.dbNumber)}`,
+		t.dbSqlState === void 0 ? void 0 : `sqlState=${String(t.dbSqlState)}`,
+		t.dbConstraint === void 0 ? void 0 : `constraint=${String(t.dbConstraint)}`,
+		t.dbPlaceholders === void 0 ? void 0 : `placeholders=${String(t.dbPlaceholders)}`
+	].filter((e) => e !== void 0), r = typeof e?.message == "string" ? e.message : void 0, i = typeof t.dbMessage == "string" ? t.dbMessage : void 0, a = i === void 0 ? void 0 : n.length > 0 || i !== r && i !== `Error: ${String(r)}` ? i : void 0, o = typeof t.dbBindings == "string" ? `\n  bindings:  ${t.dbBindings}` : "", s = typeof t.dbStatement == "string" ? `\n  statement: ${t.dbStatement.length <= 400 ? t.dbStatement : `${t.dbStatement.slice(0, 400)}…`}` : "";
+	if (a === void 0 && n.length === 0) return;
+	let l = C(t), u = l === void 0 ? "" : `\n  hint: ${l}`;
+	return [a, n.length > 0 ? `[${n.join(" ")}]` : void 0].filter((e) => e !== void 0 && e !== "").join(" ") + u + s + o;
+}, T = (e) => Object.entries(e).map(([e, t]) => `${e}:${E(t)}`).join(" "), E = (e) => {
+	if (e === null) return "null";
+	if (e === void 0) return "undefined";
+	if (typeof e == "bigint") return "bigint";
+	if (typeof e != "object") return typeof e;
+	if (e instanceof Date) return Number.isNaN(e.getTime()) ? "Date(Invalid)" : "Date";
+	if (Array.isArray(e)) return "Array";
+	if (globalThis.Buffer !== void 0 && globalThis.Buffer.isBuffer(e)) return "Buffer";
+	let t = e.constructor?.name;
+	return typeof t == "string" && t !== "" ? t : "Object";
+};
+//#endregion
+export { d as authoredError, f as authoredMessageOf, i as causeBranches, b as classifyConstraintViolation, C as describeCharsetRefusal, w as describeDriverError, T as describeRowBindings, c as extractDbCause, x as isForeignKeyViolation, S as isQueryTimeout, l as wireSafeCause };

package/dist/dbMetrics.js

@@ -0,0 +1,65 @@
+import { Context as e, Metric as t } from "effect";
+//#region src/dbMetrics.ts
+var n = t.exponentialBoundaries({
+	start: 5e-4,
+	factor: 2,
+	count: 16
+}), r = t.counter("voltro_db_queries_total", { description: "Database operations executed, by dialect and operation kind." }), i = t.histogram("voltro_db_query_duration_seconds", {
+	boundaries: n,
+	description: "Database operation duration in seconds, by dialect and operation kind."
+}), a = t.counter("voltro_db_errors_total", { description: "Database operations that threw, by dialect and operation kind." }), o = t.gauge("voltro_db_operations_in_flight", { description: "Database operations currently executing, by dialect. An upper bound on connections the framework holds; NOT the driver pool's waiting count." }), s = t.counter("voltro_db_eager_fallback_total", { description: "Eager-load queries that degraded from the single-roundtrip JSON-agg path to the multi-query walker, by dialect and reason." }), c = e.empty(), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Map(), d = /* @__PURE__ */ new Map(), f = (e, n) => {
+	let o = `${e}\u0000${n}`, s = l.get(o);
+	if (s !== void 0) return s;
+	let c = (r) => t.withAttributes(t.withAttributes(r, { dialect: e }), { op: n }), u = {
+		count: c(r),
+		duration: c(i),
+		errors: c(a)
+	};
+	return l.set(o, u), u;
+}, p = () => {
+	l.clear(), u.clear(), d.clear();
+}, m = () => l.size + u.size + d.size, h = /* @__PURE__ */ new Map(), g = (e, n) => {
+	let r = Math.max(0, (h.get(e) ?? 0) + n);
+	r === 0 ? h.delete(e) : h.set(e, r);
+	let i = u.get(e);
+	i === void 0 && (i = t.withAttributes(o, { dialect: e }), u.set(e, i)), i.updateUnsafe(r, c);
+}, _ = (e) => h.get(e) ?? 0, v = (e) => {
+	let t = f(String(e.dialect), e.op);
+	t.count.updateUnsafe(1, c), t.duration.updateUnsafe(e.durationMs / 1e3, c), e.status === "error" && t.errors.updateUnsafe(1, c);
+}, y = async (e, t, n) => {
+	let r = performance.now(), i = String(e);
+	g(i, 1);
+	let a = "ok";
+	try {
+		return await n();
+	} catch (e) {
+		throw a = "error", e;
+	} finally {
+		g(i, -1), v({
+			dialect: e,
+			op: t,
+			durationMs: performance.now() - r,
+			status: a
+		});
+	}
+}, b = 3e5, x = (e) => {
+	if (e == null || e === "") return;
+	let t = Number(e);
+	return Number.isFinite(t) && t >= 0 ? Math.floor(t) : void 0;
+}, S = (e, t = process.env) => x(t.VOLTRO_DB_EAGER_FALLBACK_WARN_INTERVAL_MS) ?? x(e) ?? 3e5, C = (e, n = {}) => {
+	let r = S(n.warnIntervalMs), i = n.now ?? (() => Date.now()), a = /* @__PURE__ */ new Map();
+	return (n) => {
+		let o = `${n.dialect} ${n.reason}`, l = d.get(o);
+		l === void 0 && (l = t.withAttributes(t.withAttributes(s, { dialect: String(n.dialect) }), { reason: n.reason }), d.set(o, l)), l.updateUnsafe(1, c);
+		let u = `${n.table}\u0000${n.reason}`, f = a.get(u), p = f === void 0 || r > 0 && i() - f >= r, m = {
+			table: n.table,
+			dialect: String(n.dialect),
+			reason: n.reason,
+			metric: "voltro_db_eager_fallback_total",
+			...n.error === void 0 ? {} : { err: n.error }
+		};
+		p ? (a.set(u, i()), e.warn(n.reason === "execute-failed" ? "eager-load JSON-agg statement FAILED and was re-run on the multi-query walker — this query pays both paths on every call. Counted as voltro_db_eager_fallback_total{reason=\"execute-failed\"}." : "eager-load could not be compiled to a single JSON-agg roundtrip and is running on the multi-query walker — one round trip per relation level, on every call. Counted as voltro_db_eager_fallback_total{reason=\"not-compilable\"}.", m)) : e.debug("eager-load is still running on the walker (rate-limited; the counter is not)", m);
+	};
+};
+//#endregion
+export { b as DEFAULT_EAGER_FALLBACK_WARN_INTERVAL_MS, m as dbMetricTagCacheSizeForTests, _ as dbOperationsInFlight, C as makeEagerFallbackReporter, y as observeDbOp, v as recordDbOp, p as resetDbMetricTagCacheForTests, S as resolveEagerFallbackWarnIntervalMs };

package/dist/decimalComparison.js

@@ -0,0 +1,27 @@
+//#region src/decimalComparison.ts
+var e = (e) => {
+	if (typeof e != "string" || !/^[+-]?(?:\d+(?:\.\d*)?|\.\d+)$/.test(e)) return null;
+	let [t = "", n = ""] = e.replace(/^[+-]/, "").split("."), r = t.replace(/^0+/, "") || "0";
+	return {
+		negative: e.startsWith("-") && /[1-9]/.test(r + n),
+		whole: r,
+		fraction: n
+	};
+}, t = (t, n) => {
+	let r = e(t), i = e(n);
+	if (!r || !i) return null;
+	if (r.negative !== i.negative) return r.negative ? -1 : 1;
+	let a = r.whole.length - i.whole.length;
+	if (a === 0 && (a = r.whole === i.whole ? 0 : r.whole > i.whole ? 1 : -1), a === 0) {
+		let e = Math.max(r.fraction.length, i.fraction.length), t = r.fraction.padEnd(e, "0"), n = i.fraction.padEnd(e, "0");
+		a = t === n ? 0 : t > n ? 1 : -1;
+	}
+	return a === 0 ? 0 : (a > 0 ? 1 : -1) * (r.negative ? -1 : 1);
+}, n = (t) => {
+	let n = e(t);
+	if (n === null) return null;
+	let r = n.fraction.replace(/0+$/, "");
+	return `${n.negative ? "-" : ""}${n.whole}${r ? "." + r : ""}`;
+};
+//#endregion
+export { t as compareDecimal, n as decimalEqualityKey };

package/dist/derivedRowId.js

@@ -0,0 +1,5 @@
+import { createHash as e } from "node:crypto";
+//#region src/derivedRowId.ts
+var t = 64, n = "\0", r = 32, i = (t, ...i) => `${t}_${e("sha256").update(i.map(String).join(n)).digest("hex").slice(0, r)}`, a = (e) => e.length + 1 + r;
+//#endregion
+export { t as ID_COLUMN_MAX_LENGTH, i as derivedRowId, a as derivedRowIdLength };

package/dist/dialect.js

@@ -0,0 +1,13 @@
+//#region src/dialect.ts
+var e = (e) => e === "sqlite" || e === "turso", t = (e) => e === "mysql" || e === "mariadb", n = (e, t) => {
+	switch (t) {
+		case "mysql":
+		case "mariadb": return `\`${e.replace(/`/g, "``")}\``;
+		case "mssql": return `[${e.replace(/\]/g, "]]")}]`;
+		case "postgres":
+		case "sqlite":
+		case "turso": return `"${e.replace(/"/g, "\"\"")}"`;
+	}
+}, r = 1e4;
+//#endregion
+export { r as DEFAULT_ACQUIRE_TIMEOUT_MS, t as isMysqlFamily, e as isSqliteFamily, n as quoteIdent };

package/dist/enumRenames.js

@@ -0,0 +1,14 @@
+//#region src/enumRenames.ts
+var e = /* @__PURE__ */ new Map(), t = (t, n) => {
+	if (n.from === n.to) throw Error(`declareEnumRename('${t}'): \`from\` and \`to\` are both '${n.from}' — a rename must change the value.`);
+	let r = e.get(t) ?? [];
+	for (let e of r) {
+		if (e.from === n.from && e.to === n.to) return;
+		if (e.from === n.from && e.to !== n.to) throw Error(`declareEnumRename('${t}'): value '${n.from}' is already declared as renamed to '${e.to}', cannot also rename it to '${n.to}'.`);
+	}
+	r.push(n), e.set(t, r);
+}, n = (t) => e.get(t) ?? [], r = () => e, i = () => {
+	e.clear();
+};
+//#endregion
+export { r as allEnumRenames, i as clearEnumRenames, t as declareEnumRename, n as getEnumRenames };

package/dist/expiresMixin.js

@@ -0,0 +1,10 @@
+import { timestamp as e } from "./columns.js";
+import { defineMixin as t } from "./mixins.js";
+//#region src/expiresMixin.ts
+var n = "voltro/expires", r = () => t({
+	id: n,
+	fields: { expiresAt: e().nullable() },
+	behaviors: { defaultWhere: () => "expiresAt IS NULL OR expiresAt > now()" }
+});
+//#endregion
+export { n as VOLTRO_EXPIRES_MIXIN_ID, r as expires };

package/dist/fieldEncryption.js

@@ -0,0 +1,121 @@
+//#region src/fieldEncryption.ts
+var e = /^[a-z0-9][a-z0-9-]{0,15}$/, t = (t) => {
+	if (!c(t)) return;
+	let i = t.startsWith(r), a = t.slice(i ? r.length : n.length).split(":")[i ? 4 : 3];
+	return a !== void 0 && e.test(a) ? a : void 0;
+}, n = "enc:v1:", r = "enc:v2:", i = (e, t, n) => {
+	let r = `${e}:${t}`, i = n == null || n === "" ? void 0 : String(n);
+	return i === void 0 ? { column: r } : {
+		column: r,
+		row: `${r}:${i}`
+	};
+}, a = (e) => typeof e == "string" && e.startsWith("enc:v2:"), o = class extends Error {
+	_tag = "FieldDecryptionError";
+	table;
+	column;
+	reason;
+	constructor(e) {
+		super(`column "${e.table}.${e.column}" is .encrypted() but could not be decrypted (${e.reason}) — the stored value was sealed under a key this process does not hold, or it is not where it was sealed: a value opens only at the table, column and row it was written for (a rename needs .renamedFrom(); an id changed outside the store leaves it bound to the old id)`), this.name = "FieldDecryptionError", this.table = e.table, this.column = e.column, this.reason = e.reason;
+	}
+}, s = (e) => typeof e == "object" && !!e && e._tag === "FieldDecryptionError", c = (e) => typeof e == "string" && (e.startsWith("enc:v1:") || e.startsWith("enc:v2:")), l = (e, t, n) => e.encrypt(JSON.stringify(t), n), u = /* @__PURE__ */ new Set([
+	"text",
+	"id",
+	"reference",
+	"enum",
+	"uuid",
+	"email",
+	"url"
+]), d = (e, t, n, r) => {
+	let i = e.decrypt(t, r), a;
+	try {
+		a = JSON.parse(i);
+	} catch {
+		return i;
+	}
+	return typeof a == "string" ? a : n === void 0 || u.has(n) ? i : a;
+}, f = (e, t, n, r) => {
+	let i = e.decrypt(t, r);
+	try {
+		return typeof JSON.parse(i) == "string" ? !1 : n === void 0 || u.has(n) ? !0 : void 0;
+	} catch {
+		return !0;
+	}
+}, p = (e, t) => e.fields[t]?.type, m = (e) => {
+	let t = [];
+	for (let [n, r] of Object.entries(e.fields)) r.encrypted === !0 && t.push(n);
+	return t;
+}, h = "id", g = (e, t, n) => {
+	let r = e.tableName ?? "?", a = e.previousTableName, o = e.fields[t]?.renamedFrom, s = a === void 0 ? [r] : [r, a], c = o === void 0 ? [t] : [t, o];
+	return s.flatMap((e) => c.map((t) => i(e, t, n)));
+}, _ = (e, t, n, r) => {
+	let i;
+	for (let a of r) try {
+		return d(e, t, n, a);
+	} catch (e) {
+		i ??= e;
+	}
+	throw i;
+}, v = (e, t, n, r) => {
+	if (!t) return e;
+	let i = m(t);
+	return i.length === 0 ? e : x(e, i, t.tableName ?? "?", n, r);
+}, y = (e, t, n) => {
+	if (t === void 0 || n == null) return;
+	let r = e[h];
+	if (r === void 0 || String(r) === String(n)) return;
+	let i = m(t);
+	if (i.length === 0) return;
+	let a = t.tableName ?? "?";
+	throw Error(`${a}: an update may not change the id of a row with .encrypted() columns (${i.join(", ")}) — each sealed value is bound to the id it was written under, so ${String(n)} → ${String(r)} would leave every one of them unreadable. Write the row under the new id (insert it, then delete the old one); the store seals its values there.`);
+}, b = (e, t, n) => {
+	if (t === void 0 || e.length === 0) return e;
+	let r = m(t);
+	if (r.length === 0) return e;
+	let i = t.tableName ?? "?";
+	return e.map((e) => x(e, r, i, n));
+}, x = (e, t, n, r, a) => {
+	let o = a ?? e[h], s = { ...e };
+	for (let e of t) {
+		let t = s[e];
+		if (!(t == null || c(t))) {
+			if (!r) throw Error(`column "${n}.${e}" is .encrypted() but no field cipher is registered — set VOLTRO_FIELD_ENCRYPTION_KEY (\`voltro dev\` mints one; \`voltro serve\` refuses to boot without it); in a test, pass \`fieldEncryptionKey\` to makeTestContext`);
+			s[e] = l(r, t, i(n, e, o));
+		}
+	}
+	return s;
+}, S = (e, t, n, r) => {
+	if (!t) return e;
+	let i = m(t);
+	if (i.length === 0 || !n) return e;
+	let a = r?.onError ?? "throw", s = t.tableName ?? "?";
+	return e.map((e) => {
+		let l;
+		for (let u of i) {
+			let i = e[u];
+			if (c(i)) {
+				l ??= { ...e };
+				try {
+					l[u] = _(n, i, p(t, u), g(t, u, r?.rowId ?? e[h]));
+				} catch (e) {
+					let t = String(e?.message ?? e);
+					if (a === "null") {
+						l[u] = null, r?.warn?.({
+							table: s,
+							column: u,
+							reason: t
+						});
+						continue;
+					}
+					throw new o({
+						table: s,
+						column: u,
+						reason: t
+					});
+				}
+			}
+		}
+		return l ?? e;
+	});
+};
+//#endregion
+export { r as BOUND_ENCRYPTED_PREFIX, n as ENCRYPTED_PREFIX, e as FIELD_KEY_ID_PATTERN, o as FieldDecryptionError, t as ciphertextKeyId, d as decodeFieldValue, S as decryptFieldsOnRead, l as encodeFieldValue, v as encryptFieldsForWrite, b as encryptFieldsForWriteBatch, m as encryptedColumnsOf, i as fieldBinding, g as fieldBindingsOf, a as isBoundCiphertext, c as isEncrypted, s as isFieldDecryptionError, f as isRawEncoding, y as refuseIdChangeOfSealedRow };

package/dist/frameworkTables.js

@@ -0,0 +1,143 @@
+import { id as e, integer as t, json as n, text as r, timestamp as i } from "./columns.js";
+import { table as a } from "./table.js";
+//#region src/frameworkTables.ts
+var o = a("_voltro_migrations", {
+	id: e({ prefix: "mig" }),
+	name: r(),
+	hash: r(),
+	status: r(),
+	appliedAt: i().nullable(),
+	durationMs: t().nullable(),
+	errorMessage: r().nullable(),
+	errorStack: r().nullable(),
+	workflowRunId: r().nullable(),
+	createdAt: i().default("now"),
+	updatedAt: i().default("now").onUpdate("now")
+}).index(["status"]), s = a("_voltro_seeds", {
+	id: e({ prefix: "seed" }),
+	name: r(),
+	lifecycle: r(),
+	fingerprint: r(),
+	cronSchedule: r().nullable(),
+	watchedTables: n().nullable(),
+	nextRunAt: i().nullable(),
+	lastRunStatus: r().nullable(),
+	lastRunAt: i().nullable(),
+	lastRunDurationMs: t().nullable(),
+	lastRunRowsTouched: t().nullable(),
+	lastError: r().nullable(),
+	workflowRunId: r().nullable(),
+	createdAt: i().default("now"),
+	updatedAt: i().default("now").onUpdate("now")
+}).index(["lifecycle"]).index(["nextRunAt"]), c = a("_voltro_schema_owner", {
+	id: e({ prefix: "own" }),
+	appName: r(),
+	projectName: r().nullable(),
+	frameworkVersion: r().nullable(),
+	claimedAt: i().default("now")
+}), l = a("_voltro_plugin_migrations", {
+	id: e({ prefix: "plm" }),
+	plugin_name: r(),
+	migration_id: r(),
+	description: r().nullable(),
+	applied_at: r()
+}), u = a("_voltro_migration_plans", {
+	id: e({ prefix: "plan" }),
+	fingerprint: r(),
+	liveFingerprint: r().nullable(),
+	operations: n(),
+	rollbackPlan: n().nullable(),
+	appliedBy: r(),
+	environment: r(),
+	source: r(),
+	onlineStrategy: r().nullable(),
+	durationMs: t(),
+	notes: r().nullable(),
+	squashedAt: i().nullable(),
+	appliedAt: i().default("now"),
+	createdAt: i().default("now"),
+	updatedAt: i().default("now").onUpdate("now")
+}).index(["fingerprint"]).index(["environment"]), d = a("_voltro_idempotency", {
+	id: e({ prefix: "idem" }),
+	scope: r(),
+	key: r(),
+	inputHash: r().nullable(),
+	status: r(),
+	response: n().nullable(),
+	createdAt: i().default("now")
+}).unique(["scope", "key"]).index(["createdAt"]), f = a("_voltro_devices", {
+	id: e({ prefix: "device" }),
+	tenantId: r(),
+	name: r(),
+	scopes: n().nullable(),
+	pairingHash: r().maxLength(64).nullable(),
+	pairingExpiresAt: i().nullable(),
+	accessHash: r().maxLength(64).nullable(),
+	accessExpiresAt: i().nullable(),
+	refreshHash: r().maxLength(64).nullable(),
+	refreshExpiresAt: i().nullable(),
+	previousRefreshHash: r().maxLength(64).nullable(),
+	generation: t().default(0),
+	pairedAt: i().nullable(),
+	lastSeenAt: i().nullable(),
+	revokedAt: i().nullable(),
+	revokedReason: r().nullable(),
+	createdBy: r().nullable(),
+	metadata: n().nullable(),
+	createdAt: i()
+}).index(["tenantId"]).index(["pairingHash"]).index(["accessHash"]).index(["refreshHash"]).index(["previousRefreshHash"]), p = a("_voltro_tenant_selections", {
+	id: e({ prefix: "tsel" }),
+	subjectType: r().maxLength(32),
+	subjectId: r(),
+	tenantId: r(),
+	selectedAt: i()
+}).primaryKey(["id"]).nonReactive(), m = a("_voltro_kv", {
+	id: e({ prefix: "kv" }),
+	key: r().unique(),
+	value: r().nullable(),
+	expiresAt: i().nullable(),
+	createdAt: i().default("now"),
+	updatedAt: i().default("now").onUpdate("now")
+}).index(["expiresAt"]), h = a("_voltro_api_keys", {
+	id: e({ prefix: "apikey" }),
+	tenantId: r().nullable(),
+	name: r(),
+	hashedKey: r().maxLength(64).unique(),
+	keyPrefix: r(),
+	scopes: n().nullable(),
+	lastUsedAt: i().nullable(),
+	requestCount: t().default(0),
+	expiresAt: i().nullable(),
+	revokedAt: i().nullable(),
+	createdBy: r().nullable(),
+	onBehalfOf: r().nullable(),
+	metadata: n().nullable(),
+	createdAt: i().default("now")
+}).index("byApiKeyTenant", ["tenantId"]), g = a("_voltro_replica_observations", {
+	id: e({ prefix: "robs" }),
+	replicaId: r().maxLength(191),
+	startedAt: i(),
+	version: r().maxLength(64).nullable(),
+	kind: r().maxLength(64),
+	payload: r().nullable(),
+	reachableAt: r().maxLength(255).nullable(),
+	writtenAt: i().default("now").onUpdate("now")
+}).unique(["replicaId", "kind"]).index(["kind"]), _ = a("_voltro_api_role_workload_buckets", {
+	id: e({ prefix: "arwb" }),
+	replicaId: r().maxLength(191),
+	startedAt: i(),
+	role: r().maxLength(2080),
+	bucketFrom: i(),
+	bucketUntil: i(),
+	payload: r()
+}).unique("_voltro_arwb_replica_bucket_uq", [
+	"replicaId",
+	"startedAt",
+	"bucketFrom"
+]).index(["bucketUntil"]), v = [
+	o,
+	s,
+	u
+];
+//#endregion
+export { h as _voltroApiKeysTable, _ as _voltroApiRoleWorkloadBucketsTable, f as _voltroDevicesTable, d as _voltroIdempotencyTable, m as _voltroKvTable, u as _voltroMigrationPlansTable, o as _voltroMigrationsTable, l as _voltroPluginMigrationsTable, g as _voltroReplicaObservationsTable, c as _voltroSchemaOwnerTable, s as _voltroSeedsTable, p as _voltroTenantSelectionsTable, v as frameworkTables };

package/dist/ginIndex.js

@@ -0,0 +1,10 @@
+//#region src/ginIndex.ts
+var e = (e) => {
+	let t = e?.gin?.opclass;
+	if (t !== void 0) {
+		if (!/^[a-z_][a-z0-9_$]*(?:\.[a-z_][a-z0-9_$]*)?$/i.test(t)) throw Error("GIN opclass must be an unquoted, optionally schema-qualified identifier");
+		return t.toLowerCase().replace(/^public\./, "");
+	}
+};
+//#endregion
+export { e as resolveGinOpclass };

package/dist/hybridSearch.js

@@ -0,0 +1,32 @@
+import { resolveFullTextIndex as e } from "./queryBuilder.js";
+//#region src/hybridSearch.ts
+var t = (t) => {
+	let n = t.alpha ?? .5;
+	if (n < 0 || n > 1) throw Error(`hybridSearch: alpha must be in [0, 1], got ${n}`);
+	return (r) => {
+		let i = Array.isArray(t.vector.query) ? {
+			column: t.vector.col,
+			queryVector: t.vector.query,
+			distance: t.vector.distance ?? "cosine",
+			alpha: n
+		} : {
+			column: t.vector.col,
+			queryText: t.vector.query,
+			distance: t.vector.distance ?? "cosine",
+			alpha: n
+		}, a = e(r.table, t.fts.indexName, r.fullTextIndexes);
+		return {
+			...r,
+			annClause: i,
+			fullTextSearch: {
+				indexName: t.fts.indexName,
+				query: t.fts.query,
+				columns: a.columns,
+				...a.config === void 0 ? {} : { config: a.config },
+				...a.weights === void 0 ? {} : { weights: a.weights }
+			}
+		};
+	};
+};
+//#endregion
+export { t as hybridSearch };