@warlock.js/cascade 5.5.0 → 5.7.0

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `@warlock.js/cascade` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.7.0 - 2026-09-11
+
+### Fixed
+
+- The Postgres query builder could quote a malformed or empty field path straight into generated SQL, producing a syntactically valid query against the wrong identifier; it now throws naming the offending field path instead.
+- The MongoDB pipeline builder could build `$group`, `$lookup`, `$limit`/`$skip`/`$setWindowFields` stages from an empty operation group, producing malformed stages (e.g. `{ $limit: undefined }`, a `$lookup` with no `from`/`localField`/`foreignField`) that MongoDB rejected only at query execution. These now resolve to the documented safe defaults (`null`/skip) instead.
+- The dirty-change tracker and the MongoDB migration driver could write or delete the literal key `"undefined"` on a document when a dirty-path segment was missing, instead of leaving the real field untouched.
+- The query builder's count and JSON-projection handling could dereference an absent regex capture and throw, instead of falling back to the same empty result its other branches already return.
+
+### Changed
+
+- Internal type-safety hardening elsewhere; no other behaviour change.
+
 ## 5.5.0 - 2026-09-07
 
 ### Fixed

package/cjs/index.cjs

@@ -794,10 +794,13 @@ var DatabaseDirtyTracker = class {
 		let container = this.currentRaw;
 		for (let index = 0; index < segments.length - 1; index += 1) {
 			if (container === void 0 || container === null) return;
-			container = this.resolveSegment(container, segments[index]);
+			const segment = segments[index];
+			if (segment === void 0) return;
+			container = this.resolveSegment(container, segment);
 		}
 		if (container === void 0 || container === null) return;
 		const lastSegment = segments[segments.length - 1];
+		if (lastSegment === void 0) return;
 		if (Array.isArray(container)) {
 			const numericIndex = Number(lastSegment);
 			if (!Number.isNaN(numericIndex)) container.splice(numericIndex, 1);
@@ -1702,6 +1705,7 @@ var RelationLoader = class RelationLoader {
 	async loadRelation(name, constraint) {
 		const path = this.parseNestedRelation(name);
 		const rootRelation = path[0];
+		if (rootRelation === void 0) throw new Error(`Relation name "${name}" could not be parsed into a relation path on model "${this.modelClass.name}".`);
 		const definition = this.getRelationDefinition(rootRelation);
 		if (!definition) throw new Error(`Relation "${rootRelation}" is not defined on model "${this.modelClass.name}". Make sure to define it in the static 'relations' property.`);
 		switch (definition.type) {
@@ -7701,7 +7705,10 @@ function isValidDateValue(value) {
 	if (!isoRegex.test(value)) return false;
 	const date = new Date(value);
 	if (Number.isNaN(date.getTime())) return false;
-	const [y, m, d] = value.split("T")[0].split("-").map(Number);
+	const datePart = value.split("T")[0];
+	if (datePart === void 0) return false;
+	const [y, m, d] = datePart.split("-").map(Number);
+	if (y === void 0 || m === void 0 || d === void 0) return false;
 	return date.getUTCFullYear() === y && date.getUTCMonth() + 1 === m && date.getUTCDate() === d;
 }
 
@@ -8180,6 +8187,7 @@ var MongoMigrationDriver = class {
 		const indexSpec = {};
 		for (let i = 0; i < index.columns.length; i++) {
 			const column = index.columns[i];
+			if (column === void 0) continue;
 			indexSpec[column] = index.directions?.[i] === "desc" ? -1 : 1;
 		}
 		const options = {};
@@ -8594,12 +8602,22 @@ var QueryBuilder = class QueryBuilder {
 	* builder.getOps("where", "orWhere", "whereIn")
 	*/
 	getOps(...types) {
-		if (types.length === 1) return (this.opIndex.get(types[0]) ?? []).map((i) => this.operations[i]);
+		if (types.length === 1) {
+			const type = types[0];
+			if (type === void 0) return [];
+			return (this.opIndex.get(type) ?? []).flatMap((index) => {
+				const operation = this.operations[index];
+				return operation === void 0 ? [] : [operation];
+			});
+		}
 		const result = [];
-		for (const type of types) for (const idx of this.opIndex.get(type) ?? []) result.push({
-			idx,
-			op: this.operations[idx]
-		});
+		for (const type of types) for (const idx of this.opIndex.get(type) ?? []) {
+			const operation = this.operations[idx];
+			if (operation !== void 0) result.push({
+				idx,
+				op: operation
+			});
+		}
 		return result.sort((a, b) => a.idx - b.idx).map((r) => r.op);
 	}
 	/**
@@ -8611,7 +8629,9 @@ var QueryBuilder = class QueryBuilder {
 	rebuildIndex() {
 		this.opIndex = /* @__PURE__ */ new Map();
 		for (let i = 0; i < this.operations.length; i++) {
-			const type = this.operations[i].type;
+			const operation = this.operations[i];
+			if (operation === void 0) continue;
+			const type = operation.type;
 			const list = this.opIndex.get(type);
 			if (list) list.push(i);
 			else this.opIndex.set(type, [i]);
@@ -9298,9 +9318,15 @@ var QueryBuilder = class QueryBuilder {
 			relation: trimmed,
 			alias: `${trimmed}Count`
 		};
+		const relation = match[1];
+		const alias = match[2];
+		if (relation === void 0 || alias === void 0) return {
+			relation: trimmed,
+			alias: `${trimmed}Count`
+		};
 		return {
-			relation: match[1].trim(),
-			alias: match[2].trim()
+			relation: relation.trim(),
+			alias: alias.trim()
 		};
 	}
 	/**
@@ -9427,7 +9453,7 @@ var QueryBuilder = class QueryBuilder {
 	/** JSON path extraction as a projected field. */
 	selectJson(path, alias) {
 		const parts = path.split("->");
-		const column = parts[0];
+		const column = parts[0] ?? "";
 		const jsonPath = parts.slice(1).join("->");
 		const expr = jsonPath ? `${column}->>'${jsonPath}'` : column;
 		return alias ? this.selectAs(expr, alias) : this.selectRaw(expr);
@@ -10135,6 +10161,7 @@ var MongoQueryParser = class {
 	trackGroupFieldNames(stage, operations, stageIndex) {
 		if (stage === "$group") {
 			const op = operations[0];
+			if (op === void 0) return;
 			if (op.type === "groupByWithAggregates" && op.data.fields) {
 				const fieldNames = this.extractGroupFieldNames(op.data.fields);
 				if (fieldNames) this.groupFieldNames.set(stageIndex, fieldNames);
@@ -10215,7 +10242,7 @@ var MongoQueryParser = class {
 		let output = "MongoDB Aggregation Pipeline:\n";
 		output += "═".repeat(50) + "\n";
 		pipeline.forEach((stage, index) => {
-			const stageName = Object.keys(stage)[0];
+			const stageName = Object.keys(stage)[0] ?? "<empty stage>";
 			const stageData = stage[stageName];
 			if (index > 0) output += "\n";
 			output += `Stage ${index + 1}: ${_mongez_copper.colors.redBright(stageName)}\n`;
@@ -10272,9 +10299,18 @@ var MongoQueryParser = class {
 			case "$sort": return this.buildSortStage(operations);
 			case "$group": return this.buildGroupStage(operations);
 			case "$lookup": return this.buildLookupStage(operations);
-			case "$limit": return { $limit: operations[0].data.value };
-			case "$skip": return { $skip: operations[0].data.value };
-			case "$setWindowFields": return { $setWindowFields: operations[0].data.spec };
+			case "$limit": {
+				const [first] = operations;
+				return first === void 0 ? null : { $limit: first.data.value };
+			}
+			case "$skip": {
+				const [first] = operations;
+				return first === void 0 ? null : { $skip: first.data.value };
+			}
+			case "$setWindowFields": {
+				const [first] = operations;
+				return first === void 0 ? null : { $setWindowFields: first.data.spec };
+			}
 			default: return null;
 		}
 	}
@@ -10794,8 +10830,9 @@ var MongoQueryParser = class {
 		return this.resolveProjectionExpression(value);
 	}
 	inferJsonAlias(path) {
-		const segments = this.normalizePath(path).split(".");
-		return segments[segments.length - 1];
+		const normalized = this.normalizePath(path);
+		const segments = normalized.split(".");
+		return segments[segments.length - 1] ?? normalized;
 	}
 	buildConcatExpression(values) {
 		return { $concat: values.map((value) => this.normalizeFieldReference(value)) };
@@ -10901,6 +10938,7 @@ var MongoQueryParser = class {
 	*/
 	buildGroupStage(operations) {
 		const op = operations[0];
+		if (op === void 0) return null;
 		switch (op.type) {
 			case "groupBy": {
 				const stage = this.buildGroupByStage(op.data.fields);
@@ -11086,7 +11124,9 @@ var MongoQueryParser = class {
 	* @returns The $lookup stage or null
 	*/
 	buildLookupStage(operations) {
-		const options = operations[0].data;
+		const op = operations[0];
+		if (op === void 0) return null;
+		const options = op.data;
 		return { $lookup: {
 			from: options.table,
 			localField: options.localField,
@@ -12468,8 +12508,7 @@ var MongoQueryBuilder = class MongoQueryBuilder extends QueryBuilder {
 	* @returns the first document or null
 	*/
 	async first() {
-		const results = await this.limit(1).get();
-		return results.length > 0 ? results[0] : null;
+		return (await this.limit(1).get())[0] ?? null;
 	}
 	/**
 	* Executes the query and returns the first matching document, throwing if none found.
@@ -12500,8 +12539,7 @@ var MongoQueryBuilder = class MongoQueryBuilder extends QueryBuilder {
 	async count() {
 		const pipeline = this.buildPipeline();
 		pipeline.push({ $count: "total" });
-		const results = await this.execute(pipeline);
-		return results.length > 0 ? results[0].total : 0;
+		return (await this.execute(pipeline))[0]?.total ?? 0;
 	}
 	/**
 	* Calculates the sum of a numeric field across matching documents.
@@ -13846,8 +13884,7 @@ var PostgresBlueprint = class {
        AND tablename = $1`, [table])).rows.map((row) => {
 			const isUnique = row.indexdef.includes("UNIQUE");
 			const isPrimary = row.indexname.endsWith("_pkey");
-			const columnsMatch = row.indexdef.match(/\(([^)]+)\)/);
-			const columns = columnsMatch ? columnsMatch[1].split(",").map((c) => c.trim().replace(/"/g, "")) : [];
+			const columns = (row.indexdef.match(/\(([^)]+)\)/)?.[1] ?? "").split(",").map((c) => c.trim().replace(/"/g, "")).filter(Boolean);
 			let type = "btree";
 			if (row.indexdef.includes("USING GIN")) type = "gin";
 			else if (row.indexdef.includes("USING GIST")) type = "gist";
@@ -14675,8 +14712,7 @@ var PostgresMigrationDriver = class {
 		return (await this.driver.query(`SELECT indexname, indexdef FROM pg_indexes WHERE schemaname = 'public' AND tablename = $1`, [table])).rows.map((row) => {
 			const isUnique = row.indexdef.includes("UNIQUE");
 			const isPrimary = row.indexname.endsWith("_pkey");
-			const columnsMatch = row.indexdef.match(/\(([^)]+)\)/);
-			const columns = columnsMatch ? columnsMatch[1].split(",").map((c) => c.trim().replace(/"/g, "")) : [];
+			const columns = (row.indexdef.match(/\(([^)]+)\)/)?.[1] ?? "").split(",").map((c) => c.trim().replace(/"/g, "")).filter(Boolean);
 			let type = "btree";
 			if (row.indexdef.includes("USING GIN")) type = "gin";
 			else if (row.indexdef.includes("USING GIST")) type = "gist";
@@ -15616,10 +15652,12 @@ var PostgresQueryParser = class PostgresQueryParser {
 		if (parts.length === 1) expression = `${this.dialect.quoteIdentifier(effectiveTable)}.${this.dialect.quoteIdentifier(field)}`;
 		else if (parts.length === 2) {
 			const [first, second] = parts;
+			if (first === void 0 || second === void 0) throw new Error(`Cannot parse field path "${field}": expected two non-empty segments.`);
 			if (this.isTableReference(first)) expression = `${this.dialect.quoteIdentifier(first)}.${this.dialect.quoteIdentifier(second)}`;
 			else expression = this.buildJsonbPath(effectiveTable, first, [second]);
 		} else {
 			const [first, second, ...rest] = parts;
+			if (first === void 0 || second === void 0) throw new Error(`Cannot parse field path "${field}": expected at least three non-empty segments.`);
 			if (this.isTableReference(first)) expression = this.buildJsonbPath(first, second, rest);
 			else expression = this.buildJsonbPath(effectiveTable, first, [second, ...rest]);
 		}
@@ -16116,8 +16154,7 @@ var PostgresQueryBuilder = class PostgresQueryBuilder extends QueryBuilder {
 			const segments = path.split(".");
 			let currentModel = this.modelClass;
 			let currentPath = "";
-			for (let i = 0; i < segments.length; i++) {
-				const rawSeg = segments[i];
+			for (const [i, rawSeg] of segments.entries()) {
 				const colonIdx = rawSeg.indexOf(":");
 				const segName = colonIdx === -1 ? rawSeg : rawSeg.slice(0, colonIdx);
 				const segColumns = colonIdx === -1 ? void 0 : rawSeg.slice(colonIdx + 1).split(",").filter(Boolean);
@@ -16276,7 +16313,7 @@ var PostgresQueryBuilder = class PostgresQueryBuilder extends QueryBuilder {
 	async distinct(field) {
 		this.hydrateCallback = void 0;
 		this.distinctValues(field);
-		return (await this.get()).map((row) => row[field]);
+		return (await this.get()).map((row) => row[field]).filter((value) => value !== void 0);
 	}
 	/** Get array of all values for a single field. */
 	async pluck(field) {
@@ -16503,7 +16540,7 @@ var PostgresQueryBuilder = class PostgresQueryBuilder extends QueryBuilder {
 	}
 	/** Pluck scalar values for a single field (alias for pluck). */
 	async pluckOne(field) {
-		return (await this.select([field]).get()).map((row) => row[field]);
+		return (await this.select([field]).get()).map((row) => row[field]).filter((value) => value !== void 0);
 	}
 	/**
 	* Before `get()` runs the parser, consume any joinWith ops recorded by the base
@@ -16803,7 +16840,7 @@ var PostgresQueryBuilder = class PostgresQueryBuilder extends QueryBuilder {
 			bindings: []
 		};
 		return {
-			fragment: match[1].replace(/\$\d+/g, "?"),
+			fragment: (match[1] ?? "").replace(/\$\d+/g, "?"),
 			bindings: bindings ?? []
 		};
 	}
@@ -16904,7 +16941,7 @@ var PostgresQueryBuilder = class PostgresQueryBuilder extends QueryBuilder {
 				}
 				const RelatedModel = resolveModelClass(config.model);
 				if (!RelatedModel) continue;
-				const childKeys = Array.from(this.joinRelations.keys()).filter((p) => p.startsWith(`${path}.`)).map((p) => p.split(".")[path.split(".").length]);
+				const childKeys = Array.from(this.joinRelations.keys()).filter((p) => p.startsWith(`${path}.`)).map((p) => p.split(".")[path.split(".").length]).filter((segment) => segment !== void 0);
 				if (config.type === "hasMany") attachLoadedRelation(model, key, (Array.isArray(data) ? data : []).map((row) => {
 					const rowData = { ...row };
 					for (const childKey of childKeys) delete rowData[childKey];
@@ -17095,7 +17132,7 @@ var PostgresSQLSerializer = class extends SQLSerializer {
 		const statements = [sql];
 		if (column.checkConstraint) statements.push(this.addCheck(table, column.checkConstraint.name, column.checkConstraint.expression));
 		if (column.type === "vector") return ["CREATE EXTENSION IF NOT EXISTS vector", ...statements];
-		return statements.length === 1 ? statements[0] : statements;
+		return statements.length === 1 ? statements[0] ?? statements : statements;
 	}
 	dropColumn(table, column) {
 		return `ALTER TABLE ${this.dialect.quoteIdentifier(table)} DROP COLUMN ${this.dialect.quoteIdentifier(column)}`;
@@ -17319,7 +17356,7 @@ var PostgresSyncAdapter = class {
 		let paramIndex = 1;
 		for (const [path, value] of Object.entries(update)) if (path.includes(".")) {
 			const [column, ...pathParts] = path.split(".");
-			const quotedColumn = this.driver.dialect.quoteIdentifier(column);
+			const quotedColumn = this.driver.dialect.quoteIdentifier(column ?? path);
 			const jsonPath = `{${pathParts.join(",")}}`;
 			const placeholder = this.driver.dialect.placeholder(paramIndex++);
 			params.push(JSON.stringify(value));
@@ -17333,7 +17370,7 @@ var PostgresSyncAdapter = class {
 		const whereClauses = [];
 		for (const [key, value] of Object.entries(filter)) if (key.includes(".")) {
 			const [column, ...pathParts] = key.split(".");
-			const quotedColumn = this.driver.dialect.quoteIdentifier(column);
+			const quotedColumn = this.driver.dialect.quoteIdentifier(column ?? key);
 			const intermediateExpr = pathParts.slice(0, -1).map((p) => `->'${p}'`).join("");
 			const finalExpr = `->>'${pathParts[pathParts.length - 1]}'`;
 			const placeholder = this.driver.dialect.placeholder(paramIndex++);
@@ -17764,7 +17801,7 @@ var PostgresDriver = class {
 				const nums = new Array(parts.length);
 				let isNumericVector = parts.length > 0;
 				for (let i = 0; i < parts.length; i++) {
-					const n = +parts[i];
+					const n = +(parts[i] ?? "");
 					if (!Number.isFinite(n)) {
 						isNumericVector = false;
 						break;
@@ -22010,6 +22047,7 @@ function parseCreatedAt(createdAt) {
 	const match = createdAt.match(/^(\d{2})-(\d{2})-(\d{4})_(\d{2})-(\d{2})-(\d{2})$/);
 	if (match) {
 		const [, first, second, year, hour, minute, second_time] = match;
+		if (first === void 0 || second === void 0 || year === void 0 || hour === void 0 || minute === void 0 || second_time === void 0) return;
 		const firstNum = parseInt(first);
 		const secondNum = parseInt(second);
 		let month, day;