@zintrust/core 0.1.40 → 0.1.41

package/src/middleware/CsrfMiddleware.js

@@ -15,25 +15,36 @@ const DEFAULT_OPTIONS = {
 // Global cleanup registry to avoid leaking intervals per middleware instance
 // We use WeakRef so the manager (and middleware) can be garbage collected
 // when no longer in use, even if this interval keeps running.
+const canUseWeakRef = typeof WeakRef === 'function';
 const managerRegistry = new Set();
-// Single process-wide timer
-const globalCleanupTimer = setInterval(() => {
-    if (managerRegistry.size === 0)
+let globalCleanupTimer = null;
+const ensureCleanupTimer = () => {
+    if (globalCleanupTimer !== null)
         return;
-    for (const ref of managerRegistry) {
-        const mgr = ref.deref();
-        if (mgr) {
-            void mgr.cleanup().catch(() => undefined);
-        }
-        else {
-            managerRegistry.delete(ref);
+    if (typeof setInterval !== 'function')
+        return;
+    if (globalThis.CF !== undefined)
+        return;
+    if (!canUseWeakRef)
+        return;
+    globalCleanupTimer = setInterval(() => {
+        if (managerRegistry.size === 0)
+            return;
+        for (const ref of managerRegistry) {
+            const mgr = ref.deref();
+            if (mgr) {
+                void mgr.cleanup().catch(() => undefined);
+            }
+            else {
+                managerRegistry.delete(ref);
+            }
         }
+    }, 3600000);
+    // Use helper to handle runtime differences (Node vs others)
+    if (globalCleanupTimer !== null && isUnrefableTimer(globalCleanupTimer)) {
+        globalCleanupTimer.unref();
     }
-}, 3600000);
-// Use helper to handle runtime differences (Node vs others)
-if (isUnrefableTimer(globalCleanupTimer)) {
-    globalCleanupTimer.unref();
-}
+};
 export const CsrfMiddleware = Object.freeze({
     /**
      * Create CSRF protection middleware
@@ -42,8 +53,11 @@ export const CsrfMiddleware = Object.freeze({
         const config = { ...DEFAULT_OPTIONS, ...options };
         const manager = CsrfTokenManager.create();
         const sessions = SessionManager.create();
+        ensureCleanupTimer();
         // Register for global cleanup instead of creating a local timer
-        managerRegistry.add(new WeakRef(manager));
+        if (canUseWeakRef) {
+            managerRegistry.add(new WeakRef(manager));
+        }
         return async (req, res, next) => {
             if (shouldSkipCsrfForRequest(req, config)) {
                 await next();

package/src/middleware/ErrorHandlerMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ErrorHandlerMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/ErrorHandlerMiddleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAU9D,eAAO,MAAM,sBAAsB;cACvB,UAAU;EA+BpB,CAAC;AAEH,eAAe,sBAAsB,CAAC"}
+{"version":3,"file":"ErrorHandlerMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/ErrorHandlerMiddleware.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAU9D,eAAO,MAAM,sBAAsB;cACvB,UAAU;EAsCpB,CAAC;AAEH,eAAe,sBAAsB,CAAC"}

package/src/middleware/ErrorHandlerMiddleware.js

@@ -28,7 +28,8 @@ export const ErrorHandlerMiddleware = Object.freeze({
                     res.setStatus(500);
                     if (errorMode === 'html') {
                         // Use HTML error page instead of JSON
-                        ErrorRouting.handleInternalServerErrorWithWrappers(req, res, error, requestId);
+                        const handleInternalServerErrorWithWrappers = ErrorRouting.handleInternalServerErrorWithWrappers;
+                        await handleInternalServerErrorWithWrappers(req, res, error, requestId);
                     }
                     else {
                         res.json(ErrorResponse.internalServerError('Internal server error', requestId, includeStack ? error?.stack : undefined));

package/src/migrations/MigrationLoader.js

@@ -1,6 +1,6 @@
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import * as path from '../node-singletons/path.js';
-import { pathToFileURL } from 'node:url';
+import { pathToFileURL } from '../node-singletons/url.js';
 function isFunction(value) {
     return typeof value === 'function';
 }

package/src/migrations/schema/SchemaCompiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SchemaCompiler.d.ts","sourceRoot":"","sources":["../../../../src/migrations/schema/SchemaCompiler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAEhB,oBAAoB,EACpB,eAAe,EACf,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAIlC,KAAK,cAAc,GAAG;IACpB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,oBAAoB,EAAE,CAAC;IACvC,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AA8UF,eAAO,MAAM,uBAAuB;+BAExB,MAAM,OACT,eAAe,SACb;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,MAAM,EAAE;6BAKc,MAAM,SAAS,MAAM,SAAS;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM;8BAK5D,MAAM,SAAS,MAAM,QAAQ,cAAc,GAAG,MAAM,EAAE;EAIhF,CAAC"}
+{"version":3,"file":"SchemaCompiler.d.ts","sourceRoot":"","sources":["../../../../src/migrations/schema/SchemaCompiler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAEhB,oBAAoB,EACpB,eAAe,EACf,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAIlC,KAAK,cAAc,GAAG;IACpB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,oBAAoB,EAAE,CAAC;IACvC,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAqVF,eAAO,MAAM,uBAAuB;+BAExB,MAAM,OACT,eAAe,SACb;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,MAAM,EAAE;6BAKc,MAAM,SAAS,MAAM,SAAS;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM;8BAK5D,MAAM,SAAS,MAAM,QAAQ,cAAc,GAAG,MAAM,EAAE;EAIhF,CAAC"}

package/src/migrations/schema/SchemaCompiler.js

@@ -90,7 +90,7 @@ function getAutoIncrementColumnSql(driver, colName, type) {
     }
     throw ErrorFactory.createValidationError(`Auto-increment not supported for driver: ${driver}`);
 }
-function formatDefaultValueSql(table, def) {
+function formatDefaultValueSql(driver, table, def) {
     if (def.defaultValue === undefined)
         return null;
     const dv = def.defaultValue;
@@ -98,8 +98,11 @@ function formatDefaultValueSql(table, def) {
         return ColumnType.DEFAULT_NULL;
     if (typeof dv === 'number' && Number.isFinite(dv))
         return `DEFAULT ${dv}`;
-    if (typeof dv === 'boolean')
+    if (typeof dv === 'boolean') {
+        if (driver === AdaptersEnum.postgresql)
+            return `DEFAULT ${dv ? 'true' : 'false'}`;
         return `DEFAULT ${dv ? 1 : 0}`;
+    }
     if (typeof dv === 'string') {
         if (dv === ColumnType.CURRENT_TIMESTAMP)
             return `DEFAULT ${ColumnType.CURRENT_TIMESTAMP}`;
@@ -132,7 +135,7 @@ function buildColumnSql(driver, table, def) {
         parts.push(ColumnType.UNIQUE);
     if (def.primary === true)
         parts.push(ColumnType.PRIMARY_KEY);
-    const defaultSql = formatDefaultValueSql(table, def);
+    const defaultSql = formatDefaultValueSql(driver, table, def);
     if (defaultSql !== null)
         parts.push(defaultSql);
     return parts.join(' ');

package/src/node-singletons/crypto.d.ts

@@ -3,5 +3,5 @@
  * Safe to import in both API and CLI code
  * Exported from node:crypto built-in
  */
-export { createCipheriv, createDecipheriv, createHash, createHmac, createSign, createVerify, generateKeyPairSync, pbkdf2, pbkdf2Sync, randomBytes, randomInt, scryptSync, timingSafeEqual, } from 'node:crypto';
+export { createCipheriv, createDecipheriv, createHash, createHmac, createSign, createVerify, generateKeyPairSync, pbkdf2, pbkdf2Sync, randomBytes, randomInt, randomUUID, scryptSync, timingSafeEqual, } from 'node:crypto';
 //# sourceMappingURL=crypto.d.ts.map

package/src/node-singletons/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,MAAM,EACN,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,MAAM,EACN,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC"}

package/src/node-singletons/crypto.js

@@ -3,4 +3,4 @@
  * Safe to import in both API and CLI code
  * Exported from node:crypto built-in
  */
-export { createCipheriv, createDecipheriv, createHash, createHmac, createSign, createVerify, generateKeyPairSync, pbkdf2, pbkdf2Sync, randomBytes, randomInt, scryptSync, timingSafeEqual, } from 'node:crypto';
+export { createCipheriv, createDecipheriv, createHash, createHmac, createSign, createVerify, generateKeyPairSync, pbkdf2, pbkdf2Sync, randomBytes, randomInt, randomUUID, scryptSync, timingSafeEqual, } from 'node:crypto';

package/src/node-singletons/fs.d.ts

@@ -6,7 +6,7 @@
 import * as fs from 'node:fs';
 export * as fsPromises from 'node:fs/promises';
 export { appendFileSync, copyFileSync, createReadStream, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, renameSync, rmSync, statSync, unlinkSync, utimesSync, writeFileSync, } from 'node:fs';
-export type { ReadStream, Stats, WriteStream } from 'node:fs';
+export type { PathLike, ReadStream, Stats, WriteStream, WriteStreamOptions } from 'node:fs';
 export { mkdir, mkdtemp, readFile, realpath, rm, stat, writeFile } from 'node:fs/promises';
 export default fs;
 //# sourceMappingURL=fs.d.ts.map

package/src/node-singletons/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/fs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAK9B,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG3F,eAAe,EAAE,CAAC"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/fs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAK9B,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG3F,eAAe,EAAE,CAAC"}

package/src/node-singletons/path.d.ts

@@ -4,6 +4,6 @@
  * Exported from node:path built-in
  */
 import * as path from 'node:path';
-export declare const basename: typeof path.basename, delimiter: ";" | ":", dirname: typeof path.dirname, extname: typeof path.extname, join: typeof path.join, relative: typeof path.relative, resolve: typeof path.resolve, sep: "/" | "\\";
+export declare const basename: typeof path.basename, delimiter: ";" | ":", dirname: typeof path.dirname, extname: typeof path.extname, join: typeof path.join, relative: typeof path.relative, resolve: typeof path.resolve, sep: "/" | "\\", posix: typeof path, win32: typeof path;
 export default path;
 //# sourceMappingURL=path.d.ts.map

package/src/node-singletons/path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,eAAO,MAAQ,QAAQ,wBAAE,SAAS,aAAE,OAAO,uBAAE,OAAO,uBAAE,IAAI,oBAAE,QAAQ,wBAAE,OAAO,uBAAE,GAAG,YAAS,CAAC;AAE5F,eAAe,IAAI,CAAC"}
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,eAAO,MAAQ,QAAQ,wBAAE,SAAS,aAAE,OAAO,uBAAE,OAAO,uBAAE,IAAI,oBAAE,QAAQ,wBAAE,OAAO,uBAAE,GAAG,cAAE,KAAK,eAAE,KAAK,aAC1F,CAAC;AAEP,eAAe,IAAI,CAAC"}

package/src/node-singletons/path.js

@@ -4,5 +4,5 @@
  * Exported from node:path built-in
  */
 import * as path from 'node:path';
-export const { basename, delimiter, dirname, extname, join, relative, resolve, sep } = path;
+export const { basename, delimiter, dirname, extname, join, relative, resolve, sep, posix, win32 } = path;
 export default path;

package/src/node-singletons/stream.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Node.js Stream Module Singleton
+ * CLI-only: Should not be imported in API/serverless code
+ * Exported from node:stream built-in
+ */
+import * as stream from 'node:stream';
+export declare const Readable: typeof stream.Readable, Writable: typeof stream.Writable, Duplex: typeof stream.Duplex, Transform: typeof stream.Transform, PassThrough: typeof stream.PassThrough, pipeline: typeof stream.pipeline, finished: typeof stream.finished;
+export type { DuplexOptions, ReadableOptions, TransformOptions, WritableOptions, } from 'node:stream';
+export type { ReadableStream, WritableStream } from 'node:stream/web';
+export default stream;
+//# sourceMappingURL=stream.d.ts.map

package/src/node-singletons/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/node-singletons/stream.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,eAAO,MAAQ,QAAQ,0BAAE,QAAQ,0BAAE,MAAM,wBAAE,SAAS,2BAAE,WAAW,6BAAE,QAAQ,0BAAE,QAAQ,wBAAW,CAAC;AAEjG,YAAY,EACV,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtE,eAAe,MAAM,CAAC"}

package/src/node-singletons/stream.js

@@ -0,0 +1,8 @@
+/**
+ * Node.js Stream Module Singleton
+ * CLI-only: Should not be imported in API/serverless code
+ * Exported from node:stream built-in
+ */
+import * as stream from 'node:stream';
+export const { Readable, Writable, Duplex, Transform, PassThrough, pipeline, finished } = stream;
+export default stream;

package/src/observability/OpenTelemetry.d.ts

@@ -46,6 +46,12 @@ export interface RecordDbQuerySpanInput {
     driver: string;
     durationMs: number;
 }
+export interface RecordQueueOperationSpanInput {
+    queueName: string;
+    operation: 'enqueue' | 'dequeue' | 'ack' | 'length' | 'drain';
+    durationMs: number;
+    status: 'ok' | 'error';
+}
 type HeaderGetter = {
     getHeader(name: string): unknown;
 };
@@ -57,6 +63,7 @@ export declare const OpenTelemetry: Readonly<{
     endHttpServerSpan: (span: Span, input: EndHttpServerSpanInput) => void;
     injectTraceHeaders: (headers: Record<string, string>) => Record<string, string>;
     recordDbQuerySpan: (input: RecordDbQuerySpanInput) => void;
+    recordQueueOperationSpan: (input: RecordQueueOperationSpanInput) => void;
 }>;
 export default OpenTelemetry;
 //# sourceMappingURL=OpenTelemetry.d.ts.map

package/src/observability/OpenTelemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OpenTelemetry.d.ts","sourceRoot":"","sources":["../../../src/observability/OpenTelemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAsExD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,KAAK,YAAY,GAAG;IAClB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAClC,CAAC;AA8JF,eAAO,MAAM,aAAa;qBA5JJ,OAAO;+BAyBK,YAAY,SAAS,wBAAwB,KAAG,WAAW;qBAyB/D,CAAC,OAAO,OAAO,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC;yBAKpD,IAAI,UAAU,MAAM,SAAS,MAAM,KAAG,IAAI;8BASrC,IAAI,SAAS,sBAAsB,KAAG,IAAI;kCA+BtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;+BA2BlD,sBAAsB,KAAG,IAAI;EA0C7D,CAAC;AAEH,eAAe,aAAa,CAAC"}
+{"version":3,"file":"OpenTelemetry.d.ts","sourceRoot":"","sources":["../../../src/observability/OpenTelemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAuFxD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;CACxB;AAED,KAAK,YAAY,GAAG;IAClB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAClC,CAAC;AAwMF,eAAO,MAAM,aAAa;qBAtMJ,OAAO;+BAyBK,YAAY,SAAS,wBAAwB,KAAG,WAAW;qBAyB/D,CAAC,OAAO,OAAO,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC;yBAKpD,IAAI,UAAU,MAAM,SAAS,MAAM,KAAG,IAAI;8BASrC,IAAI,SAAS,sBAAsB,KAAG,IAAI;kCA+BtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;+BA2BlD,sBAAsB,KAAG,IAAI;sCAkCtB,6BAA6B,KAAG,IAAI;EAmD3E,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/src/observability/OpenTelemetry.js

@@ -62,9 +62,9 @@ const fallbackPropagation = {
 };
 const fallbackTrace = {
     getTracer: () => ({
-        startSpan: () => noopSpan,
+        startSpan: (_name, _options, _context) => noopSpan,
     }),
-    getSpan: () => undefined,
+    getSpan: (_ctx) => undefined,
     setSpan: (ctx) => ctx,
 };
 const fallbackSpanKind = {
@@ -75,6 +75,17 @@ const fallbackSpanStatusCode = {
     OK: 1,
     ERROR: 2,
 };
+const resolveSpanStatusCode = () => {
+    return otel()?.SpanStatusCode ?? fallbackSpanStatusCode;
+};
+const resolveTracingContext = () => {
+    const api = otel();
+    return {
+        traceApi: api?.trace ?? fallbackTrace,
+        activeContext: api?.context?.active() ?? fallbackContext.active(),
+        spanKind: api?.SpanKind ?? fallbackSpanKind,
+    };
+};
 const otel = () => resolveOpenTelemetryApi();
 const isEnabled = () => {
     return Env.getBool('OTEL_ENABLED', false);
@@ -210,6 +221,41 @@ const recordDbQuerySpan = (input) => {
         // best-effort
     }
 };
+const recordQueueOperationSpan = (input) => {
+    if (isEnabled() === false)
+        return;
+    try {
+        const tracing = resolveTracingContext();
+        const parentSpan = tracing.traceApi.getSpan(tracing.activeContext);
+        if (!parentSpan)
+            return;
+        const tracer = tracing.traceApi.getTracer('zintrust');
+        const now = Date.now();
+        const durationMs = Number.isFinite(input.durationMs) ? Math.max(0, input.durationMs) : 0;
+        const startTime = now - durationMs;
+        const span = tracer.startSpan(`queue.${input.operation}`, {
+            kind: tracing.spanKind.CLIENT,
+            startTime,
+            attributes: {
+                'messaging.system': 'zintrust-queue',
+                'messaging.operation': input.operation,
+                'messaging.destination': input.queueName,
+                'zintrust.queue.status': input.status,
+            },
+        }, tracing.activeContext);
+        const statusCode = resolveSpanStatusCode();
+        if (input.status === 'error') {
+            span.setStatus({ code: statusCode.ERROR });
+        }
+        else {
+            span.setStatus({ code: statusCode.OK });
+        }
+        span.end(now);
+    }
+    catch {
+        // best-effort
+    }
+};
 export const OpenTelemetry = Object.freeze({
     isEnabled,
     startHttpServerSpan,
@@ -218,5 +264,6 @@ export const OpenTelemetry = Object.freeze({
     endHttpServerSpan,
     injectTraceHeaders,
     recordDbQuerySpan,
+    recordQueueOperationSpan,
 });
 export default OpenTelemetry;

package/src/orm/Database.d.ts

@@ -5,6 +5,9 @@
 import type { SupportedDriver } from '../migrations/enum';
 import type { DatabaseConfig, IDatabaseAdapter, QueryResult } from './DatabaseAdapter';
 import type { IQueryBuilder } from './QueryBuilder';
+export type RawValue = {
+    __raw: string;
+};
 export interface IDatabase {
     connect(): Promise<void>;
     disconnect(): Promise<void>;
@@ -12,6 +15,7 @@ export interface IDatabase {
     query(sql: string, parameters?: unknown[], isRead?: boolean): Promise<unknown[]>;
     queryOne(sql: string, parameters?: unknown[], isRead?: boolean): Promise<unknown>;
     execute(sql: string, parameters?: unknown[], isRead?: boolean): Promise<QueryResult>;
+    raw(value: string): RawValue;
     transaction<T>(callback: (db: IDatabase) => Promise<T>): Promise<T>;
     table(name: string): IQueryBuilder;
     onBeforeQuery(handler: (query: string, params: unknown[]) => void): void;

package/src/orm/Database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Database.d.ts","sourceRoot":"","sources":["../../../src/orm/Database.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQxD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,MAAM,WAAW,SAAS;IACxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,IAAI,OAAO,CAAC;IACvB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IACnC,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1F,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1E,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAC3F,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACvD,OAAO,IAAI,eAAe,CAAC;IAC3B,SAAS,IAAI,cAAc,CAAC;IAC5B,OAAO,IAAI,IAAI,CAAC;CACjB;AAyaD,eAAO,MAAM,QAAQ;IACnB;;OAEG;oBACa,cAAc,GAAG,SAAS;EAI1C,CAAC;AAIH,eAAO,MAAM,oBAAoB,GAC/B,SAAQ,cAAc,GAAG,SAAqB,EAC9C,uBAA0B,KACzB,OAAO,CAAC,UAAU,CAAC,OAAO,WAAW,CAAC,CAMxC,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,UAAU,SAAY,GAAG,SAAS,CAgBtF;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAWnD"}
+{"version":3,"file":"Database.d.ts","sourceRoot":"","sources":["../../../src/orm/Database.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUxD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,MAAM,MAAM,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,SAAS;IACxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,IAAI,OAAO,CAAC;IACvB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IACnC,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1F,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1E,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAC3F,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACvD,OAAO,IAAI,eAAe,CAAC;IAC3B,SAAS,IAAI,cAAc,CAAC;IAC5B,OAAO,IAAI,IAAI,CAAC;CACjB;AA2eD,eAAO,MAAM,QAAQ;IACnB;;OAEG;oBACa,cAAc,GAAG,SAAS;EAI1C,CAAC;AAIH,eAAO,MAAM,oBAAoB,GAC/B,SAAQ,cAAc,GAAG,SAAqB,EAC9C,uBAA0B,KACzB,OAAO,CAAC,UAAU,CAAC,OAAO,WAAW,CAAC,CAMxC,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,UAAU,SAAY,GAAG,SAAS,CAoBtF;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAWnD"}

package/src/orm/Database.js

@@ -3,13 +3,17 @@
  * Central database connection management and query execution
  */
 import { OpenTelemetry } from '../observability/OpenTelemetry.js';
+import { Cloudflare } from '../config/cloudflare.js';
 import { Env } from '../config/env.js';
+import { Logger } from '../config/logger.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import { EventEmitter } from '../node-singletons/events.js';
 import { D1Adapter } from './adapters/D1Adapter.js';
 import { D1RemoteAdapter } from './adapters/D1RemoteAdapter.js';
 import { MySQLAdapter } from './adapters/MySQLAdapter.js';
+import { MySQLProxyAdapter } from './adapters/MySQLProxyAdapter.js';
 import { PostgreSQLAdapter } from './adapters/PostgreSQLAdapter.js';
+import { PostgreSQLProxyAdapter } from './adapters/PostgreSQLProxyAdapter.js';
 import { SQLiteAdapter } from './adapters/SQLiteAdapter.js';
 import { SQLServerAdapter } from './adapters/SQLServerAdapter.js';
 import { DatabaseAdapterRegistry } from './DatabaseAdapterRegistry.js';
@@ -21,7 +25,76 @@ import { QueryBuilder } from './QueryBuilder.js';
 /**
  * Create appropriate adapter based on driver
  */
+const resolveMySqlProxyAdapter = (cfg) => {
+    if (cfg.driver !== 'mysql')
+        return null;
+    const proxyUrl = Env.get('MYSQL_PROXY_URL', '').trim();
+    const useProxy = Env.getBool('USE_MYSQL_PROXY', false);
+    if (useProxy || proxyUrl.length > 0) {
+        Logger.info('[Database] Selecting MySQL proxy adapter for Workers runtime', {
+            driver: cfg.driver,
+            useMySqlProxy: useProxy,
+            mysqlProxyUrlConfigured: proxyUrl.length > 0,
+            mysqlProxyUrl: proxyUrl,
+        });
+        return MySQLProxyAdapter.create(cfg);
+    }
+    return null;
+};
+const resolvePostgresProxyAdapter = (cfg) => {
+    if (cfg.driver !== 'postgresql')
+        return null;
+    const proxyUrl = Env.get('POSTGRES_PROXY_URL', '').trim();
+    const useProxy = Env.getBool('USE_POSTGRES_PROXY', false);
+    if (useProxy || proxyUrl.length > 0) {
+        Logger.info('[Database] Selecting PostgreSQL proxy adapter for Workers runtime', {
+            driver: cfg.driver,
+            usePostgresProxy: useProxy,
+            postgresProxyUrlConfigured: proxyUrl.length > 0,
+            postgresProxyUrl: proxyUrl,
+        });
+        return PostgreSQLProxyAdapter.create(cfg);
+    }
+    return null;
+};
+const ensureCloudflareSocketSupport = (cfg) => {
+    const isSocketDriver = cfg.driver === 'postgresql' || cfg.driver === 'mysql';
+    if (!isSocketDriver)
+        return;
+    if (Cloudflare.isCloudflareSocketsEnabled())
+        return;
+    Logger.warn('[Database] Cloudflare socket driver selected but sockets are disabled', {
+        driver: cfg.driver,
+        enableCloudflareSockets: Env.getBool('ENABLE_CLOUDFLARE_SOCKETS', false),
+    });
+    throw ErrorFactory.createConfigError('Cloudflare sockets are disabled. Set ENABLE_CLOUDFLARE_SOCKETS=true to use SQL adapters on Workers.');
+};
+const resolveWorkersAdapter = (cfg) => {
+    const workersEnv = Cloudflare.getWorkersEnv();
+    if (workersEnv === null)
+        return null;
+    Logger.info('[Database] Resolving adapter for Cloudflare Workers runtime', {
+        driver: cfg.driver,
+        useMySqlProxy: Env.getBool('USE_MYSQL_PROXY', false),
+        mysqlProxyUrlConfigured: Env.get('MYSQL_PROXY_URL', '').trim() !== '',
+        usePostgresProxy: Env.getBool('USE_POSTGRES_PROXY', false),
+        postgresProxyUrlConfigured: Env.get('POSTGRES_PROXY_URL', '').trim() !== '',
+        cloudflareSocketsEnabled: Cloudflare.isCloudflareSocketsEnabled(),
+        workersBindingsCount: Object.keys(workersEnv).length,
+    });
+    const mysqlProxy = resolveMySqlProxyAdapter(cfg);
+    if (mysqlProxy)
+        return mysqlProxy;
+    const postgresProxy = resolvePostgresProxyAdapter(cfg);
+    if (postgresProxy)
+        return postgresProxy;
+    ensureCloudflareSocketSupport(cfg);
+    return null;
+};
 const createAdapter = (cfg) => {
+    const workersAdapter = resolveWorkersAdapter(cfg);
+    if (workersAdapter)
+        return workersAdapter;
     const registered = DatabaseAdapterRegistry.get(cfg.driver);
     if (registered !== undefined) {
         return registered(cfg);
@@ -47,15 +120,7 @@ const createAdapter = (cfg) => {
  */
 const initializeAdapters = (dbConfig) => {
     const writeAdapter = createAdapter(dbConfig);
-    const readAdapters = [];
-    if (dbConfig.readHosts !== undefined && dbConfig.readHosts.length > 0) {
-        for (const host of dbConfig.readHosts) {
-            readAdapters.push(createAdapter({ ...dbConfig, host }));
-        }
-    }
-    else {
-        readAdapters.push(writeAdapter);
-    }
+    const readAdapters = [writeAdapter];
     return { writeAdapter, readAdapters };
 };
 /**
@@ -237,6 +302,9 @@ const createDbFacade = (input) => {
         query: queryHandlers.query,
         queryOne: queryHandlers.queryOne,
         execute: queryHandlers.execute,
+        raw(value) {
+            return { __raw: value };
+        },
         transaction: queryHandlers.transaction,
         table(name) {
             return QueryBuilder.create(name, db);
@@ -319,6 +387,9 @@ export const useEnsureDbConnected = async (config = undefined, connectionName =
 export function useDatabase(config, connection = 'default') {
     if (databaseInstances.has(connection) === false) {
         if (config === undefined) {
+            // Diagnostic logging
+            Logger.error('[DEBUG] Database instances keys:', Array.from(databaseInstances.keys()));
+            Logger.error('[DEBUG] Requesting connection:', connection);
             throw ErrorFactory.createConfigError(`Database connection '${connection}' is not registered. ` +
                 `Call useDatabase(config, '${connection}') during startup to register it.`);
         }

package/src/orm/DatabaseRuntimeRegistration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseRuntimeRegistration.d.ts","sourceRoot":"","sources":["../../../src/orm/DatabaseRuntimeRegistration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,mBAAmB,EAGpB,MAAM,cAAc,CAAC;AAwDtB;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAWpF"}
+{"version":3,"file":"DatabaseRuntimeRegistration.d.ts","sourceRoot":"","sources":["../../../src/orm/DatabaseRuntimeRegistration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,mBAAmB,EAGpB,MAAM,cAAc,CAAC;AA0DtB;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAYpF"}

package/src/orm/DatabaseRuntimeRegistration.js

@@ -55,6 +55,7 @@ const registerConnections = (connections) => {
         useDatabase(toOrmConfig(runtimeCfg), name);
     }
 };
+import { Logger } from '../config/logger.js';
 /**
  * Register all connections from runtime config.
  *
@@ -69,5 +70,6 @@ export function registerDatabasesFromRuntimeConfig(config) {
     if (defaultCfg === undefined) {
         throw ErrorFactory.createConfigError(`Database default connection not configured: ${String(config.default ?? '')}`);
     }
+    Logger.info(`✓ Registering default database connection: ${config.default}`);
     useDatabase(toOrmConfig(defaultCfg), 'default');
 }

package/src/orm/QueryBuilder.d.ts

@@ -37,6 +37,7 @@ export interface IQueryBuilder {
     where(column: string, operator: string | number | boolean | null, value?: unknown): IQueryBuilder;
     andWhere(column: string, operator: string, value?: unknown): IQueryBuilder;
     orWhere(column: string, operator: string, value?: unknown): IQueryBuilder;
+    whereNull(column: string): IQueryBuilder;
     whereIn(column: string, values: unknown[]): IQueryBuilder;
     whereNotIn(column: string, values: unknown[]): IQueryBuilder;
     withTrashed(): IQueryBuilder;

package/src/orm/QueryBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QueryBuilder.d.ts","sourceRoot":"","sources":["../../../src/orm/QueryBuilder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,aAAa,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACvD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACnD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAC3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAC1E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;IAC1D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;IAC7D,WAAW,IAAI,aAAa,CAAC;IAC7B,WAAW,IAAI,aAAa,CAAC;IAC7B,cAAc,IAAI,aAAa,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC;IACnD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,aAAa,CAAC;IACnE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACrC,eAAe,IAAI,WAAW,EAAE,CAAC;IACjC,gBAAgB,IAAI,MAAM,EAAE,CAAC;IAC7B,QAAQ,IAAI,MAAM,CAAC;IACnB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,IAAI,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACxE,QAAQ,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,eAAe,IAAI,OAAO,CAAC;IAC3B,KAAK,IAAI,MAAM,CAAC;IAChB,aAAa,IAAI,OAAO,EAAE,CAAC;IAC3B,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,aAAa,CAAC;IAC7D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAChG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAy0CD;;;;;GAKG;AACH,eAAO,MAAM,YAAY;IACvB;;OAEG;sBAEU,MAAM,GAAG,SAAS,OACxB,SAAS,YACL,mBAAmB,GAC3B,aAAa;IA8BhB;;;;;OAKG;aACY,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;EAIxC,CAAC"}
+{"version":3,"file":"QueryBuilder.d.ts","sourceRoot":"","sources":["../../../src/orm/QueryBuilder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGtE,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGzC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,aAAa,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACvD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACnD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAC3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAC1E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;IAC1D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;IAC7D,WAAW,IAAI,aAAa,CAAC;IAC7B,WAAW,IAAI,aAAa,CAAC;IAC7B,cAAc,IAAI,aAAa,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC;IACnD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,aAAa,CAAC;IACnE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC;IACrC,eAAe,IAAI,WAAW,EAAE,CAAC;IACjC,gBAAgB,IAAI,MAAM,EAAE,CAAC;IAC7B,QAAQ,IAAI,MAAM,CAAC;IACnB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,IAAI,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACxE,QAAQ,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,eAAe,IAAI,OAAO,CAAC;IAC3B,KAAK,IAAI,MAAM,CAAC;IAChB,aAAa,IAAI,OAAO,EAAE,CAAC;IAC3B,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/F,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,aAAa,CAAC;IAC7D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAChG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAy2CD;;;;;GAKG;AACH,eAAO,MAAM,YAAY;IACvB;;OAEG;sBAEU,MAAM,GAAG,SAAS,OACxB,SAAS,YACL,mBAAmB,GAC3B,aAAa;IA8BhB;;;;;OAKG;aACY,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;EAIxC,CAAC"}

package/src/orm/QueryBuilder.js

@@ -36,6 +36,7 @@ const escapeIdentifier = (id, dialect) => {
 };
 const SAFE_IDENTIFIER_PATH = /^[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*$/;
 const SAFE_IDENTIFIER = /^[A-Za-z_]\w*$/;
+const SAFE_FUNCTION_CALL = /^[A-Za-z_]\w*\(\)$/;
 const assertSafeIdentifierPath = (id, label) => {
     const trimmed = id.trim();
     if (trimmed.length === 0) {
@@ -54,6 +55,20 @@ const assertSafeIdentifier = (id, label) => {
         throw ErrorFactory.createDatabaseError(`Unsafe SQL identifier for ${label}`);
     }
 };
+const isRawValue = (value) => typeof value === 'object' &&
+    value !== null &&
+    '__raw' in value &&
+    typeof value.__raw === 'string';
+const assertSafeRawExpression = (raw) => {
+    const trimmed = raw.trim();
+    if (trimmed.length === 0) {
+        throw ErrorFactory.createDatabaseError('Empty raw SQL expression');
+    }
+    if (SAFE_IDENTIFIER_PATH.test(trimmed) || SAFE_FUNCTION_CALL.test(trimmed)) {
+        return trimmed;
+    }
+    throw ErrorFactory.createDatabaseError('Unsafe raw SQL expression');
+};
 const normalizeOrderDirection = (direction) => {
     if (direction === undefined || direction === null)
         return 'ASC';
@@ -370,7 +385,9 @@ const compileInsert = (tableName, values, dialect) => {
             parameters.push(item[key]);
         }
     }
-    const sql = `INSERT INTO ${escapeIdentifier(tableName, dialect)} (${colsSql}) VALUES ${placeholders}`;
+    const baseSql = `INSERT INTO ${escapeIdentifier(tableName, dialect)} (${colsSql}) VALUES ${placeholders}`;
+    const wantsReturning = dialect === 'postgresql' && items.length === 1;
+    const sql = wantsReturning ? `${baseSql} RETURNING id` : baseSql;
     return { sql, parameters };
 };
 const compileUpdate = (tableName, values, conditions, dialect) => {
@@ -384,8 +401,20 @@ const compileUpdate = (tableName, values, conditions, dialect) => {
     assertSafeIdentifierPath(tableName, 'table name');
     for (const key of keys)
         assertSafeIdentifier(key, 'update column');
-    const setSql = keys.map((k) => `${escapeIdentifier(k, dialect)} = ?`).join(', ');
-    const setParams = keys.map((k) => values[k]);
+    const setParts = [];
+    const setParams = [];
+    for (const key of keys) {
+        const value = values[key];
+        if (isRawValue(value)) {
+            const rawSql = assertSafeRawExpression(value.__raw);
+            setParts.push(`${escapeIdentifier(key, dialect)} = ${rawSql}`);
+        }
+        else {
+            setParts.push(`${escapeIdentifier(key, dialect)} = ?`);
+            setParams.push(value);
+        }
+    }
+    const setSql = setParts.join(', ');
     const where = compileWhere(conditions, dialect);
     const sql = `UPDATE ${escapeIdentifier(tableName, dialect)} SET ${setSql}${where.sql}`;
     return { sql, parameters: [...setParams, ...where.parameters] };
@@ -479,6 +508,7 @@ function attachWhereMethods(builder, state) {
     };
     builder.andWhere = (column, operator, value) => builder.where(column, operator, value);
     builder.orWhere = (column, operator, value) => builder.where(column, operator, value);
+    builder.whereNull = (column) => builder.where(column, 'IS', null);
     builder.whereIn = (column, values) => {
         builder.where(column, 'IN', values);
         return builder;

package/src/orm/SchemaCompiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SchemaCompiler.d.ts","sourceRoot":"","sources":["../../../src/orm/SchemaCompiler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAoB,OAAO,EAAE,MAAM,aAAa,CAAC;AA4I7D,eAAO,MAAM,cAAc;oBAEnB,SAAS,UACL,OAAO,SACR;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC,IAAI,CAAC;kBAMI,SAAS,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EAM5D,CAAC"}
+{"version":3,"file":"SchemaCompiler.d.ts","sourceRoot":"","sources":["../../../src/orm/SchemaCompiler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAoB,OAAO,EAAE,MAAM,aAAa,CAAC;AA+I7D,eAAO,MAAM,cAAc;oBAEnB,SAAS,UACL,OAAO,SACR;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC,IAAI,CAAC;kBAMI,SAAS,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;EAM5D,CAAC"}