acrylblends 0.7.3 → 0.7.5

package/lib/serve-static.js

@@ -1,77 +1,2 @@
-import { tryDecodeURI } from "./utils/url.js";
-import { parseAccept } from "./utils/accept.js";
-import { COMPRESSIBLE_CONTENT_TYPE_REGEX } from "./utils/compress.js";
-import { getMimeType } from "./utils/mime.js";
-//#region ../../plugins/acryl-router/src/core/middleware/serve-static/path.ts
-/**
-* `defaultJoin` does not support Windows paths and always uses `/` separators.
-* If you need Windows path support, please use `join` exported from `node:path` etc. instead.
-*/
-const defaultJoin = (...paths) => {
-	let result = paths.filter((p) => p !== "").join("/");
-	result = result.replace(/(?<=\/)\/+/g, "");
-	const segments = result.split("/");
-	const resolved = [];
-	for (const segment of segments) if (segment === ".." && resolved.length > 0 && resolved.at(-1) !== "..") resolved.pop();
-	else if (segment !== ".") resolved.push(segment);
-	return resolved.join("/") || ".";
-};
-//#endregion
-//#region ../../plugins/acryl-router/src/core/middleware/serve-static/index.ts
-const ENCODINGS = {
-	br: ".br",
-	zstd: ".zst",
-	gzip: ".gz"
-};
-const ENCODINGS_ORDERED_KEYS = Object.keys(ENCODINGS);
-const DEFAULT_DOCUMENT = "index.html";
-/**
-* This middleware is not directly used by the user. Create a wrapper specifying `getContent()` by the environment such as Deno or Bun.
-*/
-const serveStatic = (options) => {
-	const root = options.root ?? "./";
-	const optionPath = options.path;
-	const join = options.join ?? defaultJoin;
-	return async (c, next) => {
-		if (c.finalized) return next();
-		if (c.req.method !== "GET" && c.req.method !== "HEAD") return next();
-		let filename;
-		if (options.path) filename = options.path;
-		else try {
-			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
-			filename = tryDecodeURI(c.req.path);
-			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
-		} catch {
-			await options.onNotFound?.(c.req.path, c);
-			return next();
-		}
-		let path = join(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
-		if (options.isDir && await options.isDir(path)) path = join(path, DEFAULT_DOCUMENT);
-		const getContent = options.getContent;
-		let content = await getContent(path, c);
-		if (content instanceof Response) return c.newResponse(content.body, content);
-		if (content != null) {
-			const mimeType = options.mimes && getMimeType(path, options.mimes) || getMimeType(path);
-			c.header("Content-Type", mimeType || "application/octet-stream");
-			if (options.precompressed && (!mimeType || COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
-				const acceptEncodingSet = new Set(parseAccept(c.req.header("Accept-Encoding") ?? "").filter((encoding) => encoding.q > 0).map((encoding) => encoding.type));
-				for (const encoding of ENCODINGS_ORDERED_KEYS) {
-					if (!acceptEncodingSet.has(encoding)) continue;
-					const compressedContent = await getContent(path + ENCODINGS[encoding], c);
-					if (compressedContent) {
-						content = compressedContent;
-						c.header("Content-Encoding", encoding);
-						c.header("Vary", "Accept-Encoding", { append: true });
-						break;
-					}
-				}
-			}
-			await options.onFound?.(path, c);
-			return c.body(content);
-		}
-		await options.onNotFound?.(path, c);
-		await next();
-	};
-};
-//#endregion
+import { t as serveStatic } from "./serve-static-Cp5adzGo.js";
 export { serveStatic };

package/lib/service-worker.d.ts

@@ -0,0 +1,48 @@
+import { Y as Schema, v as Env } from "./context-DS3fYyG-.js";
+import { t as Acryl } from "./app-D8riatvv.js";
+
+//#region ../../plugins/acryl-router/src/core/adapter/service-worker/types.d.ts
+interface ExtendableEvent extends Event {
+  waitUntil(f: Promise<any>): void;
+}
+interface FetchEvent extends ExtendableEvent {
+  readonly clientId: string;
+  readonly handled: Promise<void>;
+  readonly preloadResponse: Promise<any>;
+  readonly request: Request;
+  readonly resultingClientId: string;
+  respondWith(r: Response | PromiseLike<Response>): void;
+}
+//#endregion
+//#region ../../plugins/acryl-router/src/core/adapter/service-worker/handler.d.ts
+type Handler = (evt: FetchEvent) => void;
+type HandleOptions = {
+  fetch?: typeof fetch;
+};
+/**
+ * Adapter for Service Worker
+ */
+declare const handle: <E extends Env, S extends Schema, BasePath extends string>(app: Acryl<E, S, BasePath>, opts?: HandleOptions) => Handler;
+//#endregion
+//#region ../../plugins/acryl-router/src/core/adapter/service-worker/index.d.ts
+/**
+ * Registers a Acryl app to handle fetch events in a service worker.
+ * This sets up `addEventListener('fetch', handle(app, options))` for the provided app.
+ *
+ * @param app - The Acryl application instance
+ * @param options - Options for handling requests (fetch defaults to undefined)
+ * @example
+ * ```ts
+ * import { Acryl } from 'acrylblends'
+ * import { fire } from 'acrylblends/service-worker'
+ *
+ * const app = new Acryl()
+ *
+ * app.get('/', (c) => c.text('Hi'))
+ *
+ * fire(app)
+ * ```
+ */
+declare const fire: <E extends Env, S extends Schema, BasePath extends string>(app: Acryl<E, S, BasePath>, options?: HandleOptions) => void;
+//#endregion
+export { fire, handle };

package/lib/service-worker.js

@@ -0,0 +1,38 @@
+//#region ../../plugins/acryl-router/src/core/adapter/service-worker/handler.ts
+/**
+* Adapter for Service Worker
+*/
+const handle = (app, opts = { fetch: globalThis.fetch.bind(globalThis) }) => {
+	return (evt) => {
+		evt.respondWith((async () => {
+			const res = await app.fetch(evt.request, {}, evt);
+			if (opts.fetch && res.status === 404) return await opts.fetch(evt.request);
+			return res;
+		})());
+	};
+};
+//#endregion
+//#region ../../plugins/acryl-router/src/core/adapter/service-worker/index.ts
+/**
+* Registers a Acryl app to handle fetch events in a service worker.
+* This sets up `addEventListener('fetch', handle(app, options))` for the provided app.
+*
+* @param app - The Acryl application instance
+* @param options - Options for handling requests (fetch defaults to undefined)
+* @example
+* ```ts
+* import { Acryl } from 'acrylblends'
+* import { fire } from 'acrylblends/service-worker'
+*
+* const app = new Acryl()
+*
+* app.get('/', (c) => c.text('Hi'))
+*
+* fire(app)
+* ```
+*/
+const fire = (app, options) => {
+	addEventListener("fetch", handle(app, options));
+};
+//#endregion
+export { fire, handle };

package/lib/src-MWcsMS8i.js

@@ -0,0 +1,85 @@
+import { readFile, readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+//#region ../../plugins/acryl-db/src/facade/schema.ts
+/** Validate a prefix before using it as part of a SQL identifier. */
+function validateSchemaPrefix(prefix) {
+	if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(prefix)) throw new Error(`Invalid SQL schema prefix ${JSON.stringify(prefix)}`);
+	if (prefix.toLowerCase().startsWith("sqlite_")) throw new Error(`SQL schema prefix ${JSON.stringify(prefix)} is reserved`);
+}
+//#endregion
+//#region ../../plugins/acryl-db/src/facade/migrations.ts
+/**
+* Apply all pending migrations atomically, tracking their version in the named metadata table.
+*
+* The bookkeeping SQL runs unchanged on SQLite and Postgres: no `STRICT` table, `ON CONFLICT DO NOTHING`
+* instead of `INSERT OR IGNORE`, and the version written as a checked integer rather than a binding,
+* since the two dialects spell placeholders differently.
+*/
+async function applyMigrations(database, migrations, options) {
+	const { table } = options;
+	validateSchemaPrefix(table);
+	for (let index = 0; index < migrations.length; index++) if (migrations[index]?.version !== index + 1) throw new Error("Migrations must have contiguous versions starting at 1");
+	await database.transaction(async (transaction) => {
+		await transaction.exec(`CREATE TABLE IF NOT EXISTS ${table} (
+			singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+			version INTEGER NOT NULL CHECK (version >= 0)
+		)`);
+		await transaction.exec(`INSERT INTO ${table} (singleton, version) VALUES (1, 0) ON CONFLICT DO NOTHING`);
+		const row = await transaction.get(`SELECT version FROM ${table} WHERE singleton = 1`);
+		if (row === void 0) throw new Error("Schema metadata is missing");
+		const storedVersion = Number(row.version);
+		const currentVersion = migrations.at(-1)?.version ?? 0;
+		if (storedVersion > currentVersion) throw new Error(`Schema version ${storedVersion} is newer than supported version ${currentVersion}`);
+		for (const migration of migrations) {
+			if (migration.version <= storedVersion) continue;
+			for (const statement of migration.statements) await transaction.exec(statement);
+			await transaction.exec(`UPDATE ${table} SET version = ${String(migration.version)} WHERE singleton = 1`);
+		}
+	});
+}
+//#endregion
+//#region ../../plugins/acryl-db/src/migration-files.ts
+/**
+* An app's migrations as numbered SQL files: `migrations/001-notes.sql`, `002-tags.sql`, ... Each file is one migration, run as one
+* `exec` (so it may hold several statements), numbered from 1 with no gaps.
+*/
+const FILE = /^(\d+)-[a-z0-9][a-z0-9-]*\.sql$/u;
+/**
+* Read every `NNN-name.sql` file of a folder, in number order.
+* @throws when a `.sql` file is not named `NNN-name.sql`, or the numbers do not run 1, 2, 3, ... without gaps or repeats.
+*/
+async function readMigrationFiles(folder) {
+	const dir = typeof folder === "string" ? folder : fileURLToPath(folder);
+	const numbered = (await readdir(dir)).filter((name) => name.endsWith(".sql")).sort().map((name) => {
+		const match = FILE.exec(name);
+		if (match?.[1] === void 0) throw new Error(`acryl-db: migration file ${name} in ${dir} must be named NNN-name.sql, like 001-notes.sql`);
+		return {
+			name,
+			version: Number(match[1])
+		};
+	}).sort((a, b) => a.version - b.version);
+	numbered.forEach((file, index) => {
+		if (file.version !== index + 1) throw new Error(`acryl-db: migration ${file.name} in ${dir} should be number ${String(index + 1)}; the files must be numbered 1, 2, 3, ... with no gaps or repeats`);
+	});
+	return Promise.all(numbered.map(async (file) => ({
+		version: file.version,
+		statements: [await readFile(join(dir, file.name), "utf8")]
+	})));
+}
+//#endregion
+//#region ../../plugins/acryl-db/src/index.ts
+/**
+* The `db` port: what an app's code sees of its relational database, whichever provider (`acryl-db-sqlite`, `acryl-db-postgres`) serves
+* it. Plain code (an acrylblends app) opens a database with a provider's `openDb`; a Cordis plugin declares `inject: ['db']`, imports
+* `acryl-db/cordis` for the `ctx.db` type, and never imports a driver.
+*
+* Bindings are positional `?` placeholders on every provider; a provider whose database spells them differently translates them.
+* This entry imports nothing from Cordis, at runtime or in its types.
+*/
+/** The service name every `db` provider registers. */
+const DB_SERVICE = "db";
+/** The table that records an app's migration version. */
+const MIGRATIONS_TABLE = "_migrations";
+//#endregion
+export { validateSchemaPrefix as a, applyMigrations as i, MIGRATIONS_TABLE as n, readMigrationFiles as r, DB_SERVICE as t };

package/lib/ssg.d.ts

@@ -1,156 +1,2 @@
-import { L as MiddlewareHandler, Y as Schema, t as Context, v as Env } from "./context-DS3fYyG-.js";
-import { t as Acryl } from "./app-D8riatvv.js";
-
-//#region ../../plugins/acryl-router/src/core/helper/ssg/ssg.d.ts
-declare const DEFAULT_OUTPUT_DIR = "./static";
-/**
- * @experimental
- * `FileSystemModule` is an experimental feature.
- * The API might be changed.
- */
-interface FileSystemModule {
-  writeFile(path: string, data: string | Uint8Array): Promise<void>;
-  mkdir(path: string, options: {
-    recursive: boolean;
-  }): Promise<void | string>;
-}
-/**
- * @experimental
- * `ToSSGResult` is an experimental feature.
- * The API might be changed.
- */
-interface ToSSGResult {
-  success: boolean;
-  files: string[];
-  error?: Error;
-}
-declare const defaultExtensionMap: Record<string, string>;
-type BeforeRequestHook = (req: Request) => Request | false | Promise<Request | false>;
-type AfterResponseHook = (res: Response) => Response | false | Promise<Response | false>;
-type AfterGenerateHook = (result: ToSSGResult, fsModule: FileSystemModule, options?: ToSSGOptions) => void | Promise<void>;
-declare const combineBeforeRequestHooks: (hooks: BeforeRequestHook | BeforeRequestHook[]) => BeforeRequestHook;
-declare const combineAfterResponseHooks: (hooks: AfterResponseHook | AfterResponseHook[]) => AfterResponseHook;
-declare const combineAfterGenerateHooks: (hooks: AfterGenerateHook | AfterGenerateHook[], fsModule: FileSystemModule, options?: ToSSGOptions) => AfterGenerateHook;
-interface SSGPlugin {
-  beforeRequestHook?: BeforeRequestHook | BeforeRequestHook[];
-  afterResponseHook?: AfterResponseHook | AfterResponseHook[];
-  afterGenerateHook?: AfterGenerateHook | AfterGenerateHook[];
-}
-interface ToSSGOptions {
-  dir?: string;
-  /**
-   * @deprecated Use plugins[].beforeRequestHook instead.
-   */
-  beforeRequestHook?: BeforeRequestHook | BeforeRequestHook[];
-  /**
-   * @deprecated Use plugins[].afterResponseHook instead.
-   */
-  afterResponseHook?: AfterResponseHook | AfterResponseHook[];
-  /**
-   * @deprecated Use plugins[].afterGenerateHook instead.
-   */
-  afterGenerateHook?: AfterGenerateHook | AfterGenerateHook[];
-  concurrency?: number;
-  extensionMap?: Record<string, string>;
-  plugins?: SSGPlugin[];
-}
-/**
- * @experimental
- * `fetchRoutesContent` is an experimental feature.
- * The API might be changed.
- */
-declare const fetchRoutesContent: <E extends Env = Env, S extends Schema = {}, BasePath extends string = "/">(app: Acryl<E, S, BasePath>, beforeRequestHook?: BeforeRequestHook, afterResponseHook?: AfterResponseHook, concurrency?: number) => Generator<Promise<Generator<Promise<{
-  routePath: string;
-  mimeType: string;
-  content: string | ArrayBuffer;
-} | undefined>> | undefined>>;
-declare const saveContentToFile: (data: Promise<{
-  routePath: string;
-  content: string | ArrayBuffer;
-  mimeType: string;
-} | undefined>, fsModule: FileSystemModule, outDir: string, extensionMap?: Record<string, string>) => Promise<string | undefined>;
-/**
- * @experimental
- * `ToSSGInterface` is an experimental feature.
- * The API might be changed.
- */
-interface ToSSGInterface {
-  (app: Acryl<any, any, any>, fsModule: FileSystemModule, options?: ToSSGOptions): Promise<ToSSGResult>;
-}
-/**
- * @experimental
- * `ToSSGAdaptorInterface` is an experimental feature.
- * The API might be changed.
- */
-interface ToSSGAdaptorInterface<E extends Env = Env, S extends Schema = {}, BasePath extends string = '/'> {
-  (app: Acryl<E, S, BasePath>, options?: ToSSGOptions): Promise<ToSSGResult>;
-}
-/**
- * @experimental
- * `toSSG` is an experimental feature.
- * The API might be changed.
- */
-declare const toSSG: ToSSGInterface;
-//#endregion
-//#region ../../plugins/acryl-router/src/core/helper/ssg/middleware.d.ts
-declare const X_ACRYL_DISABLE_SSG_HEADER_KEY = "x-acryl-disable-ssg";
-interface SSGParam {
-  [key: string]: string;
-}
-type SSGParams = SSGParam[];
-interface SSGParamsMiddleware {
-  <E extends Env = Env>(generateParams: (c: Context<E>) => SSGParams | Promise<SSGParams>): MiddlewareHandler<E>;
-  <E extends Env = Env>(params: SSGParams): MiddlewareHandler<E>;
-}
-/**
- * Define SSG Route
- */
-declare const ssgParams: SSGParamsMiddleware;
-/**
- * @experimental
- * `isSSGContext` is an experimental feature.
- * The API might be changed.
- */
-declare const isSSGContext: (c: Context) => boolean;
-/**
- * @experimental
- * `disableSSG` is an experimental feature.
- * The API might be changed.
- */
-declare const disableSSG: () => MiddlewareHandler;
-/**
- * @experimental
- * `onlySSG` is an experimental feature.
- * The API might be changed.
- */
-declare const onlySSG: () => MiddlewareHandler;
-//#endregion
-//#region ../../plugins/acryl-router/src/core/helper/ssg/plugins.d.ts
-/**
- * The default plugin that defines the recommended behavior.
- *
- * @experimental
- * `defaultPlugin` is an experimental feature.
- * The API might be changed.
- */
-declare const defaultPlugin: () => SSGPlugin;
-/**
- * The redirect plugin that generates HTML redirect pages for HTTP redirect responses for status codes 301, 302, 303, 307 and 308.
- *
- * When used with `defaultPlugin`, place `redirectPlugin` before it, because `defaultPlugin` skips non-200 responses.
- *
- * ```ts
- * // ✅ Will work as expected
- * toSSG(app, fs, { plugins: [redirectPlugin(), defaultPlugin()] })
- *
- * // ❌ Will not work as expected
- * toSSG(app, fs, { plugins: [defaultPlugin(), redirectPlugin()] })
- * ```
- *
- * @experimental
- * `redirectPlugin` is an experimental feature.
- * The API might be changed.
- */
-declare const redirectPlugin: () => SSGPlugin;
-//#endregion
+import { C as saveContentToFile, S as fetchRoutesContent, _ as ToSSGResult, a as isSSGContext, b as combineBeforeRequestHooks, c as AfterGenerateHook, d as DEFAULT_OUTPUT_DIR, f as FileSystemModule, g as ToSSGOptions, h as ToSSGInterface, i as disableSSG, l as AfterResponseHook, m as ToSSGAdaptorInterface, n as redirectPlugin, o as onlySSG, p as SSGPlugin, r as X_ACRYL_DISABLE_SSG_HEADER_KEY, s as ssgParams, t as defaultPlugin, u as BeforeRequestHook, v as combineAfterGenerateHooks, w as toSSG, x as defaultExtensionMap, y as combineAfterResponseHooks } from "./index-DaJtL7ci.js";
 export { AfterGenerateHook, AfterResponseHook, BeforeRequestHook, DEFAULT_OUTPUT_DIR, FileSystemModule, SSGPlugin, ToSSGAdaptorInterface, ToSSGInterface, ToSSGOptions, ToSSGResult, X_ACRYL_DISABLE_SSG_HEADER_KEY, combineAfterGenerateHooks, combineAfterResponseHooks, combineBeforeRequestHooks, defaultExtensionMap, defaultPlugin, disableSSG, fetchRoutesContent, isSSGContext, onlySSG, redirectPlugin, saveContentToFile, ssgParams, toSSG };

package/lib/vercel.d.ts

@@ -0,0 +1,10 @@
+import { r as GetConnInfo } from "./types-Dv_nV2cv.js";
+import { t as Acryl } from "./app-D8riatvv.js";
+
+//#region ../../plugins/acryl-router/src/core/adapter/vercel/handler.d.ts
+declare const handle: (app: Acryl<any, any, any>) => (req: Request) => Response | Promise<Response>;
+//#endregion
+//#region ../../plugins/acryl-router/src/core/adapter/vercel/conninfo.d.ts
+declare const getConnInfo: GetConnInfo;
+//#endregion
+export { getConnInfo, handle };

package/lib/vercel.js

@@ -0,0 +1,9 @@
+//#region ../../plugins/acryl-router/src/core/adapter/vercel/handler.ts
+const handle = (app) => (req) => {
+	return app.fetch(req);
+};
+//#endregion
+//#region ../../plugins/acryl-router/src/core/adapter/vercel/conninfo.ts
+const getConnInfo = (c) => ({ remote: { address: c.req.header("x-real-ip") } });
+//#endregion
+export { getConnInfo, handle };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acrylblends",
-  "version": "0.7.3",
+  "version": "0.7.5",
   "description": "The Acryl web framework (import { Acryl } from \"acrylblends\") and the acrylblends command that scaffolds Cordis apps.",
   "license": "MIT",
   "type": "module",
@@ -190,6 +190,38 @@
       "types": "./lib/testing.d.ts",
       "default": "./lib/testing.js"
     },
+    "./aws-lambda": {
+      "types": "./lib/aws-lambda.d.ts",
+      "default": "./lib/aws-lambda.js"
+    },
+    "./bun": {
+      "types": "./lib/bun.d.ts",
+      "default": "./lib/bun.js"
+    },
+    "./cloudflare-pages": {
+      "types": "./lib/cloudflare-pages.d.ts",
+      "default": "./lib/cloudflare-pages.js"
+    },
+    "./cloudflare-workers": {
+      "types": "./lib/cloudflare-workers.d.ts",
+      "default": "./lib/cloudflare-workers.js"
+    },
+    "./lambda-edge": {
+      "types": "./lib/lambda-edge.d.ts",
+      "default": "./lib/lambda-edge.js"
+    },
+    "./netlify": {
+      "types": "./lib/netlify.d.ts",
+      "default": "./lib/netlify.js"
+    },
+    "./service-worker": {
+      "types": "./lib/service-worker.d.ts",
+      "default": "./lib/service-worker.js"
+    },
+    "./vercel": {
+      "types": "./lib/vercel.d.ts",
+      "default": "./lib/vercel.js"
+    },
     "./ws": {
       "types": "./lib/ws.d.ts",
       "default": "./lib/ws.js"
@@ -386,6 +418,14 @@
       "types": "./lib/node-server/register.d.ts",
       "default": "./lib/node-server/register.js"
     },
+    "./db": {
+      "types": "./lib/db.d.ts",
+      "default": "./lib/db.js"
+    },
+    "./db/sqlite": {
+      "types": "./lib/db/sqlite.d.ts",
+      "default": "./lib/db/sqlite.js"
+    },
     "./package.json": "./package.json",
     "./cli": {
       "types": "./dist/index.d.ts",

package/plugins/acryl-db/LICENSE

@@ -0,0 +1,47 @@
+MIT License
+
+Copyright (c) 2026 WebBoxes s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+The files under src/facade are derived from the SQLite facade of chord in pi (https://github.com/earendil-works/pi, packages/chord, commit d5b3de22d0e24a3e9c38a9410d3329b099717283), used under this license:
+
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/plugins/acryl-db/plugin.json

@@ -0,0 +1,12 @@
+{
+  "name": "acryl-db",
+  "description": "The db port: the relational database an app plugin sees through inject: ['db'], with numbered SQL migrations. Types and the migration runner; a provider (acryl-db-sqlite) serves it. Vendored from ACRYL.",
+  "requires": [],
+  "inject": [],
+  "provides": [],
+  "dependencies": {
+    "@deepseek-ai/cordis": "4.0.4"
+  },
+  "mount": "it is the port, not a service: a plugin declares inject: ['db'] and imports its types from './plugins/acryl-db/src/index.ts' (or the ctx.db type from './plugins/acryl-db/src/cordis.ts'); add acryl-db-sqlite to provide it",
+  "omit": ["src/conformance.ts", "**/*.test.*", "**/*.case.ts"]
+}

package/plugins/acryl-db/src/cordis.ts

@@ -0,0 +1,13 @@
+/**
+ * The `ctx.db` type for Cordis plugins: `import type {} from 'acryl-db/cordis'` beside `inject: ['db']`. Kept out of the root entry, so
+ * plain code that uses the port never names Cordis.
+ */
+
+import type {} from '@deepseek-ai/cordis'
+import type { Db } from './facade/database.ts'
+
+declare module '@deepseek-ai/cordis' {
+  interface Context {
+    db: Db
+  }
+}

package/plugins/acryl-db/src/facade/database.ts

@@ -0,0 +1,41 @@
+/** Values supported by the portable SQL drivers. */
+export type SqlValue = null | number | bigint | string | Uint8Array;
+
+/**
+ * Asynchronous SQL operations shared by a database and its transaction handles.
+ *
+ * `exec` runs SQL text without bindings and may contain several statements. `run`, `get`, and `all`
+ * execute one statement with positional bindings. Adapters may cache prepared statements by SQL text,
+ * so callers pass values as bindings instead of interpolating them. `run` resolves the number of rows
+ * the statement changed.
+ */
+export interface DbExecutor {
+	exec(sql: string): Promise<void>;
+	run(sql: string, ...params: SqlValue[]): Promise<{ readonly changes: number }>;
+	get<T extends object>(sql: string, ...params: SqlValue[]): Promise<T | undefined>;
+	all<T extends object>(sql: string, ...params: SqlValue[]): Promise<T[]>;
+}
+
+/**
+ * Minimal portable SQL database facade.
+ *
+ * All operations are asynchronous so adapters may execute outside the caller's runtime.
+ *
+ * `transaction` passes the callback a transaction handle. All work in the transaction
+ * must use that handle; the handle is invalid after the callback settles. Adapters must
+ * queue unrelated operations and other transactions until the transaction finishes. The
+ * returned promise settles after commit or rollback. Calling the database itself (including
+ * `transaction`) from inside a callback therefore waits for that transaction and
+ * never settles.
+ *
+ * When the callback rejects, the adapter must roll the transaction back before rejecting
+ * with that same error. If rollback fails, it must reject with a different error (for
+ * example an `AggregateError`) so callers cannot mistake the callback error for a
+ * guaranteed rollback.
+ *
+ * Closing is the adapter's: the plugin that opened a database closes it, so the facade an
+ * app receives has no `close`.
+ */
+export interface Db extends DbExecutor {
+	transaction<T>(callback: (transaction: DbExecutor) => Promise<T>): Promise<T>;
+}

package/plugins/acryl-db/src/facade/migrations.ts

@@ -0,0 +1,50 @@
+import type { Db } from "./database.ts";
+import { validateSchemaPrefix } from "./schema.ts";
+
+export type Migration = {
+	readonly version: number;
+	readonly statements: readonly string[];
+};
+
+type SchemaRow = { readonly version: number | bigint };
+
+/**
+ * Apply all pending migrations atomically, tracking their version in the named metadata table.
+ *
+ * The bookkeeping SQL runs unchanged on SQLite and Postgres: no `STRICT` table, `ON CONFLICT DO NOTHING`
+ * instead of `INSERT OR IGNORE`, and the version written as a checked integer rather than a binding,
+ * since the two dialects spell placeholders differently.
+ */
+export async function applyMigrations(
+	database: Db,
+	migrations: readonly Migration[],
+	options: { readonly table: string },
+): Promise<void> {
+	const { table } = options;
+	validateSchemaPrefix(table);
+	for (let index = 0; index < migrations.length; index++) {
+		if (migrations[index]?.version !== index + 1) {
+			throw new Error("Migrations must have contiguous versions starting at 1");
+		}
+	}
+
+	await database.transaction(async (transaction) => {
+		await transaction.exec(`CREATE TABLE IF NOT EXISTS ${table} (
+			singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+			version INTEGER NOT NULL CHECK (version >= 0)
+		)`);
+		await transaction.exec(`INSERT INTO ${table} (singleton, version) VALUES (1, 0) ON CONFLICT DO NOTHING`);
+		const row = await transaction.get<SchemaRow>(`SELECT version FROM ${table} WHERE singleton = 1`);
+		if (row === undefined) throw new Error("Schema metadata is missing");
+		const storedVersion = Number(row.version);
+		const currentVersion = migrations.at(-1)?.version ?? 0;
+		if (storedVersion > currentVersion) {
+			throw new Error(`Schema version ${storedVersion} is newer than supported version ${currentVersion}`);
+		}
+		for (const migration of migrations) {
+			if (migration.version <= storedVersion) continue;
+			for (const statement of migration.statements) await transaction.exec(statement);
+			await transaction.exec(`UPDATE ${table} SET version = ${String(migration.version)} WHERE singleton = 1`);
+		}
+	});
+}