easy-ping 0.9.0 → 0.10.1

package/dist/{chunk-3VOQOGDR.js → chunk-O2PBBL5X.js}

@@ -68,6 +68,22 @@ function createPluginStore(pluginId, schema, storage, prefix) {
     }
     return declaration;
   }
+  function writable(table) {
+    const declaration = resolve(table);
+    if (declaration.readOnly) {
+      throw new ConfigError(
+        `plugin "${pluginId}" tried to write "${table}", which it declares readOnly.`
+      );
+    }
+    return declaration;
+  }
+  function notEverything(table, where, action) {
+    if (Object.keys(where).length === 0) {
+      throw new ConfigError(
+        `plugin "${pluginId}" called ${action}("${table}", {}), which would touch every row. Pass a condition.`
+      );
+    }
+  }
   function checkFields(table, fields, context) {
     for (const field of fields) {
       const spec = Object.hasOwn(table.fields, field) ? table.fields[field] : void 0;
@@ -126,7 +142,7 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       });
     },
     async insert(table, rows) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       for (const row of rows) checkRow(declaration, row, "insert");
       return storage.insertRows(
         qualified(declaration),
@@ -134,7 +150,7 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       );
     },
     async upsert(table, rows, options) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       for (const row of rows) checkRow(declaration, row, "upsert");
       checkFields(declaration, options.onConflict, "onConflict");
       return storage.insertRows(
@@ -144,19 +160,21 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       );
     },
     async update(table, where, set) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       checkWhere(declaration, where);
+      notEverything(table, where, "update");
       checkRow(declaration, set, "update");
       return storage.updateRows(qualified(declaration), where, serialize(declaration, set));
     },
     async remove(table, where) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       checkWhere(declaration, where);
+      notEverything(table, where, "remove");
       return storage.deleteRows(qualified(declaration), where);
     }
   };
 }
 
 export { ConfigError, EasyPingError, ValidationError, consoleLogger, createPluginStore, isOperator };
-//# sourceMappingURL=chunk-3VOQOGDR.js.map
-//# sourceMappingURL=chunk-3VOQOGDR.js.map
+//# sourceMappingURL=chunk-O2PBBL5X.js.map
+//# sourceMappingURL=chunk-O2PBBL5X.js.map

package/dist/chunk-O2PBBL5X.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/errors.ts","../src/core/store.ts"],"names":[],"mappings":";;;AAAO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF;AAGO,IAAM,eAAA,GAAN,cAA8B,aAAA,CAAc;AAAA,EACxC,MAAA;AAAA,EAET,WAAA,CAAY,MAAc,MAAA,EAAuD;AAC/E,IAAA,KAAA,CAAM,CAAA,aAAA,EAAgB,IAAI,CAAA,qBAAA,EAAwB,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAC3F,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF;AAGO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA,EAC7C,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AAAA,EACd;AACF;AAOO,IAAM,aAAA,GAAwB;AAAA,EACnC,IAAA,EAAM,CAAC,OAAA,EAAS,IAAA,KAAS,OAAA,CAAQ,KAAK,CAAA,YAAA,EAAe,OAAO,CAAA,CAAA,EAAI,IAAA,IAAQ,EAAE,CAAA;AAAA,EAC1E,KAAA,EAAO,CAAC,OAAA,EAAS,IAAA,KAAS,OAAA,CAAQ,MAAM,CAAA,YAAA,EAAe,OAAO,CAAA,CAAA,EAAI,IAAA,IAAQ,EAAE;AAC9E;;;AC0BA,IAAM,YAAY,CAAC,IAAA,EAAM,MAAM,KAAA,EAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAEjD,IAAM,aAAa,CAAC,KAAA,KACzB,OAAO,KAAA,KAAU,QAAA,IACjB,UAAU,IAAA,IACV,EAAE,iBAAiB,IAAA,CAAA,IACnB,SAAA,CAAU,KAAK,CAAC,EAAA,KAAO,OAAO,MAAA,CAAO,KAAA,EAAO,EAAE,CAAC;AAEjD,IAAM,QAAA,GAAW,CAAC,KAAA,KAChB,KAAA,KAAU,QACV,OAAO,KAAA,KAAU,QAAA,IACjB,OAAO,KAAA,KAAU,QAAA,IACjB,OAAO,KAAA,KAAU,aACjB,KAAA,YAAiB,IAAA;AAGnB,SAAS,eAAA,CAAgB,QAAA,EAAkB,KAAA,EAAe,SAAA,EAA0B;AAClF,EAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AAEzB,EAAA,IAAI,UAAA,CAAW,SAAS,CAAA,EAAG;AACzB,IAAA,MAAM,QAAA,GAAW,SAAA;AACjB,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AACjC,IAAA,MAAM,CAAC,EAAE,CAAA,GAAI,IAAA;AACb,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,CAAA,IAAK,EAAA,KAAO,MAAA,EAAW;AACzC,MAAA,MAAM,IAAI,WAAA,CAAY,CAAA,QAAA,EAAW,QAAQ,CAAA,cAAA,EAAiB,KAAK,CAAA,yBAAA,CAA2B,CAAA;AAAA,IAC5F;AACA,IAAA,MAAM,OAAA,GAAU,SAAS,EAAE,CAAA;AAC3B,IAAA,MAAM,QACJ,EAAA,KAAO,IAAA,GACH,MAAM,OAAA,CAAQ,OAAO,KACrB,OAAA,CAAQ,KAAA,CAAM,CAAC,IAAA,KAAS,OAAO,SAAS,QAAA,IAAY,OAAO,SAAS,QAAQ,CAAA,GAC5E,SAAS,OAAO,CAAA;AACtB,IAAA,IAAI,KAAA,EAAO;AAAA,EACb;AAEA,EAAA,MAAM,IAAI,WAAA;AAAA,IACR,CAAA,QAAA,EAAW,QAAQ,CAAA,uCAAA,EAA0C,KAAK,CAAA,qDAAA;AAAA,GAEpE;AACF;AAEA,SAAS,WAAA,CAAY,QAAA,EAAkB,KAAA,EAAe,IAAA,EAAwB,KAAA,EAAgB;AAC5F,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,QAAA,CAAS,KAAK,CAAA,EAAG;AAC5C,EAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,IAAU,OAAO,UAAU,QAAA,EAAU;AACvD,EAAA,MAAM,IAAI,WAAA;AAAA,IACR,WAAW,QAAQ,CAAA,gCAAA,EAAmC,IAAA,CAAK,IAAI,WAAW,KAAK,CAAA,EAAA;AAAA,GACjF;AACF;AAGO,SAAS,iBAAA,CACd,QAAA,EACA,MAAA,EACA,OAAA,EACA,MAAA,EACa;AACb,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAA8B;AACtD,EAAA,KAAA,MAAW,eAAe,MAAA,CAAO,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA,EAAG;AACrD,IAAA,WAAA,CAAY,GAAA,CAAI,WAAA,CAAY,SAAA,EAAW,WAAW,CAAA;AAAA,EACpD;AAEA,EAAA,SAAS,QAAQ,KAAA,EAAiC;AAChD,IAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,CAAI,KAAK,CAAA;AACzC,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,CAAA,QAAA,EAAW,QAAQ,CAAA,kBAAA,EAAqB,KAAK,CAAA,yCAAA;AAAA,OAC/C;AAAA,IACF;AACA,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,SAAS,SAAS,KAAA,EAAiC;AACjD,IAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,IAAA,IAAI,YAAY,QAAA,EAAU;AACxB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,CAAA,QAAA,EAAW,QAAQ,CAAA,kBAAA,EAAqB,KAAK,CAAA,8BAAA;AAAA,OAC/C;AAAA,IACF;AACA,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,SAAS,aAAA,CAAc,KAAA,EAAe,KAAA,EAAoB,MAAA,EAAgB;AACxE,IAAA,IAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,WAAW,CAAA,EAAG;AACnC,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,CAAA,QAAA,EAAW,QAAQ,CAAA,SAAA,EAAY,MAAM,KAAK,KAAK,CAAA,sDAAA;AAAA,OAEjD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,SAAS,WAAA,CAAY,KAAA,EAAyB,MAAA,EAA0B,OAAA,EAAiB;AACvF,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAE1B,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,MAAA,EAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA,GAAI,MAAA;AACxE,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,QAAQ,CAAA,sBAAA,EAAyB,KAAK,SAAS,KAAA,CAAM,SAAS,MAAM,OAAO,CAAA,EAAA;AAAA,SACxF;AAAA,MACF;AACA,MAAA,IAAI,OAAA,KAAY,OAAA,IAAW,IAAA,CAAK,IAAA,KAAS,MAAA,EAAQ;AAC/C,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,QAAQ,CAAA,+BAAA,EAAkC,KAAK,CAAA,6DAAA;AAAA,SAE5D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,SAAS,UAAA,CAAW,OAAyB,KAAA,EAAoB;AAC/D,IAAA,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,GAAG,OAAO,CAAA;AAC9C,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,SAAS,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACtD,MAAA,eAAA,CAAgB,QAAA,EAAU,OAAO,SAAS,CAAA;AAAA,IAC5C;AAAA,EACF;AAEA,EAAA,SAAS,QAAA,CAAS,KAAA,EAAyB,GAAA,EAA8B,OAAA,EAAiB;AACxF,IAAA,WAAA,CAAY,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,GAAG,GAAG,OAAO,CAAA;AAC5C,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAChD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA;AAC/B,MAAA,IAAI,IAAA,EAAM,WAAA,CAAY,QAAA,EAAU,KAAA,EAAO,MAAM,KAAK,CAAA;AAAA,IACpD;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA4B,MAAA,GAAS,KAAA,CAAM,SAAA;AAG9D,EAAA,MAAM,MAAA,GAAS,CAAC,KAAA,KAAmB,OAAA,CAAQ,WAAW,UAAA,GAAa,KAAA,GAAQ,YAAY,KAAK,CAAA;AAG5F,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,EAAyB,GAAA,KAAiC;AAC3E,IAAA,IAAI,OAAA,CAAQ,cAAA,KAAmB,KAAA,EAAO,OAAO,GAAA;AAE7C,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAChD,MAAA,GAAA,CAAI,KAAK,CAAA,GACP,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA,EAAG,IAAA,KAAS,MAAA,IAAU,KAAA,KAAU,QAAQ,KAAA,KAAU,MAAA,GAChE,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,GACpB,KAAA;AAAA,IACR;AACA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,KAAK,KAAA,EAAO,KAAA,GAAQ,EAAC,EAAG,OAAA,GAAU,EAAC,EAAG;AAC1C,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,UAAA,CAAW,aAAa,KAAK,CAAA;AAC7B,MAAA,IAAI,OAAA,CAAQ,SAAS,WAAA,CAAY,WAAA,EAAa,CAAC,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAA,EAAG,SAAS,CAAA;AAEhF,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,UAAA,CAAW,UAAU,WAAW,CAAA,EAAG,OAAO,OAAO,CAAA;AAG5E,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ;AACvB,QAAA,MAAM,SAAkC,EAAC;AACzC,QAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,IAAA,CAAK,WAAA,CAAY,MAAM,CAAA,EAAG;AACnD,UAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,KAAK,CAAC,CAAA;AAC/B,UAAA,MAAM,IAAA,GAAO,WAAA,CAAY,MAAA,CAAO,KAAK,CAAA,EAAG,IAAA;AAExC,UAAA,IAAI,IAAA,KAAS,MAAA,IAAU,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAK,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAAA,eAAA,IACzE,IAAA,KAAS,MAAA,IAAU,OAAO,KAAA,KAAU,QAAA,SAAiB,KAAK,CAAA,GAAI,IAAI,IAAA,CAAK,KAAK,CAAA;AAAA,eAAA,IAE5E,IAAA,KAAS,aAAa,OAAO,KAAA,KAAU,UAAU,MAAA,CAAO,KAAK,IAAI,KAAA,KAAU,CAAA;AAAA,eAC/E,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AAAA,QACvB;AACA,QAAA,OAAO,MAAA;AAAA,MACT,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,WAAA,GAAc,SAAS,KAAK,CAAA;AAClC,MAAA,KAAA,MAAW,GAAA,IAAO,IAAA,EAAM,QAAA,CAAS,WAAA,EAAa,KAAK,QAAQ,CAAA;AAC3D,MAAA,OAAO,OAAA,CAAQ,UAAA;AAAA,QACb,UAAU,WAAW,CAAA;AAAA,QACrB,KAAK,GAAA,CAAI,CAAC,QAAQ,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC;AAAA,OAC/C;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS;AACjC,MAAA,MAAM,WAAA,GAAc,SAAS,KAAK,CAAA;AAClC,MAAA,KAAA,MAAW,GAAA,IAAO,IAAA,EAAM,QAAA,CAAS,WAAA,EAAa,KAAK,QAAQ,CAAA;AAC3D,MAAA,WAAA,CAAY,WAAA,EAAa,OAAA,CAAQ,UAAA,EAAY,YAAY,CAAA;AACzD,MAAA,OAAO,OAAA,CAAQ,UAAA;AAAA,QACb,UAAU,WAAW,CAAA;AAAA,QACrB,KAAK,GAAA,CAAI,CAAC,QAAQ,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC,CAAA;AAAA,QAC7C,OAAA,CAAQ;AAAA,OACV;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK;AAC9B,MAAA,MAAM,WAAA,GAAc,SAAS,KAAK,CAAA;AAClC,MAAA,UAAA,CAAW,aAAa,KAAK,CAAA;AAC7B,MAAA,aAAA,CAAc,KAAA,EAAO,OAAO,QAAQ,CAAA;AACpC,MAAA,QAAA,CAAS,WAAA,EAAa,KAAK,QAAQ,CAAA;AACnC,MAAA,OAAO,OAAA,CAAQ,WAAW,SAAA,CAAU,WAAW,GAAG,KAAA,EAAO,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC,CAAA;AAAA,IACtF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO;AACzB,MAAA,MAAM,WAAA,GAAc,SAAS,KAAK,CAAA;AAClC,MAAA,UAAA,CAAW,aAAa,KAAK,CAAA;AAC7B,MAAA,aAAA,CAAc,KAAA,EAAO,OAAO,QAAQ,CAAA;AACpC,MAAA,OAAO,OAAA,CAAQ,UAAA,CAAW,SAAA,CAAU,WAAW,GAAG,KAAK,CAAA;AAAA,IACzD;AAAA,GACF;AACF","file":"chunk-O2PBBL5X.js","sourcesContent":["export class EasyPingError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EasyPingError\";\n  }\n}\n\n/** Thrown when a payload fails its Standard Schema. Developer error. */\nexport class ValidationError extends EasyPingError {\n  readonly issues: readonly { message: string; path?: string }[];\n\n  constructor(type: string, issues: readonly { message: string; path?: string }[]) {\n    super(`Payload for \"${type}\" failed validation: ${issues.map((i) => i.message).join(\"; \")}`);\n    this.name = \"ValidationError\";\n    this.issues = issues;\n  }\n}\n\n/** Thrown at startup for a malformed config. Never at send time. */\nexport class ConfigError extends EasyPingError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ConfigError\";\n  }\n}\n\nexport type Logger = {\n  warn: (message: string, meta?: Record<string, unknown>) => void;\n  error: (message: string, meta?: Record<string, unknown>) => void;\n};\n\nexport const consoleLogger: Logger = {\n  warn: (message, meta) => console.warn(`[easy-ping] ${message}`, meta ?? \"\"),\n  error: (message, meta) => console.error(`[easy-ping] ${message}`, meta ?? \"\"),\n};\n","import { toSnakeCase } from \"../schema/declaration\";\nimport { ConfigError } from \"./errors\";\nimport type { FieldDeclaration, SchemaDeclaration, TableDeclaration } from \"./plugin\";\n\nexport type Scalar = string | number | boolean | Date | null;\n\n/** Operators are tagged objects so a bare value is always equality; json columns cannot be filtered. */\nexport type WhereCondition =\n  | Scalar\n  | { in: readonly (string | number)[] }\n  | { lt: Date | number }\n  | { lte: Date | number }\n  | { gt: Date | number }\n  | { gte: Date | number }\n  | { not: Scalar };\n\nexport type WhereClause = Record<string, WhereCondition>;\n\nexport type QueryOptions = {\n  limit?: number;\n  orderBy?: { field: string; direction: \"asc\" | \"desc\" };\n};\n\nexport type UpsertOptions = { onConflict: readonly string[] };\n\n/** Table access for plugins, scoped to the tables the plugin declared. */\nexport type PluginStore = {\n  find<T = Record<string, unknown>>(\n    table: string,\n    where?: WhereClause,\n    options?: QueryOptions,\n  ): Promise<T[]>;\n  insert(table: string, rows: readonly Record<string, unknown>[]): Promise<number>;\n  upsert(\n    table: string,\n    rows: readonly Record<string, unknown>[],\n    options: UpsertOptions,\n  ): Promise<number>;\n  update(table: string, where: WhereClause, set: Record<string, unknown>): Promise<number>;\n  remove(table: string, where: WhereClause): Promise<number>;\n};\n\nexport type TableStorage = {\n  readonly naming?: \"snake_case\" | \"preserve\";\n  readonly serializesJson?: boolean;\n\n  queryTable(\n    table: string,\n    where: WhereClause,\n    options: QueryOptions,\n  ): Promise<Record<string, unknown>[]>;\n  insertRows(\n    table: string,\n    rows: readonly Record<string, unknown>[],\n    onConflict?: readonly string[],\n  ): Promise<number>;\n  updateRows(table: string, where: WhereClause, set: Record<string, unknown>): Promise<number>;\n  deleteRows(table: string, where: WhereClause): Promise<number>;\n};\n\nconst OPERATORS = [\"in\", \"lt\", \"lte\", \"gt\", \"gte\", \"not\"] as const;\n\nexport const isOperator = (value: unknown): boolean =>\n  typeof value === \"object\" &&\n  value !== null &&\n  !(value instanceof Date) &&\n  OPERATORS.some((op) => Object.hasOwn(value, op));\n\nconst isScalar = (value: unknown): value is Scalar =>\n  value === null ||\n  typeof value === \"string\" ||\n  typeof value === \"number\" ||\n  typeof value === \"boolean\" ||\n  value instanceof Date;\n\n/** A forwarded JSON body can carry `{ $ne: … }`; refuse anything that is not a scalar or a known operator. */\nfunction assertCondition(pluginId: string, field: string, condition: unknown): void {\n  if (isScalar(condition)) return;\n\n  if (isOperator(condition)) {\n    const operator = condition as Record<string, unknown>;\n    const keys = Object.keys(operator);\n    const [op] = keys;\n    if (keys.length !== 1 || op === undefined) {\n      throw new ConfigError(`plugin \"${pluginId}\" gave field \"${field}\" more than one operator.`);\n    }\n    const payload = operator[op];\n    const valid =\n      op === \"in\"\n        ? Array.isArray(payload) &&\n          payload.every((item) => typeof item === \"string\" || typeof item === \"number\")\n        : isScalar(payload);\n    if (valid) return;\n  }\n\n  throw new ConfigError(\n    `plugin \"${pluginId}\" passed a non-scalar value for field \"${field}\"; ` +\n      \"validate request bodies before querying with them.\",\n  );\n}\n\nfunction assertValue(pluginId: string, field: string, spec: FieldDeclaration, value: unknown) {\n  if (value === undefined || isScalar(value)) return;\n  if (spec.type === \"json\" && typeof value === \"object\") return;\n  throw new ConfigError(\n    `plugin \"${pluginId}\" passed a non-scalar value for ${spec.type} field \"${field}\".`,\n  );\n}\n\n/** Every table and column is checked against the plugin's own declaration. */\nexport function createPluginStore(\n  pluginId: string,\n  schema: SchemaDeclaration | undefined,\n  storage: TableStorage,\n  prefix: string,\n): PluginStore {\n  const byTableName = new Map<string, TableDeclaration>();\n  for (const declaration of Object.values(schema ?? {})) {\n    byTableName.set(declaration.tableName, declaration);\n  }\n\n  function resolve(table: string): TableDeclaration {\n    const declaration = byTableName.get(table);\n    if (!declaration) {\n      throw new ConfigError(\n        `plugin \"${pluginId}\" accessed table \"${table}\", which it does not declare in schema().`,\n      );\n    }\n    return declaration;\n  }\n\n  function writable(table: string): TableDeclaration {\n    const declaration = resolve(table);\n    if (declaration.readOnly) {\n      throw new ConfigError(\n        `plugin \"${pluginId}\" tried to write \"${table}\", which it declares readOnly.`,\n      );\n    }\n    return declaration;\n  }\n\n  function notEverything(table: string, where: WhereClause, action: string) {\n    if (Object.keys(where).length === 0) {\n      throw new ConfigError(\n        `plugin \"${pluginId}\" called ${action}(\"${table}\", {}), which would touch every row. ` +\n          \"Pass a condition.\",\n      );\n    }\n  }\n\n  function checkFields(table: TableDeclaration, fields: Iterable<string>, context: string) {\n    for (const field of fields) {\n      // hasOwn, not a lookup: `constructor` and `__proto__` are not columns.\n      const spec = Object.hasOwn(table.fields, field) ? table.fields[field] : undefined;\n      if (!spec) {\n        throw new ConfigError(\n          `plugin \"${pluginId}\" used unknown field \"${field}\" on \"${table.tableName}\" (${context}).`,\n        );\n      }\n      if (context === \"where\" && spec.type === \"json\") {\n        throw new ConfigError(\n          `plugin \"${pluginId}\" cannot filter on json field \"${field}\"; ` +\n            \"a bare object value is indistinguishable from an operator.\",\n        );\n      }\n    }\n  }\n\n  function checkWhere(table: TableDeclaration, where: WhereClause) {\n    checkFields(table, Object.keys(where), \"where\");\n    for (const [field, condition] of Object.entries(where)) {\n      assertCondition(pluginId, field, condition);\n    }\n  }\n\n  function checkRow(table: TableDeclaration, row: Record<string, unknown>, context: string) {\n    checkFields(table, Object.keys(row), context);\n    for (const [field, value] of Object.entries(row)) {\n      const spec = table.fields[field];\n      if (spec) assertValue(pluginId, field, spec, value);\n    }\n  }\n\n  const qualified = (table: TableDeclaration) => prefix + table.tableName;\n\n  // A document store keeps the declared names; a SQL adapter wants columns.\n  const column = (field: string) => (storage.naming === \"preserve\" ? field : toSnakeCase(field));\n\n  // json must reach postgres-js as text.\n  const serialize = (table: TableDeclaration, row: Record<string, unknown>) => {\n    if (storage.serializesJson === false) return row;\n\n    const out: Record<string, unknown> = {};\n    for (const [field, value] of Object.entries(row)) {\n      out[field] =\n        table.fields[field]?.type === \"json\" && value !== null && value !== undefined\n          ? JSON.stringify(value)\n          : value;\n    }\n    return out;\n  };\n\n  return {\n    async find(table, where = {}, options = {}) {\n      const declaration = resolve(table);\n      checkWhere(declaration, where);\n      if (options.orderBy) checkFields(declaration, [options.orderBy.field], \"orderBy\");\n\n      const rows = await storage.queryTable(qualified(declaration), where, options);\n\n      // SELECT * returns snake_case; plugins read camelCase.\n      return rows.map((row) => {\n        const mapped: Record<string, unknown> = {};\n        for (const field of Object.keys(declaration.fields)) {\n          const value = row[column(field)];\n          const type = declaration.fields[field]?.type;\n          // Drivers differ on jsonb (parsed or text) and timestamptz (Date or text).\n          if (type === \"json\" && typeof value === \"string\") mapped[field] = JSON.parse(value);\n          else if (type === \"date\" && typeof value === \"string\") mapped[field] = new Date(value);\n          // MySQL and SQLite have no boolean column; they hand back 0 and 1.\n          else if (type === \"boolean\" && typeof value === \"number\") mapped[field] = value !== 0;\n          else mapped[field] = value;\n        }\n        return mapped;\n      }) as never;\n    },\n\n    async insert(table, rows) {\n      const declaration = writable(table);\n      for (const row of rows) checkRow(declaration, row, \"insert\");\n      return storage.insertRows(\n        qualified(declaration),\n        rows.map((row) => serialize(declaration, row)),\n      );\n    },\n\n    async upsert(table, rows, options) {\n      const declaration = writable(table);\n      for (const row of rows) checkRow(declaration, row, \"upsert\");\n      checkFields(declaration, options.onConflict, \"onConflict\");\n      return storage.insertRows(\n        qualified(declaration),\n        rows.map((row) => serialize(declaration, row)),\n        options.onConflict,\n      );\n    },\n\n    async update(table, where, set) {\n      const declaration = writable(table);\n      checkWhere(declaration, where);\n      notEverything(table, where, \"update\");\n      checkRow(declaration, set, \"update\");\n      return storage.updateRows(qualified(declaration), where, serialize(declaration, set));\n    },\n\n    async remove(table, where) {\n      const declaration = writable(table);\n      checkWhere(declaration, where);\n      notEverything(table, where, \"remove\");\n      return storage.deleteRows(qualified(declaration), where);\n    },\n  };\n}\n"]}

package/dist/index.cjs

@@ -209,6 +209,7 @@ function createScopedSigner(secret, pluginId, purposes, onViolation) {
 var STREAM_HIGH_WATER_MARK = 256;
 var MAX_BODY_BYTES = 64 * 1024;
 var MAX_READ_IDS = 200;
+var SESSION_ERROR = /* @__PURE__ */ Symbol("session-error");
 var PRIVATE_HEADERS = {
   "cache-control": "private, no-store",
   "x-content-type-options": "nosniff"
@@ -308,13 +309,26 @@ function csrfCheck(request, url, trusted) {
 function createHandler(deps) {
   const trustedOrigins = deps.trustedOrigins ?? [];
   const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;
+  let warnedBadUserId = false;
   async function resolveUserId(request) {
+    let id;
     try {
-      return await deps.session.getUserId(request);
+      id = await deps.session.getUserId(request);
     } catch (error) {
       deps.logger.error("session.getUserId threw", { error });
-      return "error";
+      return SESSION_ERROR;
     }
+    if (id === null || id === void 0) return null;
+    if (typeof id !== "string" || id === "") {
+      if (!warnedBadUserId) {
+        warnedBadUserId = true;
+        deps.logger.warn(
+          `session.getUserId returned ${id === "" ? "an empty string" : typeof id}; treating the request as unauthenticated. Return a non-empty string or null.`
+        );
+      }
+      return null;
+    }
+    return id;
   }
   async function bearerMatches(request, secret) {
     if (!secret) return false;
@@ -337,7 +351,7 @@ function createHandler(deps) {
         if (rejected) return rejected;
       }
       const userId = await resolveUserId(request);
-      if (userId === "error") return empty(500);
+      if (userId === SESSION_ERROR) return empty(500);
       if (userId === null) return empty(401);
       return harden(await route2.handler({ request, userId, claims: null, params: {} }));
     }
@@ -378,7 +392,7 @@ function createHandler(deps) {
       if (rejected) return rejected;
     }
     const userId = await resolveUserId(request);
-    if (userId === "error") return empty(500);
+    if (userId === SESSION_ERROR) return empty(500);
     if (userId === null) return empty(401);
     if (request.method === "GET" && path === "/events") {
       if (!deps.events) return empty(404);
@@ -582,12 +596,23 @@ var ESCAPES = {
 var escapeHtml = (value) => String(value ?? "").replace(/[&<>"']/g, (char) => ESCAPES[char] ?? char);
 
 // src/core/rate-limit.ts
+var UNKEYED = "\0unkeyed";
 var clientAddress = (request) => {
   const headers = request.headers;
   return headers.get("cf-connecting-ip") ?? headers.get("x-real-ip") ?? headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? null;
 };
 function createRateLimiter(config) {
-  const keyOf = config.key ?? clientAddress;
+  let warned = false;
+  const keyOf = config.key ?? ((request) => {
+    const address = clientAddress(request);
+    if (address !== null) return address;
+    if (!warned) {
+      warned = true;
+      config.onUnkeyed?.();
+    }
+    return UNKEYED;
+  });
+  const maxKeys = Math.max(1, config.maxKeys ?? 1e4);
   const buckets = /* @__PURE__ */ new Map();
   let lastSweep = 0;
   return (request) => {
@@ -600,7 +625,12 @@ function createRateLimiter(config) {
     }
     let bucket = buckets.get(key);
     if (!bucket || bucket.resetAt <= now) {
+      if (!bucket && buckets.size >= maxKeys) {
+        const oldest = buckets.keys().next().value;
+        if (oldest !== void 0) buckets.delete(oldest);
+      }
       bucket = { count: 0, resetAt: now + config.windowMs };
+      buckets.delete(key);
       buckets.set(key, bucket);
     }
     bucket.count += 1;
@@ -1095,6 +1125,22 @@ function createPluginStore(pluginId, schema, storage, prefix) {
     }
     return declaration;
   }
+  function writable(table) {
+    const declaration = resolve(table);
+    if (declaration.readOnly) {
+      throw new ConfigError(
+        `plugin "${pluginId}" tried to write "${table}", which it declares readOnly.`
+      );
+    }
+    return declaration;
+  }
+  function notEverything(table, where, action) {
+    if (Object.keys(where).length === 0) {
+      throw new ConfigError(
+        `plugin "${pluginId}" called ${action}("${table}", {}), which would touch every row. Pass a condition.`
+      );
+    }
+  }
   function checkFields(table, fields, context) {
     for (const field of fields) {
       const spec = Object.hasOwn(table.fields, field) ? table.fields[field] : void 0;
@@ -1153,7 +1199,7 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       });
     },
     async insert(table, rows) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       for (const row of rows) checkRow(declaration, row, "insert");
       return storage.insertRows(
         qualified(declaration),
@@ -1161,7 +1207,7 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       );
     },
     async upsert(table, rows, options) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       for (const row of rows) checkRow(declaration, row, "upsert");
       checkFields(declaration, options.onConflict, "onConflict");
       return storage.insertRows(
@@ -1171,14 +1217,16 @@ function createPluginStore(pluginId, schema, storage, prefix) {
       );
     },
     async update(table, where, set) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       checkWhere(declaration, where);
+      notEverything(table, where, "update");
       checkRow(declaration, set, "update");
       return storage.updateRows(qualified(declaration), where, serialize(declaration, set));
     },
     async remove(table, where) {
-      const declaration = resolve(table);
+      const declaration = writable(table);
       checkWhere(declaration, where);
+      notEverything(table, where, "remove");
       return storage.deleteRows(qualified(declaration), where);
     }
   };
@@ -1257,7 +1305,18 @@ function validate(config, plugins) {
       }
     }
   }
+  const core = new Set(CORE_ROUTES.map((route) => `${route.method} ${route.path}`));
   const routes = /* @__PURE__ */ new Set();
+  for (const plugin of plugins) {
+    for (const route of plugin.routes ?? []) {
+      const signature = `${route.method} ${route.path}`;
+      if (core.has(signature)) {
+        throw new ConfigError(
+          `plugin "${plugin.id}" registers "${signature}", which is a core route. Pick another path.`
+        );
+      }
+    }
+  }
   for (const plugin of plugins) {
     for (const route of plugin.routes ?? []) {
       const signature = `${route.method} ${route.path}`;
@@ -1374,7 +1433,12 @@ function easyPing(config) {
     trustedOrigins: config.trustedOrigins,
     onRequest: config.onRequest,
     maxBodyBytes: config.maxBodyBytes,
-    rateLimit: config.rateLimit ? createRateLimiter(config.rateLimit) : void 0,
+    rateLimit: config.rateLimit ? createRateLimiter({
+      onUnkeyed: () => logger.warn(
+        "rateLimit: a request arrived with no cf-connecting-ip, x-real-ip or x-forwarded-for header, so every such request shares one bucket. Put the app behind a proxy that sets one of them, or pass rateLimit.key (a session or API key)."
+      ),
+      ...config.rateLimit
+    }) : void 0,
     cronMaxSweeps: config.cron?.maxSweeps,
     ...config.cron?.secret ? { cronSecret: config.cron.secret } : {},
     ...config.machineSecret ?? config.cron?.secret ? { machineSecret: config.machineSecret ?? config.cron?.secret } : {}