litedbmodel 2.0.0 → 2.0.2

package/dist/scp/coltype.js

@@ -0,0 +1,188 @@
+"use strict";
+/**
+ * litedbmodel v2 型システム（SCP アーキ spec §4.1）: SQL 型 → bc outType スカラの正規変換。
+ *
+ * litedbmodel は SQL バックエンド consumer なので **SQL 型を型の SoT** とする（TS の `number` は
+ * INTEGER/REAL を区別できないため型の権威にしない）。typed codegen（bc typed-raw 脱box）の `outType`
+ * 注記はこの変換で決まる。**曖昧/未知は error（no-assume・no-fallback）** — 既定値へ潰さない。
+ *
+ * 返すのは bc の scalar 型名（`typed.ts` の scalar union `"string"|"int"|"float"|"bool"|"null"`）。
+ * 行/リレーションの構造型（`obj`/`arr`/`opt`）は列型ではなくクエリ由来なので本変換の対象外。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sqlTypeToBcScalar = sqlTypeToBcScalar;
+exports.parseSchemaColumnTypes = parseSchemaColumnTypes;
+exports.schemaColumnTypeResolver = schemaColumnTypeResolver;
+/**
+ * SQL 型（DDL のトークン。`DECIMAL(10,2)` 等の括弧やサイズは無視）→ bc outType スカラ。
+ * spec §4.1 の正規表に一致。未知/曖昧は throw（fail-closed）。
+ */
+function sqlTypeToBcScalar(sqlType) {
+    // 括弧のサイズ/精度・`UNSIGNED` 等の修飾を落として基底型名で判定。
+    const t = sqlType
+        .trim()
+        .toUpperCase()
+        .replace(/\(.*\)/, '')
+        .replace(/\b(UNSIGNED|ZEROFILL|PRECISION)\b/g, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+    switch (t) {
+        // int は既定 64bit(i64)。INTEGER も BIGINT も int（bigint を別型にしない — サイズ制限は列制約で表現）。
+        case 'INTEGER':
+        case 'INT':
+        case 'BIGINT':
+        case 'SMALLINT':
+        case 'TINYINT':
+        case 'MEDIUMINT':
+        case 'INT2':
+        case 'INT4':
+        case 'INT8':
+            return 'int';
+        // int と real は明確に分離。
+        case 'REAL':
+        case 'FLOAT':
+        case 'DOUBLE':
+        case 'FLOAT4':
+        case 'FLOAT8':
+            return 'float';
+        // decimal は精度保持のため文字列表現。
+        case 'DECIMAL':
+        case 'NUMERIC':
+        case 'MONEY':
+            return 'string';
+        case 'TEXT':
+        case 'VARCHAR':
+        case 'CHAR':
+        case 'CHARACTER':
+        case 'CHARACTER VARYING':
+        case 'CLOB':
+        case 'UUID':
+            return 'string';
+        case 'BOOLEAN':
+        case 'BOOL':
+            return 'bool';
+        // date/timestamp は一旦 string（spec §4.1 owner 決定）。bc に date scalar が無く（behavior-contracts#84
+        // は defer）、DB は行ごとに別 TZ を保存しないので、文字列表現で往復させる。将来 bc date 型導入時に最適化。
+        case 'DATE':
+        case 'TIMESTAMP':
+        case 'TIMESTAMPTZ':
+        case 'DATETIME':
+        case 'TIME':
+            return 'string';
+        // JSON 列の表現は JSON テキスト＝文字列（TS のみ利便で object へ de/serialize。列を typed obj 化しない）。
+        case 'JSON':
+        case 'JSONB':
+            return 'string';
+        default:
+            throw new Error(`litedbmodel type system (spec §4.1): no bc outType mapping for SQL type '${sqlType}' ` +
+                `(normalized '${t}'). Add it to the §4.1 table or fix the column — ambiguous/unknown types ` +
+                `are a hard error (no-assume, no-fallback), never defaulted.`);
+    }
+}
+/**
+ * Parse a list of `CREATE TABLE` DDL statements into a `table → (column → SQL type)` map. This is
+ * the spec §4.1 SoT: the physical SQL type of each column, from which `sqlTypeToBcScalar` derives
+ * the bc `outType` scalar for typed codegen. Only the base column definitions are read; table-level
+ * constraints (`PRIMARY KEY (…)`, `FOREIGN KEY …`, `UNIQUE (…)`, `CHECK …`) are skipped. A column's
+ * type is its first token after the name (e.g. `id INTEGER PRIMARY KEY` → `INTEGER`). Column names
+ * quoted with `"`/`` ` ``/`[]` are unquoted. Non-`CREATE TABLE` statements (INSERT seed rows, etc.)
+ * are ignored, so a mixed schema+seed list is accepted as-is.
+ */
+function parseSchemaColumnTypes(ddl) {
+    const tables = new Map();
+    const CREATE = /^\s*CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?([A-Za-z0-9_."`[\]]+)\s*\(([\s\S]*)\)\s*;?\s*$/i;
+    const unquote = (s) => s.replace(/^["`[]|["`\]]$/g, '');
+    // Column/constraint list keywords that start a TABLE-LEVEL constraint (not a column definition).
+    const TABLE_CONSTRAINT = /^(PRIMARY|FOREIGN|UNIQUE|CHECK|CONSTRAINT|KEY|INDEX)\b/i;
+    for (const stmt of ddl) {
+        const m = CREATE.exec(stmt);
+        if (m === null)
+            continue; // not a CREATE TABLE (seed INSERT / pragma / etc.) — skip
+        const table = unquote(m[1].trim());
+        const cols = new Map();
+        for (const entry of splitTopLevel(m[2])) {
+            const line = entry.trim();
+            if (line.length === 0)
+                continue;
+            if (TABLE_CONSTRAINT.test(line))
+                continue; // table-level constraint, not a column
+            // `<name> <TYPE...> [constraints]` — the type is the token(s) up to the first constraint
+            // keyword or the end. `parseColumnDef` returns `{ name, sqlType }` or undefined (unparseable).
+            const parsed = parseColumnDef(line);
+            if (parsed === undefined)
+                continue;
+            cols.set(parsed.name, parsed.sqlType);
+        }
+        tables.set(table, cols);
+    }
+    return tables;
+}
+/** Split a CREATE TABLE column list on TOP-LEVEL commas (commas inside `(…)`, e.g. `DECIMAL(10,2)`, stay). */
+function splitTopLevel(body) {
+    const parts = [];
+    let depth = 0;
+    let cur = '';
+    for (const ch of body) {
+        if (ch === '(')
+            depth++;
+        else if (ch === ')')
+            depth--;
+        if (ch === ',' && depth === 0) {
+            parts.push(cur);
+            cur = '';
+        }
+        else
+            cur += ch;
+    }
+    if (cur.trim().length > 0)
+        parts.push(cur);
+    return parts;
+}
+/** The SQL-type keywords that may form a multi-word type (so `CHARACTER VARYING`, `DOUBLE PRECISION` stay whole). */
+const TYPE_CONTINUATION = /^(VARYING|PRECISION)$/i;
+/** Parse one `<name> <TYPE...>` column definition into `{ name, sqlType }`. Undefined when unparseable. */
+function parseColumnDef(line) {
+    const unquote = (s) => s.replace(/^["`[]|["`\]]$/g, '');
+    const nameMatch = /^([A-Za-z0-9_."`[\]]+)\s+(.*)$/.exec(line);
+    if (nameMatch === null)
+        return undefined;
+    const name = unquote(nameMatch[1]);
+    const rest = nameMatch[2].trim();
+    // The type is the leading token plus any `(...)` size/precision, plus a continuation word
+    // (`CHARACTER VARYING`, `DOUBLE PRECISION`). Everything after is column constraints.
+    const typeMatch = /^([A-Za-z0-9_]+(?:\s*\([^)]*\))?)\s*(.*)$/.exec(rest);
+    if (typeMatch === null)
+        return undefined;
+    let sqlType = typeMatch[1].trim();
+    const after = typeMatch[2].trim();
+    const nextWord = /^([A-Za-z]+)/.exec(after);
+    if (nextWord !== null && TYPE_CONTINUATION.test(nextWord[1]))
+        sqlType = `${sqlType} ${nextWord[1]}`;
+    if (sqlType.length === 0)
+        return undefined;
+    return { name, sqlType };
+}
+/**
+ * Build a {@link ColumnTypeResolver} from CREATE TABLE DDL (spec §4.1 SoT). The resolver throws
+ * (no default) for any `table.column` the DDL does not declare — an unknown column is a hard error
+ * (no-assume, no-fallback), so a codegen `outType` derivation can never silently box an untyped row.
+ */
+function schemaColumnTypeResolver(ddl) {
+    const tables = parseSchemaColumnTypes(ddl);
+    return (table, column) => {
+        const cols = tables.get(table);
+        if (cols === undefined) {
+            throw new Error(`litedbmodel type system (spec §4.1): no schema for table '${table}' — cannot type its ` +
+                `SELECT projection for typed codegen. The DDL (schema.sql SoT) must declare the table ` +
+                `(known: ${[...tables.keys()].join(', ') || '<none>'}). No-assume, no-fallback.`);
+        }
+        const sqlType = cols.get(column);
+        if (sqlType === undefined) {
+            throw new Error(`litedbmodel type system (spec §4.1): column '${column}' not declared on table '${table}' ` +
+                `(known columns: ${[...cols.keys()].join(', ')}). A projected column with no schema type ` +
+                `cannot be typed for de-boxed codegen. No-assume, no-fallback.`);
+        }
+        return sqlType;
+    };
+}
+//# sourceMappingURL=coltype.js.map

package/dist/scp/coltype.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coltype.js","sourceRoot":"","sources":["../../src/scp/coltype.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AASH,8CA+DC;AAmBD,wDAwBC;AA8CD,4DAqBC;AAjLD;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,yCAAyC;IACzC,MAAM,CAAC,GAAG,OAAO;SACd,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,oCAAoC,EAAE,EAAE,CAAC;SACjD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,QAAQ,CAAC,EAAE,CAAC;QACV,4EAA4E;QAC5E,KAAK,SAAS,CAAC;QACf,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,qBAAqB;QACrB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC;QACjB,yBAAyB;QACzB,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,mBAAmB,CAAC;QACzB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,2FAA2F;QAC3F,kEAAkE;QAClE,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,8EAA8E;QAC9E,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB;YACE,MAAM,IAAI,KAAK,CACb,4EAA4E,OAAO,IAAI;gBACrF,gBAAgB,CAAC,2EAA2E;gBAC5F,6DAA6D,CAChE,CAAC;IACN,CAAC;AACH,CAAC;AAUD;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,GAAsB;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,MAAM,GAAG,+FAA+F,CAAC;IAC/G,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACxE,iGAAiG;IACjG,MAAM,gBAAgB,GAAG,yDAAyD,CAAC;IACnF,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS,CAAC,0DAA0D;QACpF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,uCAAuC;YAClF,yFAAyF;YACzF,+FAA+F;YAC/F,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8GAA8G;AAC9G,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACnB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;;YAAM,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qHAAqH;AACrH,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,2GAA2G;AAC3G,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,0FAA0F;IAC1F,qFAAqF;IACrF,MAAM,SAAS,GAAG,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,GAAsB;IAC7D,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAa,EAAE,MAAc,EAAU,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,6DAA6D,KAAK,sBAAsB;gBACtF,uFAAuF;gBACvF,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,4BAA4B,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,gDAAgD,MAAM,4BAA4B,KAAK,IAAI;gBACzF,mBAAmB,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C;gBAC1F,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC"}

package/dist/scp/dialect.d.ts

@@ -25,10 +25,19 @@
  *     final left-to-right one-pass AFTER the SQL text is fully assembled (spec §8 — the
  *     number-reassignment problem is designed out because the pass runs once over the final
  *     flat text). SQLite/MySQL keep `?`.
+ *   - **Per-column value cast (PG)**: a written column with a declared `sqlCast` type emits
+ *     `?::<sqlCast>` on Postgres — in an INSERT `VALUES (…)` tuple (`PostgresSqlBuilder`:289-296)
+ *     AND an UPDATE `SET c = ?::<sqlCast>` (`DBModel._update`:1058-1063) — via the dialect cast
+ *     formatter (`formatterFor`), skipping `timestamp`/`date`. MySQL/SQLite emit a bare `?` (the
+ *     cast formatter is identity there). This is resolved at compile (the write path targets a
+ *     single dialect), applied in `compile-crud.compileUpdateSingle` and `tx.compileWriteNode`.
  *
- * Everything else (SELECT/UPDATE/DELETE skeletons, `col = ?`, `col IN (?, …)` expansion, the
- * fragment tree, RETURNING for SQLite/Postgres) is identical text across dialects, so it is
- * NOT part of the strategy — only the genuine divergences live here.
+ * Everything else (SELECT/UPDATE/DELETE skeletons, a NON-cast `col = ?`, `col IN (?, …)` expansion,
+ * the fragment tree, RETURNING for SQLite/Postgres) is identical text across dialects, so it is
+ * NOT part of the strategy — only the genuine divergences (including the PG per-column cast above)
+ * live here. NB: `col = ?` / `VALUES (?)` is identical across dialects ONLY for a column with no
+ * `sqlCast`; a PG cast column is the `?::<sqlCast>` divergence just described (this was previously
+ * mis-documented as unconditionally identical).
  *
  * ## DB behavior differences beyond SQL text (spec §13) — closeable-by-convention line
  *

package/dist/scp/dialect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/scp/dialect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,uFAAuF;AACvF,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEtF;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;;;;;;;;OASG;IACH,oBAAoB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC;IAEzF;;;;;OAKG;IACH,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAEvD;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IAEzC;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAErF;;;;;OAKG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1C;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CAClF;AAID;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAYxD;AAwCD;;;;GAIG;AACH,eAAO,MAAM,MAAM,EAAE,OAoBnB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,OAkBrB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,KAAK,EAAE,OA0BlB,CAAC;AASH,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAMrD"}
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/scp/dialect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,uFAAuF;AACvF,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEtF;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B;;;;;;;;;OASG;IACH,oBAAoB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC;IAEzF;;;;;OAKG;IACH,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC;IAEvD;;;;OAIG;IACH,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IAEzC;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAErF;;;;;OAKG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1C;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CAClF;AAID;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAYxD;AAwCD;;;;GAIG;AACH,eAAO,MAAM,MAAM,EAAE,OAoBnB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,OAkBrB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,KAAK,EAAE,OA0BlB,CAAC;AASH,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAMrD"}

package/dist/scp/dialect.js

@@ -26,10 +26,19 @@
  *     final left-to-right one-pass AFTER the SQL text is fully assembled (spec §8 — the
  *     number-reassignment problem is designed out because the pass runs once over the final
  *     flat text). SQLite/MySQL keep `?`.
+ *   - **Per-column value cast (PG)**: a written column with a declared `sqlCast` type emits
+ *     `?::<sqlCast>` on Postgres — in an INSERT `VALUES (…)` tuple (`PostgresSqlBuilder`:289-296)
+ *     AND an UPDATE `SET c = ?::<sqlCast>` (`DBModel._update`:1058-1063) — via the dialect cast
+ *     formatter (`formatterFor`), skipping `timestamp`/`date`. MySQL/SQLite emit a bare `?` (the
+ *     cast formatter is identity there). This is resolved at compile (the write path targets a
+ *     single dialect), applied in `compile-crud.compileUpdateSingle` and `tx.compileWriteNode`.
  *
- * Everything else (SELECT/UPDATE/DELETE skeletons, `col = ?`, `col IN (?, …)` expansion, the
- * fragment tree, RETURNING for SQLite/Postgres) is identical text across dialects, so it is
- * NOT part of the strategy — only the genuine divergences live here.
+ * Everything else (SELECT/UPDATE/DELETE skeletons, a NON-cast `col = ?`, `col IN (?, …)` expansion,
+ * the fragment tree, RETURNING for SQLite/Postgres) is identical text across dialects, so it is
+ * NOT part of the strategy — only the genuine divergences (including the PG per-column cast above)
+ * live here. NB: `col = ?` / `VALUES (?)` is identical across dialects ONLY for a column with no
+ * `sqlCast`; a PG cast column is the `?::<sqlCast>` divergence just described (this was previously
+ * mis-documented as unconditionally identical).
  *
  * ## DB behavior differences beyond SQL text (spec §13) — closeable-by-convention line
  *

package/dist/scp/dialect.js.map

@@ -1 +1 @@
-{"version":3,"file":"dialect.js","sourceRoot":"","sources":["../../src/scp/dialect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AAwFH,oDAYC;AAsID,gCAMC;AAlKD,iFAAiF;AAEjF;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;YACP,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AAEnF;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,eAAkC,EAClC,MAAsB,EACtB,WAAoC;IAEpC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,eAAe,MAAM,aAAa,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO,eAAe,MAAM,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,KAAa,EACb,OAA0B,EAC1B,YAAoB,EACpB,IAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,YAAY,IAAI,IAAI,EAAE,CAAC;AACpF,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACU,QAAA,MAAM,GAAY,MAAM,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,QAAQ;IACd,sBAAsB,EAAE,KAAK;IAC7B,UAAU,CAAC,MAAkC;QAC3C,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvE,CAAC;IACD,oBAAoB,CAAC,eAAkC,EAAE,MAAsB;QAC7E,sFAAsF;QACtF,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,OAAO,GAAG,IAAI,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC;IACzC,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,QAAQ,GAAY,MAAM,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,UAAU;IAChB,sBAAsB,EAAE,IAAI;IAC5B,UAAU,CAAC,OAAmC;QAC5C,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,oBAAoB,CAAC,eAAkC,EAAE,MAAsB;QAC7E,OAAO,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,OAAO,GAAG,IAAI,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC;IACzC,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,KAAK,GAAY,MAAM,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAO;IACb,sBAAsB,EAAE,KAAK;IAC7B,UAAU,CAAC,MAAkC;QAC3C,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,CAAC;IACD,oBAAoB,CAAC,gBAAmC,EAAE,MAAsB;QAC9E,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,gEAAgE;QAChE,sFAAsF;QACtF,qFAAqF;QACrF,mFAAmF;QACnF,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACnD,OAAO,GAAG,IAAI,YAAY,OAAO,KAAK,IAAI,IAAI,GAAG,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,QAAQ,GAAiC,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAE,cAAM;IACd,QAAQ,EAAE,gBAAQ;IAClB,KAAK,EAAE,aAAK;CACb,CAAC,CAAC;AAEH,6FAA6F;AAC7F,SAAgB,UAAU,CAAC,IAAiB;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"dialect.js","sourceRoot":"","sources":["../../src/scp/dialect.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;;;AAwFH,oDAYC;AAsID,gCAMC;AAlKD,iFAAiF;AAEjF;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;YACP,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AAEnF;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,eAAkC,EAClC,MAAsB,EACtB,WAAoC;IAEpC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,eAAe,MAAM,aAAa,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO,eAAe,MAAM,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,KAAa,EACb,OAA0B,EAC1B,YAAoB,EACpB,IAA0C;IAE1C,MAAM,IAAI,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,YAAY,IAAI,IAAI,EAAE,CAAC;AACpF,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACU,QAAA,MAAM,GAAY,MAAM,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,QAAQ;IACd,sBAAsB,EAAE,KAAK;IAC7B,UAAU,CAAC,MAAkC;QAC3C,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvE,CAAC;IACD,oBAAoB,CAAC,eAAkC,EAAE,MAAsB;QAC7E,sFAAsF;QACtF,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,OAAO,GAAG,IAAI,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC;IACzC,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,QAAQ,GAAY,MAAM,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,UAAU;IAChB,sBAAsB,EAAE,IAAI;IAC5B,UAAU,CAAC,OAAmC;QAC5C,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,oBAAoB,CAAC,eAAkC,EAAE,MAAsB;QAC7E,OAAO,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,OAAO,GAAG,IAAI,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC;IACzC,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,KAAK,GAAY,MAAM,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAO;IACb,sBAAsB,EAAE,KAAK;IAC7B,UAAU,CAAC,MAAkC;QAC3C,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,CAAC;IACD,oBAAoB,CAAC,gBAAmC,EAAE,MAAsB;QAC9E,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,OAA0B,EAAE,YAAoB;QACzE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC;IACD,oBAAoB,CAAC,GAAW;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,YAAY,CAAC,IAAY,EAAE,GAAmB,EAAE,KAAuB;QACrE,gEAAgE;QAChE,sFAAsF;QACtF,qFAAqF;QACrF,mFAAmF;QACnF,mFAAmF;QACnF,MAAM,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACnD,OAAO,GAAG,IAAI,YAAY,OAAO,KAAK,IAAI,IAAI,GAAG,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,QAAQ,GAAiC,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAE,cAAM;IACd,QAAQ,EAAE,gBAAQ;IAClB,KAAK,EAAE,aAAK;CACb,CAAC,CAAC;AAEH,6FAA6F;AAC7F,SAAgB,UAAU,CAAC,IAAiB;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/scp/find-filter-guard.d.ts

@@ -0,0 +1,68 @@
+/**
+ * litedbmodel v2 SCP — FIND_FILTER fail-closed authoring guard (#47 Finding B / plan R8).
+ *
+ * `FIND_FILTER` is a v1 PER-MODEL implicit predicate (a soft-delete / tenant scope) that
+ * v1 MERGES into the WHERE of every internal `find()`/`count()` before compiling
+ * (`DBModel._buildSelectSQL` / `_count`: `normalizedCond.add(condsToRecord(FIND_FILTER))`).
+ * It is not a distinct SQL construct — it manifests purely as extra WHERE fragments.
+ *
+ * The SCP compile path (`L.Select({ where })` → `compileReadGraph` → `renderReadPrimary`)
+ * is AUTHORED from an explicit `where`; it has NO `DBModel` class context, so it CANNOT
+ * auto-apply a model's `FIND_FILTER` (there is no model reference at compile time, and no
+ * production seam routes a `DBModel` into the SCP compile — grep: `FIND_FILTER` appears only
+ * in `DBModel`/`decorators`/`types`, never under `src/scp/`). Auto-apply is therefore
+ * impossible without model context the SCP compile does not have.
+ *
+ * Resolution = the plan's variant chosen fail-closed: a model that DECLARES a `FIND_FILTER`
+ * MUST have its scope predicates folded into the authored `L.Select({ where })`; if the
+ * author routes such a model through SCP WITHOUT the scope keys, this guard throws loudly
+ * ({@link FindFilterLeakError}) rather than silently dropping the filter (which would leak
+ * soft-deleted / cross-tenant rows — a correctness bug, not a cosmetic one). When the scope
+ * keys ARE present the guard is a no-op (byte-identical to v1's merged WHERE — proven in
+ * `test/scp/find-filter-noop.test.ts`).
+ */
+import { type Conds } from '../Column';
+/** A `DBModel`-shaped source: the only field this guard reads is the optional `FIND_FILTER`. */
+export interface FindFilterSource {
+    /** The per-model implicit scope predicate (v1 `DBModel.FIND_FILTER`), or null/undefined. */
+    readonly FIND_FILTER?: Conds | null;
+    /** Class name for diagnostics (present on every `DBModel` subclass). */
+    readonly name?: string;
+}
+/**
+ * A model declaring a `FIND_FILTER` was compiled via the SCP path without its scope
+ * predicates present in the authored WHERE — the filter would silently leak. Thrown
+ * fail-closed at compile time; never swallowed.
+ */
+export declare class FindFilterLeakError extends Error {
+    /** The declaring model's class name (diagnostics). */
+    readonly modelName: string;
+    /** The FIND_FILTER scope keys that are MISSING from the authored WHERE. */
+    readonly missingKeys: readonly string[];
+    constructor(
+    /** The declaring model's class name (diagnostics). */
+    modelName: string, 
+    /** The FIND_FILTER scope keys that are MISSING from the authored WHERE. */
+    missingKeys: readonly string[]);
+}
+/**
+ * Extract the top-level predicate KEYS a `FIND_FILTER` folds into a WHERE. Uses the SAME
+ * `condsToRecord` v1 runs when merging (`DBModel._buildSelectSQL`:597) so the key set is
+ * exactly what v1 would add to `normalizedCond`. `__or__` (grouped OR) is kept as a key so a
+ * scoped OR-group also demands explicit authoring (fail-closed; never silently satisfied).
+ */
+export declare function findFilterKeys(filter: Conds | null | undefined): string[];
+/**
+ * Fail-closed guard: assert a model's `FIND_FILTER` scope keys are all present in the
+ * authored WHERE key set BEFORE an SCP compile of that model. No FIND_FILTER → no-op. When
+ * present, EVERY scope key must appear in `authoredWhereKeys`; any missing key throws
+ * {@link FindFilterLeakError}. The caller passes the top-level keys of the object it hands to
+ * `L.Select({ where })` (the same shape `condsToRecord` yields), so the check compares
+ * like-for-like against v1's merged predicate.
+ *
+ * @param model  a `DBModel`-shaped source that MAY declare `FIND_FILTER`.
+ * @param authoredWhereKeys  the top-level WHERE keys the SCP author expressed for this model.
+ * @throws FindFilterLeakError when a declared scope key is absent from the authored WHERE.
+ */
+export declare function assertFindFilterFolded(model: FindFilterSource, authoredWhereKeys: Iterable<string>): void;
+//# sourceMappingURL=find-filter-guard.d.ts.map

package/dist/scp/find-filter-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-filter-guard.d.ts","sourceRoot":"","sources":["../../src/scp/find-filter-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAiB,KAAK,KAAK,EAAE,MAAM,WAAW,CAAC;AAEtD,gGAAgG;AAChG,MAAM,WAAW,gBAAgB;IAC/B,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACpC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE;;IAHvC,sDAAsD;IAC7C,SAAS,EAAE,MAAM;IAC1B,2EAA2E;IAClE,WAAW,EAAE,SAAS,MAAM,EAAE;CAY1C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAGzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,GAClC,IAAI,CAQN"}

package/dist/scp/find-filter-guard.js

@@ -0,0 +1,88 @@
+"use strict";
+/**
+ * litedbmodel v2 SCP — FIND_FILTER fail-closed authoring guard (#47 Finding B / plan R8).
+ *
+ * `FIND_FILTER` is a v1 PER-MODEL implicit predicate (a soft-delete / tenant scope) that
+ * v1 MERGES into the WHERE of every internal `find()`/`count()` before compiling
+ * (`DBModel._buildSelectSQL` / `_count`: `normalizedCond.add(condsToRecord(FIND_FILTER))`).
+ * It is not a distinct SQL construct — it manifests purely as extra WHERE fragments.
+ *
+ * The SCP compile path (`L.Select({ where })` → `compileReadGraph` → `renderReadPrimary`)
+ * is AUTHORED from an explicit `where`; it has NO `DBModel` class context, so it CANNOT
+ * auto-apply a model's `FIND_FILTER` (there is no model reference at compile time, and no
+ * production seam routes a `DBModel` into the SCP compile — grep: `FIND_FILTER` appears only
+ * in `DBModel`/`decorators`/`types`, never under `src/scp/`). Auto-apply is therefore
+ * impossible without model context the SCP compile does not have.
+ *
+ * Resolution = the plan's variant chosen fail-closed: a model that DECLARES a `FIND_FILTER`
+ * MUST have its scope predicates folded into the authored `L.Select({ where })`; if the
+ * author routes such a model through SCP WITHOUT the scope keys, this guard throws loudly
+ * ({@link FindFilterLeakError}) rather than silently dropping the filter (which would leak
+ * soft-deleted / cross-tenant rows — a correctness bug, not a cosmetic one). When the scope
+ * keys ARE present the guard is a no-op (byte-identical to v1's merged WHERE — proven in
+ * `test/scp/find-filter-noop.test.ts`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FindFilterLeakError = void 0;
+exports.findFilterKeys = findFilterKeys;
+exports.assertFindFilterFolded = assertFindFilterFolded;
+const Column_1 = require("../Column");
+/**
+ * A model declaring a `FIND_FILTER` was compiled via the SCP path without its scope
+ * predicates present in the authored WHERE — the filter would silently leak. Thrown
+ * fail-closed at compile time; never swallowed.
+ */
+class FindFilterLeakError extends Error {
+    modelName;
+    missingKeys;
+    constructor(
+    /** The declaring model's class name (diagnostics). */
+    modelName, 
+    /** The FIND_FILTER scope keys that are MISSING from the authored WHERE. */
+    missingKeys) {
+        super(`FIND_FILTER leak: model '${modelName}' declares an implicit scope predicate on ` +
+            `[${missingKeys.join(', ')}] that is NOT present in the SCP-authored WHERE. The SCP ` +
+            `compile cannot auto-apply FIND_FILTER (no model context at compile time), so the ` +
+            `scope predicate would be silently dropped (soft-delete / tenant scope leak). Fold ` +
+            `the FIND_FILTER predicates into the authored L.Select({ where }) explicitly ` +
+            `(e.g. whereEq/whereIsNull on ${missingKeys.join(', ')}).`);
+        this.modelName = modelName;
+        this.missingKeys = missingKeys;
+        this.name = 'FindFilterLeakError';
+    }
+}
+exports.FindFilterLeakError = FindFilterLeakError;
+/**
+ * Extract the top-level predicate KEYS a `FIND_FILTER` folds into a WHERE. Uses the SAME
+ * `condsToRecord` v1 runs when merging (`DBModel._buildSelectSQL`:597) so the key set is
+ * exactly what v1 would add to `normalizedCond`. `__or__` (grouped OR) is kept as a key so a
+ * scoped OR-group also demands explicit authoring (fail-closed; never silently satisfied).
+ */
+function findFilterKeys(filter) {
+    if (!filter || filter.length === 0)
+        return [];
+    return Object.keys((0, Column_1.condsToRecord)(filter));
+}
+/**
+ * Fail-closed guard: assert a model's `FIND_FILTER` scope keys are all present in the
+ * authored WHERE key set BEFORE an SCP compile of that model. No FIND_FILTER → no-op. When
+ * present, EVERY scope key must appear in `authoredWhereKeys`; any missing key throws
+ * {@link FindFilterLeakError}. The caller passes the top-level keys of the object it hands to
+ * `L.Select({ where })` (the same shape `condsToRecord` yields), so the check compares
+ * like-for-like against v1's merged predicate.
+ *
+ * @param model  a `DBModel`-shaped source that MAY declare `FIND_FILTER`.
+ * @param authoredWhereKeys  the top-level WHERE keys the SCP author expressed for this model.
+ * @throws FindFilterLeakError when a declared scope key is absent from the authored WHERE.
+ */
+function assertFindFilterFolded(model, authoredWhereKeys) {
+    const required = findFilterKeys(model.FIND_FILTER);
+    if (required.length === 0)
+        return; // No implicit scope → nothing to fold → no-op.
+    const present = new Set(authoredWhereKeys);
+    const missing = required.filter((k) => !present.has(k));
+    if (missing.length > 0) {
+        throw new FindFilterLeakError(model.name ?? '<anonymous model>', missing);
+    }
+}
+//# sourceMappingURL=find-filter-guard.js.map

package/dist/scp/find-filter-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"find-filter-guard.js","sourceRoot":"","sources":["../../src/scp/find-filter-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AA0CH,wCAGC;AAcD,wDAWC;AApED,sCAAsD;AAUtD;;;;GAIG;AACH,MAAa,mBAAoB,SAAQ,KAAK;IAGjC;IAEA;IAJX;IACE,sDAAsD;IAC7C,SAAiB;IAC1B,2EAA2E;IAClE,WAA8B;QAEvC,KAAK,CACH,4BAA4B,SAAS,4CAA4C;YAC/E,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D;YACrF,mFAAmF;YACnF,oFAAoF;YACpF,8EAA8E;YAC9E,gCAAgC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC7D,CAAC;QAXO,cAAS,GAAT,SAAS,CAAQ;QAEjB,gBAAW,GAAX,WAAW,CAAmB;QAUvC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAjBD,kDAiBC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,MAAgC;IAC7D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,sBAAa,EAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,sBAAsB,CACpC,KAAuB,EACvB,iBAAmC;IAEnC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,+CAA+C;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,IAAI,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/scp/fragment/assemble.d.ts

@@ -0,0 +1,61 @@
+/**
+ * litedbmodel v2 SCP — fragment RUNTIME (assemble + bind).
+ *
+ * This is the thin runtime a bundle drives. It does exactly three things:
+ *
+ *   1. ASSEMBLE — walk the ordered fragment list; drop any fragment whose `skip`
+ *      is satisfied; concatenate the present fragments' `sql`, and their `params`
+ *      in order. Nested-fragment params splice their own `sql` at the `?` and
+ *      contribute their own params in order.
+ *   2. EVALUATE — turn each value-spec param into a concrete bound value using the
+ *      runtime `input` (and upstream `wire` results).
+ *   3. RENDER — the produced `{ sql, params }` uses `?`; a dialect step turns `?`
+ *      into `$N` for PostgreSQL (identical to the original driver's naive replace).
+ *
+ * NO SQL structure is generated here. The `sql` text is already complete; the
+ * runtime only splices nested-fragment text and fills `?`.
+ */
+import { type Fragment, type Node, type WhereGroup, type ValueSpec, type PresenceCondition } from './model';
+/** Runtime binding scope: FLAT — input keys and wire results are top-level roots. */
+export interface Scope {
+    input: Record<string, unknown>;
+    wire?: Record<string, Record<string, unknown>>;
+}
+/** Is a fragment's `skip` satisfied (⇒ omit the fragment)? */
+export declare function isSkipped(cond: PresenceCondition | undefined, scope: Scope): boolean;
+/** Evaluate a value-spec to its bound value against the runtime scope. */
+export declare function evalValueSpec(spec: ValueSpec, scope: Scope): unknown;
+/**
+ * Assemble a single fragment: interleave its literal `sql` (split on `?`) with the
+ * rendered text of each param, concatenating params in order.
+ */
+export declare function assembleFragment(frag: Fragment, scope: Scope): {
+    sql: string;
+    params: unknown[];
+};
+/**
+ * Assemble a WHERE group: join present members with `" AND "`, prefix `" WHERE "`.
+ * If no member is present, produce the empty string (identical to the ORIGINAL
+ * `DBConditions.compile` → `parts.length === 0 ? '' : parts.join(' AND ')`, with the
+ * `" WHERE "` prefix owned by the caller/select in the original — here folded in).
+ */
+export declare function assembleWhereGroup(group: WhereGroup, scope: Scope): {
+    sql: string;
+    params: unknown[];
+};
+/**
+ * Assemble an ordered fragment/WHERE-group list into a single `{ sql, params }`
+ * (with `?`). Fragments whose `skip` is satisfied are omitted entirely (sql AND
+ * params). A WHERE group joins its present members with the original's text glue.
+ */
+export declare function assemble(nodes: Node[], scope: Scope): {
+    sql: string;
+    params: unknown[];
+};
+/**
+ * PostgreSQL dialect render: `?` → `$1, $2, …`. Byte-identical to the original
+ * driver's `convertPlaceholders` (naive left-to-right replace; see
+ * `src/drivers/postgres.ts`).
+ */
+export declare function toPostgres(sql: string): string;
+//# sourceMappingURL=assemble.d.ts.map

package/dist/scp/fragment/assemble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assemble.d.ts","sourceRoot":"","sources":["../../../src/scp/fragment/assemble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,IAAI,EACT,KAAK,UAAU,EAEf,KAAK,SAAS,EACd,KAAK,iBAAiB,EAOvB,MAAM,SAAS,CAAC;AAEjB,qFAAqF;AACrF,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD;AAWD,8DAA8D;AAC9D,wBAAgB,SAAS,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAIpF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CA+BpE;AAYD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAejG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAWtG;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAgBxF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG9C"}