okmodel 0.5.0 → 0.5.1

package/README.md

@@ -80,9 +80,11 @@ bun add okmodel @electric-sql/pglite
 
 Bun.sql needs no extra package: `import { connect } from "okmodel/pg/bun"`. okmodel has no runtime dependencies. Each installed driver is an optional peer.
 
+The `okm` bin's shebang is node, so `bunx okm` runs it with Node even inside a Bun project. Run `bun --bun okm` when the command must use the Bun runtime (Bun.sql runs only there). A `.ts` config file under plain Node needs Node 22.18 or newer for type stripping.
+
 ## Quickstart
 
-This builds two tables, applies them, and runs one script. The script writes an author and a note, then reads the note with its author. `DATABASE_URL` is a direct Postgres URL, not a pooler.
+This builds two tables, applies them, and runs one script. The script writes an author and a note, then reads the note with its author. `DATABASE_URL` is a direct Postgres URL, not a pooler. Port `6432` and port `6543` count as a pooler. Apply, seed, and check also refuse when the backend pid changes between two statements (OKM1854), unless `--allow-pooler` is set.
 
 ### Configure
 
@@ -373,7 +375,7 @@ if (!(await db.notes.exists({ where: { id: note.id } }))) {
 
 ### Update
 
-`update` changes the columns in `set` on the rows that match `where`. A call with no `where` is OKM1102. `.all(reason)` is the form that means every row.
+`update` changes the columns in `set` on the rows that match `where`. A write with no effective predicate, including undefined values, is OKM1102. An empty `or()` branch is OKM1121. `.all(reason)` is the form that means every row.
 
 ```ts
 // where picks the row. set names the new title.
@@ -382,7 +384,7 @@ await db.notes.update({ where: { id: note.id }, set: { title: "next" } });
 
 ### Delete
 
-`delete` removes the rows that match `where`. A call with no `where` is OKM1102. `.all(reason)` is the form that means every row.
+`delete` removes the rows that match `where`. A write with no effective predicate, including undefined values, is OKM1102. An empty `or()` branch is OKM1121. `.all(reason)` is the form that means every row.
 
 ```ts
 // where picks the row. Without it the call is refused.
@@ -828,7 +830,7 @@ export const app = schema({
 
 ### Views
 
-A view is a saved query. You give it the SQL and the columns that query returns. `db.views.active.find({ limit: 20 })` reads `active`. That handle has no insert or update. There is no query-builder form yet. `okm check` reprints the query on the connected server before it compares, so a difference that is only how that server prints the query is not drift. A materialized view that refreshes while people are reading it needs a unique index, or the declaration is OKM1822. See [known limits](https://github.com/omqkhafi/okmodel/blob/main/docs/known-limits.md).
+A view is a saved query. You give it the SQL and the columns that query returns. `db.views.active.find({ limit: 20 })` reads `active`. That handle has no insert or update. View handles are camelCased: a view named `active_projects` reads as `db.views.activeProjects`. There is no query-builder form yet. `okm check` reprints the query on the connected server before it compares, so a difference that is only how that server prints the query is not drift. A materialized view refreshes with `REFRESH MATERIALIZED VIEW`: the plan populates it with a plain refresh first (Postgres rejects `CONCURRENTLY` on an empty view), then refreshes concurrently when the declaration sets `refresh: "concurrently"`. A materialized view that refreshes while people are reading it needs a unique index, or the declaration is OKM1822. See [known limits](https://github.com/omqkhafi/okmodel/blob/main/docs/known-limits.md).
 
 `views.ts`:
 
@@ -945,7 +947,7 @@ update "public"."notes" set "title" = 'noted' where "title" = 'hello' and ("id"
 
 ### Testing
 
-`okmodel/testing` opens a real pool. `factories` insert rows, `expectQueries` counts statements, and `isolation()` checks that tenant A cannot see tenant B. `okm seed <file>` calls the file's default export with that harness. The target must already be migrated. A protected target is refused unless `--allow-protected`.
+`okmodel/testing` opens a real pool. `factories` insert rows, `expectQueries` counts statements, and `isolation()` checks that tenant A cannot see the row it inserted for tenant B. Each call uses a new pair of tenant ids, deletes what it inserted, and names a factory that is missing. `okm seed <file>` calls the file's default export with that harness. The target must already be migrated. A protected target is refused unless `--allow-protected`.
 
 `factory.ts`:
 
@@ -1071,7 +1073,7 @@ The worked example is a project tracker: workspaces as tenants, archive, a funct
 
 ### Startup
 
-`connect()` compares the app with `okm_history`. A database that is ahead by expand migrations still opens. Ahead by a contract migration, or behind the app, is OKM1520 and names the migration. `okm migrate status` prints the same states, plus `failed at step N (resume with okm migrate apply)`.
+`connect()` compares the app with `okm_history`. A database that is ahead by expand migrations still opens. Ahead by a contract migration, or behind the app, is OKM1520 and names the migration. `okm migrate status` prints the same states, plus `failed at step N (resume with okm migrate apply)`, where N is the stored step index. Apply's own `failed at step N` counts from 1, the same number the linter prints.
 
 ### Protected targets
 
@@ -1144,6 +1146,7 @@ Status is on the [board](https://github.com/users/omqkhafi/projects/1). Each rel
 - [x] [0.3](https://github.com/omqkhafi/okmodel/milestone/3) — Extensions, domains, functions, triggers, views, roles, and grants.
 - [x] [0.4](https://github.com/omqkhafi/okmodel/milestone/4) — Safer migration plans, backfill, drift checks, provisioning, reference data, and a testing package.
 - [x] [0.5](https://github.com/omqkhafi/okmodel/milestone/5) — A primary with replicas, read routing, and a reference app.
+- [ ] [0.5.1](https://github.com/omqkhafi/okmodel/milestone/7) — QA fixes for 0.5.0.
 
 `okmodel/internal` has no stability promise. Names on that subpath can change or disappear in any release.
 

package/dist/dialects/pg/filter-parse.d.ts

@@ -3,13 +3,19 @@
  *
  * Loaded the first time `parse()` is called. `filters()` validates the spec
  * before this module exists.
+ *
+ * A request key is equality when the value is a scalar and `eq` is allowed.
+ * An object value names operators: `eq`, `in` (`inList`), `notIn`, `lt`,
+ * `lte`, `gt`, `gte`, `between`, `startsWith`, `endsWith`, `contains`,
+ * `like`, and `ilike`. `sort` is a field name from the sort list.
  */
 import type { ParsedFilters } from "./table.js";
 /**
  * Reads one request object.
  *
- * A plain value is equality when `eq` is allowlisted. `sort` is a field name
- * from the sort list. JSON cannot add an operator.
+ * Lookups use own properties, so `constructor`, `__proto__`, `toString`, and
+ * `hasOwnProperty` are ordinary keys. A key that is not in `allow` is OKM1123.
+ * `sort` is the exception.
  *
  * @param allow - Fields and the operators each one accepts
  * @param sort - Fields a caller may sort by

package/dist/dialects/pg/fn/index.js

@@ -5,6 +5,9 @@ import {
 import {
   staticNamespace2
 } from "../../../shared/t4tbsy9h.js";
+import {
+  assertIdentifier2
+} from "../../../shared/nfzc5z0w.js";
 import {
   OkmError2
 } from "../../../shared/52szzakm.js";
@@ -26,6 +29,11 @@ function fn(name, options) {
       fix: { summary: "Set search_path on the function to the schemas it is allowed to see." }
     });
   }
+  if (options.searchPath !== undefined && options.searchPath.trim().length > 0) {
+    for (const part of options.searchPath.split(",")) {
+      assertIdentifier2(part.trim(), `function ${name} search_path`);
+    }
+  }
   const argTypes = (options.arguments ?? []).map((argument) => argument.type);
   const schema = options.schema ?? "public";
   return {

package/dist/dialects/pg/index.js

@@ -20,7 +20,7 @@ import {
   many2,
   manyThrough2,
   schema2
-} from "../../shared/3p4b1fg0.js";
+} from "../../shared/5enne4ma.js";
 import {
   domainType
 } from "../../shared/g7ez901n.js";
@@ -32,7 +32,7 @@ import {
   table2,
   index2,
   sql2
-} from "../../shared/jsd07prz.js";
+} from "../../shared/ntneex2a.js";
 import {
   text2,
   varchar2,
@@ -59,6 +59,7 @@ import {
   tag
 } from "../../shared/cn0n68ft.js";
 import {
+  OkmError2,
   catalogError2
 } from "../../shared/52szzakm.js";
 var __defProp = Object.defineProperty;
@@ -909,6 +910,11 @@ function notIn(values) {
 }
 // src/dialects/pg/ops/or.ts
 function or(branches) {
+  if (arguments.length !== 1 || !Array.isArray(branches)) {
+    throw new OkmError2("OKM1121", "Pass an array: or([a, b]).", {
+      fix: { summary: "Pass an array: or([a, b])." }
+    });
+  }
   return tag("or", branches);
 }
 // src/dialects/pg/ops/overlaps.ts

package/dist/dialects/pg/ops/or.d.ts

@@ -3,7 +3,7 @@ import { type Or } from "../operators.js";
  * Disjunction of where objects.
  *
  * @typeParam V - One branch
- * @param branches - Where objects, or-ed
+ * @param branches - Where objects, or-ed. One array: `or([a, b])`
  * @returns A tagged operator
  */
 export declare function or<const V>(branches: readonly V[]): Or<V>;

package/dist/dialects/pg/temporal.d.ts

@@ -114,100 +114,29 @@ export declare function decodeDuration(wire: string): Temporal.Duration;
  */
 export declare function intervalFields(fields: string): string;
 /**
- * Temporal is in the runtime (Node and Bun) and not in this repository's
- * TypeScript libs. These declarations name the methods the codecs call.
+ * Empty names so `Temporal.Instant` and the other codec types merge with
+ * TypeScript's Temporal lib and with `temporal-polyfill`. Method signatures
+ * live in `temporal.local.d.ts` for this repository's typecheck only. They
+ * are not shipped: a second `toString` or `var Temporal` conflicts with those
+ * libraries (QA-L2).
  */
 declare global {
     /** Instant, plain date-time, date, time, and duration. */
     namespace Temporal {
         /** UTC instant. */
         interface Instant {
-            /**
-             * @param options - Fractional digits to keep
-             * @returns ISO-8601 text
-             */
-            toString(options?: {
-                readonly fractionalSecondDigits?: number;
-            }): string;
         }
         /** Date and time without a zone. */
         interface PlainDateTime {
-            /**
-             * @param options - Fractional digits to keep
-             * @returns ISO-8601 text
-             */
-            toString(options?: {
-                readonly fractionalSecondDigits?: number;
-            }): string;
         }
         /** Calendar date. */
         interface PlainDate {
-            /**
-             * @returns `YYYY-MM-DD`
-             */
-            toString(): string;
-            /**
-             * @param duration - Days to add
-             * @returns A later or earlier date
-             */
-            add(duration: {
-                readonly days: number;
-            }): Temporal.PlainDate;
         }
         /** Time of day. */
         interface PlainTime {
-            /**
-             * @param options - Fractional digits to keep
-             * @returns Time text
-             */
-            toString(options?: {
-                readonly fractionalSecondDigits?: number;
-            }): string;
         }
         /** ISO-8601 duration. */
         interface Duration {
-            /**
-             * @returns ISO-8601 duration text
-             */
-            toString(): string;
         }
     }
-    /** Temporal constructors used by the codecs. */
-    var Temporal: {
-        readonly Instant: {
-            /**
-             * @param item - ISO-8601 instant
-             * @returns An instant
-             */
-            from(item: string): Temporal.Instant;
-        };
-        readonly PlainDateTime: {
-            /**
-             * @param item - ISO-8601 date-time
-             * @returns A plain date-time
-             */
-            from(item: string): Temporal.PlainDateTime;
-        };
-        readonly PlainDate: {
-            /**
-             * @param item - `YYYY-MM-DD`
-             * @returns A date
-             */
-            from(item: string): Temporal.PlainDate;
-        };
-        readonly PlainTime: {
-            /**
-             * @param item - Time text
-             * @returns A time
-             */
-            from(item: string): Temporal.PlainTime;
-        };
-        readonly Duration: {
-            /**
-             * @param item - ISO-8601 duration, or numeric fields
-             * @returns A duration
-             */
-            from(item: string | Readonly<Record<string, number>>): Temporal.Duration;
-        };
-    };
 }

package/dist/dialects/pg/view/index.js

@@ -9,7 +9,7 @@ import {
 } from "../../../shared/dyj86cmj.js";
 import {
   snakeCase
-} from "../../../shared/jsd07prz.js";
+} from "../../../shared/ntneex2a.js";
 import {
   encodeText,
   decodeText

package/dist/runtime/client.d.ts

@@ -37,9 +37,14 @@ export type Session = {
     };
     /** Tenant value or an unscoped reason. Absent on the root client. */
     readonly scope?: CallScope;
-    /** Shared close. `for()` and `unscoped()` reuse the same promise. */
+    /**
+     * Shared close. `for()` and `unscoped()` reuse the same promise.
+     *
+     * `early` is set when `close()` runs before `connected` settles (QA-M5).
+     */
     readonly closing: {
         current: Promise<void> | undefined;
+        early: boolean;
     };
 };
 /** Per-call modifiers of a read. */

package/dist/runtime/conflict.d.ts

@@ -18,9 +18,10 @@ export type ConflictPlan = {
  * @param table - Target table
  * @param value - The option the caller passed
  * @param allow - Guarded fields this write may set
+ * @param tenantKey - The tenant key on a tenant schema, which every unique includes
  * @returns The plan, or `undefined` for the default `"error"`
  */
-export declare function readConflict(table: Indexed, value: unknown, allow?: ReadonlySet<string>): ConflictPlan | undefined;
+export declare function readConflict(table: Indexed, value: unknown, allow?: ReadonlySet<string>, tenantKey?: string): ConflictPlan | undefined;
 /**
  * Appends the conflict clause, or wraps a first-or-create insert.
  *

package/dist/runtime/pg/bun.js

@@ -1,22 +1,22 @@
 import {
   DriverError2
-} from "../../shared/kyxb62mc.js";
+} from "../../shared/31vm914h.js";
 import {
   open5
-} from "../../shared/sf8m6tfy.js";
+} from "../../shared/k8v5v5wj.js";
 import {
   BUNSQL_CAPABILITIES,
   readCapability2,
   hasCapability2
-} from "../../shared/rrstp3kb.js";
+} from "../../shared/cgbamx3e.js";
 import {
   createClient
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 
 // src/runtime/pg/bun.ts
 function connect(target, options) {
   if (typeof target === "object" && !isPool(target)) {
-    return import("../../shared/nkc9sfqb.js").then((mod) => mod.default(target, options, open5));
+    return import("../../shared/nxdp2ze3.js").then((mod) => mod.default(target, options, open5));
   }
   const owned = !isPool(target);
   const pool = isPool(target) ? target : open5({

package/dist/runtime/pg/pg.js

@@ -1,22 +1,22 @@
 import {
   DriverError2
-} from "../../shared/kyxb62mc.js";
+} from "../../shared/31vm914h.js";
 import {
   open4
-} from "../../shared/6p5k20sm.js";
+} from "../../shared/96qcj21c.js";
 import {
   NODE_POSTGRES_CAPABILITIES,
   readCapability2,
   hasCapability2
-} from "../../shared/rrstp3kb.js";
+} from "../../shared/cgbamx3e.js";
 import {
   createClient
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 
 // src/runtime/pg/pg.ts
 function connect(target, options) {
   if (typeof target === "object" && !isPool(target)) {
-    return import("../../shared/nkc9sfqb.js").then((mod) => mod.default(target, options, open4));
+    return import("../../shared/nxdp2ze3.js").then((mod) => mod.default(target, options, open4));
   }
   const owned = !isPool(target);
   const pool = isPool(target) ? target : open4({

package/dist/runtime/pg/pglite.js

@@ -1,22 +1,22 @@
 import {
   DriverError2
-} from "../../shared/kyxb62mc.js";
+} from "../../shared/31vm914h.js";
 import {
   open3
-} from "../../shared/fa9vt245.js";
+} from "../../shared/87jvvhnt.js";
 import {
   PGLITE_CAPABILITIES,
   readCapability2,
   hasCapability2
-} from "../../shared/rrstp3kb.js";
+} from "../../shared/cgbamx3e.js";
 import {
   createClient
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 
 // src/runtime/pg/pglite.ts
 async function connect(target, options) {
   if (typeof target === "object" && !isPool(target)) {
-    return import("../../shared/nkc9sfqb.js").then((mod) => mod.default(target, options, open3));
+    return import("../../shared/nxdp2ze3.js").then((mod) => mod.default(target, options, open3));
   }
   const pool = isPool(target) ? target : await open3({
     ...target !== undefined ? { dataDir: target } : {},

package/dist/runtime/pg/postgresjs.js

@@ -1,22 +1,22 @@
 import {
   DriverError2
-} from "../../shared/kyxb62mc.js";
+} from "../../shared/31vm914h.js";
 import {
   open2
-} from "../../shared/wqem4jed.js";
+} from "../../shared/krxx77g0.js";
 import {
   POSTGRESJS_CAPABILITIES,
   readCapability2,
   hasCapability2
-} from "../../shared/rrstp3kb.js";
+} from "../../shared/cgbamx3e.js";
 import {
   createClient
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 
 // src/runtime/pg/postgresjs.ts
 function connect(target, options) {
   if (typeof target === "object" && !isPool(target)) {
-    return import("../../shared/nkc9sfqb.js").then((mod) => mod.default(target, options, open2));
+    return import("../../shared/nxdp2ze3.js").then((mod) => mod.default(target, options, open2));
   }
   const owned = !isPool(target);
   const pool = isPool(target) ? target : open2({

package/dist/runtime/plan.d.ts

@@ -288,6 +288,19 @@ export declare function indexes(schema: QuerySchema): ReadonlyMap<string, Indexe
 export declare function quote(name: string): string;
 export declare function list(names: readonly string[]): string;
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Whether `where` constrains a row.
+ *
+ * A field value is a leaf. Anything other than `undefined` counts, including
+ * `null`, objects, arrays, and operators. The walk does not enter a field value.
+ * It enters the where object's own keys, `and`, `or`, and `not` when `not` is
+ * the where itself. An `or()` branch with no predicate is OKM1121. `or([])`
+ * matches nothing.
+ *
+ * @param where - Caller filter, or one `and` / `or` / `not` operand
+ * @returns `false` when the filter matches every row
+ */
+export declare function effectivePredicate(where: unknown): boolean;
 /**
  * Records the fix text for a code thrown from a chunk that loads on first use.
  *

package/dist/runtime/tenancy/index.js

@@ -11,7 +11,7 @@ import {
 } from "../../shared/tmbdywx0.js";
 import {
   quote
-} from "../../shared/qgvt8nx1.js";
+} from "../../shared/gbtcc2d7.js";
 import {
   assertIdentifier2
 } from "../../shared/nfzc5z0w.js";

package/dist/runtime/traits/index.js

@@ -21,7 +21,7 @@ import {
 } from "../../shared/dyj86cmj.js";
 import {
   snakeCase
-} from "../../shared/jsd07prz.js";
+} from "../../shared/ntneex2a.js";
 import {
   ColumnBuilder2,
   retarget
@@ -38,10 +38,10 @@ import {
   queryHandle,
   attachHttp,
   settleCall
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 import {
   installArchiveInspect
-} from "../../shared/qgvt8nx1.js";
+} from "../../shared/gbtcc2d7.js";
 import {
   fitIdentifier2
 } from "../../shared/nfzc5z0w.js";
@@ -459,7 +459,7 @@ function refuse(host, table) {
 }
 var archiveMod;
 function loadArchive() {
-  archiveMod ??= import("../../shared/ckjbyrt9.js");
+  archiveMod ??= import("../../shared/0t22wwh1.js");
   return archiveMod;
 }
 async function settle(host, table, mods) {

package/dist/runtime/validate/index.js

@@ -3,10 +3,10 @@ import {
 } from "../../shared/9m80mkac.js";
 import {
   addSchemaHook
-} from "../../shared/3p4b1fg0.js";
+} from "../../shared/5enne4ma.js";
 import {
   queryHandle
-} from "../../shared/bt9sfq0z.js";
+} from "../../shared/hf22e0wt.js";
 import {
   OkmError2
 } from "../../shared/52szzakm.js";
@@ -14,7 +14,7 @@ import {
 // src/runtime/validate/load.ts
 var engine;
 function loadEngine() {
-  engine ??= import("../../shared/c8aghh05.js");
+  engine ??= import("../../shared/8rsy3hxz.js");
   return engine;
 }
 

package/dist/shared/{ckjbyrt9.js → 0t22wwh1.js}

@@ -12,16 +12,14 @@ import {
   indexes,
   quote,
   isRecord,
+  effectivePredicate,
   registerFailFix,
   fail
-} from "./qgvt8nx1.js";
+} from "./gbtcc2d7.js";
 import {
   safetyInstalled,
   runSafety
 } from "./a5sxz52y.js";
-import {
-  isOperator
-} from "./cn0n68ft.js";
 import {
   OkmError2
 } from "./52szzakm.js";
@@ -362,11 +360,9 @@ function requireFilter(table, where, mods, op) {
     }
     return;
   }
-  if (isOperator(where))
-    return;
-  if (isRecord(where) && Object.keys(where).length > 0)
-    return;
-  fail("OKM1102", `${op} on ${table.model.name} needs a where. Pass a filter, or .all(reason).`);
+  if (!effectivePredicate(where)) {
+    fail("OKM1102", `${op} on ${table.model.name} needs a where. Pass a filter, or .all(reason).`);
+  }
 }
 function callOptions(input) {
   const signal = input.signal;

package/dist/shared/{jdgqqx31.js → 2pqx26h8.js}

@@ -1,20 +1,22 @@
 import {
   open2
-} from "./wqem4jed.js";
+} from "./krxx77g0.js";
 import"./8bwbwy8h.js";
 import {
   createdOf,
   testing2
-} from "./g516zdsb.js";
+} from "./v36c5g6p.js";
 import"./n442h54c.js";
 import {
-  assertTargetPolicy,
-  assertDirectConnection,
-  selectTarget,
   loadConfig,
   loadSchema
-} from "./xdpj5kkm.js";
-import"./ayz64vzj.js";
+} from "./qv2ydck9.js";
+import {
+  assertTargetPolicy,
+  assertDirectConnection,
+  assertStableBackend,
+  selectTarget
+} from "./ga3sfy93.js";
 import"./8xsbagad.js";
 import {
   OkmError2
@@ -34,9 +36,22 @@ async function seedProject(cwd, file, flags) {
       fix: { summary: "Pass okm seed <file> a module in this project." }
     });
   }
-  assertDirectConnection(target.url, flags.allowPooler || config.allowPooler === true);
+  const allowPooler = flags.allowPooler || config.allowPooler === true;
+  assertDirectConnection(target.url, allowPooler);
   const schema = await loadSchema(cwd, config.schema);
   const pool = open2({ url: target.url, max: 1 });
+  const held = await pool.reserve?.();
+  if (held !== undefined) {
+    try {
+      await assertStableBackend(async () => {
+        const result = await held.execute("select pg_backend_pid()::text");
+        const cell = result.rows[0]?.[0];
+        return cell === null || cell === undefined ? "" : String(cell);
+      }, allowPooler);
+    } finally {
+      await held.release();
+    }
+  }
   const harness = await testing2(schema, { driver: pool, migrate: false });
   try {
     const imported = await import(`${pathToFileURL(path).href}?okm=${Date.now()}`);

package/dist/shared/{kyxb62mc.js → 31vm914h.js}

@@ -75,7 +75,7 @@ function mapDriverError2(error, batchIndex) {
   if (error instanceof DriverError2) {
     return batchIndex === undefined ? error : error.at(batchIndex);
   }
-  const message = error instanceof Error ? error.message : "driver error";
+  const message = messageOf(error);
   return new DriverError2(message, driverFields({
     sqlstate: sqlstateOf(error),
     constraint: errorField2(error, "constraint_name") ?? errorField2(error, "constraint"),
@@ -86,6 +86,14 @@ function mapDriverError2(error, batchIndex) {
     batchIndex
   }));
 }
+function messageOf(error) {
+  if (!(error instanceof Error))
+    return "driver error";
+  if (error.message.length > 0)
+    return error.message;
+  const first = error.errors?.[0];
+  return first instanceof Error && first.message.length > 0 ? first.message : "driver error";
+}
 function driverFields(input) {
   const fields = {};
   if (input.sqlstate !== undefined)