sdlc-agent-4-enterprise-server 1.47.1 → 1.48.0

package/.kiro/agents/prompts/sm-agent.md

@@ -31,7 +31,7 @@ At the very beginning of your execution, use `find_tools` to discover tools. Use
 
 Fallbacks:
 - **Project tracker unavailable** → Skip transitions, manage status via STATUS.json only
-- **KB unavailable** → Skip KB verification, rely on file checks
+- **KB unavailable** → Attempt MCP bootstrap first (tool-usage-dynamic Step 0). If still down → report to user explicitly ("⚠️ KB unavailable — fallback to file checks, KB verification skipped"), then rely on file checks
 - **DOCX export unavailable** → Skip DOCX export, attach markdown or skip attachment
 
 ### Discovery Report
@@ -506,7 +506,14 @@ invokeSubAgent(
    - If exists → resume from `currentPhase`
    - If not exists → scan for existing files to build initial status
 
-2. **Scan existing files** (when STATUS.json doesn't exist):
+2. **KB-first check** (MANDATORY — before deciding next steps):
+   - Use the discovered KB "search" tool (query: "{TICKET} BRD FSD TDD") — cross-check STATUS.json against documents actually in KB (detect stale/corrupt status)
+   - Use the discovered KB "search" tool (query: "personalized rules preferences conventions") — load user's personalized rules (agent-self-learning Rule #7)
+   - Use the discovered KB "search" tool (query: "{PROJECT} lessons learned") — check prior lessons/error patterns relevant to this ticket
+   - If any KB finding contradicts STATUS.json → report the conflict to user before proceeding
+   - If KB unavailable → attempt MCP bootstrap first, then report to user before falling back to file checks
+
+3. **Scan existing files** (when STATUS.json doesn't exist):
    ```
    documents/{TICKET}/BRD.md exists?     → requirements: done
    documents/{TICKET}/FSD.md exists?     → specification: done
@@ -516,7 +523,7 @@ invokeSubAgent(
    ```
    Create STATUS.json from scan results.
 
-3. **Check Jira ticket status** (MANDATORY on every resume):
+4. **Check Jira ticket status** (MANDATORY on every resume):
    ```
    issue = the discovered project tracker "get issue" tool (issue_key: "{TICKET}")
    jiraStatus = issue.status  // "To Do", "Docs Review", "In Progress", "In Review", "QA Test", "UAT", "Ready For Product", "Done"
@@ -537,7 +544,7 @@ invokeSubAgent(
    
    **Quan trọng:** Nếu Jira status đã advance (ví dụ: reviewer đã chuyển DOCS REVIEW → IN PROGRESS), SM tự động tiếp tục phase tương ứng mà KHÔNG cần user nói lại.
 
-4. **Read Jira comments** (MANDATORY on every resume):
+5. **Read Jira comments** (MANDATORY on every resume):
    ```
    the discovered project tracker "get issue" tool (issue_key: "{TICKET}", comment_limit: 10)
    ```
@@ -575,7 +582,7 @@ invokeSubAgent(
    - If comment contains rejection/feedback → SM MUST report to user before taking action
    - Store last processed comment timestamp in STATUS.json: `"lastCommentProcessed": "2026-05-01T18:00:00Z"`
 
-5. **Report current status to user:**
+6. **Report current status to user:**
    ```
    📋 {TICKET} — Status Report
    
@@ -593,7 +600,7 @@ invokeSubAgent(
    ➡️ Tiếp tục Phase 3 (Design)?
    ```
 
-6. **Wait for user confirmation** before proceeding.
+7. **Wait for user confirmation** before proceeding.
 
 ### Step 1: Execute Phase — Requirements (BA → BRD)
 

package/.kiro/agents/sm-agent.md

@@ -43,7 +43,7 @@ At the very beginning of your execution, use `find_tools` to discover tools. Use
 
 Fallbacks:
 - **Project tracker unavailable** → Skip transitions, manage status via STATUS.json only
-- **KB unavailable** → Skip KB verification, rely on file checks
+- **KB unavailable** → Attempt MCP bootstrap first (tool-usage-dynamic Step 0). If still down → report to user explicitly ("⚠️ KB unavailable — fallback to file checks, KB verification skipped"), then rely on file checks
 - **DOCX export unavailable** → Skip DOCX export, attach markdown or skip attachment
 
 ### Discovery Report
@@ -523,7 +523,14 @@ invokeSubAgent(
    - If exists → resume from `currentPhase`
    - If not exists → scan for existing files to build initial status
 
-2. **Scan existing files** (when STATUS.json doesn't exist):
+2. **KB-first check** (MANDATORY — before deciding next steps):
+   - Use the discovered KB "search" tool (query: "{TICKET} BRD FSD TDD") — cross-check STATUS.json against documents actually in KB (detect stale/corrupt status)
+   - Use the discovered KB "search" tool (query: "personalized rules preferences conventions") — load user's personalized rules (agent-self-learning Rule #7)
+   - Use the discovered KB "search" tool (query: "{PROJECT} lessons learned") — check prior lessons/error patterns relevant to this ticket
+   - If any KB finding contradicts STATUS.json → report the conflict to user before proceeding
+   - If KB unavailable → attempt MCP bootstrap first, then report to user before falling back to file checks
+
+3. **Scan existing files** (when STATUS.json doesn't exist):
    ```
    documents/{TICKET}/BRD.md exists?     → requirements: done
    documents/{TICKET}/FSD.md exists?     → specification: done
@@ -533,7 +540,7 @@ invokeSubAgent(
    ```
    Create STATUS.json from scan results.
 
-3. **Check Jira ticket status** (MANDATORY on every resume):
+4. **Check Jira ticket status** (MANDATORY on every resume):
    ```
    issue = the discovered project tracker "get issue" tool (issue_key: "{TICKET}")
    jiraStatus = issue.status  // "To Do", "Docs Review", "In Progress", "In Review", "QA Test", "UAT", "Ready For Product", "Done"
@@ -554,7 +561,7 @@ invokeSubAgent(
    
    **Quan trọng:** Nếu Jira status đã advance (ví dụ: reviewer đã chuyển DOCS REVIEW → IN PROGRESS), SM tự động tiếp tục phase tương ứng mà KHÔNG cần user nói lại.
 
-4. **Read Jira comments** (MANDATORY on every resume):
+5. **Read Jira comments** (MANDATORY on every resume):
    ```
    the discovered project tracker "get issue" tool (issue_key: "{TICKET}", comment_limit: 10)
    ```
@@ -592,7 +599,7 @@ invokeSubAgent(
    - If comment contains rejection/feedback → SM MUST report to user before taking action
    - Store last processed comment timestamp in STATUS.json: `"lastCommentProcessed": "2026-05-01T18:00:00Z"`
 
-5. **Report current status to user:**
+6. **Report current status to user:**
    ```
    📋 {TICKET} — Status Report
    
@@ -610,7 +617,7 @@ invokeSubAgent(
    ➡️ Tiếp tục Phase 3 (Design)?
    ```
 
-6. **Wait for user confirmation** before proceeding.
+7. **Wait for user confirmation** before proceeding.
 
 ### Step 1: Execute Phase — Requirements (BA → BRD)
 

package/Dockerfile

@@ -94,9 +94,12 @@ RUN npm install -g npm@${NPM_VERSION} --no-audit --no-fund --loglevel=error \
   && rm -rf /tmp/*.tgz \
   && node -e "require('${NM}/brace-expansion'); require('${NM}/undici')" \
   && npm --version \
-  # SEC-04: upgrade Debian packages to fix CVE-2026-103111 (libpcre2-8-0 HIGH) \
+  # SEC-04: upgrade Debian packages to fix CVE-2026-103111 (libpcre2-8-0 HIGH)
+  # and the perl CVE set found by Trivy on 2026-10-10 (CVE-2026-13221 CRITICAL,
+  # CVE-2026-42497 HIGH, CVE-2026-42496, CVE-2026-8376, CVE-2026-48962,
+  # CVE-2026-57432, CVE-2026-57433 — perl-base/perl-modules in node:XX-slim)
   && apt-get update \
-  && apt-get upgrade -y --no-install-recommends libpcre2-8-0 \
+  && apt-get upgrade -y --no-install-recommends libpcre2-8-0 perl-base perl-modules-5.36 \
   && apt-get clean \
   && rm -rf /var/lib/apt/lists/*
 

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.47.1-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.48.0-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>
@@ -38,7 +38,7 @@ Server starts at **http://localhost:48721**. Verify it's running:
 
 ```bash
 curl http://localhost:48721/health
-# → {"status":"healthy","version":"1.47.1","uptime":5,"tools_loaded":52}
+# → {"status":"healthy","version":"1.48.0","uptime":5,"tools_loaded":52}
 ```
 
 ### Development Mode (auto-reload)
@@ -233,6 +233,7 @@ The embedding model is expected at `.code-intel/models/model.onnx`. Download it:
 
 | Version | Date | Ticket | Changes |
 |---------|------|--------|---------|
+| 1.48.0 | 2026-10-10 | SA4E-341 | Version sync (E2E testing framework delivered in standalone `e2e/` package — no backend runtime changes). Also includes SA4E-335 DB-layer 6 bugfixes (memoized id-column check, literal-safe placeholder translation, identifier quoting SQLi guard, safeExec SQLSTATE filter, writable test-backend data dir), SA4E-349 auth 401 fail-loud fixes, SA4E-350 Pega '@baseclass' appliesTo passthrough fix, enrichment retry scoped via X-Project-Id + runtime settings module. |
 | 1.47.1 | 2026-10-04 | — | Fix Docker CI fail (Trivy CVE-2026-103111 libpcre2-8-0 HIGH), defensive JSON parse on `/auth/refresh`, SA4E-100 Pega BELONGS_TO edges. |
 | 1.47.0 | 2026-10-02 | — | New endpoint `GET /api/v1/enrichment/failures?limit=N` (clamp 1–1000, default 200) returns full FAILED enrichment task list from `pending_tasks` with resolved source, error, retry count, timestamp (`PendingTaskRepository.listFailedDetailed`). Surfaces ingest failures to the extension beyond the 10-item status tooltip. |
 | 1.46.2 | 2026-09-28 | — | Version sync (no backend code changes; packaging fix lives in `extension`: missing direct `yargs` dep for vendored devtools barrel). |

package/dist/admin/db/config.js

@@ -3,14 +3,16 @@
  * SA4E-50: All functions are async; use getDbAdapter() for multi-DB support.
  */
 import { getDbAdapter } from './core.js';
-/** Map raw DB row to typed ConfigChange. */
+import { maskSecret, isSecretConfigKey } from '../sanitize.js';
+/** Map raw DB row to typed ConfigChange. SA4E-338 S4 (D-SEC-06): secret rows are masked on read. */
 function rowToConfigChange(r) {
+    const secret = isSecretConfigKey(r.section, r.key);
     return {
         id: r.id,
         section: r.section,
         key: r.key,
-        oldValue: r.old_value,
-        newValue: r.new_value,
+        oldValue: secret ? maskSecret(r.old_value) : r.old_value,
+        newValue: secret ? maskSecret(r.new_value) : r.new_value,
         changedBy: r.changed_by,
         changedAt: r.changed_at,
         requiresRestart: !!r.requires_restart,

package/dist/admin/db/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/admin/db/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAazC,4CAA4C;AAC5C,SAAS,iBAAiB,CAAC,CAAM;IAC/B,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,GAAW,EACX,QAAuB,EACvB,QAAgB,EAChB,SAAiB,EACjB,eAAwB;IAExB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,OAAO,CAAC,QAAQ,CACpB;kCAC8B,EAC9B,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjG,CAAC;IACF,8CAA8C;IAC9C,MAAM,OAAO,CAAC,QAAQ,CACpB;;OAEG,CACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAK,GAAG,EAAE;IAC/C,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,2EAA2E;IAC3E,qFAAqF;IACrF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CACjC,+DAA+D,EAAE,CAAC,KAAK,CAAC,CACzE,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe,EAAE,GAAW;IACrE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAChC,qGAAqG,EACrG,CAAC,OAAO,EAAE,GAAG,CAAC,CACf,CAAC;QACF,OAAO,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAU1C,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IACpI,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;gBAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/admin/db/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAa/D,oGAAoG;AACpG,SAAS,iBAAiB,CAAC,CAAM;IAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACxD,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACxD,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,GAAW,EACX,QAAuB,EACvB,QAAgB,EAChB,SAAiB,EACjB,eAAwB;IAExB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,OAAO,CAAC,QAAQ,CACpB;kCAC8B,EAC9B,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjG,CAAC;IACF,8CAA8C;IAC9C,MAAM,OAAO,CAAC,QAAQ,CACpB;;OAEG,CACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAK,GAAG,EAAE;IAC/C,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,2EAA2E;IAC3E,qFAAqF;IACrF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CACjC,+DAA+D,EAAE,CAAC,KAAK,CAAC,CACzE,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe,EAAE,GAAW;IACrE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAChC,qGAAqG,EACrG,CAAC,OAAO,EAAE,GAAG,CAAC,CACf,CAAC;QACF,OAAO,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAU1C,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IACpI,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;gBAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/admin/sanitize.d.ts

@@ -24,3 +24,15 @@ export declare function escapeHtml(value: unknown): string;
  * Returns a new object; does not mutate the input.
  */
 export declare function sanitizeKbEntry(entry: Record<string, unknown>): Record<string, unknown>;
+/** Sentinel written in place of secret values in API responses, history and audit entries. */
+export declare const MASKED_VALUE = "***";
+/**
+ * SA4E-338 S4 (D-SEC-06): mask a secret value for any API / history / audit output.
+ * @returns `***` when a non-empty value is present, `''` when empty/absent.
+ */
+export declare function maskSecret(value: unknown): string;
+/**
+ * SA4E-338 S4 (D-SEC-06): config keys whose values are secrets — never returned,
+ * echoed or audited in plaintext.
+ */
+export declare function isSecretConfigKey(section: string, key: string): boolean;

package/dist/admin/sanitize.js

@@ -58,4 +58,23 @@ export function sanitizeKbEntry(entry) {
     }
     return clean;
 }
+/** Sentinel written in place of secret values in API responses, history and audit entries. */
+export const MASKED_VALUE = '***';
+/**
+ * SA4E-338 S4 (D-SEC-06): mask a secret value for any API / history / audit output.
+ * @returns `***` when a non-empty value is present, `''` when empty/absent.
+ */
+export function maskSecret(value) {
+    if (value === undefined || value === null)
+        return '';
+    const s = String(value);
+    return s.length > 0 ? MASKED_VALUE : '';
+}
+/**
+ * SA4E-338 S4 (D-SEC-06): config keys whose values are secrets — never returned,
+ * echoed or audited in plaintext.
+ */
+export function isSecretConfigKey(section, key) {
+    return (section === 'llm' && key === 'apiKey') || (section === 'auth' && key === 'entraClientSecret');
+}
 //# sourceMappingURL=sanitize.js.map

package/dist/admin/sanitize.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/admin/sanitize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,yCAAyC;AACzC,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAA8B;IAC5D,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,GAAI,KAAK,CAAC,IAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/admin/sanitize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,yCAAyC;AACzC,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAA8B;IAC5D,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,GAAI,KAAK,CAAC,IAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAW;IAC5D,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,KAAK,mBAAmB,CAAC,CAAC;AACxG,CAAC"}

package/dist/database/adapters/PostgresAdapter.d.ts

@@ -22,6 +22,8 @@ export declare class PostgresAdapter implements DatabaseAdapter {
     private pool;
     private connected;
     private serverVersion;
+    /** Memoized per-table result of the information_schema `id` column check. */
+    private idColumnCache;
     constructor(config: PostgresConfig);
     connect(): Promise<void>;
     disconnect(): Promise<void>;
@@ -40,6 +42,13 @@ export declare class PostgresAdapter implements DatabaseAdapter {
      */
     private getQueryFn;
     runAsync(sql: string, params?: unknown[]): Promise<RunResult>;
+    /**
+     * Memoized per-table check: does the target of this INSERT have an `id` column?
+     * Runs on the active query fn (tx client inside transactions) so tables created
+     * in the same transaction are visible. Check failure → false (plain INSERT is
+     * always safe); the cache costs one metadata query per table per lifetime.
+     */
+    private tableHasIdColumn;
     getAsync<T = unknown>(sql: string, params?: unknown[]): Promise<T | undefined>;
     allAsync<T = unknown>(sql: string, params?: unknown[]): Promise<T[]>;
     execAsync(sql: string): Promise<void>;
@@ -53,5 +62,4 @@ export declare class PostgresAdapter implements DatabaseAdapter {
     getVersion(): Promise<string>;
     getTableNames(): Promise<string[]>;
     getRowCount(table: string): Promise<number>;
-    private translateParams;
 }

package/dist/database/adapters/PostgresAdapter.js

@@ -5,6 +5,7 @@
  * Implements: SA4E-33
  */
 import { AsyncLocalStorage } from 'node:async_hooks';
+import { parseInsertTarget, quoteIdentifier, translatePlaceholders } from './pg-sql-utils.js';
 /** AsyncLocalStorage to scope queries to a dedicated client during transactions. */
 const txClientStorage = new AsyncLocalStorage();
 export class PostgresAdapter {
@@ -12,6 +13,8 @@ export class PostgresAdapter {
     pool = null;
     connected = false;
     serverVersion = '';
+    /** Memoized per-table result of the information_schema `id` column check. */
+    idColumnCache = new Map();
     constructor(config) {
         this.config = config;
     }
@@ -67,53 +70,53 @@ export class PostgresAdapter {
     }
     // Async methods
     async runAsync(sql, params) {
-        const translated = this.translateParams(sql);
+        const translated = translatePlaceholders(sql);
         const queryFn = this.getQueryFn();
-        const inTransaction = !!txClientStorage.getStore();
-        // SA4E-104: If INSERT without RETURNING, add RETURNING id to get lastInsertRowid
         const isInsert = /^\s*INSERT/i.test(sql);
         const hasReturning = /RETURNING/i.test(sql);
-        if (isInsert && !hasReturning) {
-            const withReturning = translated + ' RETURNING id';
-            if (inTransaction) {
-                // Inside transaction: attempt RETURNING id — if table has no 'id' column,
-                // suppress that specific error and retry without RETURNING on same client.
-                // PostgreSQL aborts tx on error, BUT "column does not exist" is a planning error
-                // that does NOT actually abort the transaction in all PG versions.
-                // If it does abort: the error propagates → transactionAsync() ROLLBACK is correct.
-                const r = await queryFn(withReturning, params);
-                const insertedId = r.rows?.[0]?.id ?? 0;
-                return { changes: r.rowCount ?? 0, lastInsertRowid: insertedId };
-            }
-            // Outside transaction: attempt RETURNING id with dedicated client fallback.
-            // BUG FIX: pool.query() uses implicit transaction — if RETURNING id fails,
-            // the connection is "poisoned" (aborted tx). We MUST use a fresh client for fallback.
-            try {
-                const r = await queryFn(withReturning, params);
-                const insertedId = r.rows?.[0]?.id ?? 0;
-                return { changes: r.rowCount ?? 0, lastInsertRowid: insertedId };
-            }
-            catch {
-                // Fallback: table may not have 'id' column — use dedicated client to avoid poisoned connection.
-                const client = await this.pool.connect();
-                try {
-                    const r = await client.query(translated, params);
-                    return { changes: r.rowCount ?? 0, lastInsertRowid: 0 };
-                }
-                finally {
-                    client.release();
-                }
-            }
+        // SA4E-104: append RETURNING id to get lastInsertRowid — but ONLY when the
+        // table actually has an `id` column. A failed RETURNING inside a transaction
+        // aborts it (25P02), so we never gamble: the memoized check decides upfront.
+        if (isInsert && !hasReturning && (await this.tableHasIdColumn(sql, queryFn))) {
+            const r = await queryFn(`${translated} RETURNING id`, params);
+            return { changes: r.rowCount ?? 0, lastInsertRowid: r.rows?.[0]?.id ?? 0 };
         }
+        // Id-less table / unparsable target / check failed → plain INSERT, which can
+        // never poison a transaction or a pooled connection.
         const r = await queryFn(translated, params);
         return { changes: r.rowCount ?? 0, lastInsertRowid: 0 };
     }
+    /**
+     * Memoized per-table check: does the target of this INSERT have an `id` column?
+     * Runs on the active query fn (tx client inside transactions) so tables created
+     * in the same transaction are visible. Check failure → false (plain INSERT is
+     * always safe); the cache costs one metadata query per table per lifetime.
+     */
+    async tableHasIdColumn(sql, queryFn) {
+        const target = parseInsertTarget(sql);
+        if (!target)
+            return false;
+        const cached = this.idColumnCache.get(target.key);
+        if (cached !== undefined)
+            return cached;
+        try {
+            const r = await queryFn(`SELECT 1 FROM information_schema.columns WHERE table_schema = $1 AND table_name = $2 AND column_name = 'id' LIMIT 1`, [target.schema, target.table]);
+            const exists = (r.rows?.length ?? 0) > 0;
+            this.idColumnCache.set(target.key, exists);
+            return exists;
+        }
+        catch (err) {
+            console.warn('[PostgresAdapter] id-column lookup failed — defaulting to plain INSERT:', err.message);
+            this.idColumnCache.set(target.key, false);
+            return false;
+        }
+    }
     async getAsync(sql, params) {
-        const r = await this.getQueryFn()(this.translateParams(sql), params);
+        const r = await this.getQueryFn()(translatePlaceholders(sql), params);
         return r.rows[0];
     }
     async allAsync(sql, params) {
-        const r = await this.getQueryFn()(this.translateParams(sql), params);
+        const r = await this.getQueryFn()(translatePlaceholders(sql), params);
         return r.rows;
     }
     async execAsync(sql) {
@@ -152,12 +155,8 @@ export class PostgresAdapter {
         return r.rows.map((row) => row.tablename);
     }
     async getRowCount(table) {
-        const r = await this.getQueryFn()(`SELECT COUNT(*) as cnt FROM "${table}"`);
+        const r = await this.getQueryFn()(`SELECT COUNT(*) as cnt FROM ${quoteIdentifier(table)}`);
         return parseInt(r.rows[0]?.cnt || '0', 10);
     }
-    translateParams(sql) {
-        let idx = 0;
-        return sql.replace(/\?/g, () => `$${++idx}`);
-    }
 }
 //# sourceMappingURL=PostgresAdapter.js.map

package/dist/database/adapters/PostgresAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresAdapter.js","sourceRoot":"","sources":["../../../src/database/adapters/PostgresAdapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAmBrD,oFAAoF;AACpF,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAgE,CAAC;AAE9G,MAAM,OAAO,eAAe;IAKG;IAJrB,IAAI,GAAQ,IAAI,CAAC;IACjB,SAAS,GAAG,KAAK,CAAC;IAClB,aAAa,GAAG,EAAE,CAAC;IAE3B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;YAC5D,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,mFAAmF;QACnF,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBACnC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACrF,CAAC;IAED,WAAW,KAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,SAAS;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa;YACnF,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAY,EAAE,OAAmB,IAAe,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACtF,GAAG,CAAc,IAAY,EAAE,OAAmB,IAAmB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvG,GAAG,CAAc,IAAY,EAAE,OAAmB,IAAS,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAY,IAAU,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC9D,WAAW,CAAI,GAAY,IAAO,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAY,IAAuB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAElF;;;;OAIG;IACK,UAAU;QAChB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAkB;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;QACnD,iFAAiF;QACjF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;YACnD,IAAI,aAAa,EAAE,CAAC;gBAClB,0EAA0E;gBAC1E,2EAA2E;gBAC3E,iFAAiF;gBACjF,mEAAmE;gBACnE,mFAAmF;gBACnF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;YACnE,CAAC;YACD,4EAA4E;YAC5E,2EAA2E;YAC3E,sFAAsF;YACtF,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,gGAAgG;gBAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBACjD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;gBAC1D,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAc,GAAW,EAAE,MAAkB;QACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAkB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAc,GAAW,EAAE,MAAkB;QACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAW,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAI,EAAoB;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CACtC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EACpC,EAAE,CACH,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAC3I,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,KAAqB,OAAO,YAAY,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,UAAU,KAAsB,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAElE,KAAK,CAAC,aAAa;QACjB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,8EAA8E,CAAC,CAAC;QAClH,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,gCAAgC,KAAK,GAAG,CAAC,CAAC;QAC5E,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF"}
+{"version":3,"file":"PostgresAdapter.js","sourceRoot":"","sources":["../../../src/database/adapters/PostgresAdapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAQrD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAY9F,oFAAoF;AACpF,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAgE,CAAC;AAE9G,MAAM,OAAO,eAAe;IAOG;IANrB,IAAI,GAAQ,IAAI,CAAC;IACjB,SAAS,GAAG,KAAK,CAAC;IAClB,aAAa,GAAG,EAAE,CAAC;IAC3B,6EAA6E;IACrE,aAAa,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEnD,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;YAC5D,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,mFAAmF;QACnF,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBACnC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACrF,CAAC;IAED,WAAW,KAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,SAAS;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa;YACnF,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAY,EAAE,OAAmB,IAAe,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACtF,GAAG,CAAc,IAAY,EAAE,OAAmB,IAAmB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACvG,GAAG,CAAc,IAAY,EAAE,OAAmB,IAAS,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAY,IAAU,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC9D,WAAW,CAAI,GAAY,IAAO,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAY,IAAuB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAElF;;;;OAIG;IACK,UAAU;QAChB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAkB;QAC5C,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,IAAI,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,UAAU,eAAe,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,6EAA6E;QAC7E,qDAAqD;QACrD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,OAA0D;QAE1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,qHAAqH,EACrH,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAC9B,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,yEAAyE,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAc,GAAW,EAAE,MAAkB;QACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAkB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAc,GAAW,EAAE,MAAkB;QACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAW,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAI,EAAoB;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CACtC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EACpC,EAAE,CACH,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAC3I,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,KAAqB,OAAO,YAAY,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,UAAU,KAAsB,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAElE,KAAK,CAAC,aAAa;QACjB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,8EAA8E,CAAC,CAAC;QAClH,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,+BAA+B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/database/adapters/PostgresAsyncAdapter.d.ts

@@ -31,6 +31,6 @@ export declare class PostgresAsyncAdapter implements AsyncDatabaseAdapter {
     all<T = unknown>(sql: string, params?: unknown[]): Promise<T[]>;
     exec(sql: string): Promise<void>;
     transaction<T>(fn: () => Promise<T>): Promise<T>;
-    /** Convert ? placeholders to $1, $2, etc. for pg driver. */
+    /** Convert ? placeholders to $1, $2, etc. for pg driver — skips `?` in literals. */
     private translateParams;
 }

package/dist/database/adapters/PostgresAsyncAdapter.js

@@ -3,6 +3,7 @@
  * SA4E-44: Native async PostgreSQL adapter for MemoryModule and other async-first consumers.
  * Cleaner than PostgresAdapter: no sync stubs that throw, pure async contract.
  */
+import { translatePlaceholders } from './pg-sql-utils.js';
 export class PostgresAsyncAdapter {
     config;
     pool = null;
@@ -75,10 +76,9 @@ export class PostgresAsyncAdapter {
             client.release();
         }
     }
-    /** Convert ? placeholders to $1, $2, etc. for pg driver. */
+    /** Convert ? placeholders to $1, $2, etc. for pg driver — skips `?` in literals. */
     translateParams(sql) {
-        let idx = 0;
-        return sql.replace(/\?/g, () => `$${++idx}`);
+        return translatePlaceholders(sql);
     }
 }
 //# sourceMappingURL=PostgresAsyncAdapter.js.map

package/dist/database/adapters/PostgresAsyncAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresAsyncAdapter.js","sourceRoot":"","sources":["../../../src/database/adapters/PostgresAsyncAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,MAAM,OAAO,oBAAoB;IAIF;IAHrB,IAAI,GAAQ,IAAI,CAAC;IACjB,SAAS,GAAG,KAAK,CAAC;IAE1B,YAA6B,MAA2B;QAA3B,WAAM,GAAN,MAAM,CAAqB;IAAG,CAAC;IAE5D,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;YAC5D,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACrF,CAAC;IAED,WAAW,KAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,SAAS,KAAqB,OAAO,YAAY,CAAC,CAAC,CAAC;IAEpD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAkB;QACvC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAAkB;QACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAkB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAAkB;QACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAW,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAAoB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,mDAAmD;YACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,IAAY,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,IAAY,CAAC,KAAK,GAAG,aAAa,CAAC;YACzC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjI,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,4DAA4D;IACpD,eAAe,CAAC,GAAW;QACjC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;CACF"}
+{"version":3,"file":"PostgresAsyncAdapter.js","sourceRoot":"","sources":["../../../src/database/adapters/PostgresAsyncAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAY1D,MAAM,OAAO,oBAAoB;IAIF;IAHrB,IAAI,GAAQ,IAAI,CAAC;IACjB,SAAS,GAAG,KAAK,CAAC;IAE1B,YAA6B,MAA2B;QAA3B,WAAM,GAAN,MAAM,CAAqB;IAAG,CAAC;IAE5D,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;YAC5D,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;IACrF,CAAC;IAED,WAAW,KAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,SAAS,KAAqB,OAAO,YAAY,CAAC,CAAC,CAAC;IAEpD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAkB;QACvC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAAkB;QACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAkB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,MAAkB;QACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAW,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAAoB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,mDAAmD;YACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,IAAY,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,IAAY,CAAC,KAAK,GAAG,aAAa,CAAC;YACzC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjI,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,GAAW;QACjC,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/database/adapters/pg-sql-utils.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pure SQL-string helpers shared by the PostgreSQL adapters — SA4E-335 hardening.
+ *
+ * Why a separate module: PostgresAdapter sits at its 200-line budget, and both
+ * PG adapters shared the same naive `?`→$n replacement, which corrupts `?`
+ * inside string literals. Pure functions keep the adapters lean and testable.
+ */
+export interface InsertTarget {
+    /** Stable cache key (as parsed). */
+    key: string;
+    /** Schema for the information_schema lookup (default: public). */
+    schema: string;
+    /** Unqualified table name. */
+    table: string;
+}
+/**
+ * Convert ? placeholders to $1, $2, ... for the pg driver — skipping any `?`
+ * inside single-quoted string literals ('' doubling is the literal escape).
+ */
+export declare function translatePlaceholders(sql: string): string;
+/**
+ * Extract the target table of an INSERT statement (bare or quoted, optional
+ * schema). Bare identifiers are lowercased (PG semantics); returns null when
+ * the target is unparsable so callers can fall back to plain INSERT.
+ */
+export declare function parseInsertTarget(sql: string): InsertTarget | null;
+/**
+ * Validate and quote a table identifier — throws on anything unsafe so a
+ * caller-controlled name can never reach SQL as raw interpolation (SQLi guard).
+ */
+export declare function quoteIdentifier(name: string): string;

package/dist/database/adapters/pg-sql-utils.js

@@ -0,0 +1,78 @@
+/**
+ * Pure SQL-string helpers shared by the PostgreSQL adapters — SA4E-335 hardening.
+ *
+ * Why a separate module: PostgresAdapter sits at its 200-line budget, and both
+ * PG adapters shared the same naive `?`→$n replacement, which corrupts `?`
+ * inside string literals. Pure functions keep the adapters lean and testable.
+ */
+/**
+ * Convert ? placeholders to $1, $2, ... for the pg driver — skipping any `?`
+ * inside single-quoted string literals ('' doubling is the literal escape).
+ */
+export function translatePlaceholders(sql) {
+    let idx = 0;
+    let out = '';
+    let inString = false;
+    for (let i = 0; i < sql.length; i++) {
+        const ch = sql[i];
+        if (inString) {
+            out += ch;
+            if (ch === "'") {
+                if (sql[i + 1] === "'") {
+                    out += "'";
+                    i++;
+                }
+                else {
+                    inString = false;
+                }
+            }
+            continue;
+        }
+        if (ch === "'") {
+            inString = true;
+            out += ch;
+        }
+        else if (ch === '?') {
+            out += `$${++idx}`;
+        }
+        else {
+            out += ch;
+        }
+    }
+    return out;
+}
+/**
+ * Extract the target table of an INSERT statement (bare or quoted, optional
+ * schema). Bare identifiers are lowercased (PG semantics); returns null when
+ * the target is unparsable so callers can fall back to plain INSERT.
+ */
+export function parseInsertTarget(sql) {
+    const m = /^\s*INSERT\s+INTO\s+(?:"([^"]+)"|([A-Za-z_][A-Za-z0-9_.$]*))/i.exec(sql);
+    if (!m)
+        return null;
+    if (m[1] !== undefined)
+        return { key: `"${m[1]}"`, schema: 'public', table: m[1] };
+    const name = m[2].toLowerCase();
+    const dot = name.lastIndexOf('.');
+    if (dot === -1)
+        return { key: name, schema: 'public', table: name };
+    return { key: name, schema: name.slice(0, dot), table: name.slice(dot + 1) };
+}
+/**
+ * Validate and quote a table identifier — throws on anything unsafe so a
+ * caller-controlled name can never reach SQL as raw interpolation (SQLi guard).
+ */
+export function quoteIdentifier(name) {
+    const t = name.trim();
+    if (!t)
+        throw new Error('Empty table identifier');
+    return t.split('.').map((seg) => {
+        const isQuoted = seg.length >= 2 && seg.startsWith('"') && seg.endsWith('"');
+        const bare = isQuoted ? seg.slice(1, -1) : seg;
+        if (!/^[A-Za-z_][A-Za-z0-9_$]*$/.test(bare) && !isQuoted) {
+            throw new Error(`Unsafe table identifier: ${name}`);
+        }
+        return `"${bare.replace(/"/g, '""')}"`;
+    }).join('.');
+}
+//# sourceMappingURL=pg-sql-utils.js.map

package/dist/database/adapters/pg-sql-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-sql-utils.js","sourceRoot":"","sources":["../../../src/database/adapters/pg-sql-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,GAAG,IAAI,GAAG,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;qBAAM,CAAC;oBAAC,QAAQ,GAAG,KAAK,CAAC;gBAAC,CAAC;YACzE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,GAAG,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,+DAA+D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACzC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/database/migration/pg-schema-ensure.js

@@ -168,13 +168,21 @@ export async function ensurePostgresIndexSchema(adapter) {
         logger.error({ err }, '[pg-schema-ensure] Schema ensure failed (non-fatal)');
     }
 }
-/** Execute SQL silently — log and continue on error. */
+/** PG SQLSTATE codes meaning "already exists / nothing to do" — safe to ignore. */
+const IDEMPOTENT_SQLSTATES = new Set(['42P07', '42710', '42701', '42P01']);
+/**
+ * Execute DDL: redundant statements (already exists) are ignored by SQLSTATE
+ * code; real errors (permission, syntax, …) are logged loudly, not swallowed.
+ */
 async function safeExec(adapter, sql) {
     try {
         await adapter.runAsync(sql, []);
     }
-    catch {
-        // Ignore — statement may be redundant (column/index already exists)
+    catch (err) {
+        const code = err.code;
+        if (code && IDEMPOTENT_SQLSTATES.has(code))
+            return;
+        logger.error({ err, sql: sql.trim().slice(0, 120) }, '[pg-schema-ensure] DDL failed — schema may be incomplete');
     }
 }
 //# sourceMappingURL=pg-schema-ensure.js.map