tina4-nodejs 3.13.137 → 3.13.138

package/packages/orm/src/databaseResult.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 import type { DatabaseAdapter, ColumnInfo } from "./types.js";
 
 /** Column metadata returned by columnInfo(). */

package/packages/orm/src/databaseUrl.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * A parsed database connection URL, as a VALUE.
  *

package/packages/orm/src/docstore.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Tina4 DocStore - pymongo-style document storage with a zero-config SQLite (JSON1) fallback.
  *
@@ -199,9 +207,23 @@ const COMPARATORS: Record<string, string> = {
   $lte: "<=",
 };
 
-/** Field name -> a JSON path. Dotted names address nested keys. */
+const SAFE_PATH_SEGMENT = /^[A-Za-z0-9_-]+$/;
+
+/**
+ * Field name -> a JSON path. Dotted names address nested keys.
+ *
+ * tina4: ADR-0069 - this is the single chokepoint every field path passes
+ * through on its way into SQL (filter keys at any depth, $or/$and members,
+ * operator fields, sort keys), so it validates every dot segment here and
+ * throws before any SQL is built.
+ */
 function jsonPath(field: string): string {
   const segments = field.split(".");
+  if (!segments.every((s) => SAFE_PATH_SEGMENT.test(s))) {
+    throw new Error(
+      `DocStore: invalid field path '${field}' - each dot-separated segment must match [A-Za-z0-9_-]+`,
+    );
+  }
   const isIdent = (s: string) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(s);
   return "$." + segments.map((s) => (isIdent(s) ? s : `"${s}"`)).join(".");
 }

package/packages/orm/src/fakeData.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 // Tina4 ORM FakeData — extends core FakeData with ORM-aware data generation.
 // Re-exports core FakeData with additional forField() for auto-generating
 // data based on ORM field definitions.

package/packages/orm/src/graph/adapters/arango.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * ArangoDB graph adapter — the document/AQL engine behind the same surface.
  *

package/packages/orm/src/graph/adapters/bolt.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Bolt graph adapter — Neo4j AND Memgraph (both speak Bolt + Cypher).
  *

package/packages/orm/src/graph/adapters/ultipa.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Ultipa graph adapter — the portable core built in GQL over the tina4-ultipa driver.
  *

package/packages/orm/src/graph/connectTimeout.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * TINA4_GRAPH_CONNECT_TIMEOUT — the graph connect bound.
  *

package/packages/orm/src/graph/errors.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Graph layer errors — the graph siblings of the relational fail-loud contract.
  *

package/packages/orm/src/graph/graphAdapter.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * The one surface every graph engine implements.
  *

package/packages/orm/src/graph/graphDatabase.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * The GraphAdapter URL-selected factory — the GraphDatabase sibling of Database.
  *

package/packages/orm/src/graph/graphUrl.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Graph connection URL parser — the DatabaseUrl sibling for graph engines.
  *
@@ -6,6 +14,7 @@
  * alias (bolt/neo4j/memgraph all speak Bolt/Cypher and share ONE adapter) resolves
  * to its engine here. See tina4-documentation/plan/v3/features/139-graph-databases.md.
  */
+import { redactCredentials } from "../databaseUrl.js";
 
 /** The canonical graph engine names. */
 export type GraphEngine = "ultipa" | "bolt" | "arango";
@@ -55,7 +64,7 @@ export class GraphUrl {
       parsed = new URL(url);
     } catch {
       throw new Error(
-        `Unsupported graph URL '${url}' — expected scheme://[user[:password]@]host[:port]/graph `
+        `Unsupported graph URL '${redactCredentials(url)}' — expected scheme://[user[:password]@]host[:port]/graph `
         + `(e.g. ultipa://host:60061/mygraph).`,
       );
     }

package/packages/orm/src/graph/shapes.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * Engine-neutral graph shapes — the mirror of the relational DatabaseResult.
  *

package/packages/orm/src/index.ts

@@ -1,139 +1,147 @@
-export type {
-  FieldType,
-  FieldDefinition,
-  ModelDefinition,
-  DatabaseAdapter,
-  DatabaseResult as DatabaseWriteResult,
-  ColumnInfo,
-  QueryOptions,
-  RelationshipDefinition,
-} from "./types.js";
-
-export { REQUIRED_ADAPTER_CAPABILITIES, NOT_REQUIRED_ON_ADAPTER } from "./types.js";
-
-export { DatabaseResult } from "./databaseResult.js";
-export type { ColumnInfoResult } from "./databaseResult.js";
-export { ModelCollection } from "./modelCollection.js";
-export type { PaginateEnvelope } from "./modelCollection.js";
-export { Database, initDatabase, getAdapter, setAdapter, bindDatabase, createAdapterFromUrl, closeDatabase, parseDatabaseUrl, setNamedAdapter, getNamedAdapter, resolveDbPool, stripTrailingSemicolons, wrapWithCache, resetRequestCaches } from "./database.js";
-export {
-  adapterFetch, adapterQuery, adapterFetchOne, adapterExecute, adapterInsert,
-  adapterStartTransaction, adapterCommit, adapterRollback,
-  adapterTableExists, adapterTables, adapterColumns, adapterCreateTable,
-  extractLastInsertId,
-} from "./database.js";
-export type { DatabaseConfig } from "./database.js";
-export { DatabaseUrl, redactCredentials } from "./databaseUrl.js";
-export type { DatabaseEngine } from "./databaseUrl.js";
-export { discoverModels } from "./model.js";
-export type { DiscoveredModel } from "./model.js";
-export {
-  syncModels,
-  ensureMigrationTable,
-  getNextBatch,
-  isMigrationApplied,
-  recordMigration,
-  applyMigration,
-  rollback,
-  getAppliedMigrations,
-  getLastBatchMigrations,
-  removeMigrationRecord,
-  migrate,
-  createMigration,
-  status,
-  Migration,
-  splitStatements,
-  parseSetTerm,
-  normalizeQuotes,
-  sortMigrationFiles,
-  shouldSkipCreateTable,
-  shouldSkipForFirebird,
-} from "./migration.js";
-export type { MigrationResult, MigrationStatus } from "./migration.js";
-export { AutoCrud, generateCrudRoutes, crudEligibleModels } from "./autoCrud.js";
-export type { AutoCrudOptions } from "./autoCrud.js";
-export { buildQuery, parseQueryString } from "./query.js";
-export { validate } from "./validation.js";
-export type { ValidationError } from "./validation.js";
-export { BaseModel, snakeToCamel, camelToSnake } from "./baseModel.js";
-export { QueryBuilder } from "./queryBuilder.js";
-export { SQLTranslator, QueryCache } from "./sqlTranslator.js";
-export { Point, SpatialNotSupportedError, DEFAULT_SRID } from "./point.js";
-export type { GeoJsonPoint } from "./point.js";
-export {
-  DEFAULT_DATABASE_CONNECT_TIMEOUT_SECONDS,
-  CONNECT_TIMEOUT_TOLERANCE_MS,
-  connectTimeoutMillis,
-  driverConnectTimeoutMillis,
-  connectTarget,
-  withConnectTimeout,
-} from "./connectTimeout.js";
-export { CachedDatabaseAdapter } from "./cachedDatabase.js";
-export type { CachedAdapterOptions } from "./cachedDatabase.js";
-export { FakeData } from "./fakeData.js";
-export { seedTable, seedOrm, seedModels, autoFieldMap } from "./seeder.js";
-export type { SeedSummary, SeedOptions } from "./seeder.js";
-
-// DocStore — pymongo-style document store with a zero-config SQLite (JSON1) fallback
-export {
-  ObjectId, InvalidId, DocStoreDriverMissing, SqliteDatabase, SqliteCollection, Cursor,
-  getCollection, isServerless, resetDefaultStore, closeDocStore,
-  encodeValue, decodeValue, compileFilter,
-} from "./docstore.js";
-export type {
-  InsertOneResult, InsertManyResult, UpdateResult, DeleteResult,
-} from "./docstore.js";
-
-// Database adapters
-export { SQLiteAdapter } from "./adapters/sqlite.js";
-export { PostgresAdapter } from "./adapters/postgres.js";
-export type { PostgresConfig } from "./adapters/postgres.js";
-export { MysqlAdapter } from "./adapters/mysql.js";
-export type { MysqlConfig } from "./adapters/mysql.js";
-export { MssqlAdapter } from "./adapters/mssql.js";
-export type { MssqlConfig } from "./adapters/mssql.js";
-export { FirebirdAdapter, normalizeFirebirdDbIdentifier, resolveFirebirdCharset } from "./adapters/firebird.js";
-export type { FirebirdConfig } from "./adapters/firebird.js";
-export { MongodbAdapter } from "./adapters/mongodb.js";
-export type { MongoConfig } from "./adapters/mongodb.js";
-export { OdbcAdapter } from "./adapters/odbc.js";
-export type { OdbcConfig } from "./adapters/odbc.js";
-
-// Graph data layer (Feature 139) — URL-selected graph databases, shaped like Database.
-// The engine adapters (e.g. UltipaGraphAdapter) are deliberately NOT re-exported:
-// they import their optional driver, so the factory loads them lazily and the core
-// surface below stays driver-free (the zero-dependency-core rule, ADR-0059).
-export { GraphDatabase } from "./graph/graphDatabase.js";
-export type { GraphCredentials } from "./graph/graphDatabase.js";
-export { GraphUrl } from "./graph/graphUrl.js";
-export type { GraphEngine } from "./graph/graphUrl.js";
-export { GraphNode, GraphEdge, GraphResult } from "./graph/shapes.js";
-export { GraphError, GraphConnectTimeout } from "./graph/errors.js";
-export type {
-  GraphAdapter,
-  GraphDirection,
-  NeighborOptions,
-  TraverseOptions,
-} from "./graph/graphAdapter.js";
-export {
-  resolveGraphConnectTimeout,
-  GRAPH_CONNECT_TIMEOUT_VARIABLE,
-  DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS,
-} from "./graph/connectTimeout.js";
-
-// Realtime collaboration mount (calls + chat + files) — parity with the Python master.
-export {
-  realtime,
-  iceServers,
-  type RealtimeOptions,
-  LocalStorage,
-  S3Storage,
-  selectStorage,
-  storageKey,
-  type StorageBackend,
-  Workspace as RealtimeWorkspace,
-  Channel as RealtimeChannel,
-  ChannelMember as RealtimeChannelMember,
-  Message as RealtimeMessage,
-  Attachment as RealtimeAttachment,
-} from "./realtime/index.js";
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
+export type {
+  FieldType,
+  FieldDefinition,
+  ModelDefinition,
+  DatabaseAdapter,
+  DatabaseResult as DatabaseWriteResult,
+  ColumnInfo,
+  QueryOptions,
+  RelationshipDefinition,
+} from "./types.js";
+
+export { REQUIRED_ADAPTER_CAPABILITIES, NOT_REQUIRED_ON_ADAPTER } from "./types.js";
+
+export { DatabaseResult } from "./databaseResult.js";
+export type { ColumnInfoResult } from "./databaseResult.js";
+export { ModelCollection } from "./modelCollection.js";
+export type { PaginateEnvelope } from "./modelCollection.js";
+export { Database, initDatabase, getAdapter, setAdapter, bindDatabase, createAdapterFromUrl, closeDatabase, parseDatabaseUrl, setNamedAdapter, getNamedAdapter, resolveDbPool, stripTrailingSemicolons, wrapWithCache, resetRequestCaches } from "./database.js";
+export {
+  adapterFetch, adapterQuery, adapterFetchOne, adapterExecute, adapterInsert,
+  adapterStartTransaction, adapterCommit, adapterRollback,
+  adapterTableExists, adapterTables, adapterColumns, adapterCreateTable,
+  extractLastInsertId,
+} from "./database.js";
+export type { DatabaseConfig } from "./database.js";
+export { DatabaseUrl, redactCredentials } from "./databaseUrl.js";
+export type { DatabaseEngine } from "./databaseUrl.js";
+export { discoverModels } from "./model.js";
+export type { DiscoveredModel } from "./model.js";
+export {
+  syncModels,
+  ensureMigrationTable,
+  getNextBatch,
+  isMigrationApplied,
+  recordMigration,
+  applyMigration,
+  rollback,
+  getAppliedMigrations,
+  getLastBatchMigrations,
+  removeMigrationRecord,
+  migrate,
+  createMigration,
+  status,
+  Migration,
+  splitStatements,
+  parseSetTerm,
+  normalizeQuotes,
+  sortMigrationFiles,
+  shouldSkipCreateTable,
+  shouldSkipForFirebird,
+} from "./migration.js";
+export type { MigrationResult, MigrationStatus } from "./migration.js";
+export { AutoCrud, generateCrudRoutes, crudEligibleModels } from "./autoCrud.js";
+export type { AutoCrudOptions } from "./autoCrud.js";
+export { buildQuery, parseQueryString, UnknownFieldError, InvalidQueryParameterError } from "./query.js";
+export { validate } from "./validation.js";
+export type { ValidationError } from "./validation.js";
+export { BaseModel, snakeToCamel, camelToSnake } from "./baseModel.js";
+export { QueryBuilder } from "./queryBuilder.js";
+export { SQLTranslator, QueryCache } from "./sqlTranslator.js";
+export { Point, SpatialNotSupportedError, DEFAULT_SRID } from "./point.js";
+export type { GeoJsonPoint } from "./point.js";
+export {
+  DEFAULT_DATABASE_CONNECT_TIMEOUT_SECONDS,
+  CONNECT_TIMEOUT_TOLERANCE_MS,
+  connectTimeoutMillis,
+  driverConnectTimeoutMillis,
+  connectTarget,
+  withConnectTimeout,
+} from "./connectTimeout.js";
+export { CachedDatabaseAdapter } from "./cachedDatabase.js";
+export type { CachedAdapterOptions } from "./cachedDatabase.js";
+export { FakeData } from "./fakeData.js";
+export { seedTable, seedOrm, seedModels, autoFieldMap } from "./seeder.js";
+export type { SeedSummary, SeedOptions } from "./seeder.js";
+
+// DocStore — pymongo-style document store with a zero-config SQLite (JSON1) fallback
+export {
+  ObjectId, InvalidId, DocStoreDriverMissing, SqliteDatabase, SqliteCollection, Cursor,
+  getCollection, isServerless, resetDefaultStore, closeDocStore,
+  encodeValue, decodeValue, compileFilter,
+} from "./docstore.js";
+export type {
+  InsertOneResult, InsertManyResult, UpdateResult, DeleteResult,
+} from "./docstore.js";
+
+// Database adapters
+export { SQLiteAdapter } from "./adapters/sqlite.js";
+export { PostgresAdapter } from "./adapters/postgres.js";
+export type { PostgresConfig } from "./adapters/postgres.js";
+export { MysqlAdapter } from "./adapters/mysql.js";
+export type { MysqlConfig } from "./adapters/mysql.js";
+export { MssqlAdapter } from "./adapters/mssql.js";
+export type { MssqlConfig } from "./adapters/mssql.js";
+export { FirebirdAdapter, normalizeFirebirdDbIdentifier, resolveFirebirdCharset } from "./adapters/firebird.js";
+export type { FirebirdConfig } from "./adapters/firebird.js";
+export { MongodbAdapter } from "./adapters/mongodb.js";
+export type { MongoConfig } from "./adapters/mongodb.js";
+export { OdbcAdapter } from "./adapters/odbc.js";
+export type { OdbcConfig } from "./adapters/odbc.js";
+
+// Graph data layer (Feature 139) — URL-selected graph databases, shaped like Database.
+// The engine adapters (e.g. UltipaGraphAdapter) are deliberately NOT re-exported:
+// they import their optional driver, so the factory loads them lazily and the core
+// surface below stays driver-free (the zero-dependency-core rule, ADR-0059).
+export { GraphDatabase } from "./graph/graphDatabase.js";
+export type { GraphCredentials } from "./graph/graphDatabase.js";
+export { GraphUrl } from "./graph/graphUrl.js";
+export type { GraphEngine } from "./graph/graphUrl.js";
+export { GraphNode, GraphEdge, GraphResult } from "./graph/shapes.js";
+export { GraphError, GraphConnectTimeout } from "./graph/errors.js";
+export type {
+  GraphAdapter,
+  GraphDirection,
+  NeighborOptions,
+  TraverseOptions,
+} from "./graph/graphAdapter.js";
+export {
+  resolveGraphConnectTimeout,
+  GRAPH_CONNECT_TIMEOUT_VARIABLE,
+  DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS,
+} from "./graph/connectTimeout.js";
+
+// Realtime collaboration mount (calls + chat + files) — parity with the Python master.
+export {
+  realtime,
+  iceServers,
+  type RealtimeOptions,
+  LocalStorage,
+  S3Storage,
+  selectStorage,
+  storageKey,
+  type StorageBackend,
+  Workspace as RealtimeWorkspace,
+  Channel as RealtimeChannel,
+  ChannelMember as RealtimeChannelMember,
+  Message as RealtimeMessage,
+  Attachment as RealtimeAttachment,
+} from "./realtime/index.js";

package/packages/orm/src/migration.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { Log } from "../../core/src/index.js";

package/packages/orm/src/model.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 import { readdirSync, statSync } from "node:fs";
 import { join, extname } from "node:path";
 import type { ModelDefinition, FieldDefinition, RelationshipDefinition } from "./types.js";

package/packages/orm/src/modelCollection.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 /**
  * ModelCollection — a list of ORM models that also carries the query total.
  *

package/packages/orm/src/point.ts

@@ -1,3 +1,11 @@
+/*
+Copyright (c) 2026 Code Infinity
+SPDX-License-Identifier: MPL-2.0
+This Source Code Form is subject to the terms of the Mozilla Public
+License, v. 2.0. If a copy of the MPL was not distributed with this
+file, You can obtain one at https://mozilla.org/MPL/2.0/.
+*/
+
 export const DEFAULT_SRID = 4326;
 
 export class SpatialNotSupportedError extends Error {