ts-prorm-orm 1.2.3 → 2.1.0

package/dist/compliance/index.js

@@ -16,6 +16,7 @@
  *   import { ComplianceAuditTrail } from './compliance/audit-trail';
  *   ComplianceAuditTrail.enable(prorm, UserModel, { getUserId: () => user.id });
  *
+ * ```ts
  *   // 2. Field-level AES-256-GCM encryption
  *   import { FieldEncryption } from './compliance/field-encryption';
  *   FieldEncryption.configure('32-byte-hex-key');
@@ -66,11 +67,12 @@
  *   import { DataClassifier } from './compliance/data-classifier';
  *   @FieldClassification('email', 'PII') class User extends Model {}
  *   const piiFields = DataClassifier.getPIIFields(User);
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getPIIFields = exports.getClassification = exports.FieldClassification = exports.Classify = exports.DataClassifier = exports.createDSARResponse = exports.exportStream = exports.exportData = exports.DataPortabilityExporter = exports.applyPseudonymizationHooks = exports.Pseudonymize = exports.detokenize = exports.tokenize = exports.configure = exports.PseudonymizationService = exports.isImmutable = exports.enableVersioning = exports.makeImmutable = exports.ImmutableRecord = exports.applyMaskingHooks = exports.maskMany = exports.mask = exports.maskValue = exports.maskField = exports.Mask = exports.MaskPatternEnum = exports.DataMasker = exports.registerHooks = exports.rlsMiddleware = exports.runInContext = exports.getContext = exports.setContext = exports.apply = exports.initRLS = exports.RLS = exports.RowLevelSecurity = exports.ConsentVersioning = exports.LegalBasisEnum = exports.ConsentRecord = exports.RightToErasure = exports.DataRetentionPolicy = exports.TLSEnforcer = exports.getEncryptedFields = exports.applyEncryptionHooks = exports.Encrypt = exports.decryptValue = exports.encryptValue = exports.configureFieldEncryption = exports.FieldEncryption = exports.ComplianceAuditTrail = void 0;
 exports.SensitiveDataDiscovery = exports.getRecommendedLimits = exports.satisfiesCompliance = exports.checkRateLimit = exports.initRateLimiter = exports.getGlobalLimiter = exports.getRateLimitOptions = exports.RateLimit = exports.RateLimiter = exports.isArchived = exports.isFrozen = exports.applyWORMHooks = exports.getWORMOptions = exports.WORM = exports.WORMStorage = exports.getTenantIsolationOptions = exports.getTenantAuditMetadata = exports.sessionIsolationMiddleware = exports.TenantIsolation = exports.SessionIsolation = exports.initBreachDetector = exports.getGlobalBreachDetector = exports.BreachDetector = exports.analyzeQuerySecurity = exports.initSecurityMonitor = exports.getGlobalMonitor = exports.ComplianceSecurityMonitor = exports.SecurityMonitor = exports.isImmutableModel = exports.hasAudit = exports.getSecurityFrameworks = exports.getDatabaseSecurity = exports.getTableSecurity = exports.DatabaseSecurity = exports.Table = exports.setupAllSecurity = exports.setupSecurity = exports.getAllFrameworks = exports.getFrameworkCategory = exports.isValidFramework = exports.FrameworkCount = exports.FrameworkRequirements = exports.FrameworkCategories = exports.AllFrameworks = exports.SecurityFramework = exports.Security = exports.autoDiscover = exports.isSensitive = exports.getPCIFields = exports.getPHIFields = void 0;
-exports.applyFirewallRulesToModel = exports.SQLiteFirewall = exports.OracleFirewall = exports.MSSQLFirewall = exports.MariaDBFirewall = exports.MySQLFirewall = exports.PostgreSQLFirewall = exports.FirewallRules = exports.DATABASE_RULES = exports.SQLITE_RULES = exports.ORACLE_RULES = exports.MSSQL_RULES = exports.MARIADB_RULES = exports.MYSQL_RULES = exports.POSTGRESQL_RULES = exports.NIST_CSF_RULES = exports.SOX_RULES = exports.HIPAA_RULES = exports.PCI_DSS_RULES = exports.CIS_BENCHMARK_RULES = exports.OWASP_SQL_INJECTION_PATTERNS = exports.FIREWALL_RULES = exports.getRecommendedRules = exports.FirewallModeEnum = exports.QueryFirewall = exports.BackupVerification = exports.PrivacyImpactAssessment = exports.DSARWorkflow = exports.generateTransferReport = exports.getComplianceTransfers = exports.CrossBorderLog = exports.generateComplianceReport = exports.getPatterns = exports.unregisterPattern = exports.registerPattern = void 0;
+exports.applyLineageHooks = exports.createComputedRecord = exports.createDerivedRecord = exports.getLineageOptions = exports.getLineageFields = exports.LineageTrack = exports.DataLineage = exports.applyFirewallRulesToModel = exports.SQLiteFirewall = exports.OracleFirewall = exports.MSSQLFirewall = exports.MariaDBFirewall = exports.MySQLFirewall = exports.PostgreSQLFirewall = exports.FirewallRules = exports.DATABASE_RULES = exports.SQLITE_RULES = exports.ORACLE_RULES = exports.MSSQL_RULES = exports.MARIADB_RULES = exports.MYSQL_RULES = exports.POSTGRESQL_RULES = exports.NIST_CSF_RULES = exports.SOX_RULES = exports.HIPAA_RULES = exports.PCI_DSS_RULES = exports.CIS_BENCHMARK_RULES = exports.OWASP_SQL_INJECTION_PATTERNS = exports.FIREWALL_RULES = exports.getRecommendedRules = exports.FirewallModeEnum = exports.QueryFirewall = exports.BackupVerification = exports.PrivacyImpactAssessment = exports.DSARWorkflow = exports.generateTransferReport = exports.getComplianceTransfers = exports.CrossBorderLog = exports.generateComplianceReport = exports.getPatterns = exports.unregisterPattern = exports.registerPattern = void 0;
 // Audit Trail
 var audit_trail_1 = require("./audit-trail");
 Object.defineProperty(exports, "ComplianceAuditTrail", { enumerable: true, get: function () { return audit_trail_1.ComplianceAuditTrail; } });
@@ -258,3 +260,15 @@ Object.defineProperty(exports, "MSSQLFirewall", { enumerable: true, get: functio
 Object.defineProperty(exports, "OracleFirewall", { enumerable: true, get: function () { return query_firewall_1.OracleFirewall; } });
 Object.defineProperty(exports, "SQLiteFirewall", { enumerable: true, get: function () { return query_firewall_1.SQLiteFirewall; } });
 Object.defineProperty(exports, "applyFirewallRulesToModel", { enumerable: true, get: function () { return query_firewall_1.applyFirewallRulesToModel; } });
+// Data Lineage
+// `applyHooks` is aliased to `applyLineageHooks` for the same reason
+// data-masker's and pseudonymization's are: three modules in this barrel each
+// export a function by that name.
+var data_lineage_1 = require("./data-lineage");
+Object.defineProperty(exports, "DataLineage", { enumerable: true, get: function () { return data_lineage_1.DataLineage; } });
+Object.defineProperty(exports, "LineageTrack", { enumerable: true, get: function () { return data_lineage_1.LineageTrack; } });
+Object.defineProperty(exports, "getLineageFields", { enumerable: true, get: function () { return data_lineage_1.getLineageFields; } });
+Object.defineProperty(exports, "getLineageOptions", { enumerable: true, get: function () { return data_lineage_1.getLineageOptions; } });
+Object.defineProperty(exports, "createDerivedRecord", { enumerable: true, get: function () { return data_lineage_1.createDerivedRecord; } });
+Object.defineProperty(exports, "createComputedRecord", { enumerable: true, get: function () { return data_lineage_1.createComputedRecord; } });
+Object.defineProperty(exports, "applyLineageHooks", { enumerable: true, get: function () { return data_lineage_1.applyHooks; } });

package/dist/compliance/pseudonymization.d.ts

@@ -24,12 +24,14 @@
  *   const original = await PseudonymizationService.detokenize(token);
  *   // original: 'user-123'
  *
+ * ```ts
  *   // Or use the decorator on a model field:
  *   @Pseudonymize('nationalId')
  *   class Patient extends Model { ... }
  *
  *   // Apply hooks to auto-tokenize on write:
  *   PseudonymizationService.applyHooks(Patient, 'nationalId');
+ * ```
  */
 export type StorageMode = 'memory' | 'database';
 export interface PseudonymizationConfig {
@@ -73,8 +75,10 @@ export declare function getPseudonymizedFields(target: Function): string[];
 /**
  * Mark a field for automatic pseudonymization.
  *
+ * ```ts
  *   @Pseudonymize('nationalId')
  *   class Patient extends Model { ... }
+ * ```
  */
 export declare function Pseudonymize(field: string): (target: Function) => void;
 /**

package/dist/compliance/pseudonymization.js

@@ -25,12 +25,14 @@
  *   const original = await PseudonymizationService.detokenize(token);
  *   // original: 'user-123'
  *
+ * ```ts
  *   // Or use the decorator on a model field:
  *   @Pseudonymize('nationalId')
  *   class Patient extends Model { ... }
  *
  *   // Apply hooks to auto-tokenize on write:
  *   PseudonymizationService.applyHooks(Patient, 'nationalId');
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PseudonymizationService = void 0;
@@ -207,8 +209,10 @@ function getPseudonymizedFields(target) {
 /**
  * Mark a field for automatic pseudonymization.
  *
+ * ```ts
  *   @Pseudonymize('nationalId')
  *   class Patient extends Model { ... }
+ * ```
  */
 function Pseudonymize(field) {
     return function (target) {

package/dist/compliance/query-firewall.d.ts

@@ -585,21 +585,21 @@ export interface FirewallRuleDecoratorOptions {
  *
  * @example
  * // Block destructive operations and file operations on a model
- * @FirewallRules({
+ * `@FirewallRules`({
  *   blockDestructive: true,
  *   blockFileOperations: true,
  * })
  * class SensitiveData extends Model { ... }
  *
  * // Apply database-specific rules
- * @FirewallRules({
+ * `@FirewallRules`({
  *   database: 'postgresql',
  *   blockCodeExecution: true,
  * })
  * class UserDefinedFunction extends Model { ... }
  *
  * // Custom rules
- * @FirewallRules({
+ * `@FirewallRules`({
  *   rules: [
  *     { pattern: /^SELECT\s+FROM\s+logs/i, description: 'Block log access' },
  *   ],
@@ -611,7 +611,7 @@ export declare function FirewallRules(options?: FirewallRuleDecoratorOptions): (
  * Decorator for PostgreSQL-specific firewall rules
  *
  * @example
- * @PostgreSQLFirewall()
+ * `@PostgreSQLFirewall`()
  * class PostgresSensitive extends Model { ... }
  */
 export declare function PostgreSQLFirewall(): (target: any) => void;
@@ -619,7 +619,7 @@ export declare function PostgreSQLFirewall(): (target: any) => void;
  * Decorator for MySQL-specific firewall rules
  *
  * @example
- * @MySQLFirewall()
+ * `@MySQLFirewall`()
  * class MySQLSensitive extends Model { ... }
  */
 export declare function MySQLFirewall(): (target: any) => void;
@@ -627,7 +627,7 @@ export declare function MySQLFirewall(): (target: any) => void;
  * Decorator for MariaDB-specific firewall rules
  *
  * @example
- * @MariaDBFirewall()
+ * `@MariaDBFirewall`()
  * class MariaDBSensitive extends Model { ... }
  */
 export declare function MariaDBFirewall(): (target: any) => void;
@@ -635,7 +635,7 @@ export declare function MariaDBFirewall(): (target: any) => void;
  * Decorator for SQL Server-specific firewall rules
  *
  * @example
- * @MSSQLFirewall()
+ * `@MSSQLFirewall`()
  * class MSSQLSensitive extends Model { ... }
  */
 export declare function MSSQLFirewall(): (target: any) => void;
@@ -643,7 +643,7 @@ export declare function MSSQLFirewall(): (target: any) => void;
  * Decorator for Oracle-specific firewall rules
  *
  * @example
- * @OracleFirewall()
+ * `@OracleFirewall`()
  * class OracleSensitive extends Model { ... }
  */
 export declare function OracleFirewall(): (target: any) => void;
@@ -651,7 +651,7 @@ export declare function OracleFirewall(): (target: any) => void;
  * Decorator for SQLite-specific firewall rules
  *
  * @example
- * @SQLiteFirewall()
+ * `@SQLiteFirewall`()
  * class SQLiteSensitive extends Model { ... }
  */
 export declare function SQLiteFirewall(): (target: any) => void;

package/dist/compliance/query-firewall.js

@@ -1009,21 +1009,21 @@ const FIREWALL_DATABASE_KEY = Symbol('__orm_firewall_database__');
  *
  * @example
  * // Block destructive operations and file operations on a model
- * @FirewallRules({
+ * `@FirewallRules`({
  *   blockDestructive: true,
  *   blockFileOperations: true,
  * })
  * class SensitiveData extends Model { ... }
  *
  * // Apply database-specific rules
- * @FirewallRules({
+ * `@FirewallRules`({
  *   database: 'postgresql',
  *   blockCodeExecution: true,
  * })
  * class UserDefinedFunction extends Model { ... }
  *
  * // Custom rules
- * @FirewallRules({
+ * `@FirewallRules`({
  *   rules: [
  *     { pattern: /^SELECT\s+FROM\s+logs/i, description: 'Block log access' },
  *   ],
@@ -1075,7 +1075,7 @@ function FirewallRules(options = {}) {
  * Decorator for PostgreSQL-specific firewall rules
  *
  * @example
- * @PostgreSQLFirewall()
+ * `@PostgreSQLFirewall`()
  * class PostgresSensitive extends Model { ... }
  */
 function PostgreSQLFirewall() {
@@ -1085,7 +1085,7 @@ function PostgreSQLFirewall() {
  * Decorator for MySQL-specific firewall rules
  *
  * @example
- * @MySQLFirewall()
+ * `@MySQLFirewall`()
  * class MySQLSensitive extends Model { ... }
  */
 function MySQLFirewall() {
@@ -1095,7 +1095,7 @@ function MySQLFirewall() {
  * Decorator for MariaDB-specific firewall rules
  *
  * @example
- * @MariaDBFirewall()
+ * `@MariaDBFirewall`()
  * class MariaDBSensitive extends Model { ... }
  */
 function MariaDBFirewall() {
@@ -1105,7 +1105,7 @@ function MariaDBFirewall() {
  * Decorator for SQL Server-specific firewall rules
  *
  * @example
- * @MSSQLFirewall()
+ * `@MSSQLFirewall`()
  * class MSSQLSensitive extends Model { ... }
  */
 function MSSQLFirewall() {
@@ -1115,7 +1115,7 @@ function MSSQLFirewall() {
  * Decorator for Oracle-specific firewall rules
  *
  * @example
- * @OracleFirewall()
+ * `@OracleFirewall`()
  * class OracleSensitive extends Model { ... }
  */
 function OracleFirewall() {
@@ -1125,7 +1125,7 @@ function OracleFirewall() {
  * Decorator for SQLite-specific firewall rules
  *
  * @example
- * @SQLiteFirewall()
+ * `@SQLiteFirewall`()
  * class SQLiteSensitive extends Model { ... }
  */
 function SQLiteFirewall() {

package/dist/compliance/rate-limiter.d.ts

@@ -30,8 +30,10 @@
  *   limiter.reset();
  *
  * Decorator usage:
+ * ```ts
  *   @RateLimit({ perMinute: 100, perHour: 1000 })
  *   class User extends Model { ... }
+ * ```
  */
 import { Prorm } from '../prorm';
 import type { ModelStatic } from '../types';
@@ -173,8 +175,10 @@ export interface RateLimitDecoratorOptions {
  * Rate limit decorator for models
  *
  * Usage:
+ * ```ts
  *   @RateLimit({ perMinute: 100, perHour: 1000 })
  *   class User extends Model { ... }
+ * ```
  */
 export declare function RateLimit(options: RateLimitDecoratorOptions): <T extends ModelStatic<any>>(target: T) => T;
 /**

package/dist/compliance/rate-limiter.js

@@ -31,8 +31,10 @@
  *   limiter.reset();
  *
  * Decorator usage:
+ * ```ts
  *   @RateLimit({ perMinute: 100, perHour: 1000 })
  *   class User extends Model { ... }
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RateLimiter = void 0;
@@ -469,8 +471,10 @@ exports.RateLimiter = RateLimiter;
  * Rate limit decorator for models
  *
  * Usage:
+ * ```ts
  *   @RateLimit({ perMinute: 100, perHour: 1000 })
  *   class User extends Model { ... }
+ * ```
  */
 function RateLimit(options) {
     return function (target) {

package/dist/compliance/row-level-security.d.ts

@@ -96,8 +96,10 @@ export declare function getFilteredQuery(Model: any): {
 /**
  * Decorator to apply RLS to a model class.
  *
+ * ```ts
  *   @RowLevelSecurity((ctx) => ({ where: { tenantId: ctx.tenantId } }))
  *   class Document extends Model { ... }
+ * ```
  */
 export declare function RowLevelSecurity(selector: ScopeSelector): (target: any) => void;
 /**

package/dist/compliance/row-level-security.js

@@ -120,8 +120,10 @@ function getFilteredQuery(Model) {
 /**
  * Decorator to apply RLS to a model class.
  *
+ * ```ts
  *   @RowLevelSecurity((ctx) => ({ where: { tenantId: ctx.tenantId } }))
  *   class Document extends Model { ... }
+ * ```
  */
 function RowLevelSecurity(selector) {
     return function (target) {

package/dist/compliance/security-decorator.d.ts

@@ -5,6 +5,7 @@
  * based on a list of security frameworks. Works with the 12 compliance classes.
  *
  * Usage:
+ * ```ts
  *   @Security({
  *     frameworks: ['GDPR', 'HIPAA', 'PCI_DSS'],
  *     audit: true,
@@ -19,6 +20,7 @@
  *     immutable: true,
  *   })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 import { RetentionDuration } from './data-retention';
 /**
@@ -260,6 +262,7 @@ export interface SecurityOptions {
  * @param options - Security configuration
  *
  * @example
+ * ```ts
  *   @Security({
  *     frameworks: ['GDPR', 'HIPAA', 'PCI_DSS'],
  *     audit: true,
@@ -269,6 +272,7 @@ export interface SecurityOptions {
  *     autoClassify: true,
  *   })
  *   class Patient extends Model { ... }
+ * ```
  */
 export declare function Security(options: SecurityOptions): (target: any) => void;
 /**
@@ -313,12 +317,14 @@ export interface TableSecurityOptions {
  * Apply table-level security metadata.
  *
  * @example
+ * ```ts
  *   @Table({
  *     schema: 'financial',
  *     classification: 'CONFIDENTIAL',
  *     rlsEnabled: true,
  *   })
  *   class Transaction extends Model { ... }
+ * ```
  */
 export declare function Table(options?: TableSecurityOptions): (target: any) => void;
 export interface DatabaseSecurityOptions {
@@ -355,6 +361,7 @@ export interface DatabaseSecurityOptions {
  * Apply database-level security metadata.
  *
  * @example
+ * ```ts
  *   @Database({
  *     name: 'healthcare_db',
  *     region: 'us-east-1',
@@ -364,6 +371,7 @@ export interface DatabaseSecurityOptions {
  *     allowedCountries: ['US'],
  *   })
  *   class HealthcareDB extends Model { ... }
+ * ```
  */
 export declare function Database(options: DatabaseSecurityOptions): (target: any) => void;
 /**

package/dist/compliance/security-decorator.js

@@ -6,6 +6,7 @@
  * based on a list of security frameworks. Works with the 12 compliance classes.
  *
  * Usage:
+ * ```ts
  *   @Security({
  *     frameworks: ['GDPR', 'HIPAA', 'PCI_DSS'],
  *     audit: true,
@@ -20,6 +21,7 @@
  *     immutable: true,
  *   })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FrameworkRequirements = exports.FrameworkCount = exports.FrameworkCategories = exports.AllFrameworks = exports.SecurityFramework = void 0;
@@ -324,6 +326,7 @@ exports.FrameworkRequirements = {
  * @param options - Security configuration
  *
  * @example
+ * ```ts
  *   @Security({
  *     frameworks: ['GDPR', 'HIPAA', 'PCI_DSS'],
  *     audit: true,
@@ -333,6 +336,7 @@ exports.FrameworkRequirements = {
  *     autoClassify: true,
  *   })
  *   class Patient extends Model { ... }
+ * ```
  */
 function Security(options) {
     return function (target) {
@@ -510,12 +514,14 @@ function setupAllSecurity(prorm) {
  * Apply table-level security metadata.
  *
  * @example
+ * ```ts
  *   @Table({
  *     schema: 'financial',
  *     classification: 'CONFIDENTIAL',
  *     rlsEnabled: true,
  *   })
  *   class Transaction extends Model { ... }
+ * ```
  */
 function Table(options = {}) {
     return function (target) {
@@ -526,6 +532,7 @@ function Table(options = {}) {
  * Apply database-level security metadata.
  *
  * @example
+ * ```ts
  *   @Database({
  *     name: 'healthcare_db',
  *     region: 'us-east-1',
@@ -535,6 +542,7 @@ function Table(options = {}) {
  *     allowedCountries: ['US'],
  *   })
  *   class HealthcareDB extends Model { ... }
+ * ```
  */
 function Database(options) {
     return function (target) {

package/dist/compliance/session-isolation.d.ts

@@ -28,9 +28,11 @@
  *     return db.User.findAll();
  *   });
  *
+ * ```ts
  *   // Use the decorator on models:
  *   @TenantIsolation({ tenantId: 'tenantId', auditEnabled: true })
  *   class Document extends Model { ... }
+ * ```
  */
 export interface TenantContext {
     /** The tenant identifier */
@@ -234,11 +236,13 @@ export declare class SessionIsolation {
 /**
  * Decorator to apply tenant isolation to a model.
  *
+ * ```ts
  *   @TenantIsolation({ tenantId: 'tenantId', auditEnabled: true })
  *   class Document extends Model {
  *     tenantId: string;
  *     title: string;
  *   }
+ * ```
  *
  * @param options - Tenant isolation options
  */

package/dist/compliance/session-isolation.js

@@ -29,9 +29,11 @@
  *     return db.User.findAll();
  *   });
  *
+ * ```ts
  *   // Use the decorator on models:
  *   @TenantIsolation({ tenantId: 'tenantId', auditEnabled: true })
  *   class Document extends Model { ... }
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TenantIsolationManager = exports.SessionIsolation = void 0;
@@ -347,11 +349,13 @@ exports.SessionIsolation = SessionIsolation;
 /**
  * Decorator to apply tenant isolation to a model.
  *
+ * ```ts
  *   @TenantIsolation({ tenantId: 'tenantId', auditEnabled: true })
  *   class Document extends Model {
  *     tenantId: string;
  *     title: string;
  *   }
+ * ```
  *
  * @param options - Tenant isolation options
  */

package/dist/compliance/worm-storage.d.ts

@@ -30,9 +30,11 @@
  *   // Enforce retention policy:
  *   await WORMStorage.enforceRetention(FinancialRecord, prorm);
  *
+ * ```ts
  *   // Using the decorator:
  *   @WORM({ retentionPeriod: { years: 7 }, tamperEvident: true })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 import { ModelStatic, Prorm } from '../prorm';
 import { RetentionDuration } from './data-retention';
@@ -91,8 +93,10 @@ interface WORMConfig {
 /**
  * Decorator to mark a model for WORM storage.
  *
+ * ```ts
  *   @WORM({ retentionPeriod: { years: 7 }, tamperEvident: true })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 export declare function WORM(options: WORMOptions): (target: Function) => void;
 /**

package/dist/compliance/worm-storage.js

@@ -31,9 +31,11 @@
  *   // Enforce retention policy:
  *   await WORMStorage.enforceRetention(FinancialRecord, prorm);
  *
+ * ```ts
  *   // Using the decorator:
  *   @WORM({ retentionPeriod: { years: 7 }, tamperEvident: true })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WORMStorage = void 0;
@@ -173,8 +175,10 @@ function createWORMTamperLogModel(prorm, tableName) {
 /**
  * Decorator to mark a model for WORM storage.
  *
+ * ```ts
  *   @WORM({ retentionPeriod: { years: 7 }, tamperEvident: true })
  *   class FinancialRecord extends Model { ... }
+ * ```
  */
 function WORM(options) {
     return function (target) {

package/dist/connection-manager.js

@@ -37,6 +37,12 @@ class ConnectionManager {
             throw new Error(`Connection with name '${name}' already exists`);
         }
         const prorm = new prorm_1.Prorm(options);
+        // Let the instance find its siblings. This is what makes
+        // `Model.findAll({ using: 'other' })` resolvable: the query path looks the
+        // target connection up through `prorm.connectionManager`, which nothing
+        // used to set, so `using` failed with "Available: none" no matter how many
+        // connections had been added.
+        prorm.connectionManager = this;
         this.connections.set(name, prorm);
         // Set as default if it's the first connection
         if (this._defaultConnection === null) {
@@ -78,8 +84,11 @@ class ConnectionManager {
         if (!prorm) {
             return false;
         }
-        // Close the connection
+        // Close the connection and detach it from this manager, so a model still
+        // holding a reference to it can't route a `using` query through a
+        // registry it is no longer a member of.
         await prorm.close();
+        prorm.connectionManager = null;
         this.connections.delete(name);
         // Update default if needed
         if (this._defaultConnection === name) {
@@ -167,6 +176,9 @@ class ConnectionManager {
     async closeAll() {
         const closePromises = Array.from(this.connections.values()).map((seq) => seq.close());
         await Promise.all(closePromises);
+        for (const prorm of this.connections.values()) {
+            prorm.connectionManager = null;
+        }
         this.connections.clear();
         this._defaultConnection = null;
     }

package/dist/core/expressions.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Raw SQL expression wrappers used by the Prorm instance API.
+ *
+ * `Literal` embeds SQL verbatim; `Col` references a column without quoting it
+ * as a value. Note that `src/operators.ts` also exposes `literal()`/`col()`
+ * factories producing a different shape - the dialects consume the operators
+ * form, so prefer those in new code.
+ */
+/**
+ * Represents a raw SQL literal value
+ * Used for inserting raw SQL expressions into queries
+ *
+ * @example
+ * // Use in default values
+ * createdAt: { type: DATE, defaultValue: prorm.literal('NOW()') }
+ *
+ * @example
+ * // Use in updates
+ * User.update({ count: prorm.literal('count + 1') }, {...})
+ *
+ * @example
+ * // Use in select with calculations
+ * User.findAll({ attributes: [[prorm.literal('1 + 1'), 'two']] })
+ */
+export declare class Literal {
+    readonly val: string;
+    constructor(sql: string);
+    /**
+     * Get the raw SQL string
+     */
+    toString(): string;
+}
+/**
+ * Class representing a column reference for use with Prorm functions
+ * Used to create properly quoted column identifiers
+ *
+ * @example
+ * // Single column: col('name') -> "name"
+ * // Table and column: col('User', 'name') -> "User"."name"
+ * // Dot notation: col('table.column') -> "table"."column"
+ */
+export declare class Col {
+    private readonly col;
+    /**
+     * Create a column reference
+     * @param tableOrColumn - Table name (if second param provided) or column name
+     * @param column - Column name (if first param is table name)
+     */
+    constructor(tableOrColumn: string, column?: string);
+    /**
+     * Get the SQL representation of the column
+     */
+    toSql(): string;
+    /**
+     * Get the column as a string
+     */
+    toString(): string;
+}