- isQueue table option adds queue columns and a (status, available_at)
index; BunSQLite.queue exposes add, claim, complete, fail and
release_stale with atomic claims
- Set busy_timeout on connections so workers in separate processes wait
instead of failing with SQLITE_BUSY
- Quote table and column names with backticks in generated SQL, so
reserved words (to, order, group) work and unknown columns error
instead of matching as string literals
- Tests for queue ops, multi-process claims and reserved-word names
Co-Authored-By: Claude Opus 5.5 <[email protected]>
- schema: add --dry-run (sync in a rolled-back transaction) and require
confirmation (or --yes) before dropping tables or columns; unapproved
destructive changes are refused
- only rebuild tables whose CREATE TABLE statement changed
- always AND targetId with the query, regardless of searchOperator
- empty IN / NOT IN lists become 1 = 0 / 1 = 1
- initialize lazily on first call so importing never throws
- read CLI version from package.json, chmod CLI on compile, pin @types/bun
- add SQL generator, value and schema guard tests
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Security:
- select: bind parameters instead of mysql.format (backslash escaping
allowed injection on SQLite); drop the mysql dependency
- validate all interpolated identifiers, limit/offset/page, order
strategy, operators, join types and raw equalities (new sql-safe.ts)
- quote identifiers and bind values in schema manager DDL/queries
Data loss:
- schema sync runs with foreign keys off inside a transaction, with
foreign_key_check before commit (DROP TABLE no longer cascades)
- parentTableName tables: stop mutating the parent schema and copy
inherited columns on rebuild
- keep column data on type changes (match columns by name)
- backups and schema snapshots use VACUUM INTO (includes WAL data);
restore closes the DB, clears -wal/-shm, and swaps atomically
- backup listing/trimming only touches <db_name>-<timestamp> files
Correctness:
- update/delete use the generator's WHERE clause instead of a regex
- keep 0/""/false values; booleans stored as 0/1
- IN/NOT IN and BETWEEN arrays, NOT LIKE wrapping, AVG, select aliases
- OFFSET without LIMIT, count ignores pagination
- MATCH emits `field MATCH fn(?)` for sqlite-vec
- sql() returns rows for any row-producing statement
- targetId no longer mutates the caller's query
- init throws instead of process.exit; CLI reports errors
Co-Authored-By: Claude Opus 5.5 <[email protected]>
tbenandClaude Opus 5.5