Function dbExec

packages/core/src/scripts/db/exec.ts:567–723

(args: string[])

}

export default async function dbExec(args: string[]): Promise<void> {
  const parsed = parseArgs(args);

  if (parsed.help === "true") {
    console.log(`Usage: pnpm action db-exec --sql "<statement>" [options]
       pnpm action db-exec --statements '[{"sql":"UPDATE ...","args":[...]}]' [options]

Options:
  --sql <stmt>         Single INSERT / UPDATE / DELETE / REPLACE statement
  --args <json>        JSON array of positional SQL bind parameters for --sql
  --statements <json>  JSON array of {sql, args?}; runs in one transaction
  --db <path>          Path to SQLite database (default: data/app.db)
  --format json        Output as JSON
  --help               Show this help message`);
    return;
  }

  const statements = parseStatements(parsed).map((statement, index) => ({
    sql: validateWriteSql(statement.sql, index + 1),
    args: statement.args,
  }));

  // Resolve database URL: --db flag → DATABASE_URL env → default file path
  let url: string;
  if (parsed.db) {
    url = "file:" + path.resolve(parsed.db);
  } else if (getDatabaseUrl()) {
    url = getDatabaseUrl();
  } else {
    url = "file:" + path.resolve(process.cwd(), "data", "app.db");
  }

  // Postgres path
  if (isPostgresUrl(url)) {
    const { default: pg } = await import("postgres");
    const pgSql = pg(url);
    try {
      // Set up user-scoped temp views in production
      const scoping = await buildScopingPostgres(pgSql);

      const results: DbExecResult[] = [];
      await pgSql.begin(async (tx: any) => {
        try {
          // For UPDATE/DELETE: temp views scope to current user's rows.
          // Creating and dropping them inside the same transaction keeps
          // pooled Postgres backends from retaining session-local views.
          for (const stmt of scoping.setup) {
            await tx.unsafe(stmt);
          }

          for (let i = 0; i < statements.length; i++) {
            const statement = statements[i];
            const hasReturning = /\bRETURNING\b/i.test(statement.sql);
            const finalSql = normalizePostgresSql(
              injectOwnership(statement.sql, scoping),
              statement.args,
            );
            try {