fix(fumadb): mirror aggregate review hardening

packages/core/fumadb/src/adapters/drizzle/query.ts

@@ -362,6 +362,7 @@ export function fromDrizzle(
       );
     }
     if (filter.kind === "or") {
+      if (filter.items.length === 0) return Drizzle.sql`1 = 0`;
       return Drizzle.or(
         ...filter.items.map((item) => buildJsonFilter(jsonColumn, item)),
       );

packages/core/fumadb/src/query/aggregate.test.ts

@@ -128,6 +128,24 @@ const runSuite = (name: string, makeHarness: () => Promise<Harness>) => {
       ).toBe(2);
     });
 
+    it("matches empty composite filter semantics", async () => {
+      const { orm } = harness;
+      expect(
+        await orm.jsonCount("events", {
+          column: "data",
+          where: inT1,
+          filter: { kind: "or", items: [] },
+        }),
+      ).toBe(0);
+      expect(
+        await orm.jsonCount("events", {
+          column: "data",
+          where: inT1,
+          filter: { kind: "and", items: [] },
+        }),
+      ).toBe(4);
+    });
+
     it("jsonGroupCount counts distinct values", async () => {
       const rows = await harness.orm.jsonGroupCount("events", {
         column: "data",

packages/core/fumadb/src/query/aggregate.ts

@@ -91,7 +91,13 @@ export interface JsonTimeBucketRow {
 export interface JsonStatsAdapterOptions extends JsonAdapterBase {
   /** Numeric path the stats are computed over. */
   readonly path: JsonPath;
-  /** Percentile fractions in [0, 1] (e.g. 0.5, 0.95). */
+  /**
+   * Percentile fractions in [0, 1] (e.g. 0.5, 0.95).
+   *
+   * SQLite adapters compute percentiles from all matching numeric values after
+   * projection because SQLite has no native percentile aggregate. Count, min,
+   * and max still run as SQL aggregates.
+   */
   readonly percentiles?: readonly number[];
 }
 
@@ -155,6 +161,13 @@ export interface JsonTimeBucketOptions<TColumns extends Record<string, AnyColumn
 export interface JsonStatsOptions<TColumns extends Record<string, AnyColumn>>
   extends JsonPublicBase<TColumns> {
   readonly path: JsonPath;
+  /**
+   * Percentile fractions in [0, 1] (e.g. 0.5, 0.95).
+   *
+   * SQLite adapters compute percentiles from all matching numeric values after
+   * projection because SQLite has no native percentile aggregate. Count, min,
+   * and max still run as SQL aggregates.
+   */
   readonly percentiles?: readonly number[];
 }
 

packages/core/sdk/src/executor.ts

@@ -7,6 +7,7 @@ import {
   withQueryContext,
   type Condition,
   type ConditionBuilder,
+  type JsonCompareOperator,
   type JsonFilter,
   type JsonGroupCountRow,
   type JsonKeysetCursor,
@@ -1115,6 +1116,17 @@ const isPluginStorageRecord = (value: unknown): value is Readonly<Record<string,
 
 const pluginStorageWhereOperators = ["eq", "in", "gt", "gte", "lt", "lte"] as const;
 
+const pluginStorageJsonCompareOperators = {
+  eq: "=",
+  gt: ">",
+  gte: ">=",
+  lt: "<",
+  lte: "<=",
+} satisfies Record<
+  Exclude<(typeof pluginStorageWhereOperators)[number], "in">,
+  JsonCompareOperator
+>;
+
 const isPluginStorageWhereFilter = (value: unknown): value is Readonly<Record<string, unknown>> =>
   isPluginStorageRecord(value) && pluginStorageWhereOperators.some((operator) => operator in value);
 
@@ -1211,16 +1223,11 @@ const pluginStorageWhereToJsonFilter = (
           });
           continue;
         }
+        if (!(operator in pluginStorageJsonCompareOperators)) continue;
         const compareOperator =
-          operator === "gt"
-            ? ">"
-            : operator === "gte"
-              ? ">="
-              : operator === "lt"
-                ? "<"
-                : operator === "lte"
-                  ? "<="
-                  : "=";
+          pluginStorageJsonCompareOperators[
+            operator as keyof typeof pluginStorageJsonCompareOperators
+          ];
         items.push({
           kind: "compare",
           path,

packages/core/sdk/src/plugin-storage.ts

@@ -225,7 +225,13 @@ export interface PluginStorageStatsInput<
 > extends PluginStorageAggregateFilter<TDefinition> {
   /** Numeric field the stats are computed over. */
   readonly field: PluginStorageCollectionIndexedField<TDefinition>;
-  /** Percentile fractions in [0, 1] (e.g. 0.5, 0.95). */
+  /**
+   * Percentile fractions in [0, 1] (e.g. 0.5, 0.95).
+   *
+   * SQLite-backed storage computes percentiles from all matching numeric values
+   * after projection because SQLite has no native percentile aggregate. Count,
+   * min, and max still run as SQL aggregates.
+   */
   readonly percentiles?: readonly number[];
 }