commerce/db/sqlite.go

package db

import (
	"context"
	"database/sql"
	"encoding/json"
	"errors"
	"fmt"
	"os"
	"path/filepath"
	"reflect"
	"strings"
	"sync"
	"time"

	// The "sqlite" driver is registered by github.com/hanzoai/sqlite (imported by
	// db/encryption.go) — mattn/SQLCipher under CGO, pure-Go modernc under
	// CGO_ENABLED=0. It is the ONE sqlite backend; commerce imports no mattn or
	// modernc driver directly. Open via encDriverDSN, never a raw driver name.
	"github.com/hanzoai/commerce/util/nscontext"
)

// SQLiteDBConfig holds configuration for a SQLite database
type SQLiteDBConfig struct {
	// Path to the SQLite database file
	Path string

	// Config for SQLite options
	Config SQLiteConfig

	// EnableVectorSearch enables sqlite-vec extension
	EnableVectorSearch bool

	// VectorDimensions for embeddings
	VectorDimensions int

	// TenantID for this database (userID or orgID)
	TenantID string

	// TenantType is "user" or "org"
	TenantType string

	// MasterKey is the 32-byte KMS-sourced master key. When non-nil the file is
	// opened SQLCipher-encrypted at rest, under a key DERIVED from it and this
	// tenant's namespace (cek.DeriveKey). Nil means unencrypted (dev/CI). Set once
	// by the Manager from COMMERCE_KMS_MASTER_KEY — see encryption.go.
	MasterKey []byte
}

// SQLiteDB implements the DB interface using SQLite
type SQLiteDB struct {
	// Key minting, shared verbatim with the registry-backed handle.
	tenantKeys

	config *SQLiteDBConfig

	// Concurrent connection for reads
	readDB *sql.DB

	// Serial connection for writes (prevents SQLITE_BUSY)
	writeDB *sql.DB

	// Mutex for write operations
	writeMu sync.Mutex

	// Schema cache
	schemas     map[string]*tableSchema
	schemasMu   sync.RWMutex
	schemaSetup sync.Once

	// Closed flag
	closed bool
	mu     sync.RWMutex

	// encrypted reports whether this file is SQLCipher-encrypted at rest.
	encrypted bool
}

// tableSchema holds cached schema information
type tableSchema struct {
	columns map[string]columnInfo
	indexes []string
}

type columnInfo struct {
	name       string
	sqlType    string
	primaryKey bool
	nullable   bool
}

// NewSQLiteDB creates a new SQLite database connection
func NewSQLiteDB(cfg *SQLiteDBConfig) (*SQLiteDB, error) {
	if cfg == nil {
		return nil, errors.New("db: SQLiteDBConfig is required")
	}

	// Ensure directory exists
	dir := filepath.Dir(cfg.Path)
	if err := os.MkdirAll(dir, 0755); err != nil {
		return nil, fmt.Errorf("db: failed to create directory %s: %w", dir, err)
	}

	// Resolve the at-rest encryption key for this tenant. When a master key is
	// configured, derive this tenant's file key from it; otherwise key stays nil
	// and the file is opened as plaintext (dev/CI). Derivation is pure, but the
	// read and write connections MUST key the same file identically, so it is done
	// once here and reused for both.
	var key []byte
	if cfg.MasterKey != nil {
		k, err := tenantKey(cfg.MasterKey, cfg.TenantType, cfg.TenantID)
		if err != nil {
			return nil, fmt.Errorf("db: derive encryption key for tenant %q: %w", cfg.TenantID, err)
		}
		key = k
		defer zeroBytes(key) // SQLCipher copies the key into its own state at Open
	}

	driverName, dsn := encDriverDSN(cfg.Path, key, cfg.Config)

	// Open read connection (concurrent)
	readDB, err := sql.Open(driverName, dsn)
	if err != nil {
		return nil, fmt.Errorf("db: failed to open read connection: %w", err)
	}

	readDB.SetMaxOpenConns(cfg.Config.MaxOpenConns)
	readDB.SetMaxIdleConns(cfg.Config.MaxIdleConns)

	// Open write connection (single, serialized)
	writeDB, err := sql.Open(driverName, dsn)
	if err != nil {
		readDB.Close()
		return nil, fmt.Errorf("db: failed to open write connection: %w", err)
	}

	writeDB.SetMaxOpenConns(1)
	writeDB.SetMaxIdleConns(1)

	db := &SQLiteDB{
		tenantKeys: tenantKeys(cfg.TenantID),
		config:     cfg,
		readDB:     readDB,
		writeDB:    writeDB,
		schemas:    make(map[string]*tableSchema),
		encrypted:  key != nil,
	}

	// Initialize base schema
	if err := db.initSchema(); err != nil {
		db.Close()
		return nil, fmt.Errorf("db: failed to initialize schema: %w", err)
	}

	// Load sqlite-vec if enabled
	if cfg.EnableVectorSearch {
		if err := db.initVectorSearch(); err != nil {
			// Non-fatal, just log and continue without vector search
			// In production, you'd want proper logging here
			fmt.Printf("Warning: sqlite-vec not available: %v\n", err)
		}
	}

	return db, nil
}

// baseSchemaDDL is the tenant store's base schema, applied on create. It is the
// ONE definition of what a fresh tenant store contains.
var baseSchemaDDL = []string{
	`CREATE TABLE IF NOT EXISTS _metadata (
		key TEXT PRIMARY KEY,
		value TEXT,
		updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
	)`,
	`CREATE TABLE IF NOT EXISTS _entities (
		id TEXT NOT NULL,
		kind TEXT NOT NULL,
		namespace TEXT NOT NULL DEFAULT '',
		parent_id TEXT,
		data JSON NOT NULL,
		created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
		updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
		deleted INTEGER DEFAULT 0,
		PRIMARY KEY (id, kind, namespace)
	)`,
	`CREATE INDEX IF NOT EXISTS idx_entities_kind ON _entities(kind)`,
	`CREATE INDEX IF NOT EXISTS idx_entities_ns ON _entities(namespace)`,
	`CREATE INDEX IF NOT EXISTS idx_entities_parent ON _entities(parent_id)`,
	`CREATE INDEX IF NOT EXISTS idx_entities_deleted ON _entities(deleted)`,
	// The named-counter table. See db.Sequencer.
	sequenceDDL,
}

// initSchema creates the base tables.
func (db *SQLiteDB) initSchema() error {
	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	for _, stmt := range baseSchemaDDL {
		if _, err := db.writeDB.Exec(stmt); err != nil {
			return err
		}
	}
	// The credential guard travels with the table it protects — see guard.go.
	for _, stmt := range sqliteGuardDDL() {
		if _, err := db.writeDB.Exec(stmt); err != nil {
			return fmt.Errorf("credential guard: %w", err)
		}
	}
	return nil
}

// initVectorSearch initializes sqlite-vec extension
func (db *SQLiteDB) initVectorSearch() error {
	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	// Try to load sqlite-vec extension
	// This requires the extension to be installed on the system
	_, err := db.writeDB.Exec(`SELECT load_extension('vec0')`)
	if err != nil {
		// Try alternative paths
		paths := []string{
			"vec0",
			"/usr/local/lib/sqlite-vec/vec0",
			"/usr/lib/sqlite-vec/vec0",
		}

		var loadErr error
		for _, path := range paths {
			_, loadErr = db.writeDB.Exec(fmt.Sprintf(`SELECT load_extension('%s')`, path))
			if loadErr == nil {
				break
			}
		}

		if loadErr != nil {
			return fmt.Errorf("failed to load sqlite-vec: %w", loadErr)
		}
	}

	// Create vectors table
	dims := db.config.VectorDimensions
	if dims == 0 {
		dims = 1536 // Default to OpenAI ada-002
	}

	_, err = db.writeDB.Exec(fmt.Sprintf(`
		CREATE VIRTUAL TABLE IF NOT EXISTS _vectors USING vec0(
			id TEXT PRIMARY KEY,
			kind TEXT,
			embedding FLOAT[%d],
			metadata JSON
		)
	`, dims))
	if err != nil {
		return fmt.Errorf("failed to create vectors table: %w", err)
	}

	return nil
}

// TenantID returns the tenant identifier
func (db *SQLiteDB) TenantID() string {
	return db.config.TenantID
}

// TenantType returns "user" or "org"
func (db *SQLiteDB) TenantType() string {
	return db.config.TenantType
}

// Encrypted reports whether this tenant file is SQLCipher-encrypted at rest.
func (db *SQLiteDB) Encrypted() bool {
	return db.encrypted
}

// Close closes the database connections
func (db *SQLiteDB) Close() error {
	db.mu.Lock()
	defer db.mu.Unlock()

	if db.closed {
		return nil
	}
	db.closed = true

	var errs []error
	if err := db.readDB.Close(); err != nil {
		errs = append(errs, err)
	}
	if err := db.writeDB.Close(); err != nil {
		errs = append(errs, err)
	}

	if len(errs) > 0 {
		return errs[0]
	}
	return nil
}

// Get retrieves an entity by key
func (db *SQLiteDB) Get(ctx context.Context, key Key, dst any) error {
	if key == nil {
		return ErrInvalidKey
	}

	ns := getNamespace(ctx)

	var row *sql.Row
	if key.Kind() == "" {
		// Kind-less fallback: search by just ID and namespace
		row = db.readDB.QueryRowContext(ctx,
			`SELECT data FROM _entities WHERE id = ? AND namespace = ? AND deleted = 0 LIMIT 1`,
			key.Encode(), ns)
	} else {
		row = db.readDB.QueryRowContext(ctx,
			`SELECT data FROM _entities WHERE id = ? AND kind = ? AND namespace = ? AND deleted = 0`,
			key.Encode(), key.Kind(), ns)
	}

	var data []byte
	if err := row.Scan(&data); err != nil {
		if errors.Is(err, sql.ErrNoRows) {
			return ErrNoSuchEntity
		}
		return err
	}

	if err := unmarshalForDB(data, dst); err != nil {
		return err
	}
	callPostLoad(reflect.ValueOf(dst))
	return nil
}

// Put stores an entity
func (db *SQLiteDB) Put(ctx context.Context, key Key, src any) (Key, error) {
	if key == nil {
		return nil, ErrInvalidKey
	}

	data, err := marshalForDB(src)
	if err != nil {
		return nil, fmt.Errorf("db: failed to marshal entity: %w", err)
	}

	var parentID *string
	if p := key.Parent(); p != nil {
		id := p.Encode()
		parentID = &id
	}

	ns := getNamespace(ctx)

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	_, err = db.writeDB.ExecContext(ctx, `
		INSERT INTO _entities (id, kind, namespace, parent_id, data, updated_at)
		VALUES (?, ?, ?, ?, ?, CURRENT_TIMESTAMP)
		ON CONFLICT(id, kind, namespace) DO UPDATE SET
			parent_id = excluded.parent_id,
			data = excluded.data, updated_at = CURRENT_TIMESTAMP
	`, key.Encode(), key.Kind(), ns, parentID, data)

	if err != nil {
		return nil, err
	}

	return key, nil
}

// Delete removes an entity (soft delete)
func (db *SQLiteDB) Delete(ctx context.Context, key Key) error {
	if key == nil {
		return ErrInvalidKey
	}

	ns := getNamespace(ctx)

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	_, err := db.writeDB.ExecContext(ctx, `
		UPDATE _entities SET deleted = 1, updated_at = CURRENT_TIMESTAMP
		WHERE id = ? AND kind = ? AND namespace = ?
	`, key.Encode(), key.Kind(), ns)

	return err
}

// GetMulti retrieves multiple entities
func (db *SQLiteDB) GetMulti(ctx context.Context, keys []Key, dst any) error {
	if len(keys) == 0 {
		return nil
	}

	ns := getNamespace(ctx)

	placeholders := make([]string, len(keys))
	args := make([]any, len(keys)*3)
	for i, k := range keys {
		placeholders[i] = "(?, ?, ?)"
		args[i*3] = k.Encode()
		args[i*3+1] = k.Kind()
		args[i*3+2] = ns
	}

	query := fmt.Sprintf(`SELECT id, data FROM _entities WHERE (id, kind, namespace) IN (%s) AND deleted = 0`,
		strings.Join(placeholders, ","))

	rows, err := db.readDB.QueryContext(ctx, query, args...)
	if err != nil {
		return err
	}
	defer rows.Close()

	results := make(map[string][]byte)
	for rows.Next() {
		var id string
		var data []byte
		if err := rows.Scan(&id, &data); err != nil {
			return err
		}
		results[id] = data
	}

	dstVal := reflect.ValueOf(dst)
	var sliceVal reflect.Value
	switch dstVal.Kind() {
	case reflect.Ptr:
		if dstVal.Elem().Kind() != reflect.Slice {
			return errors.New("db: dst must be a slice or pointer to a slice")
		}
		sliceVal = dstVal.Elem()
	case reflect.Slice:
		sliceVal = dstVal
	default:
		return errors.New("db: dst must be a slice or pointer to a slice")
	}

	elemType := sliceVal.Type().Elem()
	elemIsPtr := elemType.Kind() == reflect.Ptr
	baseType := elemType
	if elemIsPtr {
		baseType = elemType.Elem()
	}

	// Fill in-place if slice has the right length, otherwise build new slice
	inPlace := sliceVal.Len() == len(keys)

	for i, k := range keys {
		data, ok := results[k.Encode()]
		if !ok {
			if inPlace {
				sliceVal.Index(i).Set(reflect.Zero(elemType))
			}
			continue
		}

		elem := reflect.New(baseType)
		if err := unmarshalForDB(data, elem.Interface()); err != nil {
			return err
		}
		callPostLoad(elem)

		if inPlace {
			if elemIsPtr {
				sliceVal.Index(i).Set(elem)
			} else {
				sliceVal.Index(i).Set(elem.Elem())
			}
		}
	}
	return nil
}

// PutMulti stores multiple entities
func (db *SQLiteDB) PutMulti(ctx context.Context, keys []Key, src any) ([]Key, error) {
	if len(keys) == 0 {
		return keys, nil
	}

	srcVal := reflect.ValueOf(src)
	if srcVal.Kind() != reflect.Slice {
		return nil, errors.New("db: src must be a slice")
	}

	if srcVal.Len() != len(keys) {
		return nil, errors.New("db: keys and src must have same length")
	}

	ns := getNamespace(ctx)

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	tx, err := db.writeDB.BeginTx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer tx.Rollback()

	stmt, err := tx.PrepareContext(ctx, `
		INSERT INTO _entities (id, kind, namespace, parent_id, data, updated_at)
		VALUES (?, ?, ?, ?, ?, CURRENT_TIMESTAMP)
		ON CONFLICT(id, kind, namespace) DO UPDATE SET
			parent_id = excluded.parent_id,
			data = excluded.data, updated_at = CURRENT_TIMESTAMP
	`)
	if err != nil {
		return nil, err
	}
	defer stmt.Close()

	for i, key := range keys {
		data, err := marshalForDB(srcVal.Index(i).Interface())
		if err != nil {
			return nil, err
		}

		var parentID *string
		if p := key.Parent(); p != nil {
			id := p.Encode()
			parentID = &id
		}

		_, err = stmt.ExecContext(ctx, key.Encode(), key.Kind(), ns, parentID, data)
		if err != nil {
			return nil, err
		}
	}

	if err := tx.Commit(); err != nil {
		return nil, err
	}

	return keys, nil
}

// DeleteMulti removes multiple entities
func (db *SQLiteDB) DeleteMulti(ctx context.Context, keys []Key) error {
	if len(keys) == 0 {
		return nil
	}

	ns := getNamespace(ctx)

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	tx, err := db.writeDB.BeginTx(ctx, nil)
	if err != nil {
		return err
	}
	defer tx.Rollback()

	stmt, err := tx.PrepareContext(ctx, `
		UPDATE _entities SET deleted = 1, updated_at = CURRENT_TIMESTAMP
		WHERE id = ? AND kind = ? AND namespace = ?
	`)
	if err != nil {
		return err
	}
	defer stmt.Close()

	for _, key := range keys {
		_, err = stmt.ExecContext(ctx, key.Encode(), key.Kind(), ns)
		if err != nil {
			return err
		}
	}

	return tx.Commit()
}

// Query returns a new query for the given kind
func (db *SQLiteDB) Query(kind string) Query {
	return &sqliteQuery{
		db:   db,
		kind: kind,
	}
}

// VectorSearch performs similarity search using sqlite-vec
func (db *SQLiteDB) VectorSearch(ctx context.Context, opts *VectorSearchOptions) ([]VectorResult, error) {
	if opts == nil || len(opts.Vector) == 0 {
		return nil, errors.New("db: VectorSearchOptions with Vector is required")
	}

	// Convert vector to JSON array
	vectorJSON, err := json.Marshal(opts.Vector)
	if err != nil {
		return nil, err
	}

	limit := opts.Limit
	if limit == 0 {
		limit = 10
	}

	// Build query
	query := `
		SELECT id, distance, metadata
		FROM _vectors
		WHERE embedding MATCH ?
	`

	args := []any{string(vectorJSON)}

	if opts.Kind != "" {
		query += " AND kind = ?"
		args = append(args, opts.Kind)
	}

	query += fmt.Sprintf(" ORDER BY distance LIMIT %d", limit)

	rows, err := db.readDB.QueryContext(ctx, query, args...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()

	var results []VectorResult
	for rows.Next() {
		var r VectorResult
		var distance float32
		var metadataJSON []byte

		if err := rows.Scan(&r.ID, &distance, &metadataJSON); err != nil {
			return nil, err
		}

		// Convert distance to similarity score (1 / (1 + distance))
		r.Score = 1 / (1 + distance)

		if opts.MinScore > 0 && r.Score < opts.MinScore {
			continue
		}

		if len(metadataJSON) > 0 {
			json.Unmarshal(metadataJSON, &r.Metadata)
		}

		results = append(results, r)
	}

	return results, rows.Err()
}

// PutVector stores a vector embedding
func (db *SQLiteDB) PutVector(ctx context.Context, kind string, id string, vector []float32, metadata map[string]any) error {
	vectorJSON, err := json.Marshal(vector)
	if err != nil {
		return err
	}

	var metadataJSON []byte
	if metadata != nil {
		metadataJSON, err = json.Marshal(metadata)
		if err != nil {
			return err
		}
	}

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	_, err = db.writeDB.ExecContext(ctx, `
		INSERT OR REPLACE INTO _vectors (id, kind, embedding, metadata)
		VALUES (?, ?, ?, ?)
	`, id, kind, string(vectorJSON), metadataJSON)

	return err
}

// tenantKeys mints the keys a tenant store hands out. It is the tenant's
// namespace and nothing else, because that is all a key needs: a key is a
// value, not a query — none of these three touch the file.
//
// SQLiteDB embeds it, and so does the registry-backed handle in tenant.go,
// which must mint identical keys WITHOUT opening the tenant's database to do
// it. One definition, so the two can never drift.
type tenantKeys string

// NewKey creates a new key
func (ns tenantKeys) NewKey(kind string, stringID string, intID int64, parent Key) Key {
	return &sqliteKey{
		kind:      kind,
		stringID:  stringID,
		intID:     intID,
		parent:    parent,
		namespace: string(ns),
	}
}

// NewIncompleteKey creates a key that will be assigned an ID on Put
func (ns tenantKeys) NewIncompleteKey(kind string, parent Key) Key {
	return &sqliteKey{
		kind:       kind,
		parent:     parent,
		namespace:  string(ns),
		incomplete: true,
	}
}

// AllocateIDs pre-allocates entity IDs
func (ns tenantKeys) AllocateIDs(kind string, parent Key, n int) ([]Key, error) {
	keys := make([]Key, n)
	for i := 0; i < n; i++ {
		keys[i] = &sqliteKey{
			kind:      kind,
			stringID:  generateID(),
			parent:    parent,
			namespace: string(ns),
		}
	}
	return keys, nil
}

// NextSequence atomically increments the named counter and returns its new
// value, starting at 0. See db.Sequencer for why this primitive exists.
//
// It is ONE statement, and that is the whole guarantee: the upsert either
// inserts the row at 0 or increments the row that is already there, and SQLite
// applies it indivisibly. Two callers cannot both read N and both write N+1,
// because neither ever reads a value into Go at all. Across processes sharing
// the file, SQLite's single-writer lock serialises the statement; within one
// process, writeMu does — the same lock every other write here takes.
func (db *SQLiteDB) NextSequence(ctx context.Context, name string) (uint64, error) {
	if name == "" {
		return 0, fmt.Errorf("db: sequence name is empty")
	}

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	var value int64
	err := db.writeDB.QueryRowContext(ctx, `
		INSERT INTO _sequences (name, value) VALUES (?, 0)
		ON CONFLICT(name) DO UPDATE SET value = _sequences.value + 1
		RETURNING value
	`, name).Scan(&value)
	if err != nil {
		return 0, fmt.Errorf("db: allocate from sequence %q: %w", name, err)
	}
	if value < 0 {
		// int64 wrapped, which is 9.2e18 allocations away. Refusing keeps the
		// contract ("strictly increasing") true rather than silently restarting
		// the sequence at a value already handed out.
		return 0, fmt.Errorf("db: sequence %q overflowed", name)
	}
	return uint64(value), nil
}

// Add atomically adds delta to the named total and returns the new total. See
// db.Counter. One statement, as NextSequence is: no value is read into Go and
// written back, so two callers can never both start from the same total.
func (db *SQLiteDB) Add(ctx context.Context, name string, delta int64) (int64, error) {
	if name == "" {
		return 0, fmt.Errorf("db: counter name is empty")
	}

	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	var value int64
	err := db.writeDB.QueryRowContext(ctx, `
		INSERT INTO _sequences (name, value) VALUES (?, ?)
		ON CONFLICT(name) DO UPDATE SET value = _sequences.value + excluded.value
		RETURNING value
	`, name, delta).Scan(&value)
	if err != nil {
		return 0, fmt.Errorf("db: add to counter %q: %w", name, err)
	}
	return value, nil
}

// RunInTransaction executes a function within a transaction
func (db *SQLiteDB) RunInTransaction(ctx context.Context, fn func(tx Transaction) error, opts *TransactionOptions) error {
	db.writeMu.Lock()
	defer db.writeMu.Unlock()

	sqlTx, err := db.writeDB.BeginTx(ctx, nil)
	if err != nil {
		return err
	}
	defer sqlTx.Rollback()

	tx := &sqliteTransaction{
		db:  db,
		tx:  sqlTx,
		ctx: ctx,
	}

	if err := fn(tx); err != nil {
		return err
	}

	return sqlTx.Commit()
}

// sqliteKey implements the Key interface
type sqliteKey struct {
	kind       string
	stringID   string
	intID      int64
	parent     Key
	namespace  string
	incomplete bool
}

func (k *sqliteKey) Kind() string      { return k.kind }
func (k *sqliteKey) StringID() string  { return k.stringID }
func (k *sqliteKey) IntID() int64      { return k.intID }
func (k *sqliteKey) Parent() Key       { return k.parent }
func (k *sqliteKey) Namespace() string { return k.namespace }
func (k *sqliteKey) Incomplete() bool  { return k.incomplete }

func (k *sqliteKey) Encode() string {
	if k.stringID != "" {
		return k.stringID
	}
	if k.intID != 0 {
		return fmt.Sprintf("%d", k.intID)
	}
	// Generate new ID for incomplete keys
	if k.incomplete {
		k.stringID = generateID()
		k.incomplete = false
	}
	return k.stringID
}

func (k *sqliteKey) Equal(other Key) bool {
	if other == nil {
		return false
	}
	return k.Kind() == other.Kind() && k.Encode() == other.Encode()
}

// generateID creates a unique ID
func generateID() string {
	return fmt.Sprintf("%d", time.Now().UnixNano())
}

// sqliteTransaction implements Transaction
type sqliteTransaction struct {
	db  *SQLiteDB
	tx  *sql.Tx
	ctx context.Context
}

func (t *sqliteTransaction) Get(key Key, dst any) error {
	ns := nscontext.GetNamespace(t.ctx)

	var row *sql.Row
	if key.Kind() == "" {
		row = t.tx.QueryRow(
			`SELECT data FROM _entities WHERE id = ? AND namespace = ? AND deleted = 0 LIMIT 1`,
			key.Encode(), ns)
	} else {
		row = t.tx.QueryRow(
			`SELECT data FROM _entities WHERE id = ? AND kind = ? AND namespace = ? AND deleted = 0`,
			key.Encode(), key.Kind(), ns)
	}

	var data []byte
	if err := row.Scan(&data); err != nil {
		if errors.Is(err, sql.ErrNoRows) {
			return ErrNoSuchEntity
		}
		return err
	}

	if err := unmarshalForDB(data, dst); err != nil {
		return err
	}
	callPostLoad(reflect.ValueOf(dst))
	return nil
}

func (t *sqliteTransaction) Put(key Key, src any) (Key, error) {
	data, err := marshalForDB(src)
	if err != nil {
		return nil, err
	}

	var parentID *string
	if p := key.Parent(); p != nil {
		id := p.Encode()
		parentID = &id
	}

	ns := nscontext.GetNamespace(t.ctx)

	_, err = t.tx.Exec(`
		INSERT INTO _entities (id, kind, namespace, parent_id, data, updated_at)
		VALUES (?, ?, ?, ?, ?, CURRENT_TIMESTAMP)
		ON CONFLICT(id, kind, namespace) DO UPDATE SET
			parent_id = excluded.parent_id,
			data = excluded.data, updated_at = CURRENT_TIMESTAMP
	`, key.Encode(), key.Kind(), ns, parentID, data)

	return key, err
}

func (t *sqliteTransaction) Delete(key Key) error {
	ns := nscontext.GetNamespace(t.ctx)

	_, err := t.tx.Exec(`
		UPDATE _entities SET deleted = 1, updated_at = CURRENT_TIMESTAMP
		WHERE id = ? AND kind = ? AND namespace = ?
	`, key.Encode(), key.Kind(), ns)
	return err
}

func (t *sqliteTransaction) Query(kind string) Query {
	return &sqliteQuery{
		db:   t.db,
		kind: kind,
		tx:   t.tx,
	}
}