Database and HTTP conventions

Database

Convention	Notes
Query priority	Prefer kdb (Drizzle object queries); for quick CRUD use db.insert / findAll; drop to hand-written SQL for complex aggregation
Parameters	Always parameterize hand-written SQL with $1; never concatenate strings
Identifiers	Table / column names are whitelist-validated
Auto-increment id	Use .returning({ id: table.id }) on insert / update / delete
BLOB	Returned as base64 strings; decode with atob on the frontend
Transactions	Use runInTransaction([{ sql, params }]) for atomic multi-statement writes

See Database and migrations for details.

HTTP

Always go through @/core/http (Rust reqwest, no CORS); never fetch cross-origin data inside the webview:

import { http } from '@/core/http';

const data = await http.getJson<MyResponse>('https://api.example.com/items');
const res = await http.postJson<Res>('https://api.example.com/items', { title: 'x' });

Features: global singleton, rustls, cookie session, 10 redirects, a 30 s timeout and a 10 MB response cap; http.download() streams to a file with progress; proxy settings are respected.

Encoding

HTTP response bodies are decoded as UTF-8 (non-UTF-8 pages such as GBK are a future extension). For binary resources, use http.download() to stream to a file.