[Makisuo]

The hostile-value fuzzer found compile paths that threw a raw TypeError/RangeError instead of failing:

Input	Was
bigint compared with a String column	describe() → JSON.stringify throws
non-string like/notLike/ilike pattern	pattern.toFragment is not a function
lit({}), lit(Symbol())	wrote [object Object]; lit(0n) threw on Math.abs
non-numeric arithmetic operand	Cannot read properties of undefined (reading 'schema')
invalid Date operand	IllegalArgumentError: Invalid date
unparseable string / invalid Date for a Postgres timestamp	RangeError: Invalid time value from toISOString
non-expression in a select record	selectExprs[alias].toFragment is not a function

Values a request can supply now fail as QueryBuilderError InvalidLiteral. A select record's shape is written in source, so it is a QueryBuilderDefect naming the alias — the rule in errors.ts, like a malformed orderBy.

Verification: failure.test.ts cases for each; hostile fuzz (now also at lit and arithmetic sites) at 200× with no known issues — 100k values per dialect; full suite.

---

Stack (merge bottom-up):

1. test(fuzz): property-based fuzzer for the query builder #39 test(fuzz): property-based fuzzer for the query builder
2. fix(clickhouse): write number literals that read back exactly #40 fix(clickhouse): write number literals that read back exactly
3. fix: parenthesise an arithmetic expression passed as an argument #41 fix: parenthesise an arithmetic expression passed as an argument
4. fix: fail with QueryBuilderError instead of throwing on unusable values #42 fix: fail with QueryBuilderError instead of throwing on unusable values
5. fix: bare select() over a subquery or union selects every alias #43 fix: bare select() over a subquery or union selects every alias
6. fix(clickhouse): cast array and map comparison literals to the column type #44 fix(clickhouse): cast array and map comparison literals to the column type
7. fix(postgres): type the two placeholders Postgres would mistype #45 fix(postgres): type the two placeholders Postgres would mistype

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 3 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: fb377e66-0c26-4a90-939a-e450f755d2d0

📥 Commits

Reviewing files that changed from the base of the PR and between 73dfb51 and 1ac7d0a.

📒 Files selected for processing: 9

• .changeset/typed-errors-not-throws.md
• src/ch/compile.ts
• src/ch/expr.ts
• src/ch/failure.test.ts
• src/ch/literal.ts
• src/pg/types.ts
• tests/fuzz/compile.fuzz.test.ts
• tests/fuzz/known-issues.ts
• tests/fuzz/regressions.ts

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}