The canonical reference for the SQL surface SQLRite implements today. Parsing is delegated to sqlparser using the SQLite dialect, so tokens and grammar follow SQLite — execution only implements the subset below, and anything else is rejected with a typed NotImplemented error rather than silently partial behavior.
If you're looking for how to use SQLRite (REPL flow, meta-commands, history, embedding), see Using SQLRite. This document is the strict reference for what statements execute and what semantics they carry.
| Statement | Supported today |
|---|---|
CREATE TABLE |
Columns with PRIMARY KEY / UNIQUE / NOT NULL; typed columns; auto-indexes on constrained columns |
CREATE [UNIQUE] INDEX |
Single-column named indexes, IF NOT EXISTS, persisted as cell-based B-Trees |
INSERT INTO |
Auto-ROWID, UNIQUE/PK enforcement, clean type errors, NULL padding |
SELECT |
* or column list, WHERE, single-column ORDER BY, LIMIT; index probing on col = literal |
UPDATE |
Multi-column SET, WHERE, arithmetic RHS, type + UNIQUE enforcement |
DELETE |
WHERE predicate or whole-table |
BEGIN / COMMIT / ROLLBACK |
Snapshot-based; single-level; WAL-backed commit; auto-rollback on COMMIT disk failure |
Statements the parser accepts (because sqlparser understands them in the SQLite dialect) but SQLRite doesn't execute yet return SQL Statement not supported yet. The Not yet supported section below enumerates the common ones.
CREATE TABLE <name> (<col> <type> [column_constraint]* [, ...]);| Keyword(s) | Storage class | Notes |
|---|---|---|
INTEGER, INT, BIGINT, SMALLINT |
Integer (i64) | All four alias to the same 64-bit signed storage class |
TEXT, VARCHAR |
Text (String) | UTF-8; no length limit enforced (VARCHAR's (n) is parsed and ignored) |
REAL, FLOAT, DOUBLE, DECIMAL |
Real (f64) | Double-precision; DECIMAL(p,s) precision/scale parsed and ignored |
BOOLEAN |
Boolean | Stored compactly in the null bitmap's sibling bits; accepts TRUE / FALSE |
VECTOR(N) |
Vector (Vec<f32>, fixed dim N) | Phase 7a. Dense f32 array of fixed dimension. N is required and must be ≥ 1. Inserted as bracket-array literals [0.1, 0.2, ...]. Dimension is enforced at INSERT/UPDATE; mismatched-length values are rejected. Distance functions and ANN indexing land in 7b–7d. |
JSON, JSONB |
Text (canonical JSON) | Phase 7e. JSON document stored as canonical UTF-8 text — same as SQLite's JSON1 extension (Q3 scope correction since bincode was removed in Phase 3c). INSERT/UPDATE values are validated via serde_json::from_str; malformed JSON is rejected with a typed error and no row is written. JSONB is accepted as an alias for JSON (PostgreSQL convention; both store as text in our case). Path-style read access via the json_extract / json_type / json_array_length / json_object_keys functions below. |
PRIMARY KEY— one column per table; the column must beINTEGERand gets auto-ROWID behavior (omitted on INSERT → auto-assigned). Auto-creates an index namedsqlrite_autoindex_<table>_<column>.UNIQUE— enforced at INSERT/UPDATE time. Auto-creates an index with the same naming scheme.NOT NULL— rejects NULL at INSERT/UPDATE. Omitted columns on INSERT are NULL by default, so aNOT NULLwithout an INSERT-time value is an error.
- Table-level constraints (
PRIMARY KEY (col1, col2),FOREIGN KEY,CHECK,UNIQUE (col1, col2)) are parsed but ignored. DEFAULTvalues are parsed but ignored.- Multi-column
PRIMARY KEY— only single-column PKs work; a composite PK is accepted by the parser but treated as no PK.
Table 'foo' already exists.— duplicateCREATE TABLE.'sqlrite_master' is a reserved name used by the internal schema catalog— you tried to shadow the catalog table.Column 'foo' appears more than once in the table definition— duplicate column names.PRIMARY KEY column must be INTEGER— PK on a non-integer column.
CREATE [UNIQUE] INDEX [IF NOT EXISTS] <name> ON <table> (<column>);- Single-column only. Composite indexes (
CREATE INDEX ... ON t (a, b)) are parsed but rejected at execution. - The index name is required. Anonymous (
CREATE INDEX ON t (col)) is rejected withanonymous indexes are not supported. - Supported column types:
INTEGER,TEXT.REALandBOOLEANcolumns cannot be indexed yet. CREATE UNIQUE INDEXon a column whose existing rows already carry duplicate values is rejected before any change is made — the table + other indexes stay untouched.IF NOT EXISTS— skips the create if an index with that name already exists. No-op return value in that case.- Indexes persist as their own cell-based B-Trees (see Storage model).
Every PRIMARY KEY and every UNIQUE column gets an auto-index at CREATE TABLE time:
sqlrite_autoindex_<table>_<column>
These are full-citizen indexes — they're visible via .tables-adjacent catalog queries (once those land), persist across saves, and accelerate equality probes. You don't need to CREATE INDEX them yourself.
INSERT INTO <name> (col1, col2, ...) VALUES (v1, v2, ...)
[, (v1, v2, ...) ...];- Explicit column list is required. Value-list-only inserts (
INSERT INTO t VALUES (...)) are not supported yet. INTEGER PRIMARY KEYauto-ROWID — omit the PK column and a ROWID is auto-assigned (max existing + 1, starting at 1).- Multi-row inserts — the parser accepts
VALUES (...), (...), (...), and SQLRite runs each row through the type + UNIQUE checks in order. A failure mid-batch leaves the already-inserted rows in place. - NULL padding — columns not named in the column list default to NULL.
NOT NULLcolumns must appear in the list (or be the omitted PK). - Type validation happens at INSERT time. A mismatched literal (
INSERT INTO t (age) VALUES ('not-a-number')whereageisINTEGER) is rejected with a typed error — no panic, no partial write. - UNIQUE enforcement runs before any row insert so a failing batch doesn't leave partial state.
| Literal | Example |
|---|---|
| Integer | 42, -5, 0 |
| Real | 3.14, -0.001, 1e10 |
| Text | 'single-quoted' — doubled single quotes escape: 'it''s' |
| Boolean | TRUE, FALSE (case-insensitive) |
| NULL | NULL (case-insensitive) |
| Vector | [0.1, 0.2, 0.3] — JSON-style bracket-array; integer elements widen to f32 ([1, 2, 3] is valid). For VECTOR(N) columns; dimension must match the declared N. (Phase 7a) |
Hex literals, blob literals, and date/time functions are not supported.
SELECT {* | col1, col2, ...}
FROM <table>
[WHERE <expr>]
[ORDER BY <col> [ASC|DESC]]
[LIMIT <non-negative-integer>];- Projection:
*(all columns in declaration order) or a bare column list. Columns not declared on the table are rejected. WHERE: any expression. Evaluated per row; NULL-as-false in WHERE context (three-valued logic collapsed to two-valued for filtering).ORDER BY: single sort key,ASC(default) orDESC. The sort key can be a bare column reference OR any expression — including function calls — so KNN queries likeORDER BY vec_distance_l2(embedding, [...]) LIMIT kwork end-to-end (Phase 7b). Sort key types must match; mixingINTEGERandTEXTacross rows under a singleORDER BYis a runtime error.LIMIT: non-negative integer literal.LIMIT 0is valid (returns zero rows).
The executor includes a tiny optimizer: if the WHERE is exactly <indexed_col> = <literal> or <literal> = <indexed_col>, it probes the index and scans only matching rows. Mixed predicates (WHERE a = 1 AND b > 2), range predicates (WHERE a > 1), and OR-combined predicates fall back to a full table scan.
- Joins of any kind (
INNER,LEFT OUTER,CROSS, comma-join) - Subqueries, CTEs (
WITH), views GROUP BY, aggregate functions (COUNT,SUM,AVG,MIN,MAX),HAVINGDISTINCTLIKE,IN,IS NULL/IS NOT NULL,BETWEEN- Expressions in the projection list (
SELECT age + 1 FROM users) — projection is bare column references only - Multi-column
ORDER BY,NULLS FIRST/LAST(single sort key only; the sort key itself can be an expression as of Phase 7b) OFFSET- Column aliases (
SELECT name AS n FROM users)
Any of the above reaches the executor as a parsed AST node that execution doesn't handle, producing either NotImplemented or a more specific error (e.g., joins are not supported).
UPDATE <table> SET col1 = <expr> [, col2 = <expr>]* [WHERE <expr>];- Multi-column
SET— separate assignments with commas. - RHS is a full expression — can reference other columns of the same row:
UPDATE users SET age = age + 1, updated_at = 'now' WHERE id = 42;
- Type enforcement — the declared column type of each target is checked against the assigned expression's result. Mismatch is a clean error; the row (and all other rows that would have been updated by the same statement) stays untouched.
- UNIQUE enforcement — if the update would collide with another row's value on a UNIQUE / PRIMARY KEY column, the whole statement is rejected before any write. No partial updates.
- NULL assignments respect
NOT NULL—SET col = NULLon aNOT NULLcolumn errors.
DELETE FROM <table> [WHERE <expr>];- No
WHEREdeletes every row (tables and indexes are preserved; only row data is removed). WHEREuses the same expression evaluator asSELECT.- Secondary indexes are updated alongside the row deletes so a subsequent
WHERE col = ...doesn't return stale hits.
Expressions work inside WHERE (both in SELECT, UPDATE, DELETE) and on the right-hand side of UPDATE's SET.
| Category | Operators |
|---|---|
| Comparison | =, <>, <, <=, >, >= |
| Logical | AND, OR, NOT |
| Arithmetic | +, -, *, /, % |
| String | || (concatenation) |
| Unary | +, - |
| Grouping | Parentheses |
Same set accepted by INSERT (see Value literals accepted).
| Function | Returns | Notes |
|---|---|---|
vec_distance_l2(a, b) |
Real (f64) | Euclidean distance √Σ(aᵢ−bᵢ)². Smaller is closer. (Phase 7b) |
vec_distance_cosine(a, b) |
Real (f64) | Cosine distance 1 − (a·b) / (‖a‖·‖b‖). Errors on zero-magnitude vectors (cosine is undefined). Smaller is closer; identical vectors return 0.0, orthogonal vectors return 1.0. (Phase 7b) |
vec_distance_dot(a, b) |
Real (f64) | Negated dot product −(a·b). Negation makes "smaller is closer" consistent with the others. For unit-norm vectors equals vec_distance_cosine(a, b) - 1. (Phase 7b) |
json_extract(json, path) |
Depends on the resolved node | Walks path over json and returns the resolved value coerced to the closest SQL type — JSON strings → TEXT, numbers → INTEGER / REAL, booleans → BOOLEAN, null → NULL, and composites (object / array) → their canonical JSON-text serialization. Path defaults to $ when only one argument is supplied. A path that doesn't resolve returns NULL. (Phase 7e) |
json_type(json[, path]) |
Text | One of 'object', 'array', 'string', 'integer', 'real', 'true', 'false', 'null'. Path defaults to $. (Phase 7e) |
json_array_length(json[, path]) |
Integer | Number of elements in the JSON array at path. Errors if the resolved node is not an array. Path defaults to $. (Phase 7e) |
json_object_keys(json[, path]) |
Text (JSON-array string) | Returns the object's keys as a JSON-array text in insertion order — e.g. '["a","b","c"]'. Path defaults to $. Diverges from SQLite, which exposes keys as a table-valued function (one row per key). SQLRite has no set-returning functions yet, so we return the keys as a JSON array and let callers parse if needed. (Phase 7e) |
All three vector-distance functions take exactly two arguments, both of which must be vectors of the same dimension. Either argument can be a column reference (embedding), a bracket-array literal ([0.1, 0.2, 0.3]), or any sub-expression that evaluates to a vector. Mismatched dimensions error with vector dimensions don't match (lhs=N, rhs=M).
The KNN ranking pattern that motivates this set:
SELECT id, title FROM docs
ORDER BY vec_distance_l2(embedding, [0.1, 0.2, ..., 0.0])
LIMIT 10;Operator forms (
<-><=><#>) are not supported yet. They're the de facto pgvector convention but blocked on a sqlparser limitation — will land as a Phase 7b.1 follow-up. Use the function-call form for now.
The json_* functions accept a string path argument with a small subset of JSONPath:
| Token | Meaning |
|---|---|
$ |
Root of the document (default if path is omitted). |
.key |
Object member access. Bare keys only — no quoted-string variant yet. |
[N] |
Array index (0-based). Negative indices are not supported. |
Tokens chain naturally: $.user.tags[0], $[2].name, $.matrix[1][0]. A malformed path (unbalanced brackets, missing $) errors at runtime with a typed message; a well-formed path that simply doesn't resolve returns NULL.
CREATE TABLE events (id INTEGER PRIMARY KEY, payload JSON);
INSERT INTO events (payload) VALUES
('{"user": {"name": "alice", "tags": ["admin", "ops"]}, "score": 42}'),
('{"user": {"name": "bob", "tags": []}, "score": 7}');
SELECT id,
json_extract(payload, '$.user.name') AS name,
json_extract(payload, '$.user.tags[0]') AS first_tag,
json_array_length(payload, '$.user.tags') AS tag_count,
json_type(payload, '$.score') AS score_type
FROM events
WHERE json_extract(payload, '$.user.name') = 'alice';- Integer-only ops stay integer.
1 + 2→3(Integer). - Any
REALoperand promotes tof64.1 + 2.0→3.0(Real). - Divide/modulo by zero returns a typed runtime error rather than panicking:
division by zerofor/and%. TEXTin arithmetic context errors —'hello' + 1is not silently coerced.
SQLRite follows standard SQL three-valued logic:
- Comparisons involving NULL (
NULL = 1,1 < NULL) evaluate to unknown, which behaves asfalseinsideWHERE. Neither the NULL = NULL equality nor the NULL <> NULL inequality is true — useIS NULL/IS NOT NULLfor explicit null tests (both not yet supported). - Logical operators with NULL:
NULL AND false→false,NULL AND true→NULL,NULL OR true→true,NOT NULL→NULL. The short-circuit rules prevent NULL from propagating when one operand already decides the result. - Arithmetic with NULL: any operand NULL → result NULL.
NULL + 1→NULL. - String concat with NULL:
'foo' || NULL→NULL(same propagation as arithmetic).
- Keywords (
SELECT,FROM,AND,TRUE,NULL, …) are case-insensitive.select,SELECT,SeLeCtall parse. - Identifiers (table names, column names) are case-sensitive — no normalization is applied at definition or lookup time.
CREATE TABLE Users (…)followed bySELECT * FROM usersfails withTable doesn't exist. (This is the opposite of SQLite's default; we'll revisit once the cursor refactor in Phase 5 lands.) - String literals preserve case:
'Alice'staysAlice.
BEGIN;
INSERT INTO users (name) VALUES ('alice');
UPDATE counters SET n = n + 1 WHERE name = 'signups';
COMMIT;Or:
BEGIN;
DELETE FROM users WHERE banned = TRUE;
ROLLBACK; -- nothing was actually deletedBEGINdeep-clones the in-memory database into a snapshot held ondb.txn. Auto-save is suppressed while the transaction is open — mutations accumulate in memory.COMMITflushes every accumulated change to the WAL in one atomic commit frame and drops the snapshot. Readers of the file after COMMIT see all of the transaction's changes at once.ROLLBACKreplaces the live state with the snapshot and drops the snapshot. Nothing hits disk.
- Nested
BEGINis rejected witha transaction is already open. No savepoints yet. BEGINon a read-only database (sqlrite --readonly foo.sqlrite) is rejected withcannot execute: database is opened read-only.- Runtime errors mid-transaction do NOT auto-rollback. If an
INSERTfails inside a transaction (UNIQUE violation, type mismatch, bad syntax), the transaction stays open. The caller decides whether toROLLBACKorCOMMITwhatever succeeded before the failure. COMMIT's disk write failing DOES auto-rollback. If the save at COMMIT time errors (disk full, permission denied, checksum mismatch), SQLRite restores the pre-BEGIN snapshot and surfacesCOMMIT failed — transaction rolled back: <underlying error>. Leaving in-flight mutations live after a failed COMMIT would be unsafe — any subsequent non-transactional statement's auto-save would silently publish partial work.- Cost:
BEGINisO(N)in the total size of the in-memory database because of the snapshot clone. On a huge database, opening a transaction just to run a single read-only query is wasteful — use a plainSELECTinstead. - Visibility to other processes: with POSIX file locks (Phase 4a–4e), a writer excludes all concurrent readers anyway, so "uncommitted transaction state leaking to a concurrent reader" isn't a concern — no concurrent reader exists during an open transaction.
A REPL launched with sqlrite --readonly foo.sqlrite (or sqlrite::open_database_read_only(path, name) programmatically) takes a shared POSIX advisory lock instead of an exclusive one. In that mode:
SELECTworks normally.- Every write statement (
INSERT,UPDATE,DELETE,CREATE TABLE,CREATE INDEX) is rejected before touching memory withcannot execute: database is opened read-only. The in-memory state never diverges from disk. BEGINis rejected.- Multiple read-only openers of the same file coexist (shared flock). Any read-write opener blocks all read-only openers and vice versa — POSIX's "many readers OR one writer, not both" semantics.
- One statement per call —
process_command/Connection::executeexpects a single statement. Multi-statement strings ("INSERT …; INSERT …;") are rejected withExpected a single query statement, but there are N. For multi-statement execution, use the SDK'sexecutescript/execute_batchhelpers (Phases 5c/5d). - Trailing semicolons are optional. Both
SELECT 1andSELECT 1;parse. - Empty / comment-only input is a benign no-op — no error, no auto-save triggered.
- Multi-line statements work. The REPL (via rustyline) buffers continuation lines until a terminating semicolon is seen.
For context when you hit NotImplemented. See Roadmap for when these land:
INNER/LEFT OUTER/RIGHT OUTER/CROSS JOIN, comma joins- Subqueries (scalar,
IN (SELECT ...), correlated) - CTEs (
WITH), recursive CTEs - Views (
CREATE VIEW)
GROUP BY,HAVING- Aggregate functions (
COUNT,SUM,AVG,MIN,MAX,GROUP_CONCAT) DISTINCT
LIKE,GLOB,REGEXPIN (...),NOT IN,BETWEENIS NULL,IS NOT NULL(pending — usecol = NULLis NOT a workaround since it's always false; the only current way to select NULL rows is to rely on the NULL-as-false-in-WHERE behavior being absent when the column isn't referenced)CASE WHEN ... THEN ... END- Expressions in the
SELECTprojection list - Column aliases (
AS) - Built-in functions (
LENGTH,UPPER,LOWER,COALESCE,IFNULL, date/time,printf, …)
ALTER TABLE(add column, rename column, rename table)DROP TABLE,DROP INDEXCREATE VIEW,CREATE TRIGGER- Table-level constraints (composite PK, composite UNIQUE,
FOREIGN KEY,CHECK) - Column defaults (
DEFAULT <value>) - Composite / multi-column indexes
- Savepoints (
SAVEPOINT,RELEASE SAVEPOINT,ROLLBACK TO SAVEPOINT) - Isolation-level control (
BEGIN IMMEDIATE,BEGIN EXCLUSIVE)
OFFSET- Multi-column
ORDER BY UNION,INTERSECT,EXCEPTINSERT ... SELECTUPDATE ... FROM,DELETE ... USING
- Multiple attached databases (
ATTACH DATABASE,DETACH DATABASE) PRAGMAstatements beyond what the parser accepts (none currently executed)REPLACE INTO,INSERT OR IGNORE,INSERT OR REPLACE(conflict-resolution clauses)
- Using SQLRite — REPL flow, meta-commands, history, read-only mode
- Embedding — the
Connection/Statement/RowsAPI surfacing the same SQL - Storage model — how columns, rows, and indexes live in memory and on disk
- SQL engine — how a query flows from tokens to executor to rows
- Roadmap — when each Not yet supported entry lands