@aventara/core 1.0.0-rc.1 → 1.0.0-rc.11

package/dist/runtime/scalar-runtime.js

@@ -1,22 +1,20 @@
 import { shapeOfField } from "../avz/json-shape.registry.js";
+import { AVZ_FORMATS } from "../config/framework-field-definition.js";
+import { FILTER_MODES, } from "../contracts/capability.js";
 import { lookupField, lookupOwn, lookupResource, } from "../contracts/contract-lookup.js";
 import { decodeBase64, WIRE_SCALAR_PATTERNS, } from "../contracts/wire-scalar-format.js";
 import { routeTransactionReferenceCandidate, } from "../transactions/transaction-reference.js";
-import { AvDecimal } from "./decimal.js";
+import { AvDecimal, isAvDecimal } from "./decimal.js";
+import { fieldCheckIssues } from "./field-check.evaluator.js";
+import { isPlainRecord } from "./record.guard.js";
 const INT_MIN = -(2 ** 31);
 const INT_MAX = 2 ** 31 - 1;
 const BIGINT_MIN = -(2n ** 63n);
 const BIGINT_MAX = 2n ** 63n - 1n;
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-function isRecord(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-export function isPlainRecord(value) {
-    if (!isRecord(value)) {
-        return false;
-    }
-    const prototype = Object.getPrototypeOf(value);
-    return prototype === Object.prototype || prototype === null;
+const NAMED_FORMATS = new Set(AVZ_FORMATS);
+function isNamedFormat(format) {
+    return NAMED_FORMATS.has(format);
 }
 function issue(code, path, message) {
     return { code, path, message };
@@ -24,6 +22,10 @@ function issue(code, path, message) {
 function typeIssue(path, expected) {
     return issue("V1001", path, `Value must be ${expected}.`);
 }
+const UNSENT_READ_VALUE_MESSAGE = "Value must not be undefined: it would be left out, and the request would reach more rows.";
+export function unsentReadValueIssue(path) {
+    return issue("V1001", path, UNSENT_READ_VALUE_MESSAGE);
+}
 function formatIssue(path, expected) {
     return issue("V1003", path, `Value must use ${expected}.`);
 }
@@ -83,18 +85,14 @@ export function normalizeJsonValue(value, path, seen) {
             const normalized = [];
             task.emit(normalized);
             stack.push({ kind: "leave", container: current });
-            const entries = [];
-            current.forEach((entry, index) => {
-                entries.push([index, entry]);
-            });
-            for (let cursor = entries.length - 1; cursor >= 0; cursor -= 1) {
-                const entry = entries[cursor];
+            for (let index = current.length - 1; index >= 0; index -= 1) {
+                const entry = current[index];
                 stack.push({
                     kind: "visit",
-                    value: entry[1],
-                    link: { parent: task.link, segment: entry[0] },
+                    value: entry === undefined ? null : entry,
+                    link: { parent: task.link, segment: index },
                     emit: (child) => {
-                        normalized.push(child);
+                        normalized[index] = child;
                     },
                 });
             }
@@ -112,7 +110,7 @@ export function normalizeJsonValue(value, path, seen) {
         const normalized = {};
         task.emit(normalized);
         stack.push({ kind: "leave", container: current });
-        const entries = Object.entries(current);
+        const entries = Object.entries(current).filter((entry) => entry[1] !== undefined);
         for (let cursor = entries.length - 1; cursor >= 0; cursor -= 1) {
             const entry = entries[cursor];
             stack.push({
@@ -231,10 +229,9 @@ function normalizeScalarAtom(contract, field, value, origin, path, allowNull) {
             break;
         case "decimal":
             if (origin === "application") {
-                normalized =
-                    value instanceof AvDecimal
-                        ? { ok: true, value }
-                        : { ok: false, issues: [typeIssue(path, "an Aventara Decimal")] };
+                normalized = isAvDecimal(value)
+                    ? { ok: true, value }
+                    : { ok: false, issues: [typeIssue(path, "an Aventara Decimal")] };
             }
             else if (typeof value !== "string") {
                 normalized = {
@@ -359,9 +356,21 @@ export function normalizeScalarFieldValue(contract, field, value, origin, path)
         });
         return issues.length > 0
             ? { ok: false, issues }
-            : { ok: true, value: normalized };
+            : heldToFormat(field, { ok: true, value: normalized }, origin, path);
     }
-    return normalizeScalarAtom(contract, field, value, origin === "runtime" ? "application" : origin, path, field.nullable);
+    return heldToFormat(field, normalizeScalarAtom(contract, field, value, origin === "runtime" ? "application" : origin, path, field.nullable), origin, path);
+}
+function heldToFormat(field, normalized, origin, path) {
+    const format = field.format;
+    if (origin !== "runtime" ||
+        !normalized.ok ||
+        format === undefined ||
+        format === "uuid" ||
+        !isNamedFormat(format)) {
+        return normalized;
+    }
+    const issues = fieldCheckIssues([{ check: "string_format", format }], normalized.value, "string", path, field.list);
+    return issues.length === 0 ? normalized : { ok: false, issues };
 }
 export function jsonShapeIssues(field, value, path, position = "value") {
     if (field.json === undefined || value === null || value === undefined) {
@@ -427,6 +436,11 @@ export function copyScalarFieldValue(field, value) {
 function normalizeListElement(contract, field, value, origin, path) {
     return normalizeScalarAtom(contract, field, value, origin, path, false);
 }
+function normalizeFilterEntry(contract, field, value, origin, path) {
+    return value === undefined
+        ? { ok: false, issues: [unsentReadValueIssue(path)] }
+        : normalizeListElement(contract, field, value, origin, path);
+}
 function mergeResult(result, issues) {
     if (result.ok) {
         return result.value;
@@ -434,7 +448,7 @@ function mergeResult(result, issues) {
     issues.push(...result.issues);
     return undefined;
 }
-export const REFERENCE_OPERANDS = Object.freeze({
+const REFERENCE_OPERANDS = Object.freeze({
     equals: "value",
     not: "value",
     lt: "nonNullValue",
@@ -463,10 +477,40 @@ const NULL_OPERAND_OPERATORS = new Set([
     "arrayStartsWith",
     "arrayEndsWith",
 ]);
+const KEYWORD_OPERANDS = Object.freeze({
+    mode: (operand, path, issues) => {
+        if (!FILTER_MODES.includes(operand)) {
+            issues.push(typeIssue(path, '"default", "sensitive" or "insensitive"'));
+        }
+    },
+    isEmpty: (operand, path, issues) => {
+        if (typeof operand !== "boolean") {
+            issues.push(typeIssue(path, "a boolean"));
+        }
+    },
+    path: (operand, path, issues) => {
+        if (!Array.isArray(operand)) {
+            issues.push(typeIssue(path, "an array of strings"));
+            return;
+        }
+        for (let index = 0; index < operand.length; index += 1) {
+            if (operand[index] === undefined) {
+                issues.push(unsentReadValueIssue([...path, index]));
+            }
+            else if (typeof operand[index] !== "string") {
+                issues.push(typeIssue([...path, index], "a string"));
+            }
+        }
+    },
+});
 function normalizeScalarFilter(contract, field, value, origin, path, issues, references = false) {
     if (isKeptReference(references, value)) {
         return value;
     }
+    if (value === undefined) {
+        issues.push(unsentReadValueIssue(path));
+        return value;
+    }
     if (!isPlainRecord(value)) {
         return mergeResult(normalizeScalarFieldValue(contract, field, value, origin, path), issues);
     }
@@ -477,11 +521,17 @@ function normalizeScalarFilter(contract, field, value, origin, path, issues, ref
     const normalized = cloneRecord(value);
     for (const [operator, operand] of Object.entries(value)) {
         const operandPath = [...path, operator];
+        if (operand === undefined) {
+            issues.push(unsentReadValueIssue(operandPath));
+            continue;
+        }
         if (operand === null && !acceptsNullOperand(operator)) {
             issues.push(typeIssue(operandPath, "non-null"));
             continue;
         }
-        if (operator === "mode" || operator === "isEmpty" || operator === "path") {
+        const keyword = lookupOwn(KEYWORD_OPERANDS, operator);
+        if (keyword !== undefined) {
+            keyword(operand, operandPath, issues);
             continue;
         }
         if (referenceOperandShape(operator) !== undefined &&
@@ -497,14 +547,14 @@ function normalizeScalarFilter(contract, field, value, origin, path, issues, ref
                 issues.push(typeIssue(operandPath, "an array"));
                 continue;
             }
-            normalized[operator] = operand.map((entry, index) => mergeResult(normalizeListElement(contract, field, entry, origin, [
+            normalized[operator] = operand.map((entry, index) => mergeResult(normalizeFilterEntry(contract, field, entry, origin, [
                 ...operandPath,
                 index,
             ]), issues));
             continue;
         }
         if (operator === "has") {
-            normalized[operator] = mergeResult(normalizeListElement(contract, field, operand, origin, operandPath), issues);
+            normalized[operator] = mergeResult(normalizeFilterEntry(contract, field, operand, origin, operandPath), issues);
             continue;
         }
         if (operator === "hasEvery" || operator === "hasSome") {
@@ -512,7 +562,7 @@ function normalizeScalarFilter(contract, field, value, origin, path, issues, ref
                 issues.push(typeIssue(operandPath, "an array"));
                 continue;
             }
-            normalized[operator] = operand.map((entry, index) => mergeResult(normalizeListElement(contract, field, entry, origin, [
+            normalized[operator] = operand.map((entry, index) => mergeResult(normalizeFilterEntry(contract, field, entry, origin, [
                 ...operandPath,
                 index,
             ]), issues));
@@ -521,6 +571,12 @@ function normalizeScalarFilter(contract, field, value, origin, path, issues, ref
         if ("scalar" in field.type &&
             field.type.scalar === "json" &&
             (operator.startsWith("string") || operator.startsWith("array"))) {
+            if (operator.startsWith("string")) {
+                if (typeof operand !== "string") {
+                    issues.push(typeIssue(operandPath, "a string"));
+                }
+                continue;
+            }
             const jsonResult = normalizeJsonValue(operand, operandPath, new Set());
             normalized[operator] = mergeResult(jsonResult, issues);
             continue;
@@ -585,6 +641,10 @@ function normalizeUniqueSelector(contract, resourceName, selector, origin, path,
     const normalized = cloneRecord(selector);
     for (const [fieldName, value] of Object.entries(selector)) {
         const field = lookupField(resource, fieldName);
+        if (field?.kind === "scalar" && value === undefined) {
+            issues.push(unsentReadValueIssue([...path, fieldName]));
+            continue;
+        }
         if (field?.kind === "scalar" && !isKeptReference(references, value)) {
             normalized[fieldName] = mergeResult(normalizeScalarFieldValue(contract, field, value, origin, [
                 ...path,

package/dist/runtime/thenable.guard.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Whether `value` is what `await` waits for rather than answers at once: an
+ * object or function whose `then` is a function. Reads `then` once; a `then`
+ * getter that throws throws here, so a caller reading an untrusted value guards
+ * the call.
+ */
+export declare function isThenable(value: unknown): value is PromiseLike<unknown>;

package/dist/runtime/thenable.guard.js

@@ -0,0 +1,5 @@
+export function isThenable(value) {
+    return (value !== null &&
+        (typeof value === "object" || typeof value === "function") &&
+        typeof value.then === "function");
+}

package/dist/runtime/unsent-value.normalizer.d.ts

@@ -0,0 +1,15 @@
+import type { AvContract } from "../contracts/contract.js";
+import type { AvOperationFamily } from "../operations/operation-identity.js";
+/**
+ * One operation's arguments with every write record's unsent fields removed — a
+ * field whose value is `undefined`, at any depth of nested write data the
+ * Contract's `maxNestingDepth` admits — and
+ * nothing else changed (see the module note): `where`, selectors and every other
+ * member are left as they are. The same object when nothing was unsent; otherwise
+ * a copy of each container on the way, never a write into `args`. Total over
+ * malformed input.
+ */
+export declare function withoutUnsentWriteValues(contract: AvContract, request: {
+    readonly resource: string;
+    readonly family: AvOperationFamily;
+}, args: unknown): unknown;

package/dist/runtime/unsent-value.normalizer.js

@@ -0,0 +1,129 @@
+import { lookupField, lookupResource } from "../contracts/contract-lookup.js";
+import { WRITE_KEYS } from "./field-stage.runtime.js";
+import { isRelationMutationDirective, RELATION_MUTATION_RECORD_SITES, } from "./mutation-planner.js";
+import { isPlainRecord } from "./record.guard.js";
+const REMOVE = Symbol("remove");
+const DEPTH_CEILING = 256;
+function rebuilt(record, changes) {
+    const copy = Object.getPrototypeOf(record) === null ? Object.create(null) : {};
+    for (const key of Object.keys(record)) {
+        const value = changes.has(key) ? changes.get(key) : record[key];
+        if (value === REMOVE) {
+            continue;
+        }
+        Object.defineProperty(copy, key, {
+            value,
+            writable: true,
+            enumerable: true,
+            configurable: true,
+        });
+    }
+    return copy;
+}
+function eachEntry(value, strip) {
+    if (!Array.isArray(value)) {
+        return strip(value);
+    }
+    let copy;
+    for (let index = 0; index < value.length; index += 1) {
+        if (!(index in value)) {
+            continue;
+        }
+        const entry = value[index];
+        const stripped = strip(entry);
+        if (stripped !== entry) {
+            copy ??= value.slice();
+            copy[index] = stripped;
+        }
+    }
+    return copy ?? value;
+}
+function stripRecord(walk, resourceName, record, depth) {
+    if (depth > walk.depth || !isPlainRecord(record)) {
+        return record;
+    }
+    const resource = lookupResource(walk.contract, resourceName);
+    let changes;
+    for (const key of Object.keys(record)) {
+        const value = record[key];
+        if (value === undefined) {
+            changes ??= new Map();
+            changes.set(key, REMOVE);
+            continue;
+        }
+        const field = lookupField(resource, key);
+        if (field?.kind !== "relation") {
+            continue;
+        }
+        const stripped = stripRelationWrite(walk, field.target, value, depth + 1);
+        if (stripped !== value) {
+            changes ??= new Map();
+            changes.set(key, stripped);
+        }
+    }
+    return changes === undefined ? record : rebuilt(record, changes);
+}
+function stripRelationWrite(walk, target, value, depth) {
+    if (!isPlainRecord(value)) {
+        return value;
+    }
+    let changes;
+    for (const directive of Object.keys(value)) {
+        if (!isRelationMutationDirective(directive)) {
+            continue;
+        }
+        const sites = RELATION_MUTATION_RECORD_SITES[directive];
+        if (sites.length === 0) {
+            continue;
+        }
+        const operand = value[directive];
+        const next = eachEntry(operand, (entry) => {
+            let stripped = entry;
+            for (const site of sites) {
+                if (site.key === undefined) {
+                    stripped = stripRecord(walk, target, stripped, depth);
+                    continue;
+                }
+                if (!isPlainRecord(stripped) || !Object.hasOwn(stripped, site.key)) {
+                    continue;
+                }
+                const inner = stripped[site.key];
+                const record = stripRecord(walk, target, inner, depth);
+                if (record !== inner) {
+                    stripped = rebuilt(stripped, new Map([[site.key, record]]));
+                }
+            }
+            return stripped;
+        });
+        if (next !== operand) {
+            changes ??= new Map();
+            changes.set(directive, next);
+        }
+    }
+    return changes === undefined ? value : rebuilt(value, changes);
+}
+export function withoutUnsentWriteValues(contract, request, args) {
+    const keys = Object.hasOwn(WRITE_KEYS, request.family)
+        ? WRITE_KEYS[request.family]
+        : undefined;
+    if (keys === undefined || !isPlainRecord(args)) {
+        return args;
+    }
+    const walk = {
+        contract,
+        depth: Math.min(contract.limits.maxNestingDepth, DEPTH_CEILING),
+    };
+    let changes;
+    for (const key of keys) {
+        if (!Object.hasOwn(args, key)) {
+            continue;
+        }
+        const value = args[key];
+        const next = eachEntry(value, (entry) => stripRecord(walk, request.resource, entry, 0));
+        if (next !== value) {
+            changes ??= new Map();
+            changes.set(key, next);
+        }
+    }
+    return changes === undefined ? args : rebuilt(args, changes);
+}

package/dist/transactions/operation-arguments-encoder.js

@@ -1,15 +1,9 @@
 import { lookupField, lookupResource } from "../contracts/contract-lookup.js";
 import { encodeBase64 } from "../contracts/wire-scalar-format.js";
-import { AvDecimal } from "../runtime/decimal.js";
+import { isAvDecimal } from "../runtime/decimal.js";
 import { isRelationMutationDirective, RELATION_MUTATION_RECORD_SITES, } from "../runtime/mutation-planner.js";
+import { isPlainRecord } from "../runtime/record.guard.js";
 import { isTransactionReferenceCandidate } from "./transaction-reference.js";
-function isPlainRecord(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
-        return false;
-    }
-    const prototype = Object.getPrototypeOf(value);
-    return prototype === Object.prototype || prototype === null;
-}
 function cloneRecord(value) {
     return { ...value };
 }
@@ -27,9 +21,11 @@ function encodeScalarAtom(field, value) {
         case "bigint":
             return typeof value === "bigint" ? value.toString(10) : value;
         case "decimal":
-            return value instanceof AvDecimal ? value.toString() : value;
+            return isAvDecimal(value) ? value.toString() : value;
         case "datetime":
-            return value instanceof Date ? value.toISOString() : value;
+            return value instanceof Date && !Number.isNaN(value.getTime())
+                ? value.toISOString()
+                : value;
         case "bytes":
             return value instanceof Uint8Array ? encodeBase64(value) : value;
         default:
@@ -282,6 +278,9 @@ function isUniqueOperation(operation) {
             operation.family === "upsert"));
 }
 export function encodeOperationArgumentsForWire(contract, operation, args) {
+    if (!isPlainRecord(args)) {
+        return args;
+    }
     const encoded = cloneRecord(args);
     if (hasOwnWireProperty(args, "where")) {
         encoded.where = isUniqueOperation(operation)

package/dist/transactions/operation-fingerprint.js

@@ -1,4 +1,4 @@
-import { canonicalizeJson } from "../contracts/contract-canonicalizer.js";
+import { canonicalizeWireJson } from "../contracts/contract-canonicalizer.js";
 const OPERATION_FINGERPRINT_PATTERN = /^fp1:[A-Za-z0-9_-]{22}$/;
 function encodeBase64Url(bytes) {
     let binary = "";
@@ -14,7 +14,7 @@ export function isOperationFingerprint(value) {
     return typeof value === "string" && OPERATION_FINGERPRINT_PATTERN.test(value);
 }
 export async function computeOperationFingerprint(node) {
-    const canonical = canonicalizeJson({
+    const canonical = canonicalizeWireJson({
         resource: node.resource,
         family: node.family,
         variant: node.variant,

package/dist/transactions/sql-statement.d.ts

@@ -10,7 +10,7 @@ import type { AvTransactionReference } from "./transaction-reference.js";
  * `${value}::jsonb`), or a `$ref` to an earlier step's field, resolved when the
  * earlier steps have run and then bound like any other value.
  */
-export type SqlStatementValue = AvAdapterSqlValue | AvTransactionReference;
+export type AvSqlStatementValue = AvAdapterSqlValue | AvTransactionReference;
 /**
  * `framework.appTx.$sql`: a developer SQL step, written only as a tagged template —
  * ``framework.appTx.$sql`select pgmq.send('jobs', jsonb_build_object('id', ${ref}))` ``.
@@ -23,7 +23,7 @@ export type SqlStatementValue = AvAdapterSqlValue | AvTransactionReference;
  * SQL step's rows. No guard, pipe, hook, interceptor or filter runs around it: it
  * has no Resource or operation for one to wrap.
  */
-export type SqlStatementBuilder = <Row = unknown>(strings: TemplateStringsArray, ...values: readonly SqlStatementValue[]) => AvOperation<Row[], "application">;
+export type AvSqlStatementBuilder = <Row = unknown>(strings: TemplateStringsArray, ...values: readonly AvSqlStatementValue[]) => AvOperation<Row[], "application">;
 /** One value of a planned SQL step, as the typed runner bound it. */
 export type PlannedSqlValue = {
     readonly kind: "value";
@@ -35,6 +35,14 @@ export type PlannedSqlValue = {
     readonly operation: number;
     readonly field: string;
 }
+/**
+ * A whole value that is a `$ref` control object the caller wrote, mirrored at
+ * the builder: validated as an operation step's reference is.
+ */
+ | {
+    readonly kind: "candidate";
+    readonly candidate: unknown;
+}
 /** A `$ref` placeholder found inside a value, at `path` within it: refused. */
  | {
     readonly kind: "misplaced-reference";

package/dist/transactions/sql-statement.validator.d.ts

@@ -5,7 +5,7 @@ import type { AvOperationFailureResponse } from "../runtime/operation-response.j
 import type { PlannedSqlStatement, ValidatedSqlStatement } from "./sql-statement.js";
 import type { ValidatedTransactionStep } from "./transaction-plan-validator.js";
 type Path = readonly (string | number)[];
-export type SqlStatementValidation = {
+type SqlStatementValidation = {
     readonly ok: true;
     readonly statement: ValidatedSqlStatement;
 } | {
@@ -13,7 +13,7 @@ export type SqlStatementValidation = {
     readonly response: AvOperationFailureResponse;
 };
 /** What validating a SQL step needs from the plan around it. */
-export type SqlStatementValidationContext = {
+type SqlStatementValidationContext = {
     /** The step's position in the plan. */
     readonly index: number;
     /** The steps validated before it, by position. */

package/dist/transactions/sql-statement.validator.js

@@ -1,11 +1,13 @@
 import { validationIssue } from "../operations/validation-code.js";
+import { AvCallerDataError, locateCallerDataError, } from "../runtime/caller-data.copier.js";
 import { refuseCallerData } from "../runtime/caller-data.door.js";
-import { AvDecimal } from "../runtime/decimal.js";
+import { isAvDecimal } from "../runtime/decimal.js";
 import { planStepPath } from "../runtime/error-boundary.js";
 import { operationFailure } from "../runtime/operation-response.js";
 import { mapValidationOutcome } from "../runtime/outcome-mapper.js";
-import { isPlainRecord, normalizeJsonValue, } from "../runtime/scalar-runtime.js";
-import { invalidSourceIndexIssue, referenceSourceAt, referenceSourceField, } from "./transaction-reference-validator.js";
+import { isPlainRecord } from "../runtime/record.guard.js";
+import { normalizeJsonValue } from "../runtime/scalar-runtime.js";
+import { inspectReferenceCandidate, invalidSourceIndexIssue, referenceSourceAt, referenceSourceField, } from "./transaction-reference-validator.js";
 import { transactionOperationFailure } from "./transaction-response.js";
 function refused(issue, index) {
     return {
@@ -18,7 +20,7 @@ export function normalizeSqlValue(value, path) {
         typeof value === "string" ||
         typeof value === "boolean" ||
         typeof value === "bigint" ||
-        value instanceof AvDecimal ||
+        isAvDecimal(value) ||
         value instanceof Uint8Array) {
         return { ok: true, value };
     }
@@ -56,7 +58,7 @@ export function normalizeSqlValue(value, path) {
     };
 }
 export function validateSqlStatement(statement, context) {
-    const { index, earlier } = context;
+    const { index } = context;
     if (!context.available) {
         const message = "SQL statements are not available on this Adapter.";
         return {
@@ -73,6 +75,22 @@ export function validateSqlStatement(statement, context) {
     if (statement.refused !== undefined) {
         return refused(refuseCallerData(statement.refused, [...planStepPath(index), "values"], { origin: "application", operation: index }, context.misuse), index);
     }
+    try {
+        return validateSqlValues(statement, statement.strings, context);
+    }
+    catch (error) {
+        if (!(error instanceof AvCallerDataError)) {
+            throw error;
+        }
+        return refused(refuseCallerData(locateCallerDataError(error, statement.values.map((planned) => planned.kind === "value"
+            ? planned.value
+            : planned.kind === "candidate"
+                ? planned.candidate
+                : undefined)), [...planStepPath(index), "values"], { origin: "application", operation: index }, context.misuse), index);
+    }
+}
+function validateSqlValues(statement, strings, context) {
+    const { index, earlier } = context;
     const values = [];
     const issues = [];
     for (const [position, planned] of statement.values.entries()) {
@@ -80,6 +98,22 @@ export function validateSqlStatement(statement, context) {
         switch (planned.kind) {
             case "misplaced-reference":
                 return refused(validationIssue("V1010", [...path, ...planned.path, "$ref"], "A transaction reference in a SQL step must be a whole value."), index);
+            case "candidate": {
+                const inspection = inspectReferenceCandidate(planned.candidate, path, earlier, index);
+                if (!inspection.ok) {
+                    return refused(inspection.issue, index);
+                }
+                if (inspection.field.kind !== "scalar" || inspection.field.list) {
+                    return refused(validationIssue("V1011", inspection.pathPath, "Transaction reference source is not a single scalar field."), index);
+                }
+                values.push({
+                    kind: "reference",
+                    operation: inspection.source.index,
+                    field: inspection.segment,
+                    source: inspection.field,
+                });
+                break;
+            }
             case "reference": {
                 const source = referenceSourceAt(earlier, planned.operation, index);
                 if (source === undefined) {
@@ -127,7 +161,7 @@ export function validateSqlStatement(statement, context) {
         statement: {
             kind: "sql",
             index,
-            strings: statement.strings,
+            strings,
             values,
         },
     };

package/dist/transactions/transaction-envelope.d.ts

@@ -1,18 +1,18 @@
 import type { AvValidationIssue } from "../operations/validation-code.js";
-export type TransactionEnvelopeSchema = {
+type TransactionEnvelopeSchema = {
     readonly required: readonly string[];
     readonly optional?: readonly string[];
     readonly invalidContainerPath: readonly (string | number)[];
     readonly invalidContainerMessage: string;
 };
-export type TransactionEnvelopeInspection = {
+type TransactionEnvelopeInspection = {
     readonly ok: true;
     readonly values: ReadonlyMap<string, unknown>;
 } | {
     readonly ok: false;
     readonly issue: AvValidationIssue;
 };
-export type TransactionOperationsInspection = {
+type TransactionOperationsInspection = {
     readonly ok: true;
     readonly value: object;
     readonly length: number;
@@ -20,7 +20,7 @@ export type TransactionOperationsInspection = {
     readonly ok: false;
     readonly issue: AvValidationIssue;
 };
-export type TransactionOperationEntryInspection = {
+type TransactionOperationEntryInspection = {
     readonly ok: true;
     readonly value: unknown;
 } | {
@@ -39,3 +39,4 @@ export declare function inspectTransactionOperationEntry(operations: object, ind
  * Proxies are unsupported; reflection failures are contained as envelope issues.
  */
 export declare function inspectTransactionEnvelope(value: unknown, schema: TransactionEnvelopeSchema): TransactionEnvelopeInspection;
+export {};

package/dist/transactions/transaction-integrity-error.js

@@ -1,3 +1,4 @@
+import { brandCoreClass } from "../runtime/core-class.brand.js";
 const TRANSACTION_INTEGRITY_MESSAGES = {
     "transaction-unavailable": "Adapter transaction function is unavailable.",
     "resolved-after-abort": "Adapter transaction resolved after the framework requested rollback.",
@@ -15,3 +16,4 @@ export class AvTransactionIntegrityError extends Error {
         this.violation = violation;
     }
 }
+brandCoreClass(AvTransactionIntegrityError, "AvTransactionIntegrityError");