@chaos-overlords/storage 0.9.9 → 0.9.11

package/dist/node/index.d.ts

@@ -1,4 +1,5 @@
 import type { MultiplayerStorage } from '@chaos-overlords/kernel';
+import { type SweepableRateLimitStore } from '../postgres/rateLimits';
 /** Migration folders, resolved from the package so a runtime never guesses a relative path. */
 export declare const SQLITE_MIGRATIONS_DIR: string;
 export declare const POSTGRES_MIGRATIONS_DIR: string;
@@ -10,6 +11,11 @@ export interface OpenedStorage {
      * (the retention batch above all) by this.
      */
     dialect: 'sqlite' | 'postgres';
+    /**
+     * Rate limit windows every process on this database shares, when the database can be shared.
+     * Postgres has one; a SQLite file belongs to one process, which counts in memory.
+     */
+    rateLimits?: SweepableRateLimitStore;
     close(): Promise<void>;
 }
 /**
@@ -27,6 +33,7 @@ export declare function openSqliteStorage(filename: string): OpenedStorage;
  * the pool would have recovered from on the next query.
  */
 export declare function openPostgresStorage(connectionString: string, onPoolError?: (error: unknown) => void): Promise<OpenedStorage>;
+export type { SweepableRateLimitStore };
 export type StorageTarget = {
     kind: 'sqlite';
     filename: string;

package/dist/node/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAYjE,+FAA+F;AAC/F,eAAO,MAAM,qBAAqB,QAEjC,CAAA;AACD,eAAO,MAAM,uBAAuB,QAEnC,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,kBAAkB,CAAA;IAC3B;;;;OAIG;IACH,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AASD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAiBjE;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAUrE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,aAAa,EACrB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,aAAa,CAAC,CAIxB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAOjE,OAAO,EAA0B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAM7F,+FAA+F;AAC/F,eAAO,MAAM,qBAAqB,QAEjC,CAAA;AACD,eAAO,MAAM,uBAAuB,QAEnC,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,kBAAkB,CAAA;IAC3B;;;;OAIG;IACH,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,uBAAuB,CAAA;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AASD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAiBjE;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED,YAAY,EAAE,uBAAuB,EAAE,CAAA;AAEvC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAUrE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,aAAa,EACrB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,aAAa,CAAC,CAIxB"}

package/dist/node/index.js

@@ -6,6 +6,7 @@ import { migrate as migrateSqlite } from 'drizzle-orm/better-sqlite3/migrator';
 import { drizzle as drizzlePostgres } from 'drizzle-orm/node-postgres';
 import { migrate as migratePostgres } from 'drizzle-orm/node-postgres/migrator';
 import pg from 'pg';
+import { postgresRateLimitStore } from '../postgres/rateLimits';
 import { createPostgresStorage } from '../postgres/repositories';
 import * as postgresSchema from '../postgres/schema';
 import { createSqliteStorage } from '../sqlite/repositories';
@@ -73,6 +74,7 @@ export async function openPostgresStorage(connectionString, onPoolError) {
     return {
         storage: createPostgresStorage(db),
         dialect: 'postgres',
+        rateLimits: postgresRateLimitStore(db),
         close: () => pool.end(),
     };
 }

package/dist/node/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAE7C,OAAO,aAAa,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,KAAK,cAAc,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,YAAY,MAAM,kBAAkB,CAAA;AAEhD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAChD,IAAI,GAAG,CAAC,yBAAyB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACpD,CAAA;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAClD,IAAI,GAAG,CAAC,2BAA2B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACtD,CAAA;AAaD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,iBAAsB,CAAA;AAEjD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC9C,UAAU,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IACvC,0FAA0F;IAC1F,+FAA+F;IAC/F,2DAA2D;IAC3D,UAAU,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;IACzC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;IAC9D,aAAa,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAC9D,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,gBAAwB,EACxB,WAAsC;IAEtC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;QACvB,gBAAgB;QAChB,6FAA6F;QAC7F,mEAAmE;QACnE,uBAAuB,EAAE,MAAM;QAC/B,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAChF,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACpF,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;IACD,OAAO;QACL,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACxB,CAAA;AACH,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE,CAAA;IACxF,CAAC;IACD,8FAA8F;IAC9F,0FAA0F;IAC1F,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAqB,EACrB,WAAsC;IAEtC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;QAC/B,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC3D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAE7C,OAAO,aAAa,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,EAAE,sBAAsB,EAAgC,MAAM,wBAAwB,CAAA;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,KAAK,cAAc,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,YAAY,MAAM,kBAAkB,CAAA;AAEhD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAChD,IAAI,GAAG,CAAC,yBAAyB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACpD,CAAA;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAClD,IAAI,GAAG,CAAC,2BAA2B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACtD,CAAA;AAkBD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,iBAAsB,CAAA;AAEjD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC9C,UAAU,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IACvC,0FAA0F;IAC1F,+FAA+F;IAC/F,2DAA2D;IAC3D,UAAU,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;IACzC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;IAC9D,aAAa,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAC9D,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,gBAAwB,EACxB,WAAsC;IAEtC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;QACvB,gBAAgB;QAChB,6FAA6F;QAC7F,mEAAmE;QACnE,uBAAuB,EAAE,MAAM;QAC/B,iBAAiB,EAAE,MAAM;QACzB,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAA;IACF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAChF,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,CAAC,CAAA;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACpF,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;IACD,OAAO;QACL,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACxB,CAAA;AACH,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE,CAAA;IACxF,CAAC;IACD,8FAA8F;IAC9F,0FAA0F;IAC1F,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAqB,EACrB,WAAsC;IAEtC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;QAC/B,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC3D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzD,CAAC"}

package/dist/postgres/index.d.ts

@@ -1,3 +1,4 @@
 export { createPostgresStorage, type PostgresDatabase } from './repositories';
 export * as postgresSchema from './schema';
+export { postgresRateLimitStore, type SweepableRateLimitStore } from './rateLimits';
 //# sourceMappingURL=index.d.ts.map

package/dist/postgres/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/postgres/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAC7E,OAAO,KAAK,cAAc,MAAM,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/postgres/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAC7E,OAAO,KAAK,cAAc,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAA"}

package/dist/postgres/index.js

@@ -1,3 +1,4 @@
 export { createPostgresStorage } from './repositories';
 export * as postgresSchema from './schema';
+export { postgresRateLimitStore } from './rateLimits';
 //# sourceMappingURL=index.js.map

package/dist/postgres/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/postgres/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAyB,MAAM,gBAAgB,CAAA;AAC7E,OAAO,KAAK,cAAc,MAAM,UAAU,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/postgres/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAyB,MAAM,gBAAgB,CAAA;AAC7E,OAAO,KAAK,cAAc,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAgC,MAAM,cAAc,CAAA"}

package/dist/postgres/players.d.ts

@@ -0,0 +1,4 @@
+import type { PlayerRepository } from '@chaos-overlords/kernel';
+import type { PostgresDatabase } from './database';
+export declare function postgresPlayerRepository(db: PostgresDatabase): PlayerRepository;
+//# sourceMappingURL=players.d.ts.map

package/dist/postgres/players.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"players.d.ts","sourceRoot":"","sources":["../../src/postgres/players.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAGvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAwClD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,gBAAgB,GAAG,gBAAgB,CAyL/E"}

package/dist/postgres/players.js

@@ -0,0 +1,193 @@
+import { and, asc, eq, exists, inArray, isNotNull, ne, notExists, or, sql } from 'drizzle-orm';
+import { firstOrNull, toPlayer } from '../shared/mappers';
+import * as schema from './schema';
+/** Players and their seats in the Postgres dialect; see the SQLite twin. */
+/** Thrown inside the late-claim transaction to roll it back when the claim is refused. */
+const LATE_CLAIM_REFUSED = new Error('late seat claim refused');
+/**
+ * The rows that still hold a claim on their seat: every row but a computer-controlled one whose
+ * token is gone. The SQL twin of `isVacated`, negated.
+ */
+function holdsClaim() {
+    const { players } = schema;
+    return or(ne(players.status, 'computer'), isNotNull(players.tokenHash));
+}
+/**
+ * The select list `create` and `createLate` feed their insert from: the player's own values, each
+ * under the column name it is inserted as.
+ *
+ * The list is written out, which means it does NOT get Drizzle's column mapping: a column added to
+ * `players` later has to be added here too, in the storage form the column expects. The
+ * conformance suite compares a created player against its fixture field by field, so a dropped
+ * column fails there rather than going unnoticed.
+ */
+function playerValues(player) {
+    return {
+        id: sql `${player.id}`.as('id'),
+        matchId: sql `${player.matchId}`.as('match_id'),
+        slot: sql `${player.slot}`.as('slot'),
+        joinOrder: sql `${player.joinOrder}`.as('join_order'),
+        displayName: sql `${player.displayName}`.as('display_name'),
+        portraitId: sql `${player.portraitId}`.as('portrait_id'),
+        tokenHash: sql `${player.tokenHash}`.as('token_hash'),
+        status: sql `${player.status}`.as('status'),
+        joinedAt: sql `${player.joinedAt}`.as('joined_at'),
+    };
+}
+export function postgresPlayerRepository(db) {
+    const { matches, players } = schema;
+    return {
+        /**
+         * An insert fed by a select over the match row, so "the match is still in the lobby" is tested
+         * by the same statement that writes the player. A row lock makes this guard hold through the
+         * insert under READ COMMITTED, including when the match starts concurrently.
+         */
+        async create(player) {
+            const rows = await db
+                .insert(players)
+                .select(db
+                .select(playerValues(player))
+                .from(matches)
+                .where(and(eq(matches.id, player.matchId), eq(matches.status, 'lobby')))
+                .for('share'))
+                .returning({ id: players.id });
+            return rows.length === 1;
+        },
+        async createLate(player) {
+            // Lock first, then release, then run the guarded insert as a new READ COMMITTED statement.
+            // Putting the count in the locking SELECT would still let two joins evaluate it against the
+            // same old snapshot. `no key update` serializes late joins without blocking the foreign-key
+            // checks every other insert under this match takes.
+            //
+            // The release comes before the insert because `rejoin` does not take the match lock. Its
+            // update and the release meet on the former player's row: one waits for the other, and a
+            // `rejoin` that commits first leaves a human on the seat for the insert's fresh snapshot to
+            // see. Released after the insert instead, a `rejoin` committed between the two would have
+            // been skipped by the release and missed by the insert, and both players would hold the
+            // seat. A refused insert rolls the release back.
+            try {
+                return await db.transaction(async (tx) => {
+                    const locked = await tx
+                        .select({ id: matches.id })
+                        .from(matches)
+                        .where(and(eq(matches.id, player.matchId), eq(matches.status, 'running')))
+                        .for('no key update');
+                    if (locked.length === 0)
+                        throw LATE_CLAIM_REFUSED;
+                    const released = await tx
+                        .update(players)
+                        .set({ tokenHash: null })
+                        .where(and(eq(players.matchId, player.matchId), eq(players.slot, player.slot), eq(players.status, 'computer'), isNotNull(players.tokenHash)))
+                        .returning({ id: players.id });
+                    const occupied = tx
+                        .select({ id: players.id })
+                        .from(players)
+                        .where(and(eq(players.matchId, player.matchId), eq(players.slot, player.slot), holdsClaim()));
+                    const rows = await tx
+                        .insert(players)
+                        .select(tx
+                        .select(playerValues(player))
+                        .from(matches)
+                        .where(and(eq(matches.id, player.matchId), eq(matches.status, 'running'), notExists(occupied), 
+                    // Capacity in the same statement as the insert; see the SQLite twin.
+                    sql `(select count(*) from ${players} where ${players.matchId} = ${player.matchId} and ${holdsClaim()}) < ${matches.maxPlayers}`)))
+                        .onConflictDoNothing()
+                        .returning({ id: players.id });
+                    if (rows.length !== 1)
+                        throw LATE_CLAIM_REFUSED;
+                    return { released: released.map((row) => row.id) };
+                });
+            }
+            catch (error) {
+                if (error === LATE_CLAIM_REFUSED)
+                    return null;
+                throw error;
+            }
+        },
+        async get(id) {
+            return firstOrNull((await db.select().from(players).where(eq(players.id, id))).map(toPlayer));
+        },
+        async getByTokenHash(tokenHash) {
+            return firstOrNull((await db.select().from(players).where(eq(players.tokenHash, tokenHash))).map(toPlayer));
+        },
+        async listByMatch(matchId) {
+            const rows = await db
+                .select()
+                .from(players)
+                .where(eq(players.matchId, matchId))
+                .orderBy(asc(players.slot), asc(players.joinOrder), asc(players.id));
+            return rows.map(toPlayer);
+        },
+        async listSeats(matchIds) {
+            if (matchIds.length === 0)
+                return [];
+            const rows = await db
+                .select({
+                matchId: players.matchId,
+                slot: players.slot,
+                status: players.status,
+                tokenHash: players.tokenHash,
+            })
+                .from(players)
+                .where(inArray(players.matchId, [...matchIds]));
+            return rows.map((row) => ({
+                matchId: row.matchId,
+                slot: row.slot,
+                computer: row.status === 'computer',
+                vacated: row.status === 'computer' && row.tokenHash === null,
+            }));
+        },
+        async setStatus(playerId, status) {
+            await db.update(players).set({ status }).where(eq(players.id, playerId));
+        },
+        async transitionStatus(playerId, from, status, options) {
+            const rows = await db
+                .update(players)
+                .set({ status })
+                .where(and(eq(players.id, playerId), inArray(players.status, from), options?.holdingToken === true ? isNotNull(players.tokenHash) : undefined))
+                .returning({ id: players.id });
+            return rows.length === 1;
+        },
+        /**
+         * "The match is still in the lobby" is tested by the statement that writes the profile, so an
+         * update racing `start` either lands before the roster is seated or not at all.
+         * The share lock on the match row is what makes that hold under READ COMMITTED: a `start`
+         * racing this either waits for it, or makes it re-read the row and find the match running.
+         */
+        async updateProfile(playerId, profile) {
+            const inLobby = exists(db
+                .select({ one: sql `1` })
+                .from(matches)
+                .where(and(eq(matches.id, players.matchId), eq(matches.status, 'lobby')))
+                .for('share'));
+            const rows = await db
+                .update(players)
+                .set({ displayName: profile.displayName, portraitId: profile.portraitId })
+                .where(and(eq(players.id, playerId), eq(players.status, 'active'), inLobby))
+                .returning({ id: players.id });
+            return rows.length === 1;
+        },
+        async revokeToken(playerId) {
+            await db.update(players).set({ tokenHash: null }).where(eq(players.id, playerId));
+        },
+        async assignSlots(assignments) {
+            if (assignments.length === 0)
+                return;
+            // One statement: a CASE that maps each id to its slot. A loop of updates could commit some
+            // seats and not others, and the transition that made the roster final has already landed.
+            const cases = assignments.map(({ playerId, slot }) => sql `when ${players.id} = ${playerId} then ${slot}`);
+            await db
+                .update(players)
+                .set({ slot: sql `case ${sql.join(cases, sql ` `)} else ${players.slot} end` })
+                .where(inArray(players.id, assignments.map(({ playerId }) => playerId)));
+        },
+        async delete(playerId) {
+            const rows = await db
+                .delete(players)
+                .where(eq(players.id, playerId))
+                .returning({ id: players.id });
+            return rows.length === 1;
+        },
+    };
+}
+//# sourceMappingURL=players.js.map

package/dist/postgres/players.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"players.js","sourceRoot":"","sources":["../../src/postgres/players.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAEzD,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAElC,4EAA4E;AAE5E,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;AAE/D;;;GAGG;AACH,SAAS,UAAU;IACjB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAC1B,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO;QACL,EAAE,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC;QAC9C,IAAI,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC;QACpC,SAAS,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC;QACpD,WAAW,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC;QAC1D,UAAU,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC;QACvD,SAAS,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC;QACpD,MAAM,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC;KAClD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAoB;IAC3D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IACnC,OAAO;QACL;;;;WAIG;QACH,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,MAAM,CACL,EAAE;iBACC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;iBAC5B,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;iBACvE,GAAG,CAAC,OAAO,CAAC,CAChB;iBACA,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAChC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,MAAM;YACrB,2FAA2F;YAC3F,4FAA4F;YAC5F,4FAA4F;YAC5F,oDAAoD;YACpD,EAAE;YACF,yFAAyF;YACzF,yFAAyF;YACzF,4FAA4F;YAC5F,0FAA0F;YAC1F,wFAAwF;YACxF,iDAAiD;YACjD,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBACvC,MAAM,MAAM,GAAG,MAAM,EAAE;yBACpB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;yBAC1B,IAAI,CAAC,OAAO,CAAC;yBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;yBACzE,GAAG,CAAC,eAAe,CAAC,CAAA;oBACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,kBAAkB,CAAA;oBACjD,MAAM,QAAQ,GAAG,MAAM,EAAE;yBACtB,MAAM,CAAC,OAAO,CAAC;yBACf,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;yBACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EACnC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAC7B,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,EAC9B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAC7B,CACF;yBACA,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;oBAChC,MAAM,QAAQ,GAAG,EAAE;yBAChB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;yBAC1B,IAAI,CAAC,OAAO,CAAC;yBACb,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CACtF,CAAA;oBACH,MAAM,IAAI,GAAG,MAAM,EAAE;yBAClB,MAAM,CAAC,OAAO,CAAC;yBACf,MAAM,CACL,EAAE;yBACC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;yBAC5B,IAAI,CAAC,OAAO,CAAC;yBACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAC9B,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAC7B,SAAS,CAAC,QAAQ,CAAC;oBACnB,qEAAqE;oBACrE,GAAG,CAAA,yBAAyB,OAAO,UAAU,OAAO,CAAC,OAAO,MAAM,MAAM,CAAC,OAAO,QAAQ,UAAU,EAAE,OAAO,OAAO,CAAC,UAAU,EAAE,CAChI,CACF,CACJ;yBACA,mBAAmB,EAAE;yBACrB,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;oBAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,kBAAkB,CAAA;oBAC/C,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAA;gBACpD,CAAC,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,KAAK,kBAAkB;oBAAE,OAAO,IAAI,CAAA;gBAC7C,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,OAAO,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/F,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,SAAS;YAC5B,OAAO,WAAW,CAChB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CACxF,CAAA;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,OAAO;YACvB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;iBACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YACtE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,QAAQ;YACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACpC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC;gBACN,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;iBACD,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,UAAU;gBACnC,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;aAC7D,CAAC,CAAC,CAAA;QACL,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM;YAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC1E,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO;YACpD,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;iBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EACxB,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAC7B,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1E,CACF;iBACA,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAChC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA;QAC1B,CAAC;QACD;;;;;WAKG;QACH,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO;YACnC,MAAM,OAAO,GAAG,MAAM,CACpB,EAAE;iBACC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAA,GAAG,EAAE,CAAC;iBACvB,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;iBACxE,GAAG,CAAC,OAAO,CAAC,CAChB,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;iBACzE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;iBAC3E,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAChC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,QAAQ;YACxB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnF,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,WAAW;YAC3B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YACpC,2FAA2F;YAC3F,0FAA0F;YAC1F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAC3B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAA,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,SAAS,IAAI,EAAE,CAC3E,CAAA;YACD,MAAM,EAAE;iBACL,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAA,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAA,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;iBAC5E,KAAK,CACJ,OAAO,CACL,OAAO,CAAC,EAAE,EACV,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAC5C,CACF,CAAA;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;iBAC/B,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YAChC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/postgres/rateLimits.d.ts

@@ -0,0 +1,19 @@
+import type { RateLimitStore } from '@chaos-overlords/kernel';
+import type { PostgresDatabase } from './database';
+/** A {@link RateLimitStore} that can also delete the windows that have rolled. */
+export interface SweepableRateLimitStore extends RateLimitStore {
+    /** Deletes up to `limit` windows that rolled at or before `now`; returns how many went. */
+    sweep(now: number, limit?: number): Promise<number>;
+}
+/**
+ * Rate limit windows in a Postgres table, so every Node instance on one database spends the same
+ * budgets.
+ *
+ * `consume` is one `INSERT … ON CONFLICT DO UPDATE`: Postgres locks the conflicting row for the
+ * update, so concurrent calls from any number of instances are counted one after another, and the
+ * decision comes back in the same round trip. Every expression in the `SET` list reads the row as it
+ * was before the statement, which is what lets `allowed` record whether this call found room. The
+ * rules are the kernel's `consumeWindow`, written in SQL.
+ */
+export declare function postgresRateLimitStore(db: PostgresDatabase): SweepableRateLimitStore;
+//# sourceMappingURL=rateLimits.d.ts.map

package/dist/postgres/rateLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimits.d.ts","sourceRoot":"","sources":["../../src/postgres/rateLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,cAAc,EAAmB,MAAM,yBAAyB,CAAA;AAE/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGlD,kFAAkF;AAClF,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,2FAA2F;IAC3F,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACpD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,gBAAgB,GAAG,uBAAuB,CA6DpF"}

package/dist/postgres/rateLimits.js

@@ -0,0 +1,73 @@
+import { and, eq, gt, inArray, lte, sql } from 'drizzle-orm';
+import { rateLimitWindows } from './schema';
+/**
+ * Rate limit windows in a Postgres table, so every Node instance on one database spends the same
+ * budgets.
+ *
+ * `consume` is one `INSERT … ON CONFLICT DO UPDATE`: Postgres locks the conflicting row for the
+ * update, so concurrent calls from any number of instances are counted one after another, and the
+ * decision comes back in the same round trip. Every expression in the `SET` list reads the row as it
+ * was before the statement, which is what lets `allowed` record whether this call found room. The
+ * rules are the kernel's `consumeWindow`, written in SQL.
+ */
+export function postgresRateLimitStore(db) {
+    const t = rateLimitWindows;
+    return {
+        async consume(key, policy, now) {
+            const rolled = sql `${t.resetAt} <= ${now}`;
+            const rows = await db
+                .insert(t)
+                .values({ key, windowStart: now, resetAt: now + policy.windowMs, count: 1, allowed: true })
+                .onConflictDoUpdate({
+                target: t.key,
+                set: {
+                    allowed: sql `(${rolled} or ${t.count} < ${policy.limit})`,
+                    windowStart: sql `case when ${rolled} then ${now} else ${t.windowStart} end`,
+                    resetAt: sql `case when ${rolled} then ${now + policy.windowMs} else ${t.resetAt} end`,
+                    count: sql `case when ${rolled} then 1 when ${t.count} < ${policy.limit} then ${t.count} + 1 else ${t.count} end`,
+                },
+            })
+                .returning({
+                allowed: t.allowed,
+                count: t.count,
+                windowStart: t.windowStart,
+                resetAt: t.resetAt,
+            });
+            const row = rows[0];
+            if (!row)
+                throw new Error('rate limit upsert returned no row');
+            return row;
+        },
+        async inspect(key, now) {
+            const rows = await db
+                .select({ count: t.count, resetAt: t.resetAt })
+                .from(t)
+                .where(and(eq(t.key, key), gt(t.resetAt, now)));
+            return rows[0] ?? null;
+        },
+        async refund(key, windowStart) {
+            await db
+                .update(t)
+                .set({ count: sql `${t.count} - 1` })
+                .where(and(eq(t.key, key), eq(t.windowStart, windowStart), gt(t.count, 0)));
+        },
+        /**
+         * Batched, so a sweep after a flood of distinct addresses is many short statements rather than
+         * one that holds row locks every `consume` is waiting on.
+         */
+        async sweep(now, limit = 1000) {
+            const doomed = db
+                .select({ key: t.key })
+                .from(t)
+                .where(lte(t.resetAt, now))
+                .orderBy(t.resetAt)
+                .limit(limit);
+            const deleted = await db
+                .delete(t)
+                .where(and(inArray(t.key, doomed), lte(t.resetAt, now)))
+                .returning({ key: t.key });
+            return deleted.length;
+        },
+    };
+}
+//# sourceMappingURL=rateLimits.js.map

package/dist/postgres/rateLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimits.js","sourceRoot":"","sources":["../../src/postgres/rateLimits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAQ3C;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAoB;IACzD,MAAM,CAAC,GAAG,gBAAgB,CAAA;IAC1B,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAAuB,EAAE,GAAW;YAC7D,MAAM,MAAM,GAAG,GAAG,CAAA,GAAG,CAAC,CAAC,OAAO,OAAO,GAAG,EAAE,CAAA;YAC1C,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,CAAC,CAAC;iBACT,MAAM,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;iBAC1F,kBAAkB,CAAC;gBAClB,MAAM,EAAE,CAAC,CAAC,GAAG;gBACb,GAAG,EAAE;oBACH,OAAO,EAAE,GAAG,CAAA,IAAI,MAAM,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,GAAG;oBACzD,WAAW,EAAE,GAAG,CAAA,aAAa,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,WAAW,MAAM;oBAC3E,OAAO,EAAE,GAAG,CAAA,aAAa,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC,OAAO,MAAM;oBACrF,KAAK,EAAE,GAAG,CAAA,aAAa,MAAM,gBAAgB,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,KAAK,MAAM;iBACjH;aACF,CAAC;iBACD,SAAS,CAAC;gBACT,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAA;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACnB,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YAC9D,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,GAAW;YACpC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC9C,IAAI,CAAC,CAAC,CAAC;iBACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACjD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QACxB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,WAAmB;YAC3C,MAAM,EAAE;iBACL,MAAM,CAAC,CAAC,CAAC;iBACT,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAA,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;iBACnC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/E,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,KAAK,GAAG,IAAI;YACnC,MAAM,MAAM,GAAG,EAAE;iBACd,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;iBACtB,IAAI,CAAC,CAAC,CAAC;iBACP,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;iBAC1B,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;iBAClB,KAAK,CAAC,KAAK,CAAC,CAAA;YACf,MAAM,OAAO,GAAG,MAAM,EAAE;iBACrB,MAAM,CAAC,CAAC,CAAC;iBACT,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;iBACvD,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;YAC5B,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/postgres/repositories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repositories.d.ts","sourceRoot":"","sources":["../../src/postgres/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,kBAAkB,EAMnB,MAAM,yBAAyB,CAAA;AAiChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAKlD;;;;GAIG;AACH,YAAY,EAAE,gBAAgB,EAAE,CAAA;AAEhC,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,kBAAkB,CAS9E"}
+{"version":3,"file":"repositories.d.ts","sourceRoot":"","sources":["../../src/postgres/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,kBAAkB,EAInB,MAAM,yBAAyB,CAAA;AAgChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAMlD;;;;GAIG;AACH,YAAY,EAAE,gBAAgB,EAAE,CAAA;AAEhC,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,kBAAkB,CAS9E"}

package/dist/postgres/repositories.js

@@ -1,7 +1,8 @@
 import { and, asc, desc, eq, exists, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, or, sql, } from 'drizzle-orm';
 import { insertUnlessTaken } from '../shared/constraints';
-import { firstOrNull, toMatch, toMatchInsert, toPlayer, toPublicLobbyRow, toSnapshot, toSnapshotSummary, toTurn, toTurnOrders, toTurnReport, } from '../shared/mappers';
+import { firstOrNull, toMatch, toMatchInsert, toPublicLobbyRow, toSnapshot, toSnapshotSummary, toTurn, toTurnOrders, toTurnReport, } from '../shared/mappers';
 import { postgresEventRepository } from './events';
+import { postgresPlayerRepository } from './players';
 import * as schema from './schema';
 import { postgresTakeoverRepository } from './takeovers';
 export function createPostgresStorage(db) {
@@ -179,152 +180,6 @@ function postgresMatchRepository(db) {
         },
     };
 }
-/**
- * The select list `create` and `createLate` feed their insert from: the player's own values, each
- * under the column name it is inserted as.
- *
- * The list is written out, which means it does NOT get Drizzle's column mapping: a column added to
- * `players` later has to be added here too, in the storage form the column expects. The
- * conformance suite compares a created player against its fixture field by field, so a dropped
- * column fails there rather than going unnoticed.
- */
-function playerValues(player) {
-    return {
-        id: sql `${player.id}`.as('id'),
-        matchId: sql `${player.matchId}`.as('match_id'),
-        slot: sql `${player.slot}`.as('slot'),
-        joinOrder: sql `${player.joinOrder}`.as('join_order'),
-        displayName: sql `${player.displayName}`.as('display_name'),
-        portraitId: sql `${player.portraitId}`.as('portrait_id'),
-        tokenHash: sql `${player.tokenHash}`.as('token_hash'),
-        status: sql `${player.status}`.as('status'),
-        joinedAt: sql `${player.joinedAt}`.as('joined_at'),
-    };
-}
-function postgresPlayerRepository(db) {
-    const { matches, players } = schema;
-    return {
-        /**
-         * An insert fed by a select over the match row, so "the match is still in the lobby" is tested
-         * by the same statement that writes the player. A row lock makes this guard hold through the
-         * insert under READ COMMITTED, including when the match starts concurrently.
-         */
-        async create(player) {
-            const rows = await db
-                .insert(players)
-                .select(db
-                .select(playerValues(player))
-                .from(matches)
-                .where(and(eq(matches.id, player.matchId), eq(matches.status, 'lobby')))
-                .for('share'))
-                .returning({ id: players.id });
-            return rows.length === 1;
-        },
-        async createLate(player) {
-            // Lock first, then run the guarded insert as a new READ COMMITTED statement. Putting the
-            // count in the locking SELECT would still let two joins evaluate it against the same old
-            // snapshot. `no key update` serializes late joins without blocking the foreign-key checks
-            // every other insert under this match takes.
-            return db.transaction(async (tx) => {
-                const locked = await tx
-                    .select({ id: matches.id })
-                    .from(matches)
-                    .where(and(eq(matches.id, player.matchId), eq(matches.status, 'running')))
-                    .for('no key update');
-                if (locked.length === 0)
-                    return false;
-                const occupied = tx
-                    .select({ id: players.id })
-                    .from(players)
-                    .where(and(eq(players.matchId, player.matchId), eq(players.slot, player.slot)));
-                const rows = await tx
-                    .insert(players)
-                    .select(tx
-                    .select(playerValues(player))
-                    .from(matches)
-                    .where(and(eq(matches.id, player.matchId), eq(matches.status, 'running'), notExists(occupied), 
-                // Capacity in the same statement as the insert; see the SQLite twin.
-                sql `(select count(*) from ${players} where ${players.matchId} = ${player.matchId}) < ${matches.maxPlayers}`)))
-                    .onConflictDoNothing()
-                    .returning({ id: players.id });
-                return rows.length === 1;
-            });
-        },
-        async get(id) {
-            return firstOrNull((await db.select().from(players).where(eq(players.id, id))).map(toPlayer));
-        },
-        async getByTokenHash(tokenHash) {
-            return firstOrNull((await db.select().from(players).where(eq(players.tokenHash, tokenHash))).map(toPlayer));
-        },
-        async listByMatch(matchId) {
-            const rows = await db
-                .select()
-                .from(players)
-                .where(eq(players.matchId, matchId))
-                .orderBy(asc(players.slot), asc(players.joinOrder), asc(players.id));
-            return rows.map(toPlayer);
-        },
-        async listSeats(matchIds) {
-            if (matchIds.length === 0)
-                return [];
-            return db
-                .select({ matchId: players.matchId, slot: players.slot })
-                .from(players)
-                .where(inArray(players.matchId, [...matchIds]));
-        },
-        async setStatus(playerId, status) {
-            await db.update(players).set({ status }).where(eq(players.id, playerId));
-        },
-        async transitionStatus(playerId, from, status) {
-            const rows = await db
-                .update(players)
-                .set({ status })
-                .where(and(eq(players.id, playerId), inArray(players.status, from)))
-                .returning({ id: players.id });
-            return rows.length === 1;
-        },
-        /**
-         * "The match is still in the lobby" is tested by the statement that writes the profile, so an
-         * update racing `start` either lands before the roster is seated or not at all.
-         * The share lock on the match row is what makes that hold under READ COMMITTED: a `start`
-         * racing this either waits for it, or makes it re-read the row and find the match running.
-         */
-        async updateProfile(playerId, profile) {
-            const inLobby = exists(db
-                .select({ one: sql `1` })
-                .from(matches)
-                .where(and(eq(matches.id, players.matchId), eq(matches.status, 'lobby')))
-                .for('share'));
-            const rows = await db
-                .update(players)
-                .set({ displayName: profile.displayName, portraitId: profile.portraitId })
-                .where(and(eq(players.id, playerId), eq(players.status, 'active'), inLobby))
-                .returning({ id: players.id });
-            return rows.length === 1;
-        },
-        async revokeToken(playerId) {
-            await db.update(players).set({ tokenHash: null }).where(eq(players.id, playerId));
-        },
-        async assignSlots(assignments) {
-            if (assignments.length === 0)
-                return;
-            // One statement: a CASE that maps each id to its slot. A loop of updates could commit some
-            // seats and not others, and the transition that made the roster final has already landed.
-            const cases = assignments.map(({ playerId, slot }) => sql `when ${players.id} = ${playerId} then ${slot}`);
-            await db
-                .update(players)
-                .set({ slot: sql `case ${sql.join(cases, sql ` `)} else ${players.slot} end` })
-                .where(inArray(players.id, assignments.map(({ playerId }) => playerId)));
-        },
-        async delete(playerId) {
-            const rows = await db
-                .delete(players)
-                .where(eq(players.id, playerId))
-                .returning({ id: players.id });
-            return rows.length === 1;
-        },
-    };
-}
 /** The orders half of the turn repository; see the SQLite twin. */
 function postgresTurnOrderMethods(db) {
     const { turns, turnOrders } = schema;