@lovrozagar/oat 0.1.0

package/dist/reference/store-api.js

@@ -0,0 +1,76 @@
+/**
+ * Storage contract shared by the reference backends.
+ *
+ * One HTTP server implementation runs against every store, so a defect is defined once and
+ * exercised on each engine. Where two engines disagree about what a defect *does*, that is
+ * itself the finding — SQLite and Postgres differ on NULL ordering, type discipline, collation
+ * and case-insensitive matching, and those are exactly the semantics oat's checks reason about.
+ *
+ * Async throughout, because a real database is: SQLite implementations resolve immediately.
+ */
+/** Raised for input the storage layer rejects — surfaces as 400, or 500 under the defect. */
+export class SqlError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+export function encodeCursor(id) {
+    return Buffer.from(JSON.stringify({ id }), "utf8").toString("base64url");
+}
+export function decodeCursor(cursor) {
+    try {
+        const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+        if (typeof parsed.id !== "string")
+            throw new Error("missing id");
+        return parsed.id;
+    }
+    catch {
+        throw new SqlError("invalid_cursor", "cursor is not a value produced by this API");
+    }
+}
+/** Splits on commas at paren depth zero — shared by the filter and order grammars. */
+export function splitTopLevel(input) {
+    const parts = [];
+    let depth = 0;
+    let start = 0;
+    for (let i = 0; i < input.length; i++) {
+        const ch = input[i];
+        if (ch === "(")
+            depth++;
+        else if (ch === ")")
+            depth--;
+        else if (ch === "," && depth === 0) {
+            parts.push(input.slice(start, i));
+            start = i + 1;
+        }
+    }
+    parts.push(input.slice(start));
+    return parts.map((p) => p.trim()).filter((p) => p.length > 0);
+}
+export function stripParens(value) {
+    return value.startsWith("(") && value.endsWith(")") ? value.slice(1, -1) : value;
+}
+export function project(row, select, ignore, 
+/* Fields the document still declares selectable that the backend has stopped honouring — see
+ * SPEC_OVERCLAIMS_SELECTABLE. Everything else stays as permissive as before: an unrecognised
+ * field is silently dropped, never rejected. */
+excluded = []) {
+    if (select === undefined || select === "" || select === "*")
+        return { ...row };
+    if (ignore)
+        return { ...row };
+    const fields = select.split(",").map((s) => s.trim()).filter(Boolean);
+    const rejected = fields.find((f) => excluded.includes(f));
+    if (rejected !== undefined) {
+        throw new SqlError("invalid_select", `field "${rejected}" is not selectable`);
+    }
+    const out = {};
+    for (const field of fields) {
+        if (Object.hasOwn(row, field))
+            out[field] = row[field];
+    }
+    return out;
+}
+//# sourceMappingURL=store-api.js.map

package/dist/reference/store-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-api.js","sourceRoot":"","sources":["../../src/reference/store-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkDH,6FAA6F;AAC7F,MAAM,OAAO,QAAS,SAAQ,KAAK;IAExB;IADV,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,SAAI,GAAJ,IAAI,CAAQ;IAItB,CAAC;CACD;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IAC1C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoB,CAAA;QAC/F,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;QAChE,OAAO,MAAM,CAAC,EAAE,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,4CAA4C,CAAC,CAAA;IACnF,CAAC;AACF,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;aAClB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;aACvB,IAAI,EAAE,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;YACjC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;IACF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACjF,CAAC;AAED,MAAM,UAAU,OAAO,CACtB,GAAQ,EACR,MAA0B,EAC1B,MAAe;AACf;;gDAEgD;AAChD,WAA8B,EAAE;IAEhC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAA;IAC9E,IAAI,MAAM;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,UAAU,QAAQ,qBAAqB,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,GAAG,GAAQ,EAAE,CAAA;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/reference/stores/memory.d.ts

@@ -0,0 +1,27 @@
+/**
+ * In-memory storage for the reference backend.
+ *
+ * The zero-dependency fallback: no database, no flags, no server to have running. It executes the
+ * query grammar in JavaScript, which is exactly why the SQL stores exist alongside it — a JS
+ * store cannot exhibit NULL ordering, collation, or type-discipline behaviour, so a check that
+ * only ever runs here has not been proven against anything a real backend does.
+ */
+import type { DefectSet } from "../defects.ts";
+import type { EntityDef } from "../model.ts";
+import type { QueryOptions, QueryParams, QueryResult, Row, Store } from "../store-api.ts";
+export declare class MemoryStore implements Store {
+    private readonly defects;
+    private readonly tables;
+    private sequence;
+    constructor(defects: DefectSet);
+    close(): Promise<void>;
+    private collection;
+    nextId(prefix: string): string;
+    now(): number;
+    insert(entity: EntityDef, record: Row): Promise<Row>;
+    byId(entity: EntityDef, id: string): Promise<Row | null>;
+    update(entity: EntityDef, id: string, patch: Row): Promise<Row | null>;
+    remove(entity: EntityDef, id: string): Promise<void>;
+    query(entity: EntityDef, scope: Record<string, string>, params: QueryParams, options: QueryOptions): Promise<QueryResult>;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/reference/stores/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/reference/stores/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAG5C,OAAO,KAAK,EACX,YAAY,EACZ,WAAW,EACX,WAAW,EACX,GAAG,EACH,KAAK,EACL,MAAM,iBAAiB,CAAA;AAExB,qBAAa,WAAY,YAAW,KAAK;IAI5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAI;gBAES,OAAO,EAAE,SAAS;IAEzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,CAAC,UAAU;IAQlB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAK9B,GAAG,IAAI,MAAM;IAMP,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAMpD,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAKxD,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAQtE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,KAAK,CACV,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,WAAW,CAAC;CA4CvB"}

package/dist/reference/stores/memory.js

@@ -0,0 +1,97 @@
+/**
+ * In-memory storage for the reference backend.
+ *
+ * The zero-dependency fallback: no database, no flags, no server to have running. It executes the
+ * query grammar in JavaScript, which is exactly why the SQL stores exist alongside it — a JS
+ * store cannot exhibit NULL ordering, collation, or type-discipline behaviour, so a check that
+ * only ever runs here has not been proven against anything a real backend does.
+ */
+import { OVERCLAIMED_FIELD, fieldsWhere } from "../model.js";
+import { runQuery } from "../query.js";
+export class MemoryStore {
+    defects;
+    tables = new Map();
+    sequence = 0;
+    constructor(defects) {
+        this.defects = defects;
+    }
+    async close() {
+        this.tables.clear();
+    }
+    collection(entity) {
+        const existing = this.tables.get(entity.name);
+        if (existing !== undefined)
+            return existing;
+        const created = new Map();
+        this.tables.set(entity.name, created);
+        return created;
+    }
+    nextId(prefix) {
+        this.sequence += 1;
+        return `${prefix}_${String(this.sequence).padStart(6, "0")}`;
+    }
+    now() {
+        /* Derived from the sequence rather than the clock: wall-clock timestamps make ordering
+         * assertions flaky for reasons that have nothing to do with the backend. */
+        return 1_700_000_000_000 + this.sequence * 1000;
+    }
+    async insert(entity, record) {
+        const stored = { ...record };
+        this.collection(entity).set(String(record[entity.identity]), stored);
+        return { ...stored };
+    }
+    async byId(entity, id) {
+        const found = this.collection(entity).get(id);
+        return found === undefined ? null : { ...found };
+    }
+    async update(entity, id, patch) {
+        const existing = this.collection(entity).get(id);
+        if (existing === undefined)
+            return null;
+        const next = { ...existing, ...patch };
+        this.collection(entity).set(id, next);
+        return { ...next };
+    }
+    async remove(entity, id) {
+        this.collection(entity).delete(id);
+    }
+    async query(entity, scope, params, options) {
+        /* Ancestor scoping — `.../tables/{table_id}/rows` lists that table only. The defect keeps
+         * scoping on the plain listing but drops it once a filter is present, which is how a
+         * filter turns into an authorization bypass. */
+        const scoped = !(this.defects.has("TENANT_LEAK_VIA_FILTER") && params.filter !== undefined);
+        let source = [...this.collection(entity).values()];
+        for (const parent of scoped ? entity.parents : []) {
+            const value = scope[parent];
+            if (value === undefined)
+                continue;
+            if (!entity.fields.some((f) => f.name === parent))
+                continue;
+            source = source.filter((row) => String(row[parent]) === value);
+        }
+        const result = runQuery(source, params, {
+            defaultLimit: entity.defaultLimit,
+            /* Under the overclaim defect the backend refuses a field the document still declares
+             * filterable. The backend is not wrong to refuse — the document is wrong to promise. */
+            filterable: this.defects.has("SPEC_OVERCLAIMS_FILTERABLE")
+                ? fieldsWhere(entity, "filterable").filter((f) => f !== OVERCLAIMED_FIELD)
+                : fieldsWhere(entity, "filterable"),
+            /* Same overclaim shape, applied to the select role: the document still lists the field,
+             * the backend now refuses to project it. */
+            excludedSelect: this.defects.has("SPEC_OVERCLAIMS_SELECTABLE") ? [OVERCLAIMED_FIELD] : [],
+            identity: entity.identity,
+            maxLimit: entity.maxLimit,
+            searchable: fieldsWhere(entity, "searchable"),
+            /* Same overclaim shape as filterable, one role over: the document still promises the
+             * field can be sorted by; the backend refuses it. */
+            sortable: this.defects.has("SPEC_OVERCLAIMS_SORTABLE")
+                ? fieldsWhere(entity, "sortable").filter((f) => f !== OVERCLAIMED_FIELD)
+                : fieldsWhere(entity, "sortable"),
+            ...(options.softDeleteField === undefined
+                ? {}
+                : { softDeleteField: options.softDeleteField }),
+        }, this.defects, options.transform);
+        return result;
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/reference/stores/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/reference/stores/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAwB,MAAM,aAAa,CAAA;AAS5D,MAAM,OAAO,WAAW;IAIM;IAHZ,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;IACrD,QAAQ,GAAG,CAAC,CAAA;IAEpB,YAA6B,OAAkB;QAAlB,YAAO,GAAP,OAAO,CAAW;IAAG,CAAC;IAEnD,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAEO,UAAU,CAAC,MAAiB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;QACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACrC,OAAO,OAAO,CAAA;IACf,CAAC;IAED,MAAM,CAAC,MAAc;QACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;QAClB,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7D,CAAC;IAED,GAAG;QACF;oFAC4E;QAC5E,OAAO,iBAAiB,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAiB,EAAE,MAAW;QAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;QAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACpE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAiB,EAAE,EAAU;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAiB,EAAE,EAAU,EAAE,KAAU;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACvC,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAA;QACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACrC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAiB,EAAE,EAAU;QACzC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,KAAK,CACV,MAAiB,EACjB,KAA6B,EAC7B,MAAmB,EACnB,OAAqB;QAErB;;wDAEgD;QAChD,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;QAC3F,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAClD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAQ;YACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;gBAAE,SAAQ;YAC3D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CACtB,MAAoB,EACpB,MAAM,EACN;YACC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC;oGACwF;YACxF,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBACzD,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,CAAC;gBAC1E,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC;YACpC;wDAC4C;YAC5C,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;YACzF,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC;YAC7C;iEACqD;YACrD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;gBACrD,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,CAAC;gBACxE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;SAChD,EACD,IAAI,CAAC,OAAO,EACZ,OAAO,CAAC,SAAS,CACjB,CAAA;QAED,OAAO,MAAM,CAAA;IACd,CAAC;CACD"}

package/dist/reference/stores/postgres.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Postgres-backed storage for the reference backend.
+ *
+ * Present because Postgres disagrees with SQLite in exactly the places API contracts are
+ * ambiguous, which makes the pair a differential oracle rather than a redundant one:
+ *
+ *   - `ORDER BY x ASC` puts NULLs **last**; SQLite puts them first.
+ *   - Types are enforced, so bad input is rejected rather than silently coerced.
+ *   - Collation is locale-aware, so ordering of unicode and mixed case is a real decision.
+ *   - `LIKE` is case-sensitive and `ILIKE` genuinely differs — on SQLite the two are
+ *     indistinguishable for ASCII, which makes an ilike check structurally untestable there.
+ *
+ * Each server instance gets its own scratch database, dropped on close, so runs never collide.
+ */
+import type { DefectSet } from "../defects.ts";
+import { type EntityDef } from "../model.ts";
+import { type QueryOptions, type QueryParams, type QueryResult, type Row, type Store } from "../store-api.ts";
+export declare class PgStore implements Store {
+    private readonly sql;
+    private readonly admin;
+    private readonly dbName;
+    private readonly defects;
+    private sequence;
+    private constructor();
+    static create(defects: DefectSet): Promise<PgStore>;
+    close(): Promise<void>;
+    private migrate;
+    /** The stored column for a field — diverges from the declared name only under the defect. */
+    private physical;
+    /**
+     * Explicit projection, aliased back to declared names.
+     *
+     * Under COLUMN_NAME_MISMATCH the read asks for a column that does not exist. Postgres errors
+     * outright where SQLite's double-quoted-string fallback silently yields the identifier as a
+     * literal — the same defect, two failure modes, which is the point of running both.
+     */
+    private selectList;
+    nextId(prefix: string): string;
+    now(): number;
+    insert(entity: EntityDef, record: Row): Promise<Row>;
+    byId(entity: EntityDef, id: string): Promise<Row | null>;
+    update(entity: EntityDef, id: string, patch: Row): Promise<Row | null>;
+    /**
+     * Reads the row, yields, then writes every column back — the `save(entity)` pattern.
+     *
+     * Under concurrency the second writer reinstates whatever it read before the first writer
+     * committed, so a patch to a different field is silently reverted. The yield is what makes
+     * the window observable rather than dependent on scheduler luck.
+     */
+    private readModifyWrite;
+    remove(entity: EntityDef, id: string): Promise<void>;
+    /**
+     * Restores declared shapes. `bigint` arrives as a string from the wire protocol and would
+     * fail its own response schema, and a NULL column must read back as null rather than absent.
+     */
+    private decode;
+    query(entity: EntityDef, scope: Record<string, string>, params: QueryParams, options: QueryOptions): Promise<QueryResult>;
+    private compileFilter;
+    private compileOrder;
+}
+//# sourceMappingURL=postgres.d.ts.map

package/dist/reference/stores/postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../../src/reference/stores/postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAY,KAAK,SAAS,EAAiD,MAAM,aAAa,CAAA;AACrG,OAAO,EAIN,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,GAAG,EAIR,KAAK,KAAK,EACV,MAAM,iBAAiB,CAAA;AAkBxB,qBAAa,OAAQ,YAAW,KAAK;IAInC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IANzB,OAAO,CAAC,QAAQ,CAAI;IAEpB,OAAO;WAOM,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAUnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAWd,OAAO;IAoBrB,6FAA6F;IAC7F,OAAO,CAAC,QAAQ;IAIhB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAWlB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAK9B,GAAG,IAAI,MAAM;IAIP,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAWpD,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IASxD,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAa5E;;;;;;OAMG;YACW,eAAe;IAcvB,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1D;;;OAGG;IACH,OAAO,CAAC,MAAM;IAoBR,KAAK,CACV,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,WAAW,CAAC;IAwHvB,OAAO,CAAC,aAAa;IAyFrB,OAAO,CAAC,YAAY;CA8CpB"}