pipework 0.8.2 → 0.8.4

package/dist/data/write/audit/primary-key.js

@@ -0,0 +1,32 @@
+// Primary-key resolution for the audit CTE generator. The UPDATE / DELETE /
+// UPSERT verbs need a key to join the `before` snapshot with the post-image
+// (`updated` / `deleted` / `upserted`) so the audit row pairs the right
+// pre/post pair per affected db row. We honor the two ways a `pipe.define()`
+// table declares its key: composite via the `primaryKey` option, or single
+// via a field-level `.primaryKey()`.
+/**
+ * Returns the primary-key field keys in declaration order. Throws when the
+ * table declares no primary key — the audit CTE needs one to pair rows.
+ */
+export function primaryKeyFieldKeys(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any -- DefinedTable's field generics erase at this boundary; we only read $fields and $options
+table) {
+    const composite = table.$options.primaryKey;
+    if (composite !== undefined && composite.length > 0)
+        return composite;
+    const fields = table.$fields;
+    const single = [];
+    for (const [key, descriptor] of Object.entries(fields)) {
+        if (descriptor._meta.primaryKey)
+            single.push(key);
+    }
+    if (single.length === 0) {
+        throw new Error(`[pipework] Cannot emit audit CTE for "${table.$name}": ` +
+            `the table declares no primary key.\n\n` +
+            `  An audit-emitting write needs a primary key so the pre-image\n` +
+            `  and post-image rows can be paired. Add .primaryKey() to a field\n` +
+            `  or pass { primaryKey: ['col1', 'col2'] } to the table options.\n`);
+    }
+    return single;
+}
+//# sourceMappingURL=primary-key.js.map

package/dist/data/write/audit/primary-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primary-key.js","sourceRoot":"","sources":["../../../../src/data/write/audit/primary-key.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,qCAAqC;AAIrC;;;GAGG;AACH,MAAM,UAAU,mBAAmB;AACjC,yJAAyJ;AACzJ,KAAwB;IAExB,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAA;IAC3C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAsB,CAAA;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,KAAK,KAAK;YACzD,wCAAwC;YACxC,kEAAkE;YAClE,qEAAqE;YACrE,oEAAoE,CACrE,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/data/write/audit/projection.d.ts

@@ -0,0 +1,11 @@
+import type { SQL } from '../../db/types.js';
+import type { DefinedTable } from '../../domain/types.js';
+/**
+ * `jsonb_build_object('field', "source"."column", ...)` over each trace-safe
+ * field, qualified by `sourceAlias` (the CTE name the column resolves through:
+ * `before` for the pre-image, `updated` / `deleted` / `inserted` / `upserted`
+ * for the post-image). Returns `null` when the table has no trace-safe fields
+ * — the caller substitutes `NULL::jsonb`.
+ */
+export declare function buildTraceSafeProjection(table: DefinedTable<any>, sourceAlias: string): SQL | null;
+//# sourceMappingURL=projection.d.ts.map

package/dist/data/write/audit/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/projection.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAA;AAEtE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAEtC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EACxB,WAAW,EAAE,MAAM,GAClB,GAAG,GAAG,IAAI,CAUZ"}

package/dist/data/write/audit/projection.js

@@ -0,0 +1,37 @@
+// Server-side `.traceSafe()` projection. Builds a `jsonb_build_object(...)`
+// fragment from the table's `traceSafeKeys` so the audit row's `before` /
+// `after` columns are populated entirely inside the SQL — never by a
+// round-trip to the runtime. The projection is fail-closed: only fields
+// explicitly marked `.traceSafe()` participate; a new field is never
+// audited by accident.
+//
+// `null` is returned when the table has no trace-safe fields. The verb
+// composers turn that into `NULL::jsonb` in the audit row, so a write
+// against an unprojectable table still emits an audit row — just with
+// empty before/after halves.
+import { sql } from '../../db/sql.js';
+import { quoteIdentifier } from '../../db/identifiers.js';
+import { camelToSnake } from '../../domain/naming.js';
+import { traceSafeKeys } from '../../domain/trace-safe-projection.js';
+/**
+ * `jsonb_build_object('field', "source"."column", ...)` over each trace-safe
+ * field, qualified by `sourceAlias` (the CTE name the column resolves through:
+ * `before` for the pre-image, `updated` / `deleted` / `inserted` / `upserted`
+ * for the post-image). Returns `null` when the table has no trace-safe fields
+ * — the caller substitutes `NULL::jsonb`.
+ */
+export function buildTraceSafeProjection(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any -- DefinedTable's field generics erase at this boundary; we only read $fields
+table, sourceAlias) {
+    const keys = traceSafeKeys(table.$fields);
+    if (keys.length === 0)
+        return null;
+    const aliasIdent = quoteIdentifier(sourceAlias, 'CTE alias');
+    const parts = [];
+    for (const key of keys) {
+        const col = quoteIdentifier(camelToSnake(key), 'trace-safe column');
+        parts.push(sql.raw(`'${key}', ${aliasIdent}.${col}`));
+    }
+    return sql `jsonb_build_object(${sql.join(parts, sql.raw(', '))})`;
+}
+//# sourceMappingURL=projection.js.map

package/dist/data/write/audit/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../../src/data/write/audit/projection.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,uBAAuB;AACvB,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,6BAA6B;AAE7B,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAA;AAIrE;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB;AACtC,4IAA4I;AAC5I,KAAwB,EACxB,WAAmB;IAEnB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,OAAsB,CAAC,CAAA;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAU,EAAE,CAAA;IACvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAA;QACnE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,GAAG,CAAA,sBAAsB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAA;AACnE,CAAC"}

package/dist/data/write/audit/read-touches.d.ts

@@ -0,0 +1,10 @@
+import type { Flow } from '../../../request/context/types.js';
+import type { BegunStep } from '../../../trace/runtime/step-buffer.js';
+/**
+ * Emits one `audit_record` row per `@touches` target for a completed step
+ * that performed no write. Resolves when the insert settles. Failures are
+ * logged at error level and swallowed — an audit-emit failure must not
+ * propagate to the user-visible step outcome (the step already succeeded).
+ */
+export declare function emitReadTouches(flow: Flow, begun: BegunStep): Promise<void>;
+//# sourceMappingURL=read-touches.d.ts.map

package/dist/data/write/audit/read-touches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-touches.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/read-touches.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAA;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAA;AAiBtE;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCjF"}

package/dist/data/write/audit/read-touches.js

@@ -0,0 +1,63 @@
+// Read-touches audit emission. A flow_step that declared `@touches Entity:verb`
+// but performed no `pipe.*` write is recording a read, not a mutation: the step
+// observed the entity in service of the request, and the audit substrate must
+// record that observation for compliance and trail-reconstruction. The
+// CTE-form write path already covered the write case (`wroteForAudit === true`
+// flips on `markWrote()`); this module covers the complement.
+//
+// Atomicity: the emit goes through `pipeRaw()` so a bound transaction on the
+// active Flow carries the insert. If the caller wrapped the step in
+// `pipe.transaction(...)`, the audit row lands in that transaction; otherwise
+// it's a standalone write. Either way it's not pool-direct (unlike trace_step
+// flush), so a request-level rollback discards the audit too — read-touches is
+// a record of what *actually* happened, not what was attempted.
+//
+// The emit uses raw drizzle (`db.insert(table).values(...)`) rather than
+// `pipe.insert` to bypass the executor's audit branch — going through
+// `pipe.insert(auditRecord)` while the active step has `@touches` would route
+// through `compileAuditWrite` and try to project audit_record itself, which is
+// nonsense.
+import { auditRecord } from '../../../audit/schema/audit-record.js';
+import { pipeRaw } from '../../db/db.js';
+import { getBaseLogger } from '../../../core/logging/index.js';
+import { resolveActorId } from './actor.js';
+/**
+ * Emits one `audit_record` row per `@touches` target for a completed step
+ * that performed no write. Resolves when the insert settles. Failures are
+ * logged at error level and swallowed — an audit-emit failure must not
+ * propagate to the user-visible step outcome (the step already succeeded).
+ */
+export async function emitReadTouches(flow, begun) {
+    if (begun.touches.length === 0 || begun.wroteForAudit)
+        return;
+    if (flow.trace === null)
+        return;
+    const traceDay = flow.trace.openedDay;
+    const traceId = flow.trace.id;
+    const tenantId = flow.tenant;
+    const actorId = resolveActorId(flow);
+    const capturedInputs = begun.capturedInputs;
+    const occurredAt = new Date();
+    const rows = begun.touches.map(t => ({
+        traceDay,
+        traceId,
+        traceStepId: begun.stepId,
+        tenantId,
+        actorId,
+        entity: t.entity,
+        verb: t.verb,
+        before: null,
+        after: null,
+        capturedInputs,
+        occurredAt,
+    }));
+    try {
+        const db = pipeRaw(auditRecord.$options.database);
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Drizzle's insert needs the concrete runtime table type
+        await db.insert(auditRecord.table()).values(rows);
+    }
+    catch (err) {
+        getBaseLogger().error({ err, traceId, stepId: begun.stepId, touches: begun.touches.length }, 'Failed to emit read-touches audit row — the audit trail is missing a read observation');
+    }
+}
+//# sourceMappingURL=read-touches.js.map

package/dist/data/write/audit/read-touches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-touches.js","sourceRoot":"","sources":["../../../../src/data/write/audit/read-touches.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,uEAAuE;AACvE,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,oEAAoE;AACpE,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,8EAA8E;AAC9E,+EAA+E;AAC/E,YAAY;AAEZ,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAG9D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAgB3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAU,EAAE,KAAgB;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa;QAAE,OAAM;IAC7D,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;QAAE,OAAM;IAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAA;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;IAC5B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IAC3C,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAA;IAE7B,MAAM,IAAI,GAAwB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,QAAQ;QACR,OAAO;QACP,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,cAAc;QACd,UAAU;KACX,CAAC,CAAC,CAAA;IAEH,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACjD,wHAAwH;QACxH,MAAO,EAAU,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,EAAE,CAAC,KAAK,CACnB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EACrE,uFAAuF,CACxF,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/data/write/audit/verb-delete.d.ts

@@ -0,0 +1,7 @@
+import { type AuditSelectContext } from './audit-select.js';
+import type { SQL } from '../../db/types.js';
+import type { WriteState } from '../state.js';
+type AnyDb = any;
+export declare function compileDeleteAudit(db: AnyDb, state: WriteState, ctx: AuditSelectContext): SQL;
+export {};
+//# sourceMappingURL=verb-delete.d.ts.map

package/dist/data/write/audit/verb-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-delete.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-delete.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAI9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,KAAK,KAAK,GAAG,GAAG,CAAA;AAEhB,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,GAAG,CAuC7F"}

package/dist/data/write/audit/verb-delete.js

@@ -0,0 +1,53 @@
+// DELETE under audit: snapshots the matched rows into `before`, runs the
+// DELETE into `deleted`, then emits one audit row per deleted db row per
+// `@touches` target. The audit's `after` is always `NULL::jsonb` — there is
+// no post-image for a delete. The statement's snapshot keeps `before` and
+// `deleted` consistent — no lock needed; `FOR UPDATE` inside a CTE conflicts
+// with the sibling DELETE on the same row and silently yields zero rows from
+// `before`, suppressing the audit insert.
+import { sql } from '../../db/sql.js';
+import { quoteIdentifier } from '../../db/identifiers.js';
+import { camelToSnake } from '../../domain/naming.js';
+import { buildTraceSafeProjection } from './projection.js';
+import { buildAuditInserts } from './audit-select.js';
+import { primaryKeyFieldKeys } from './primary-key.js';
+import { AUDIT_COLUMNS_SQL } from './audit-columns.js';
+import { buildFinalSelect } from './final-select.js';
+export function compileDeleteAudit(db, state, ctx) {
+    const pk = primaryKeyFieldKeys(state.table);
+    // `.getSQL()` strips the auto-paren drizzle adds around SQLWrapper builders
+    // when they are templated — we add explicit parens at the CTE boundary so
+    // the WITH clause keeps a uniform shape across verbs.
+    let deleteChain = db.delete(state.table);
+    if (state.where !== undefined)
+        deleteChain = deleteChain.where(state.where);
+    const deleteInner = deleteChain.returning().getSQL();
+    let beforeChain = db.select().from(state.table);
+    if (state.where !== undefined)
+        beforeChain = beforeChain.where(state.where);
+    const beforeInner = beforeChain.getSQL();
+    const joinOn = pk
+        .map(k => {
+        const col = quoteIdentifier(camelToSnake(k), 'pk column');
+        return `before.${col} = deleted.${col}`;
+    })
+        .join(' AND ');
+    const before = buildTraceSafeProjection(state.table, 'before') ?? sql `NULL::jsonb`;
+    // Source the audit from `deleted` — RETURNING * gives every column we need
+    // for the pre-image join, and `deleted` includes only the rows that actually
+    // matched. Joining onto `before` carries the FOR UPDATE lock.
+    const fromClause = sql.raw(`FROM deleted JOIN before ON ${joinOn}`);
+    const auditSelect = buildAuditInserts(ctx, fromClause, before, sql `NULL::jsonb`);
+    const finalSelect = buildFinalSelect(state, 'deleted');
+    return sql `
+    WITH before AS (${beforeInner}),
+    deleted AS (${deleteInner}),
+    audit_inserts AS (
+      INSERT INTO "audit_record" (${sql.raw(AUDIT_COLUMNS_SQL)})
+      ${auditSelect}
+      RETURNING 1
+    )
+    ${finalSelect}
+  `;
+}
+//# sourceMappingURL=verb-delete.js.map

package/dist/data/write/audit/verb-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-delete.js","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-delete.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,0CAA0C;AAE1C,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,mBAAmB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAOpD,MAAM,UAAU,kBAAkB,CAAC,EAAS,EAAE,KAAiB,EAAE,GAAuB;IACtF,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAE3C,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAA;IAEpD,IAAI,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAA;IAExC,MAAM,MAAM,GAAG,EAAE;SACd,GAAG,CAAC,CAAC,CAAC,EAAE;QACP,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACzD,OAAO,UAAU,GAAG,cAAc,GAAG,EAAE,CAAA;IACzC,CAAC,CAAC;SACD,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IAClF,2EAA2E;IAC3E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;IACnE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAA,aAAa,CAAC,CAAA;IAChF,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IAEtD,OAAO,GAAG,CAAA;sBACU,WAAW;kBACf,WAAW;;oCAEO,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtD,WAAW;;;MAGb,WAAW;GACd,CAAA;AACH,CAAC"}

package/dist/data/write/audit/verb-insert.d.ts

@@ -0,0 +1,7 @@
+import { type AuditSelectContext } from './audit-select.js';
+import type { SQL } from '../../db/types.js';
+import type { WriteState } from '../state.js';
+type AnyDb = any;
+export declare function compileInsertAudit(db: AnyDb, state: WriteState, ctx: AuditSelectContext): SQL;
+export {};
+//# sourceMappingURL=verb-insert.d.ts.map

package/dist/data/write/audit/verb-insert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-insert.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-insert.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAG9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,KAAK,KAAK,GAAG,GAAG,CAAA;AAEhB,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,GAAG,CAkB7F"}

package/dist/data/write/audit/verb-insert.js

@@ -0,0 +1,28 @@
+// INSERT under audit: no `before` snapshot. The audit row pairs `NULL::jsonb`
+// with the `.traceSafe()` projection of the inserted row, drawn from the
+// `inserted` CTE's RETURNING *. One audit row per inserted db row per
+// `@touches` target.
+import { sql } from '../../db/sql.js';
+import { buildTraceSafeProjection } from './projection.js';
+import { buildAuditInserts } from './audit-select.js';
+import { AUDIT_COLUMNS_SQL } from './audit-columns.js';
+import { buildFinalSelect } from './final-select.js';
+export function compileInsertAudit(db, state, ctx) {
+    // `.getSQL()` strips the auto-paren drizzle adds around SQLWrapper builders
+    // when they are templated — we add explicit parens at the CTE boundary so
+    // the WITH clause keeps a uniform shape across verbs.
+    const inner = db.insert(state.table).values(state.values ?? []).returning().getSQL();
+    const after = buildTraceSafeProjection(state.table, 'inserted') ?? sql `NULL::jsonb`;
+    const auditSelect = buildAuditInserts(ctx, sql `FROM inserted`, sql `NULL::jsonb`, after);
+    const finalSelect = buildFinalSelect(state, 'inserted');
+    return sql `
+    WITH inserted AS (${inner}),
+    audit_inserts AS (
+      INSERT INTO "audit_record" (${sql.raw(AUDIT_COLUMNS_SQL)})
+      ${auditSelect}
+      RETURNING 1
+    )
+    ${finalSelect}
+  `;
+}
+//# sourceMappingURL=verb-insert.js.map

package/dist/data/write/audit/verb-insert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-insert.js","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-insert.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AACzE,sEAAsE;AACtE,qBAAqB;AAErB,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,mBAAmB,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAOpD,MAAM,UAAU,kBAAkB,CAAC,EAAS,EAAE,KAAiB,EAAE,GAAuB;IACtF,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAA;IACpF,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IACnF,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAA,eAAe,EAAE,GAAG,CAAA,aAAa,EAAE,KAAK,CAAC,CAAA;IACvF,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAEvD,OAAO,GAAG,CAAA;wBACY,KAAK;;oCAEO,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtD,WAAW;;;MAGb,WAAW;GACd,CAAA;AACH,CAAC"}

package/dist/data/write/audit/verb-update.d.ts

@@ -0,0 +1,7 @@
+import { type AuditSelectContext } from './audit-select.js';
+import type { SQL } from '../../db/types.js';
+import type { WriteState } from '../state.js';
+type AnyDb = any;
+export declare function compileUpdateAudit(db: AnyDb, state: WriteState, ctx: AuditSelectContext): SQL;
+export {};
+//# sourceMappingURL=verb-update.d.ts.map

package/dist/data/write/audit/verb-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-update.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-update.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAI9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,KAAK,KAAK,GAAG,GAAG,CAAA;AAEhB,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,GAAG,CAqC7F"}

package/dist/data/write/audit/verb-update.js

@@ -0,0 +1,52 @@
+// UPDATE under audit: snapshots the matched rows into `before`, runs the
+// UPDATE into `updated`, then emits one audit row per affected db row per
+// `@touches` target, joining `before` and `updated` on the primary key so
+// the pre/post pair lines up. The single statement's snapshot keeps `before`
+// and `updated` consistent — no lock needed; in fact, `FOR UPDATE` inside a
+// CTE conflicts with the sibling UPDATE on the same row and silently yields
+// zero rows from `before`, suppressing the audit insert.
+import { sql } from '../../db/sql.js';
+import { quoteIdentifier } from '../../db/identifiers.js';
+import { camelToSnake } from '../../domain/naming.js';
+import { buildTraceSafeProjection } from './projection.js';
+import { buildAuditInserts } from './audit-select.js';
+import { primaryKeyFieldKeys } from './primary-key.js';
+import { AUDIT_COLUMNS_SQL } from './audit-columns.js';
+import { buildFinalSelect } from './final-select.js';
+export function compileUpdateAudit(db, state, ctx) {
+    const pk = primaryKeyFieldKeys(state.table);
+    const set = state.set ?? {};
+    // `.getSQL()` strips the auto-paren drizzle adds around SQLWrapper builders
+    // when they are templated — we add explicit parens at the CTE boundary so
+    // the WITH clause keeps a uniform shape across verbs.
+    let updateChain = db.update(state.table).set(set);
+    if (state.where !== undefined)
+        updateChain = updateChain.where(state.where);
+    const updateInner = updateChain.returning().getSQL();
+    let beforeChain = db.select().from(state.table);
+    if (state.where !== undefined)
+        beforeChain = beforeChain.where(state.where);
+    const beforeInner = beforeChain.getSQL();
+    const joinOn = pk
+        .map(k => {
+        const col = quoteIdentifier(camelToSnake(k), 'pk column');
+        return `before.${col} = updated.${col}`;
+    })
+        .join(' AND ');
+    const before = buildTraceSafeProjection(state.table, 'before') ?? sql `NULL::jsonb`;
+    const after = buildTraceSafeProjection(state.table, 'updated') ?? sql `NULL::jsonb`;
+    const fromClause = sql.raw(`FROM updated JOIN before ON ${joinOn}`);
+    const auditSelect = buildAuditInserts(ctx, fromClause, before, after);
+    const finalSelect = buildFinalSelect(state, 'updated');
+    return sql `
+    WITH before AS (${beforeInner}),
+    updated AS (${updateInner}),
+    audit_inserts AS (
+      INSERT INTO "audit_record" (${sql.raw(AUDIT_COLUMNS_SQL)})
+      ${auditSelect}
+      RETURNING 1
+    )
+    ${finalSelect}
+  `;
+}
+//# sourceMappingURL=verb-update.js.map

package/dist/data/write/audit/verb-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-update.js","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-update.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,yDAAyD;AAEzD,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,mBAAmB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAOpD,MAAM,UAAU,kBAAkB,CAAC,EAAS,EAAE,KAAiB,EAAE,GAAuB;IACtF,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAA;IAC3B,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAA;IAEpD,IAAI,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAA;IAExC,MAAM,MAAM,GAAG,EAAE;SACd,GAAG,CAAC,CAAC,CAAC,EAAE;QACP,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACzD,OAAO,UAAU,GAAG,cAAc,GAAG,EAAE,CAAA;IACzC,CAAC,CAAC;SACD,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IAClF,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IAClF,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAA;IACnE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IAEtD,OAAO,GAAG,CAAA;sBACU,WAAW;kBACf,WAAW;;oCAEO,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtD,WAAW;;;MAGb,WAAW;GACd,CAAA;AACH,CAAC"}

package/dist/data/write/audit/verb-upsert.d.ts

@@ -0,0 +1,7 @@
+import { type AuditSelectContext } from './audit-select.js';
+import type { SQL } from '../../db/types.js';
+import type { WriteState } from '../state.js';
+type AnyDb = any;
+export declare function compileUpsertAudit(db: AnyDb, state: WriteState, ctx: AuditSelectContext): SQL;
+export {};
+//# sourceMappingURL=verb-upsert.d.ts.map

package/dist/data/write/audit/verb-upsert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-upsert.d.ts","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-upsert.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAG9E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,KAAK,KAAK,GAAG,GAAG,CAAA;AAEhB,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,GAAG,CA0E7F"}

package/dist/data/write/audit/verb-upsert.js

@@ -0,0 +1,81 @@
+// UPSERT under audit: a single INSERT ... ON CONFLICT DO UPDATE / DO NOTHING
+// that either inserts a new row or updates the conflicting one. Audit rows
+// distinguish create vs update by left-joining the upserted row with the
+// `before` snapshot on the conflict-target columns: a NULL `before` row
+// means the upserted row was freshly inserted; non-NULL means it updated
+// an existing row. The audit's `before` jsonb is wrapped in a CASE that
+// returns NULL::jsonb for the insert branch.
+import { sql } from '../../db/sql.js';
+import { quoteIdentifier } from '../../db/identifiers.js';
+import { camelToSnake } from '../../domain/naming.js';
+import { buildTraceSafeProjection } from './projection.js';
+import { buildAuditInserts } from './audit-select.js';
+import { AUDIT_COLUMNS_SQL } from './audit-columns.js';
+import { buildFinalSelect } from './final-select.js';
+export function compileUpsertAudit(db, state, ctx) {
+    if (state.onConflictColumns === undefined || state.onConflictColumns.length === 0) {
+        throw new Error('pipe.upsert requires .onConflict([...columns]). ' +
+            'Pass the conflict-target columns that determine "this row already exists" — ' +
+            'usually the primary key or a unique index.');
+    }
+    const conflictCols = state.onConflictColumns;
+    const targetColumns = conflictCols.map(key => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DefinedTable columns are indexed by field key; the lookup was validated at the builder surface
+        const col = state.table[key];
+        if (col === undefined) {
+            throw new Error(`pipe.upsert: onConflict column "${key}" is not a field of "${state.table.$name}". ` +
+                `Use a field key declared on the table.`);
+        }
+        return col;
+    });
+    let upsertChain = db.insert(state.table).values(state.values ?? []);
+    if (state.set === undefined) {
+        upsertChain = upsertChain.onConflictDoNothing({ target: targetColumns });
+    }
+    else {
+        upsertChain = upsertChain.onConflictDoUpdate({ target: targetColumns, set: state.set });
+    }
+    // `.getSQL()` strips the auto-paren drizzle adds around SQLWrapper builders
+    // when they are templated — we add explicit parens at the CTE boundary so
+    // the WITH clause keeps a uniform shape across verbs.
+    const upsertInner = upsertChain.returning().getSQL();
+    const tableName = quoteIdentifier(state.table.$name, 'target table');
+    const conflictColsSql = conflictCols.map(k => quoteIdentifier(camelToSnake(k), 'conflict column')).join(', ');
+    const valuesRows = (state.values ?? []).map(row => {
+        const parts = conflictCols.map(k => sql `${row[k] ?? null}`);
+        return sql `(${sql.join(parts, sql.raw(', '))})`;
+    });
+    // No `FOR UPDATE` — the statement's snapshot keeps `before` and `upserted`
+    // consistent; locking inside a CTE conflicts with the sibling write on the
+    // same row and silently yields zero rows from `before`.
+    const beforeSelect = sql `
+    SELECT * FROM ${sql.raw(tableName)}
+    WHERE (${sql.raw(conflictColsSql)}) IN (${sql.join(valuesRows, sql.raw(', '))})
+  `;
+    const joinOn = conflictCols
+        .map(k => {
+        const col = quoteIdentifier(camelToSnake(k), 'conflict column');
+        return `before.${col} = upserted.${col}`;
+    })
+        .join(' AND ');
+    // Pivot: the conflict-key column of `before` is non-null iff the upserted
+    // row matched an existing row. Use the first conflict col as the discriminator.
+    const pivotCol = quoteIdentifier(camelToSnake(conflictCols[0]), 'conflict column');
+    const beforeProj = buildTraceSafeProjection(state.table, 'before') ?? sql `NULL::jsonb`;
+    const after = buildTraceSafeProjection(state.table, 'upserted') ?? sql `NULL::jsonb`;
+    const beforeExpr = sql `CASE WHEN ${sql.raw(`before.${pivotCol}`)} IS NULL THEN NULL::jsonb ELSE (${beforeProj}) END`;
+    const fromClause = sql.raw(`FROM upserted LEFT JOIN before ON ${joinOn}`);
+    const auditSelect = buildAuditInserts(ctx, fromClause, beforeExpr, after);
+    const finalSelect = buildFinalSelect(state, 'upserted');
+    return sql `
+    WITH before AS (${beforeSelect}),
+    upserted AS (${upsertInner}),
+    audit_inserts AS (
+      INSERT INTO "audit_record" (${sql.raw(AUDIT_COLUMNS_SQL)})
+      ${auditSelect}
+      RETURNING 1
+    )
+    ${finalSelect}
+  `;
+}
+//# sourceMappingURL=verb-upsert.js.map

package/dist/data/write/audit/verb-upsert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-upsert.js","sourceRoot":"","sources":["../../../../src/data/write/audit/verb-upsert.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,mBAAmB,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAOpD,MAAM,UAAU,kBAAkB,CAAC,EAAS,EAAE,KAAiB,EAAE,GAAuB;IACtF,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,kDAAkD;YAClD,8EAA8E;YAC9E,4CAA4C,CAC7C,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,iBAAiB,CAAA;IAC5C,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAC3C,gKAAgK;QAChK,MAAM,GAAG,GAAI,KAAK,CAAC,KAAa,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,wBAAwB,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK;gBACpF,wCAAwC,CACzC,CAAA;QACH,CAAC;QACD,OAAO,GAAc,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,IAAI,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACnE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;IAC1E,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,WAAW,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAA;IAEpD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IACpE,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7G,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAA,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC3D,OAAO,GAAG,CAAA,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAA;IACjD,CAAC,CAAC,CAAA;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,YAAY,GAAG,GAAG,CAAA;oBACN,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;aACzB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;GAC9E,CAAA;IAED,MAAM,MAAM,GAAG,YAAY;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE;QACP,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAA;QAC/D,OAAO,UAAU,GAAG,eAAe,GAAG,EAAE,CAAA;IAC1C,CAAC,CAAC;SACD,IAAI,CAAC,OAAO,CAAC,CAAA;IAEhB,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IACtF,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,GAAG,CAAA,aAAa,CAAA;IACnF,MAAM,UAAU,GAAG,GAAG,CAAA,aAAa,GAAG,CAAC,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,mCAAmC,UAAU,OAAO,CAAA;IACpH,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAA;IACzE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IACzE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAEvD,OAAO,GAAG,CAAA;sBACU,YAAY;mBACf,WAAW;;oCAEM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtD,WAAW;;;MAGb,WAAW;GACd,CAAA;AACH,CAAC"}

package/dist/data/write/delete.d.ts

@@ -0,0 +1,15 @@
+import type { PgTable } from '../query/pg-core/index.js';
+import type { SQL } from '../db/types.js';
+import type { DefinedTable, FieldRecord } from '../domain/types.js';
+import type { WriteState } from './state.js';
+export declare class DeleteBuilder<T extends PgTable, TResult = unknown> implements PromiseLike<TResult> {
+    private readonly state;
+    constructor(state: WriteState);
+    where(condition: SQL): DeleteBuilder<T, TResult>;
+    returning(): DeleteBuilder<T, Record<string, unknown>[]>;
+    returning<TShape extends Record<string, unknown>>(shape: TShape): DeleteBuilder<T, Record<string, unknown>[]>;
+    then<TFulfilled = TResult, TRejected = never>(onfulfilled?: ((value: TResult) => TFulfilled | PromiseLike<TFulfilled>) | null, onrejected?: ((reason: unknown) => TRejected | PromiseLike<TRejected>) | null): PromiseLike<TFulfilled | TRejected>;
+}
+/** Starts a pipework-owned delete against `table`. Chain with `.where(...).returning(...)`. */
+export declare function remove<T extends DefinedTable<FieldRecord> & PgTable>(table: T): DeleteBuilder<T, any>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/data/write/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/data/write/delete.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAG5C,qBAAa,aAAa,CAAC,CAAC,SAAS,OAAO,EAAE,OAAO,GAAG,OAAO,CAAE,YAAW,WAAW,CAAC,OAAO,CAAC;IAClF,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,UAAU;IAE9C,KAAK,CAAC,SAAS,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC;IAIhD,SAAS,IAAI,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACxD,SAAS,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAM7G,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,SAAS,GAAG,KAAK,EAC1C,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,EAC/E,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAC5E,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC;CAGvC;AAED,+FAA+F;AAE/F,wBAAgB,MAAM,CAAC,CAAC,SAAS,YAAY,CAAC,WAAW,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAErG"}

package/dist/data/write/delete.js

@@ -0,0 +1,25 @@
+// `pipe.delete(table)` — the pipework-owned delete builder. Same intent-based
+// design as UpdateBuilder; see update.ts for the rationale.
+import { executeWrite } from './execute.js';
+export class DeleteBuilder {
+    state;
+    constructor(state) {
+        this.state = state;
+    }
+    where(condition) {
+        return new DeleteBuilder({ ...this.state, where: condition });
+    }
+    returning(shape) {
+        const returning = shape === undefined ? 'all' : shape;
+        return new DeleteBuilder({ ...this.state, returning });
+    }
+    then(onfulfilled, onrejected) {
+        return executeWrite(this.state).then(onfulfilled, onrejected);
+    }
+}
+/** Starts a pipework-owned delete against `table`. Chain with `.where(...).returning(...)`. */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function remove(table) {
+    return new DeleteBuilder({ verb: 'delete', table });
+}
+//# sourceMappingURL=delete.js.map

package/dist/data/write/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/data/write/delete.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4DAA4D;AAM5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,KAAiB;QAAjB,UAAK,GAAL,KAAK,CAAY;IAAG,CAAC;IAElD,KAAK,CAAC,SAAc;QAClB,OAAO,IAAI,aAAa,CAAa,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3E,CAAC;IAID,SAAS,CAAC,KAA+B;QACvC,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,KAAK,CAAA;QAC9D,OAAO,IAAI,aAAa,CAA+B,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,IAAI,CACF,WAA+E,EAC/E,UAA6E;QAE7E,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAA6C,EAAE,UAAU,CAAwC,CAAA;IACxI,CAAC;CACF;AAED,+FAA+F;AAC/F,8DAA8D;AAC9D,MAAM,UAAU,MAAM,CAAgD,KAAQ;IAC5E,OAAO,IAAI,aAAa,CAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;AACjE,CAAC"}

package/dist/data/write/execute.d.ts

@@ -0,0 +1,3 @@
+import type { WriteState } from './state.js';
+export declare function executeWrite(state: WriteState): Promise<unknown>;
+//# sourceMappingURL=execute.d.ts.map

package/dist/data/write/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/data/write/execute.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAQ5C,wBAAsB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAiCtE"}