Function noEarlierThan

apps/cloud/src/auth/workos-mirror-store.ts:506–506

(column: AnyPgColumn, at: Date)

// never backwards, so a row that somehow carries a newer WorkOS timestamp
// keeps it and the upsert guard stays at least as strict.
const noEarlierThan = (column: AnyPgColumn, at: Date) => sql`greatest(${column}, ${instant(at)})`;

// A membership tombstone keeps the row, marks it `inactive`, and records the
// deletion in `deleted_at`: the instant the caller holds, or `now()` when it