Function listSubjects

packages/core/sdk/src/executor.ts:7010–7039

(
        options?: AdminListSubjectsOptions,
      )

      };

      const listSubjects = (
        options?: AdminListSubjectsOptions,
      ): Effect.Effect<readonly AdminSubject[], StorageFailure> => {
        // Always both, always integers — see `normalizeAdminPaging`. Passing
        // them through independently produced a bare OFFSET, which SQLite
        // rejects outright.
        const { limit, offset } = normalizeAdminPaging(options);
        const externalIds = options?.externalIds;
        // An empty id set is a query that cannot match; answer it without a
        // round trip rather than emitting `in ()`, which some drivers reject.
        if (externalIds !== undefined && externalIds.length === 0) return Effect.succeed([]);
        return platformCore
          .findMany("subject", {
            // The id filter is the ONLY predicate here; the tenant clause is
            // the policy's, added to every read the same way `getSubject`
            // relies on it.
            ...(externalIds === undefined
              ? {}
              : { where: (b: AnyCb) => b("external_id", "in", [...externalIds]) }),
            // Oldest first, ties broken on the unique key so the order is
            // total and paging can't repeat or skip a row.
            orderBy: [
              ["created_at", "asc"],
              ["external_id", "asc"],
            ],
            limit,
            offset,
          })
          .pipe(Effect.map((rows) => rows.map(rowToAdminSubject)));
      };

      // Keyed on `(tenant, external_id)` — the table's unique index. No
      // `tenant` clause here: the tenant policy adds it to every read, the