@clivly/core 0.8.0 → 0.9.1

package/dist/view-compiler-BpNI8Ttw.cjs

@@ -0,0 +1,299 @@
+const require_projection = require("./projection-BXBkh7qp.cjs");
+//#region src/projection-sql.ts
+/**
+* SQL generation for projection-backed entities.
+*
+* Base and joins are aliased by their ref key (`base`, then each join's `key`),
+* which is what allows the same table to be joined twice and keeps generated
+* SQL independent of host table names.
+*
+* Pure string generation — no DB access. Identifiers are escaped so output is
+* deterministic and injection-safe.
+*/
+/** Quote a single identifier part, escaping embedded double-quotes. */
+function quoteIdent(name) {
+	return `"${name.replace(/"/g, "\"\"")}"`;
+}
+function refSql(ref) {
+	return `${quoteIdent(ref.table)}.${quoteIdent(ref.column)}`;
+}
+/**
+* The identity expression, aliased as `id`. Composite identities concatenate
+* their parts with `::`; validation guarantees every part is NOT NULL and
+* non-text, which is what makes the concatenation collision-free.
+*/
+function identitySql(projection, basePkColumn) {
+	const refs = require_projection.identityRefs(projection.identity, basePkColumn);
+	if (projection.identity.kind === "composite") return `CONCAT_WS('::', ${refs.map((ref) => `${refSql(ref)}::text`).join(", ")}) AS ${quoteIdent("id")}`;
+	const [ref] = refs;
+	if (!ref) throw new Error("projection identity resolved to no column");
+	return `${refSql(ref)} AS ${quoteIdent("id")}`;
+}
+function compileProjectionSelect(projection, basePkColumn) {
+	const selectItems = [identitySql(projection, basePkColumn)];
+	const columns = ["id"];
+	for (const [field, binding] of Object.entries(projection.fieldBindings)) {
+		selectItems.push(`${refSql(binding.from)} AS ${quoteIdent(field)}`);
+		columns.push(field);
+	}
+	return {
+		columns,
+		selectItems
+	};
+}
+function compileProjectionJoins(projection) {
+	return projection.joins.map((join) => {
+		const keyword = join.type === "inner" ? "INNER JOIN" : "LEFT JOIN";
+		const on = join.on.map((c) => `${refSql(c.left)} = ${refSql(c.right)}`).join(" AND ");
+		return `${keyword} ${quoteIdent(join.table)} AS ${quoteIdent(join.key)} ON ${on}`;
+	});
+}
+/** `FROM <baseTable> AS "base"` — the alias every ref resolves against. */
+function compileProjectionFrom(projection) {
+	return `FROM ${quoteIdent(projection.baseTable)} AS ${quoteIdent(require_projection.BASE_REF)}`;
+}
+//#endregion
+//#region src/view-compiler.ts
+/**
+* View compiler (Phase 2) — turns a validated entity config into read-only
+* Postgres view DDL.
+*
+* Each entity compiles to `crm_src_<entity>`: a projection over the host table
+* that (a) selects the source primary key as `id` (the sync engine's
+* `source_ref`), (b) aliases mapped columns to their Clivly field names,
+* (c) resolves each relationship to a `<relationship>_ref` column carrying the
+* host-side key, and (d) applies the entity's filter as a WHERE clause.
+*
+* The view is the security boundary: it exposes only allow-listed columns, and
+* the sync engine (Phase 3) reads exclusively from it — never the raw table.
+* Relationship refs stay host-side keys here; Phase 3 maps `<rel>_ref` onto the
+* corresponding `crm_companies.id` mirror row.
+*
+* Pure string generation — no DB access. Config is developer-authored, but all
+* identifiers and literals are still escaped so output is deterministic and
+* injection-safe.
+*/
+/** The source primary-key column. Assumed `id`; the sync engine reads it as `source_ref`. */
+const SOURCE_KEY = "id";
+const DEFAULT_VIEW_PREFIX = "crm_src_";
+const DEFAULT_ROLE = "primary";
+/** Emit a SQL literal for a scalar filter value. */
+function quoteLiteral(value) {
+	if (typeof value === "number") return String(value);
+	if (typeof value === "boolean") return value ? "TRUE" : "FALSE";
+	return `'${value.replace(/'/g, "''")}'`;
+}
+function quoteList(values) {
+	return `(${values.map((v) => quoteLiteral(v)).join(", ")})`;
+}
+/** Compile one column predicate into a SQL boolean expression. */
+function compilePredicate(table, column, value) {
+	const col = `${quoteIdent(table)}.${quoteIdent(column)}`;
+	if (value === null || typeof value !== "object") return `${col} = ${quoteLiteral(value)}`;
+	if ("eq" in value) return `${col} = ${quoteLiteral(value.eq)}`;
+	if ("ne" in value) return `${col} <> ${quoteLiteral(value.ne)}`;
+	if ("in" in value) return `${col} IN ${quoteList(value.in)}`;
+	if ("notIn" in value) return `${col} NOT IN ${quoteList(value.notIn)}`;
+	if ("isNull" in value) return `${col} IS NULL`;
+	if ("isNotNull" in value) return `${col} IS NOT NULL`;
+	throw new Error(`unsupported filter predicate on ${table}.${column}`);
+}
+/**
+* Build the WHERE conditions for an entity. Returns an array of SQL fragments
+* (ANDed by the caller). `$raw` filters pass through verbatim.
+*/
+function compileFilterConditions(table, filter) {
+	if (!filter) return [];
+	if ("$raw" in filter) return [`(${filter.$raw})`];
+	return Object.entries(filter).map(([column, value]) => compilePredicate(table, column, value));
+}
+/** Split a `table.column` ref, defaulting the table when unqualified. */
+function refParts(ref, defaultTable) {
+	const dot = ref.indexOf(".");
+	if (dot === -1) return {
+		table: defaultTable,
+		column: ref
+	};
+	return {
+		table: ref.slice(0, dot),
+		column: ref.slice(dot + 1)
+	};
+}
+function compileRelationship(relName, rel, source, related) {
+	const refCol = `${relName}_ref`;
+	const refAlias = quoteIdent(refCol);
+	const { via } = rel;
+	if ("fkOn" in via) {
+		const relatedTable = related?.source ?? "";
+		if (via.fkOn === "company") {
+			const { table, column } = refParts(via.column, relatedTable);
+			const relatedFilter = compileFilterConditions(table, related?.filter);
+			const on = [`${quoteIdent(table)}.${quoteIdent(column)} = ${quoteIdent(source.source)}.${quoteIdent(SOURCE_KEY)}`, ...relatedFilter].join(" AND ");
+			return {
+				clause: `LEFT JOIN ${quoteIdent(table)} ON ${on}`,
+				refSelect: `${quoteIdent(table)}.${quoteIdent(SOURCE_KEY)} AS ${refAlias}`,
+				refColumn: refCol
+			};
+		}
+		const { table, column } = refParts(via.column, source.source);
+		const on = [`${quoteIdent(relatedTable)}.${quoteIdent(SOURCE_KEY)} = ${quoteIdent(table)}.${quoteIdent(column)}`, ...compileFilterConditions(relatedTable, related?.filter)].join(" AND ");
+		return {
+			clause: `LEFT JOIN ${quoteIdent(relatedTable)} ON ${on}`,
+			refSelect: `${quoteIdent(relatedTable)}.${quoteIdent(SOURCE_KEY)} AS ${refAlias}`,
+			refColumn: refCol
+		};
+	}
+	if ("through" in via) {
+		const on = `${quoteIdent(via.through)}.${quoteIdent(via.localKey)} = ${quoteIdent(source.source)}.${quoteIdent(SOURCE_KEY)}`;
+		return {
+			clause: `LEFT JOIN ${quoteIdent(via.through)} ON ${on}`,
+			refSelect: `${quoteIdent(via.through)}.${quoteIdent(via.foreignKey)} AS ${refAlias}`,
+			refColumn: refCol
+		};
+	}
+	return {
+		clause: via.$raw,
+		refSelect: null,
+		refColumn: refCol
+	};
+}
+/** SELECT items for a legacy single-table entity: source key, then fields. */
+function legacySelect(entity, src) {
+	const selectItems = [`${quoteIdent(src)}.${quoteIdent(SOURCE_KEY)} AS ${quoteIdent("id")}`];
+	const columns = ["id"];
+	for (const [field, column] of Object.entries(entity.fields)) {
+		selectItems.push(`${quoteIdent(src)}.${quoteIdent(column)} AS ${quoteIdent(field)}`);
+		columns.push(field);
+	}
+	return {
+		columns,
+		selectItems
+	};
+}
+/**
+* Relationship JOINs for a legacy entity. Appends each relationship's ref
+* column to `columns`/`selectItems` in place, preserving the existing order.
+*/
+function legacyJoins(config, entity, columns, selectItems) {
+	const joins = [];
+	for (const [relName, rel] of Object.entries(entity.relationships ?? {})) {
+		const compiled = compileRelationship(relName, rel, entity, config.entities[rel.entity]);
+		joins.push(compiled.clause);
+		if (compiled.refSelect) {
+			selectItems.push(compiled.refSelect);
+			columns.push(compiled.refColumn);
+		}
+	}
+	return joins;
+}
+/**
+* Translate a driver error from executing a compiled view into something
+* actionable, or `undefined` when it is not one we recognise (caller rethrows).
+*
+* The case that matters: `WITH (security_invoker = true)` needs Postgres 15,
+* and PG 14 rejects it with sqlstate 22023 naming a Postgres internal
+* (`reloptions.c`) — no mention of Clivly, the option, or the version. The
+* compiler cannot catch this itself because the host executes the SQL.
+*/
+function explainViewExecutionError(error) {
+	if (typeof error !== "object" || error === null) return;
+	const { code, routine } = error;
+	const message = error instanceof Error ? error.message : "";
+	if (!(code === "22023" && (routine === "parseRelOptionsInternal" || message.includes("security_invoker")))) return;
+	return "CREATE VIEW … WITH (security_invoker = true) requires Postgres 15+. Pass `securityInvoker: false` to compile without it — but note the view then runs with its owner's privileges instead of the querying role's, which bypasses row-level security (RLS) on the underlying tables. Prefer upgrading Postgres if you rely on RLS to separate tenants.";
+}
+function compileEntityView(config, entityKey, options = {}) {
+	const entity = config.entities[entityKey];
+	if (!entity) throw new Error(`entity "${entityKey}" is not defined`);
+	const viewName = `${options.viewPrefix ?? "crm_src_"}${entityKey}`;
+	const src = entity.source;
+	const projection = entity.projection;
+	const filterTable = projection ? require_projection.BASE_REF : src;
+	const { selectItems, columns } = projection ? compileProjectionSelect(projection, SOURCE_KEY) : legacySelect(entity, src);
+	const joins = projection ? compileProjectionJoins(projection) : legacyJoins(config, entity, columns, selectItems);
+	const conditions = compileFilterConditions(filterTable, entity.filter);
+	if (options.orgScope) conditions.push(`${quoteIdent(filterTable)}.${quoteIdent(options.orgScope.column)} = ${quoteLiteral(options.orgScope.value)}`);
+	const lines = [
+		options.securityInvoker ?? true ? `CREATE OR REPLACE VIEW ${quoteIdent(viewName)} WITH (security_invoker = true) AS` : `CREATE OR REPLACE VIEW ${quoteIdent(viewName)} AS`,
+		`SELECT ${selectItems.join(", ")}`,
+		projection ? compileProjectionFrom(projection) : `FROM ${quoteIdent(src)}`,
+		...joins
+	];
+	if (conditions.length > 0) lines.push(`WHERE ${conditions.join(" AND ")}`);
+	const sql = `${lines.join("\n")};`;
+	return {
+		entityKey,
+		viewName,
+		concept: entity.concept,
+		role: entity.role ?? DEFAULT_ROLE,
+		sourceTable: src,
+		columns,
+		sql,
+		dropSql: `DROP VIEW IF EXISTS ${quoteIdent(viewName)};`
+	};
+}
+/** Compile every entity in the config into its view, in declaration order. */
+function compileEntityViews(config, options = {}) {
+	return Object.keys(config.entities).map((key) => compileEntityView(config, key, options));
+}
+/**
+* Dry-run each entity's compiled view against the host DB via a caller-provided
+* `run` function, so `$raw` filter/join fragments — which skip schema validation
+* (see `validateEntitiesConfig`) — fail loudly *before* the first sync instead of
+* at sync time. Never throws: each view's outcome is collected into an
+* `ExplainResult`, so a mapping UI or CLI can show every problem at once.
+*
+* `run` should execute the SQL somewhere side-effect-free — e.g. inside a
+* transaction it rolls back, or by `EXPLAIN`-ing the statement — since the
+* compiled SQL is a `CREATE OR REPLACE VIEW`.
+*/
+async function explainEntitiesConfig(config, run, options = {}) {
+	const results = [];
+	for (const view of compileEntityViews(config, options)) try {
+		await run(view.sql);
+		results.push({
+			entityKey: view.entityKey,
+			ok: true,
+			sql: view.sql
+		});
+	} catch (error) {
+		results.push({
+			entityKey: view.entityKey,
+			ok: false,
+			sql: view.sql,
+			error: error instanceof Error ? error.message : String(error)
+		});
+	}
+	return results;
+}
+//#endregion
+Object.defineProperty(exports, "DEFAULT_VIEW_PREFIX", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_VIEW_PREFIX;
+	}
+});
+Object.defineProperty(exports, "compileEntityView", {
+	enumerable: true,
+	get: function() {
+		return compileEntityView;
+	}
+});
+Object.defineProperty(exports, "compileEntityViews", {
+	enumerable: true,
+	get: function() {
+		return compileEntityViews;
+	}
+});
+Object.defineProperty(exports, "explainEntitiesConfig", {
+	enumerable: true,
+	get: function() {
+		return explainEntitiesConfig;
+	}
+});
+Object.defineProperty(exports, "explainViewExecutionError", {
+	enumerable: true,
+	get: function() {
+		return explainViewExecutionError;
+	}
+});

package/dist/view-compiler-CcqsGxv4.mjs

@@ -0,0 +1,270 @@
+import { r as identityRefs, t as BASE_REF } from "./projection-C_EMRmZ8.mjs";
+//#region src/projection-sql.ts
+/**
+* SQL generation for projection-backed entities.
+*
+* Base and joins are aliased by their ref key (`base`, then each join's `key`),
+* which is what allows the same table to be joined twice and keeps generated
+* SQL independent of host table names.
+*
+* Pure string generation — no DB access. Identifiers are escaped so output is
+* deterministic and injection-safe.
+*/
+/** Quote a single identifier part, escaping embedded double-quotes. */
+function quoteIdent(name) {
+	return `"${name.replace(/"/g, "\"\"")}"`;
+}
+function refSql(ref) {
+	return `${quoteIdent(ref.table)}.${quoteIdent(ref.column)}`;
+}
+/**
+* The identity expression, aliased as `id`. Composite identities concatenate
+* their parts with `::`; validation guarantees every part is NOT NULL and
+* non-text, which is what makes the concatenation collision-free.
+*/
+function identitySql(projection, basePkColumn) {
+	const refs = identityRefs(projection.identity, basePkColumn);
+	if (projection.identity.kind === "composite") return `CONCAT_WS('::', ${refs.map((ref) => `${refSql(ref)}::text`).join(", ")}) AS ${quoteIdent("id")}`;
+	const [ref] = refs;
+	if (!ref) throw new Error("projection identity resolved to no column");
+	return `${refSql(ref)} AS ${quoteIdent("id")}`;
+}
+function compileProjectionSelect(projection, basePkColumn) {
+	const selectItems = [identitySql(projection, basePkColumn)];
+	const columns = ["id"];
+	for (const [field, binding] of Object.entries(projection.fieldBindings)) {
+		selectItems.push(`${refSql(binding.from)} AS ${quoteIdent(field)}`);
+		columns.push(field);
+	}
+	return {
+		columns,
+		selectItems
+	};
+}
+function compileProjectionJoins(projection) {
+	return projection.joins.map((join) => {
+		const keyword = join.type === "inner" ? "INNER JOIN" : "LEFT JOIN";
+		const on = join.on.map((c) => `${refSql(c.left)} = ${refSql(c.right)}`).join(" AND ");
+		return `${keyword} ${quoteIdent(join.table)} AS ${quoteIdent(join.key)} ON ${on}`;
+	});
+}
+/** `FROM <baseTable> AS "base"` — the alias every ref resolves against. */
+function compileProjectionFrom(projection) {
+	return `FROM ${quoteIdent(projection.baseTable)} AS ${quoteIdent(BASE_REF)}`;
+}
+//#endregion
+//#region src/view-compiler.ts
+/**
+* View compiler (Phase 2) — turns a validated entity config into read-only
+* Postgres view DDL.
+*
+* Each entity compiles to `crm_src_<entity>`: a projection over the host table
+* that (a) selects the source primary key as `id` (the sync engine's
+* `source_ref`), (b) aliases mapped columns to their Clivly field names,
+* (c) resolves each relationship to a `<relationship>_ref` column carrying the
+* host-side key, and (d) applies the entity's filter as a WHERE clause.
+*
+* The view is the security boundary: it exposes only allow-listed columns, and
+* the sync engine (Phase 3) reads exclusively from it — never the raw table.
+* Relationship refs stay host-side keys here; Phase 3 maps `<rel>_ref` onto the
+* corresponding `crm_companies.id` mirror row.
+*
+* Pure string generation — no DB access. Config is developer-authored, but all
+* identifiers and literals are still escaped so output is deterministic and
+* injection-safe.
+*/
+/** The source primary-key column. Assumed `id`; the sync engine reads it as `source_ref`. */
+const SOURCE_KEY = "id";
+const DEFAULT_VIEW_PREFIX = "crm_src_";
+const DEFAULT_ROLE = "primary";
+/** Emit a SQL literal for a scalar filter value. */
+function quoteLiteral(value) {
+	if (typeof value === "number") return String(value);
+	if (typeof value === "boolean") return value ? "TRUE" : "FALSE";
+	return `'${value.replace(/'/g, "''")}'`;
+}
+function quoteList(values) {
+	return `(${values.map((v) => quoteLiteral(v)).join(", ")})`;
+}
+/** Compile one column predicate into a SQL boolean expression. */
+function compilePredicate(table, column, value) {
+	const col = `${quoteIdent(table)}.${quoteIdent(column)}`;
+	if (value === null || typeof value !== "object") return `${col} = ${quoteLiteral(value)}`;
+	if ("eq" in value) return `${col} = ${quoteLiteral(value.eq)}`;
+	if ("ne" in value) return `${col} <> ${quoteLiteral(value.ne)}`;
+	if ("in" in value) return `${col} IN ${quoteList(value.in)}`;
+	if ("notIn" in value) return `${col} NOT IN ${quoteList(value.notIn)}`;
+	if ("isNull" in value) return `${col} IS NULL`;
+	if ("isNotNull" in value) return `${col} IS NOT NULL`;
+	throw new Error(`unsupported filter predicate on ${table}.${column}`);
+}
+/**
+* Build the WHERE conditions for an entity. Returns an array of SQL fragments
+* (ANDed by the caller). `$raw` filters pass through verbatim.
+*/
+function compileFilterConditions(table, filter) {
+	if (!filter) return [];
+	if ("$raw" in filter) return [`(${filter.$raw})`];
+	return Object.entries(filter).map(([column, value]) => compilePredicate(table, column, value));
+}
+/** Split a `table.column` ref, defaulting the table when unqualified. */
+function refParts(ref, defaultTable) {
+	const dot = ref.indexOf(".");
+	if (dot === -1) return {
+		table: defaultTable,
+		column: ref
+	};
+	return {
+		table: ref.slice(0, dot),
+		column: ref.slice(dot + 1)
+	};
+}
+function compileRelationship(relName, rel, source, related) {
+	const refCol = `${relName}_ref`;
+	const refAlias = quoteIdent(refCol);
+	const { via } = rel;
+	if ("fkOn" in via) {
+		const relatedTable = related?.source ?? "";
+		if (via.fkOn === "company") {
+			const { table, column } = refParts(via.column, relatedTable);
+			const relatedFilter = compileFilterConditions(table, related?.filter);
+			const on = [`${quoteIdent(table)}.${quoteIdent(column)} = ${quoteIdent(source.source)}.${quoteIdent(SOURCE_KEY)}`, ...relatedFilter].join(" AND ");
+			return {
+				clause: `LEFT JOIN ${quoteIdent(table)} ON ${on}`,
+				refSelect: `${quoteIdent(table)}.${quoteIdent(SOURCE_KEY)} AS ${refAlias}`,
+				refColumn: refCol
+			};
+		}
+		const { table, column } = refParts(via.column, source.source);
+		const on = [`${quoteIdent(relatedTable)}.${quoteIdent(SOURCE_KEY)} = ${quoteIdent(table)}.${quoteIdent(column)}`, ...compileFilterConditions(relatedTable, related?.filter)].join(" AND ");
+		return {
+			clause: `LEFT JOIN ${quoteIdent(relatedTable)} ON ${on}`,
+			refSelect: `${quoteIdent(relatedTable)}.${quoteIdent(SOURCE_KEY)} AS ${refAlias}`,
+			refColumn: refCol
+		};
+	}
+	if ("through" in via) {
+		const on = `${quoteIdent(via.through)}.${quoteIdent(via.localKey)} = ${quoteIdent(source.source)}.${quoteIdent(SOURCE_KEY)}`;
+		return {
+			clause: `LEFT JOIN ${quoteIdent(via.through)} ON ${on}`,
+			refSelect: `${quoteIdent(via.through)}.${quoteIdent(via.foreignKey)} AS ${refAlias}`,
+			refColumn: refCol
+		};
+	}
+	return {
+		clause: via.$raw,
+		refSelect: null,
+		refColumn: refCol
+	};
+}
+/** SELECT items for a legacy single-table entity: source key, then fields. */
+function legacySelect(entity, src) {
+	const selectItems = [`${quoteIdent(src)}.${quoteIdent(SOURCE_KEY)} AS ${quoteIdent("id")}`];
+	const columns = ["id"];
+	for (const [field, column] of Object.entries(entity.fields)) {
+		selectItems.push(`${quoteIdent(src)}.${quoteIdent(column)} AS ${quoteIdent(field)}`);
+		columns.push(field);
+	}
+	return {
+		columns,
+		selectItems
+	};
+}
+/**
+* Relationship JOINs for a legacy entity. Appends each relationship's ref
+* column to `columns`/`selectItems` in place, preserving the existing order.
+*/
+function legacyJoins(config, entity, columns, selectItems) {
+	const joins = [];
+	for (const [relName, rel] of Object.entries(entity.relationships ?? {})) {
+		const compiled = compileRelationship(relName, rel, entity, config.entities[rel.entity]);
+		joins.push(compiled.clause);
+		if (compiled.refSelect) {
+			selectItems.push(compiled.refSelect);
+			columns.push(compiled.refColumn);
+		}
+	}
+	return joins;
+}
+/**
+* Translate a driver error from executing a compiled view into something
+* actionable, or `undefined` when it is not one we recognise (caller rethrows).
+*
+* The case that matters: `WITH (security_invoker = true)` needs Postgres 15,
+* and PG 14 rejects it with sqlstate 22023 naming a Postgres internal
+* (`reloptions.c`) — no mention of Clivly, the option, or the version. The
+* compiler cannot catch this itself because the host executes the SQL.
+*/
+function explainViewExecutionError(error) {
+	if (typeof error !== "object" || error === null) return;
+	const { code, routine } = error;
+	const message = error instanceof Error ? error.message : "";
+	if (!(code === "22023" && (routine === "parseRelOptionsInternal" || message.includes("security_invoker")))) return;
+	return "CREATE VIEW … WITH (security_invoker = true) requires Postgres 15+. Pass `securityInvoker: false` to compile without it — but note the view then runs with its owner's privileges instead of the querying role's, which bypasses row-level security (RLS) on the underlying tables. Prefer upgrading Postgres if you rely on RLS to separate tenants.";
+}
+function compileEntityView(config, entityKey, options = {}) {
+	const entity = config.entities[entityKey];
+	if (!entity) throw new Error(`entity "${entityKey}" is not defined`);
+	const viewName = `${options.viewPrefix ?? "crm_src_"}${entityKey}`;
+	const src = entity.source;
+	const projection = entity.projection;
+	const filterTable = projection ? BASE_REF : src;
+	const { selectItems, columns } = projection ? compileProjectionSelect(projection, SOURCE_KEY) : legacySelect(entity, src);
+	const joins = projection ? compileProjectionJoins(projection) : legacyJoins(config, entity, columns, selectItems);
+	const conditions = compileFilterConditions(filterTable, entity.filter);
+	if (options.orgScope) conditions.push(`${quoteIdent(filterTable)}.${quoteIdent(options.orgScope.column)} = ${quoteLiteral(options.orgScope.value)}`);
+	const lines = [
+		options.securityInvoker ?? true ? `CREATE OR REPLACE VIEW ${quoteIdent(viewName)} WITH (security_invoker = true) AS` : `CREATE OR REPLACE VIEW ${quoteIdent(viewName)} AS`,
+		`SELECT ${selectItems.join(", ")}`,
+		projection ? compileProjectionFrom(projection) : `FROM ${quoteIdent(src)}`,
+		...joins
+	];
+	if (conditions.length > 0) lines.push(`WHERE ${conditions.join(" AND ")}`);
+	const sql = `${lines.join("\n")};`;
+	return {
+		entityKey,
+		viewName,
+		concept: entity.concept,
+		role: entity.role ?? DEFAULT_ROLE,
+		sourceTable: src,
+		columns,
+		sql,
+		dropSql: `DROP VIEW IF EXISTS ${quoteIdent(viewName)};`
+	};
+}
+/** Compile every entity in the config into its view, in declaration order. */
+function compileEntityViews(config, options = {}) {
+	return Object.keys(config.entities).map((key) => compileEntityView(config, key, options));
+}
+/**
+* Dry-run each entity's compiled view against the host DB via a caller-provided
+* `run` function, so `$raw` filter/join fragments — which skip schema validation
+* (see `validateEntitiesConfig`) — fail loudly *before* the first sync instead of
+* at sync time. Never throws: each view's outcome is collected into an
+* `ExplainResult`, so a mapping UI or CLI can show every problem at once.
+*
+* `run` should execute the SQL somewhere side-effect-free — e.g. inside a
+* transaction it rolls back, or by `EXPLAIN`-ing the statement — since the
+* compiled SQL is a `CREATE OR REPLACE VIEW`.
+*/
+async function explainEntitiesConfig(config, run, options = {}) {
+	const results = [];
+	for (const view of compileEntityViews(config, options)) try {
+		await run(view.sql);
+		results.push({
+			entityKey: view.entityKey,
+			ok: true,
+			sql: view.sql
+		});
+	} catch (error) {
+		results.push({
+			entityKey: view.entityKey,
+			ok: false,
+			sql: view.sql,
+			error: error instanceof Error ? error.message : String(error)
+		});
+	}
+	return results;
+}
+//#endregion
+export { explainViewExecutionError as a, explainEntitiesConfig as i, compileEntityView as n, compileEntityViews as r, DEFAULT_VIEW_PREFIX as t };