@intentius/chant-lexicon-sql 0.124.18 → 0.124.19

package/dist/files/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/files/common.ts"],"names":[],"mappings":"AAAA,yDAAyD;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2GAA2G;AAC3G,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE;gBAD3B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,MAAM,EAAE;CAOvC;AAED,sHAAsH;AACtH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,OAAO,GAAG,KAAK,EAAE,EAAE,CAiBhG;AAED,eAAO,MAAM,UAAU,GAAI,QAAQ,SAAS,KAAK,EAAE,KAAG,MAA4C,CAAC;AAEnG,yGAAyG;AACzG,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yGAAyG;IACzG,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,kIAAkI;AAClI,wBAAgB,YAAY,CAC1B,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,EAC7C,MAAM,EAAE,SAAS,KAAK,EAAE,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,QAAQ,CAAC,UAAU,CAAC,CAGtB;AAED,0DAA0D;AAC1D,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,EAAE,IAAI,MAAM,KAAG,MAA8C,CAAC;AAEjG,+CAA+C;AAC/C,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAAgD,CAAC;AAEvF,6FAA6F;AAC7F,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAAoF,CAAC"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/files/common.ts"],"names":[],"mappings":"AAAA,yDAAyD;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI1F;AAED,2GAA2G;AAC3G,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE;gBAD3B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,MAAM,EAAE;CAOvC;AAED,sHAAsH;AACtH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,OAAO,GAAG,KAAK,EAAE,EAAE,CAiBhG;AAED,eAAO,MAAM,UAAU,GAAI,QAAQ,SAAS,KAAK,EAAE,KAAG,MAA4C,CAAC;AAEnG,yGAAyG;AACzG,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yGAAyG;IACzG,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,kIAAkI;AAClI,wBAAgB,YAAY,CAC1B,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,EAC7C,MAAM,EAAE,SAAS,KAAK,EAAE,EACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,QAAQ,CAAC,UAAU,CAAC,CAGtB;AAED,0DAA0D;AAC1D,eAAO,MAAM,MAAM,GAAI,MAAM,MAAM,EAAE,IAAI,MAAM,KAAG,MAA8C,CAAC;AAEjG,+CAA+C;AAC/C,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAAgD,CAAC;AAEvF,6FAA6F;AAC7F,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAAoF,CAAC"}

package/dist/files/postgres.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../src/files/postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAuE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAEhI,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,UAAU,CAAC;AAE/E,4CAA4C;AAC5C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,CAGzD;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,oBAAoB,CAE9E;AAKD,8EAA8E;AAC9E,8EAA8E;AAC9E,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,WAAqF,CAAC;AAsB5H;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC,CA2ItH"}
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../src/files/postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAA8F,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvJ,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,UAAU,CAAC;AAE/E,4CAA4C;AAC5C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,CAGzD;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,oBAAoB,CAE9E;AAKD,8EAA8E;AAC9E,8EAA8E;AAC9E,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,WAAqF,CAAC;AAsB5H;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC,CAgJtH"}

package/dist/import-parser.d.ts

@@ -9,7 +9,9 @@
  * anything else is ClickHouse.
  *
  * A statement that declares nothing, or does not parse, is an error naming
- * it (`./sql-files.ts`); none is left out. A clause the parser does not know
+ * it (`./sql-files.ts`); none is left out. So is a `CREATE` of a kind chant
+ * cannot declare (#3911, `./coverage.ts`): `--parser-option
+ * skipUndeclarable` imports the rest and lists those as warnings. A clause the parser does not know
  * (#3872) is kept in the template as written.
  */
 import type { ParserOptions, TemplateIR, TemplateParser } from "@intentius/chant/import/parser";
@@ -20,7 +22,10 @@ export declare function guessDialect(content: string): SqlDialect;
 export declare function dialectOption(options: ParserOptions | undefined): SqlDialect | undefined;
 export declare class SqlFileParser implements TemplateParser {
     private readonly dialect?;
-    constructor(dialect?: SqlDialect | undefined);
+    private readonly options;
+    constructor(dialect?: SqlDialect | undefined, options?: {
+        skipUndeclarable?: boolean;
+    });
     parse(content: string): TemplateIR;
 }
 //# sourceMappingURL=import-parser.d.ts.map

package/dist/import-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"import-parser.d.ts","sourceRoot":"","sources":["../src/import-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAqB3D,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAKxD;AAED,4CAA4C;AAC5C,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAKxF;AAED,qBAAa,aAAc,YAAW,cAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAR,OAAO,CAAC,EAAE,UAAU,YAAA;IAEjD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;CAOnC"}
+{"version":3,"file":"import-parser.d.ts","sourceRoot":"","sources":["../src/import-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAqB3D,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAKxD;AAED,4CAA4C;AAC5C,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAKxF;AAED,qBAAa,aAAc,YAAW,cAAc;IAEhD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,OAAO,CAAC,EAAE,UAAU,YAAA,EACpB,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAO;IAG/D,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;CAUnC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "e48965d23f7b17728998ff0865d9dd4de65dc2c38c7f9dfa0f3cd01ed70ae32e",
+    "manifest.json": "b0d3f2af30a4cfda562e80b0d5b293126c5afa89b288fc8078d77db257b1b56c",
     "meta.json": "44b1dcfa5b5e5be2239fdc9614ab6c11d3f1461d64e61d572e3658af6c96aa68",
     "types/index.d.ts": "0286ebb367773e84c76818b0f69cb14cff8328fd2f8c65ed87563c8d5815458c",
     "rules/postgres-templates.ts": "94c2e73ec885a185fcc51c3346c371144eefe1512bc329f752cc7e609a0b4e5d",
@@ -79,5 +79,5 @@
     "rules/sqlpg125.ts": "cc7411c57c525613dc720ba00e986bbc4e5a84b8b0bcfa7a6ce0d058f039f025",
     "rules/sqlpg126.ts": "d57b82a5842273876510131d67bf4418cbd61eff821e245edebc644dafd502bb"
   },
-  "composite": "fcdfe796a1548ff8cdd0a4b18c35e130c52e4746c2855562a70c2dfe28c9523c"
+  "composite": "573d3e3625a6077e3a9b005581cccb7f98be01143788ac6e4858b967dad9bd37"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "sql",
-  "version": "0.124.18",
+  "version": "0.124.19",
   "chantVersion": ">=0.1.0",
   "namespace": "SQL",
   "intrinsics": [],

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAgB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAwB5E,eAAO,MAAM,SAAS,EAAE,aA0OvB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAgB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAwB5E,eAAO,MAAM,SAAS,EAAE,aA+OvB,CAAC"}

package/dist/postgres/import/live-export.d.ts

@@ -17,6 +17,12 @@
  *   declarations: the GRANT and REVOKE statements that take a new object's
  *   privileges to what the server holds. Roles are the environment's and are
  *   not imported.
+ * - An object of a kind no declaration holds (an aggregate, a cast, a
+ *   composite type, an event trigger, ...; `../live/undeclarable.ts`) fails
+ *   the import, which names every one of them (#3911). `skipUndeclarable`
+ *   (`--skip-undeclarable`) imports the rest and lists them as warnings. A
+ *   selector or `owned` import asks for objects chant can hold, so it does
+ *   not look.
  */
 import type { ExportedTemplate, ResourceSelector } from "@intentius/chant/lexicon";
 import { type BindOptions } from "../live/bind.js";
@@ -27,6 +33,8 @@ export interface ExportOptions extends Omit<BindOptions, "environment"> {
     selector?: ResourceSelector;
     owned?: boolean;
     verbatim?: boolean;
+    /** Import what can be declared, and list the objects of kinds no declaration holds as warnings instead of failing (#3911). */
+    skipUndeclarable?: boolean;
 }
 export declare function exportResources(options: ExportOptions): Promise<ExportedTemplate>;
 //# sourceMappingURL=live-export.d.ts.map

package/dist/postgres/import/live-export.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../../src/postgres/import/live-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAM9D,MAAM,WAAW,aAAc,SAAQ,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6BvF"}
+{"version":3,"file":"live-export.d.ts","sourceRoot":"","sources":["../../../src/postgres/import/live-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAS9D,MAAM,WAAW,aAAc,SAAQ,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8HAA8H;IAC9H,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyCvF"}

package/dist/postgres/live/catalog.d.ts

@@ -18,7 +18,7 @@
  * - objects an extension owns (`pg_depend.deptype = 'e'`): the extension
  *   declares them, so the extension is what is imported;
  * - `plpgsql`, installed in every database;
- * - aggregates, and a trigger the server makes for itself (a foreign key's)
+ * - a trigger the server makes for itself (a foreign key's)
  *   or clones onto a partition from its parent's;
  * - a routine with a SQL-standard body (`RETURN`, `BEGIN ATOMIC`): read, but
  *   marked `unsupported`, since the server prints it rewritten and a
@@ -32,6 +32,10 @@
  *   progress (`../migrate/names.ts`, `../migrate/carry.ts`), so a table reads
  *   as it was before the migration until its switch, and as declared after it.
  *
+ * Objects of the kinds no declaration holds (aggregates, casts, collations,
+ * composite and range types, event triggers, ...) are not read here: import
+ * finds them with `./undeclarable.ts` and refuses them by name (#3911).
+ *
  * Objects another tool owns, an ORM's or a migration runner's revision table
  * ({@link FOREIGN_TABLES}), are read and marked with the tool, so import
  * leaves them out with a warning and observation reports them foreign, never
@@ -82,6 +86,13 @@ export interface SchemaScope {
     /** The roles to read, when access is: the declared ones. A role is the cluster's, never read otherwise. */
     roles?: readonly string[];
 }
+/** The scope as a predicate on a schema name column, with its parameter. */
+export declare function scopeSql(column: string, scope: SchemaScope): {
+    sql: string;
+    params: unknown[];
+};
+/** `NOT <object is owned by an extension>`, for an object of catalog `catalog` with oid column `oid`. */
+export declare const notExtensionOwned: (catalog: string, oid: string) => string;
 interface SequenceParams {
     type: string;
     start: string;

package/dist/postgres/live/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/postgres/live/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAKjF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,iEAAiE;AACjE,eAAO,MAAM,cAAc,UAAmD,CAAC;AAE/E,gHAAgH;AAChH,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,kBAAkB,CAAC;IACzB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wHAAwH;IACxH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,yCAAyC;AACzC,MAAM,WAAW,WAAW;IAC1B,gHAAgH;IAChH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2GAA2G;IAC3G,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAyCD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB;AAQD,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,CAKtH;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,CAa9E;AAcD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAsf7G;AAED,+HAA+H;AAC/H,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,GAAG,SAAS,EAAE,MAAM,MAAM,EAAE,YAAY,MAAM,KAAG,MAA6D,CAAC;AAEnK;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,YAAY,EAAE,CAW1H"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/postgres/live/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAKjF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,iEAAiE;AACjE,eAAO,MAAM,cAAc,UAAmD,CAAC;AAE/E,gHAAgH;AAChH,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,kBAAkB,CAAC;IACzB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wHAAwH;IACxH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,yCAAyC;AACzC,MAAM,WAAW,WAAW;IAC1B,gHAAgH;IAChH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2GAA2G;IAC3G,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAqBD,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAM/F;AAED,yGAAyG;AACzG,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,EAAE,KAAK,MAAM,KAAG,MAC4F,CAAC;AAS9J,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB;AAQD,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,CAKtH;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,CAa9E;AAcD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAsf7G;AAED,+HAA+H;AAC/H,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,QAAQ,MAAM,GAAG,SAAS,EAAE,MAAM,MAAM,EAAE,YAAY,MAAM,KAAG,MAA6D,CAAC;AAEnK;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,YAAY,EAAE,CAW1H"}

package/dist/postgres/live/undeclarable.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The objects in a live Postgres database of the kinds no declaration holds
+ * (#3911), found so import can refuse them by name instead of leaving them
+ * out (`../../core/undeclarable.ts`).
+ *
+ * One catalog query per kind the coverage table marks refused
+ * (`../../coverage/postgres.json`), keyed by the row's `kind`. A kind whose
+ * row is flipped to declared is no longer asked about: its objects are then
+ * the catalog reader's (`./catalog.ts`) to read.
+ *
+ * Left out, as the reader leaves them out: the server's own schemas, objects
+ * an extension owns (`pg_depend.deptype = 'e'`; the extension is declared),
+ * the objects `initdb` makes, whose oids are below 16384
+ * (`FirstNormalObjectId`), and an object that is part of another
+ * (`deptype = 'i'`: the casts a range type makes for itself). An object in a
+ * schema is looked for in the schemas in scope; one that belongs to the whole
+ * database (a cast, an event trigger, a publication, a foreign data wrapper)
+ * is always looked for.
+ */
+import type { PostgresClient } from "./client.js";
+import { type SchemaScope } from "./catalog.js";
+import type { UndeclarableObject } from "../../core/undeclarable.js";
+interface Probe {
+    /**
+     * A query returning `schema` (NULL for a database-wide object), `name`, and
+     * for a database-wide object the role that owns it (so a managed
+     * provider's own can be told apart); `scope` is the predicate on `n.nspname`.
+     */
+    sql(scope: string): string;
+}
+export declare const POSTGRES_PROBES: Readonly<Record<string, Probe>>;
+/**
+ * Every object in scope of a kind the coverage table refuses, kind by kind
+ * in the table's order, each by schema then name. A kind the session may not
+ * read (a role without the privilege) is a problem in `unread`, not a pass.
+ */
+export declare function readUndeclarable(client: PostgresClient, scope?: SchemaScope): Promise<{
+    objects: UndeclarableObject[];
+    unread: string[];
+}>;
+export {};
+//# sourceMappingURL=undeclarable.d.ts.map

package/dist/postgres/live/undeclarable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"undeclarable.d.ts","sourceRoot":"","sources":["../../../src/postgres/live/undeclarable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAA+B,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKlE,UAAU,KAAK;IACb;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AA2BD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAqD3D,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAkBpJ"}

package/dist/postgres/testing/fake-client.d.ts

@@ -33,6 +33,12 @@ export interface FakeCatalog {
         table: string;
         def: string;
     }>;
+    /** What the undeclarable-kind probes (`../live/undeclarable.ts`) find, by the coverage table's kind. Default: nothing. */
+    undeclarable?: Array<{
+        kind: string;
+        schema?: string;
+        name: string;
+    }>;
 }
 export declare function fakeClient(catalog: FakeCatalog, log?: string[]): PostgresClient;
 //# sourceMappingURL=fake-client.d.ts.map

package/dist/postgres/testing/fake-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fake-client.d.ts","sourceRoot":"","sources":["../../../src/postgres/testing/fake-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACtJ,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvG,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,GAAE,MAAM,EAAO,GAAG,cAAc,CA0BnF"}
+{"version":3,"file":"fake-client.d.ts","sourceRoot":"","sources":["../../../src/postgres/testing/fake-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACtJ,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvG,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,0HAA0H;IAC1H,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,GAAE,MAAM,EAAO,GAAG,cAAc,CA6BnF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-sql",
-  "version": "0.124.18",
+  "version": "0.124.19",
   "description": "SQL lexicon for chant — database schema as typed declarations, one dialect at a time; ClickHouse first, with types read from a pinned server's catalog",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -70,6 +70,6 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.124.18"
+    "@intentius/chant": "^0.124.19"
   }
 }

package/src/clickhouse/import/live-export.ts

@@ -23,6 +23,12 @@
  *   (#3745), so a use is found by that body (`./inlined.ts`) as well as by
  *   the name. A function carries no comment, so `owned` does
  *   not apply to it.
+ * - An object of a kind no declaration holds (a window view, a quota, a
+ *   settings profile, a named collection, ...; `../live/undeclarable.ts`)
+ *   fails the import, which names every one of them (#3911).
+ *   `skipUndeclarable` (`--skip-undeclarable`) imports the rest and lists
+ *   them as warnings. A selector or `owned` import asks for objects chant can
+ *   hold, so it does not look.
  */
 
 import type { ExportedTemplate, ResourceSelector } from "@intentius/chant/lexicon";
@@ -35,6 +41,8 @@ import { isTrivia, tokenizeText } from "../tokens";
 import { unquote } from "../parser";
 import type { LiveObject } from "../live/catalog";
 import { inlinedFunctions } from "./inlined";
+import { readUndeclarable } from "../live/undeclarable";
+import { refuseUndeclarable } from "../../core/undeclarable";
 
 /** The functions among `names` a statement calls: a name followed by `(`. */
 export function calledFunctions(ddl: string, names: ReadonlySet<string>): string[] {
@@ -83,11 +91,19 @@ export interface ExportOptions extends Omit<BindOptions, "environment"> {
   selector?: ResourceSelector;
   owned?: boolean;
   verbatim?: boolean;
+  /** Import what can be declared, and list the objects of kinds no declaration holds as warnings instead of failing (#3911). */
+  skipUndeclarable?: boolean;
 }
 
 export async function exportResources(options: ExportOptions): Promise<ExportedTemplate> {
   const target = await bindClickHouse(options);
-  const all = await readLiveSchema(target);
+  // A selector or an owned import asks only for what chant can hold.
+  const undeclarable = !options.selector && !options.owned ? await readUndeclarable(target) : { objects: [], unread: [] };
+  const warnings: string[] = undeclarable.unread.map((u) => `the server was not checked for objects of one kind chant cannot declare, so some may be left out: ${u}`);
+  refuseUndeclarable("clickhouse", undeclarable.objects, options.skipUndeclarable, warnings);
+  // What is refused, and with --skip-undeclarable left out, is not also read as a table (a window view is in system.tables).
+  const refused = new Set(undeclarable.objects.filter((o) => o.schema !== undefined).map((o) => `${o.schema}.${o.name}`));
+  const all = (await readLiveSchema(target)).filter((o) => !(o.database !== undefined && refused.has(`${o.database}.${o.name}`)));
   const isFunction = (o: LiveObject) => o.type === CLICKHOUSE_ENTITY_TYPES.function;
   // A selector picks what it names, functions included; without one, functions go with what calls them (#3718).
   const live = options.selector ? all : all.filter((o) => !isFunction(o));
@@ -98,7 +114,6 @@ export async function exportResources(options: ExportOptions): Promise<ExportedT
     if (name !== undefined && name !== o.name && name !== `${o.database}.${o.name}`) return false;
     return true;
   });
-  const warnings: string[] = [];
   if (!options.selector) {
     const { adopted, skipped } = scopedFunctions(selected.filter((o) => !o.foreign), all.filter(isFunction), target.importFunctions);
     selected.push(...adopted);

package/src/clickhouse/live/undeclarable.e2e.test.ts

@@ -0,0 +1,64 @@
+/**
+ * Import against a real ClickHouse server never leaves an object out without
+ * a word (#3911): a server holding a quota, a settings profile, a named
+ * collection and a workload made with SQL, beside a table, fails the import,
+ * which names all of them; with `skipUndeclarable` the table is imported and
+ * they are warnings. What `users.xml` defines (the `default` quota and
+ * profile) is the server's, and is not refused.
+ *
+ * Needs Docker; skips cleanly without it. One throwaway
+ * `clickhouse/clickhouse-server` container at the pin, removed afterwards
+ * even on failure.
+ */
+
+import { afterAll, beforeAll, describe, expect, test } from "vitest";
+import { dockerAvailable, startScratchServer, type ScratchServer } from "../container";
+import { clickhouseQuery } from "../http";
+import { clickhouseImage } from "../../spec/pin";
+import { exportResources } from "../import/live-export";
+import { UndeclarableObjectsError } from "../../core/undeclarable";
+
+const enabled = await dockerAvailable();
+let server: ScratchServer | undefined;
+
+const SEED = [
+  "CREATE DATABASE analytics",
+  "CREATE TABLE analytics.events (id UInt64) ENGINE = MergeTree ORDER BY id",
+  "CREATE QUOTA q_reports FOR INTERVAL 1 hour MAX queries = 100",
+  "CREATE SETTINGS PROFILE p_reports SETTINGS max_threads = 2",
+  "CREATE NAMED COLLECTION nc_s3 AS url = 'https://example.com/bucket'",
+  "CREATE WORKLOAD all",
+];
+
+beforeAll(async () => {
+  if (!enabled) return;
+  server = await startScratchServer(clickhouseImage(), { namePrefix: "chant-sql-undeclarable" });
+  for (const stmt of SEED) await clickhouseQuery(server.endpoint, stmt);
+}, 600_000);
+
+afterAll(async () => {
+  await server?.stop();
+});
+
+const run = (extra: Record<string, unknown> = {}) => exportResources({ environment: "x", config: {}, env: { CLICKHOUSE_URL: server!.endpoint.url }, ...extra });
+
+const NAMED = ["named collection nc_s3", "quota q_reports", "settings profile p_reports", "workload all"];
+
+describe.skipIf(!enabled)("importing a server with objects chant cannot declare", () => {
+  test("fails, naming every one of them", async () => {
+    const err = await run().then(
+      () => undefined,
+      (e: unknown) => e,
+    );
+    expect(err).toBeInstanceOf(UndeclarableObjectsError);
+    const objects = (err as UndeclarableObjectsError).objects.map((o) => `${o.kind} ${o.schema ? `${o.schema}.` : ""}${o.name}`);
+    expect([...objects].sort()).toEqual(NAMED);
+  }, 120_000);
+
+  test("with skipUndeclarable, imports the rest and lists them as warnings", async () => {
+    const ir = await run({ skipUndeclarable: true });
+    expect(ir.resources.map((r) => r.properties.name)).toEqual(["analytics", "events"]);
+    const left = (ir.warnings ?? []).filter((w) => w.includes("is left out (--skip-undeclarable)"));
+    expect(left.map((w) => w.split(" is left out")[0]).sort()).toEqual(NAMED);
+  }, 120_000);
+});

package/src/clickhouse/live/undeclarable.ts

@@ -0,0 +1,66 @@
+/**
+ * The objects on a live ClickHouse server of the kinds no declaration holds
+ * (#3911), found so import can refuse them by name instead of leaving them
+ * out (`../../core/undeclarable.ts`).
+ *
+ * One `system.*` query per kind the coverage table marks refused
+ * (`../../coverage/clickhouse.json`), keyed by the row's `kind`. A kind whose
+ * row is flipped to declared is no longer asked about.
+ *
+ * What the server's configuration files define (`storage = 'users_xml'`, a
+ * named collection whose source is the config, an executable function) is
+ * the server's, not a schema's, and is left out; so is what is in a database
+ * out of scope. A server-wide object (a quota, a settings profile, a
+ * workload) is always looked for.
+ */
+
+import { clickhouseQuery } from "../http";
+import type { ClickHouseTarget } from "./bind";
+import { SYSTEM_DATABASES } from "./catalog";
+import { KIND_COVERAGE } from "../../coverage";
+import type { UndeclarableObject } from "../../core/undeclarable";
+
+const quote = (s: string) => `'${s.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}'`;
+
+/** A query returning `database` (empty for a server-wide object) and `name`; `scope` is the predicate on a database column. */
+type Probe = (scope: (column: string) => string) => string;
+
+const serverWide = (table: string, where = "1") => () => `SELECT '' AS database, name FROM system.${table} WHERE ${where}`;
+const SQL_DEFINED = "storage != 'users_xml'";
+
+export const CLICKHOUSE_PROBES: Readonly<Record<string, Probe>> = {
+  "non-SQL function": serverWide("functions", "origin NOT IN ('System', 'SQLUserDefined', 'ExecutableUserDefined')"),
+  "HTTP handler": serverWide("handlers"),
+  "masking policy": (scope) => `SELECT database, short_name || ' ON ' || table AS name FROM system.masking_policies WHERE ${SQL_DEFINED} AND ${scope("database")}`,
+  "named collection": serverWide("named_collections", "source = 'SQL'"),
+  quota: serverWide("quotas", SQL_DEFINED),
+  "workload resource": serverWide("resources"),
+  "settings profile": serverWide("settings_profiles", SQL_DEFINED),
+  "window view": (scope) => `SELECT database, name FROM system.tables WHERE engine = 'WindowView' AND NOT is_temporary AND ${scope("database")}`,
+  workload: serverWide("workloads"),
+};
+
+/**
+ * Every object in scope of a kind the coverage table refuses, kind by kind
+ * in the table's order, each by database then name. A kind the reader may
+ * not read (no grant on its `system` table) is a problem in `unread`, not a
+ * pass.
+ */
+export async function readUndeclarable(target: ClickHouseTarget): Promise<{ objects: UndeclarableObject[]; unread: string[] }> {
+  const scope = (column: string) =>
+    target.databases ? `${column} IN (${target.databases.map(quote).join(", ")})` : `${column} NOT IN (${[...SYSTEM_DATABASES].map(quote).join(", ")})`;
+  const objects: UndeclarableObject[] = [];
+  const unread: string[] = [];
+  for (const row of KIND_COVERAGE.clickhouse) {
+    if (row.status !== "refused") continue;
+    const probe = CLICKHOUSE_PROBES[row.kind];
+    if (!probe) throw new Error(`no system table query finds a ClickHouse ${row.kind} (src/clickhouse/live/undeclarable.ts)`);
+    try {
+      const rows = await clickhouseQuery<{ database: string; name: string }>(target.endpoint, `/* chant undeclarable: ${row.kind} */ SELECT database, name FROM (${probe(scope)}) ORDER BY database, name`);
+      for (const r of rows) objects.push({ kind: row.kind, ...(r.database ? { schema: r.database } : {}), name: r.name });
+    } catch (err) {
+      unread.push(`${row.kind}: ${err instanceof Error ? err.message.split("\n")[0] : String(err)}`);
+    }
+  }
+  return { objects, unread };
+}

package/src/clickhouse/testing/fake-server.ts

@@ -26,6 +26,8 @@ export interface FakeOptions {
   version?: string;
   /** The SQL user-defined functions `system.functions` lists. Default: none. */
   functions?: Array<{ name: string; statement: string }>;
+  /** What the undeclarable-kind probes (`../live/undeclarable.ts`) find, by the coverage table's kind. Default: nothing. */
+  undeclarable?: Array<{ kind: string; database?: string; name: string }>;
 }
 
 const row = (o: Record<string, unknown>) => `${JSON.stringify(o)}\n`;
@@ -38,6 +40,9 @@ export async function fakeClickHouse(objects: FakeObject[], options: FakeOptions
     queries.push(body);
     if (options.fail) return { status: options.fail.status, text: options.fail.body };
     if (/version\(\)/.test(body)) return ok(row({ v: options.version ?? "26.8.15.10" }));
+    // A probe for one undeclarable kind (`../live/undeclarable.ts`), which its comment names.
+    const probe = /^\/\* chant undeclarable: (.+?) \*\//.exec(body);
+    if (probe) return ok((options.undeclarable ?? []).filter((u) => u.kind === probe[1]).map((u) => row({ database: u.database ?? "", name: u.name })).join(""));
     if (/FROM system\.databases/.test(body)) {
       return ok(
         objects

package/src/codegen/classifier-page.test.ts

@@ -3,6 +3,7 @@ import { join } from "node:path";
 import { expect, test } from "vitest";
 import { renderClassifierPage } from "./classifier-page";
 import { renderPostgresClassifierPage } from "./postgres-classifier-page";
+import { renderCoveragePage } from "./coverage-page";
 
 test("the committed classifier page is what the rules render (run npm run docs)", () => {
   const committed = readFileSync(join(import.meta.dirname, "..", "..", "docs", "pages", "change-classifier.mdx"), "utf-8");
@@ -14,3 +15,8 @@ test("the committed Postgres classifier page is what the rules render (run npm r
   const committed = readFileSync(join(import.meta.dirname, "..", "..", "docs", "pages", "postgres-change-classifier.mdx"), "utf-8");
   expect(committed).toBe(renderPostgresClassifierPage());
 });
+
+test("the committed object coverage page is what the coverage tables render (run npm run docs)", () => {
+  const committed = readFileSync(join(import.meta.dirname, "..", "..", "docs", "pages", "object-coverage.mdx"), "utf-8");
+  expect(committed).toBe(renderCoveragePage());
+});

package/src/codegen/coverage-page.ts

@@ -0,0 +1,77 @@
+/**
+ * `docs/pages/object-coverage.mdx`, written from the coverage tables
+ * (`../coverage/<dialect>.json`) by `npm run docs`, so the page cannot
+ * disagree with what import refuses.
+ */
+
+import { KIND_COVERAGE, PINNED_COMMANDS, type KindRow } from "../coverage";
+import type { SqlDialect } from "../dialects";
+
+const cell = (s: string) => s.replace(/\|/g, "\\|").replace(/[{}<>]/g, (c) => `\\${c}`);
+
+const STATUS: Record<KindRow["status"], string> = { declared: "declared", refused: "refused", "out-of-scope": "out of scope" };
+
+function table(dialect: SqlDialect): string {
+  const rows = [...KIND_COVERAGE[dialect]].sort((a, b) => (a.command < b.command ? -1 : a.command > b.command ? 1 : 0));
+  return [
+    "| Command | Kind | Status | Declared by, or why not |",
+    "|---|---|---|---|",
+    ...rows.map((r) => {
+      const command = `\`${r.command}\`${r.form ? ` (${cell(r.form)})` : ""}`;
+      const why = r.status === "declared" ? `\`${r.entity}\`${r.note ? `: ${cell(r.note)}` : ""}` : cell(r.reason ?? "");
+      return `| ${command} | ${cell(r.kind)} | ${STATUS[r.status]} | ${why} |`;
+    }),
+  ].join("\n");
+}
+
+function counts(dialect: SqlDialect): string {
+  const rows = KIND_COVERAGE[dialect];
+  const n = (s: KindRow["status"]) => rows.filter((r) => r.status === s).length;
+  return `${n("declared")} declared, ${n("refused")} refused, ${n("out-of-scope")} out of scope`;
+}
+
+export function renderCoveragePage(): string {
+  const pg = PINNED_COMMANDS.postgres.map((p) => p.version).join(", ");
+  const ch = PINNED_COMMANDS.clickhouse.map((p) => p.version).join(", ");
+  return `---
+title: "Object Coverage"
+label: "Object Coverage"
+description: "Every kind of object each pinned Postgres and ClickHouse server can create, marked declared, refused with a reason, or out of scope, and what import does with each"
+diataxis: reference
+order: 3
+---
+
+{/* Written by src/codegen/coverage-page.ts from src/coverage/postgres.json and src/coverage/clickhouse.json. Edit the tables, then run npm run docs. */}
+
+Each row is a \`CREATE\` command a pinned server has, or one form of a command where chant treats the forms apart (\`CREATE TYPE ... AS ENUM\` is declared, \`CREATE TYPE ... AS RANGE\` is not). The commands come from the servers' own sources at each pinned version (\`scripts/sql-create-commands.ts\`), and a test fails when a pinned server has a command with no row here, so a new server release cannot add a kind nobody looked at.
+
+- **declared**: a tag declares it, and import writes it as that declaration.
+- **refused**: no declaration holds it yet. \`chant import --from <env>\` fails when the server has one, naming every such object (kind, schema, name) at once, and \`chant import schema.sql\` fails on the statement. Nothing is left out without a word.
+- **out of scope**: the environment's, not a schema's: import never reads it.
+
+\`--skip-undeclarable\` (\`--parser-option skipUndeclarable\` for a file) imports everything else and lists the refused objects as warnings, for an adopter who keeps those objects by hand for now:
+
+\`\`\`bash
+chant import --from prod --skip-undeclarable
+chant import schema.sql --parser-option skipUndeclarable
+\`\`\`
+
+What a managed provider, an extension or the server's configuration files define is never refused: an extension's aggregates and casts are the extension's, declared with it, and a quota from \`users.xml\` is the server's. An import with \`--type\`, \`--name\` or \`--owned\` asks only for objects chant can hold, and does not look for the rest.
+
+## Postgres
+
+Pinned majors: ${pg}. ${counts("postgres")}.
+
+${table("postgres")}
+
+## ClickHouse
+
+Pinned release: ${ch}. ${counts("clickhouse")}.
+
+${table("clickhouse")}
+
+## Declaring a refused kind
+
+A kind becomes declarable in three steps: a tag that declares it, the catalog reader reading it (\`src/postgres/live/catalog.ts\`, \`src/clickhouse/live/catalog.ts\`), and its row flipped to \`declared\` with the entity type, its reason taken out. The row's flip is what stops import refusing the kind. After moving a pin, run \`npx tsx scripts/sql-create-commands.ts\` and give each new command a row.
+`;
+}

package/src/codegen/docs.ts

@@ -9,6 +9,7 @@ import { writeFileSync } from "fs";
 import { docsPipeline, writeDocsSite, type DocsConfig } from "@intentius/chant/codegen/docs";
 import { renderClassifierPage } from "./classifier-page";
 import { renderPostgresClassifierPage } from "./postgres-classifier-page";
+import { renderCoveragePage } from "./coverage-page";
 
 const overview = `The sql lexicon declares database schema in TypeScript. It has two dialects,
 each a subpath of the one package: ClickHouse at
@@ -143,6 +144,9 @@ Both dialects:
 - [Composites](./composites/): five ClickHouse and five Postgres composites.
 - [Lint Rules and Checks](./lint-rules/): every lint rule and post-synth
   check.
+- [Object Coverage](./object-coverage/): every kind of object the pinned
+  servers can create, declared, refused or out of scope, and what import
+  does with each.
 
 ## Schema changes and \`chant migrate\`
 
@@ -201,6 +205,7 @@ export async function generateDocs(opts?: { verbose?: boolean }): Promise<void>
 
   writeFileSync(join(pkgDir, "docs", "pages", "change-classifier.mdx"), renderClassifierPage());
   writeFileSync(join(pkgDir, "docs", "pages", "postgres-change-classifier.mdx"), renderPostgresClassifierPage());
+  writeFileSync(join(pkgDir, "docs", "pages", "object-coverage.mdx"), renderCoveragePage());
 
   const config: DocsConfig = {
     name: "sql",