@metaobjectsdev/codegen-ts 0.16.0 → 0.17.0-rc.1

package/dist/projection/extract-view-spec.js

@@ -1,9 +1,29 @@
-import { TYPE_FIELD, TYPE_IDENTITY, TYPE_ORIGIN, TYPE_RELATIONSHIP, MetaSource, ORIGIN_SUBTYPE_PASSTHROUGH, ORIGIN_SUBTYPE_AGGREGATE, ORIGIN_PASSTHROUGH_ATTR_FROM, ORIGIN_PASSTHROUGH_ATTR_VIA, ORIGIN_AGGREGATE_ATTR_AGG, ORIGIN_AGGREGATE_ATTR_OF, ORIGIN_AGGREGATE_ATTR_VIA, ORIGIN_AGGREGATE_ATTR_FILTER, RELATIONSHIP_ATTR_OBJECT_REF, RELATIONSHIP_ATTR_CARDINALITY, CARDINALITY_ONE, IDENTITY_SUBTYPE_REFERENCE, IDENTITY_REFERENCE_ATTR_REFERENCES, FIELD_ATTR_COLUMN, findReferenceBetween, stripPackage, } from "@metaobjectsdev/metadata";
+import { TYPE_FIELD, TYPE_IDENTITY, TYPE_ORIGIN, TYPE_RELATIONSHIP, MetaSource, ORIGIN_SUBTYPE_PASSTHROUGH, ORIGIN_SUBTYPE_AGGREGATE, ORIGIN_SUBTYPE_COMPUTED, ORIGIN_SUBTYPE_FIRST, ORIGIN_PASSTHROUGH_ATTR_FROM, ORIGIN_PASSTHROUGH_ATTR_VIA, ORIGIN_AGGREGATE_ATTR_AGG, ORIGIN_AGGREGATE_ATTR_OF, ORIGIN_AGGREGATE_ATTR_VIA, ORIGIN_AGGREGATE_ATTR_FILTER, ORIGIN_ATTR_DISTINCT, ORIGIN_ATTR_ORDER_BY, ORIGIN_COMPUTED_ATTR_EXPR, ORIGIN_FIRST_ATTR_OF, ORIGIN_FIRST_ATTR_VIA, ORIGIN_FIRST_ATTR_FILTER, AGG_ANY, AGG_ALL, AGG_COLLECT, AGGREGATE_FUNCTIONS, FILTER_OP_EQ, FILTER_OP_NE, FILTER_OP_GT, FILTER_OP_GTE, FILTER_OP_LT, FILTER_OP_LTE, FILTER_OP_IS_NULL, FILTER_COMPOSE_AND, FILTER_COMPOSE_OR, SORT_ORDER_DESC, RELATIONSHIP_ATTR_OBJECT_REF, RELATIONSHIP_ATTR_CARDINALITY, CARDINALITY_ONE, IDENTITY_SUBTYPE_REFERENCE, IDENTITY_REFERENCE_ATTR_REFERENCES, FIELD_ATTR_COLUMN, OBJECT_PROJECTION_ATTR_FILTER, findReferenceBetween, stripPackage, } from "@metaobjectsdev/metadata";
 import { MetaObject } from "@metaobjectsdev/metadata";
 import { columnNameFromField, viewNameFromProjection, } from "../naming.js";
+// #213 — a write-through ENTITY (FR-024 §7 read-view) hosts its own view; the base
+// is the entity itself, not an extends-anchored projection.
+import { isWriteThrough } from "./projection-detector.js";
+// #209 — the SAME NOT-NULL predicate that drives a column's `.notNull()` decides
+// whether a belongs-to join is INNER (required FK) vs LEFT OUTER (nullable FK).
+import { isRequired } from "../column-mapper.js";
 /** Compose keys in the attr.filter shape. */
-const FILTER_AND = "and";
-const FILTER_OR = "or";
+const FILTER_AND = FILTER_COMPOSE_AND;
+const FILTER_OR = FILTER_COMPOSE_OR;
+// #195 — the three expression-only op/fn names of the attr.expression grammar. They
+// mirror EXPR_OP_IS_NOT_NULL / EXPR_OP_NOT / EXPR_FN_COALESCE in the metadata package's
+// meta-attr-expression module, which is not re-exported through the public barrel; the
+// remaining node ops (eq/ne/gt/… , isNull, and/or) are the shared FILTER_* vocabulary
+// imported above.
+const EXPR_OP_IS_NOT_NULL = "isNotNull";
+const EXPR_OP_NOT = "not";
+const EXPR_FN_COALESCE = "coalesce";
+/** The scalar-reduce @agg values that map to the plain `aggregate` SelectColumn kind. */
+const SCALAR_AGG_FUNCTIONS = new Set(AGGREGATE_FUNCTIONS);
+/** Expression comparison ops (share the filter vocabulary + per-subtype legality bands). */
+const EXPR_COMPARISON_OPS = new Set([
+    FILTER_OP_EQ, FILTER_OP_NE, FILTER_OP_GT, FILTER_OP_GTE, FILTER_OP_LT, FILTER_OP_LTE,
+]);
 /**
  * Desugar a single field clause to the canonical `{ op: value }` form (scalar→eq,
  * array→in, null→isNull, object→as-is). Mirrors metadata's attr.filter desugar so an
@@ -55,6 +75,63 @@ function resolveAggregateFilter(filter, entity, alias, ctx) {
         return undefined;
     return clauses.length === 1 ? clauses[0] : { kind: "and", clauses };
 }
+/**
+ * #207 — resolve a projection's row-scope `@filter` (the desugared canonical
+ * `{ field: { op: value }, and?, or? }`) into a {@link ViewFilterClause} whose
+ * refs are resolved against the projection's OWN declared columns (its SelectSpec),
+ * NOT against a single aggregated entity+alias (that is `resolveAggregateFilter`).
+ * Each field key names a declared projection field; it resolves by SelectColumn kind:
+ *   - passthrough (base OR joined) → `sourceAlias.sourceColumn` — the machinery that
+ *     makes `WHERE joined.status IS NULL OR joined.status = 1` work.
+ *   - computed (origin.computed)   → the inlined resolved expression (`exprCmp`).
+ *   - aggregate-derived (aggregate/predicateAgg/collectAgg/first) → THROW (a WHERE
+ *     cannot see aggregates; HAVING is a separate later extension). The loader already
+ *     fail-closes this (ERR_BAD_ATTR_FILTER) — this throw is a codegen belt-and-suspenders.
+ *   - a ref naming no declared field → THROW (dangling; also loader-rejected).
+ * Multiple fields at one level compose with AND (mirrors resolveAggregateFilter).
+ */
+function resolveViewFilter(filter, columnsByField, projectionName) {
+    if (typeof filter !== "object" || filter === null || Array.isArray(filter))
+        return undefined;
+    const clauses = [];
+    for (const [key, val] of Object.entries(filter)) {
+        if (key === FILTER_AND || key === FILTER_OR) {
+            const subs = (Array.isArray(val) ? val : [])
+                .map((s) => resolveViewFilter(s, columnsByField, projectionName))
+                .filter((c) => c !== undefined);
+            if (subs.length > 0)
+                clauses.push({ kind: key === FILTER_AND ? "and" : "or", clauses: subs });
+            continue;
+        }
+        const col = columnsByField.get(key);
+        if (!col) {
+            // The loader (validateProjectionFilter) already fail-closes a dangling or
+            // aggregate-derived ref, so by codegen time a missing column means a DECLARED,
+            // addressable field that buildSelectSpec could not resolve to a SELECT column
+            // (an internal inconsistency) — report it as such, not as "dangling".
+            throw new Error(`Projection ${projectionName}: view @filter field "${key}" did not resolve to a view column.`);
+        }
+        // A field clause may carry MULTIPLE ops (a range like { gte: 100, lte: 500 }); each
+        // becomes its own comparison, AND-composed (dropping all-but-the-first would silently
+        // widen the exposed row set). The loader has already validated every op for this
+        // field's subtype.
+        for (const [op, value] of Object.entries(desugarClause(val))) {
+            if (col.kind === "passthrough") {
+                clauses.push({ kind: "cmp", ref: `${col.sourceAlias}.${col.sourceColumn}`, op, value });
+            }
+            else if (col.kind === "computed") {
+                clauses.push({ kind: "exprCmp", expr: col.expr, op, value });
+            }
+            else {
+                throw new Error(`Projection ${projectionName}: view @filter references "${key}", an aggregate-derived ` +
+                    `field — a WHERE cannot see aggregates. Filter on a passthrough or computed field instead.`);
+            }
+        }
+    }
+    if (clauses.length === 0)
+        return undefined;
+    return clauses.length === 1 ? clauses[0] : { kind: "and", clauses };
+}
 // ---------------------------------------------------------------------------
 // Private helpers
 // ---------------------------------------------------------------------------
@@ -125,7 +202,7 @@ export function projectionViewName(projection, columnNamingStrategy) {
  * loader's `_refNamedOwner`: the ref names the anchor, never the physical
  * declaring ancestor of an inherited child.
  */
-function refNamedOwner(node, root) {
+export function refNamedOwner(node, root) {
     const ref = node.superRef;
     if (ref === undefined)
         return undefined;
@@ -189,6 +266,121 @@ function joinColumnFor(entity, fieldName, ctx) {
     const f = entity.fields().find((x) => x.name === fieldName);
     return f ? sourceColumnNameFor(f, ctx) : columnNameFromField(fieldName, ctx.columnNamingStrategy);
 }
+/** The physical column of an entity's primary-key field — the LEFT-JOIN phantom guard
+ *  (#195) tests `<joined>.<pk> IS NOT NULL`, and it is origin.first's tie-breaker. */
+function primaryKeyColumn(entity, ctx) {
+    // ADR-0039: resolving — a projection base may inherit its primary identity via extends.
+    const pkField = entity.primaryIdentity()?.fields[0];
+    return pkField ? joinColumnFor(entity, pkField, ctx) : undefined;
+}
+/**
+ * Walk a `@via` dotted path to its terminal (related) entity name. any/all carry no
+ * `@of` to name the aggregated entity, so it is derived from the last `@via` hop.
+ * Returns undefined if any hop fails to resolve (a prior loader error already fired).
+ */
+function viaTerminalEntity(via, root) {
+    const segments = via.split(".");
+    const rawEntity = segments[0];
+    if (!rawEntity)
+        return undefined;
+    let currentObj = root.findObject(stripPackage(rawEntity));
+    if (!currentObj)
+        return undefined;
+    let terminal = currentObj.name;
+    for (const relName of segments.slice(1)) {
+        const resolved = resolveHop(currentObj, relName);
+        if (!resolved)
+            return undefined;
+        const target = root.findObject(stripPackage(resolved.targetName));
+        if (!target)
+            return undefined;
+        currentObj = target;
+        terminal = target.name;
+    }
+    return terminal;
+}
+/**
+ * Resolve `@orderBy` keys ('field[:asc|desc]') against `entity`'s effective fields into
+ * physical {column, dir} pairs (naming strategy applied). Default direction is asc; nulls
+ * placement is pinned (nulls-last) at emit, not spelled here. Unknown keys are skipped
+ * (the loader validates key existence — `_validateOrderByKeys`).
+ */
+function resolveOrderByKeys(orderBy, entity, ctx) {
+    if (!Array.isArray(orderBy))
+        return [];
+    const keys = [];
+    for (const raw of orderBy) {
+        if (typeof raw !== "string")
+            continue;
+        const colonIdx = raw.indexOf(":");
+        const name = colonIdx === -1 ? raw : raw.slice(0, colonIdx);
+        const dir = colonIdx === -1 ? undefined : raw.slice(colonIdx + 1);
+        const field = entity.fields().find((f) => f.name === name);
+        if (!field)
+            continue;
+        keys.push({ column: sourceColumnNameFor(field, ctx), dir: dir === SORT_ORDER_DESC ? "desc" : "asc" });
+    }
+    return keys;
+}
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/**
+ * Resolve a raw `attr.expression` node (from origin.computed `@expr`) into a {@link
+ * ViewExprNode} whose `{field}` refs are lowered to the base alias's physical columns
+ * (naming strategy applied). The emitter then walks the resolved tree. Returns undefined
+ * if any node is structurally malformed or references a non-base field — the loader's
+ * origin.computed validation already rejects those, so this is defensive only.
+ */
+function resolveExprNode(raw, base, baseAlias, ctx) {
+    if (!isPlainObject(raw))
+        return undefined;
+    if ("field" in raw) {
+        const name = raw.field;
+        if (typeof name !== "string")
+            return undefined;
+        const field = base.fields().find((f) => f.name === name);
+        if (!field)
+            return undefined;
+        return { kind: "col", ref: `${baseAlias}.${sourceColumnNameFor(field, ctx)}` };
+    }
+    if ("value" in raw) {
+        return { kind: "lit", value: raw.value };
+    }
+    if ("fn" in raw) {
+        if (raw.fn !== EXPR_FN_COALESCE || !Array.isArray(raw.args))
+            return undefined;
+        const args = raw.args.map((a) => resolveExprNode(a, base, baseAlias, ctx));
+        if (args.some((a) => a === undefined))
+            return undefined;
+        return { kind: "coalesce", args: args };
+    }
+    if ("op" in raw && typeof raw.op === "string") {
+        const op = raw.op;
+        if (EXPR_COMPARISON_OPS.has(op)) {
+            const left = resolveExprNode(raw.left, base, baseAlias, ctx);
+            const right = resolveExprNode(raw.right, base, baseAlias, ctx);
+            return left && right ? { kind: "cmp", op, left, right } : undefined;
+        }
+        if (op === FILTER_OP_IS_NULL || op === EXPR_OP_IS_NOT_NULL) {
+            const arg = resolveExprNode(raw.arg, base, baseAlias, ctx);
+            return arg ? { kind: "nullTest", negated: op === EXPR_OP_IS_NOT_NULL, arg } : undefined;
+        }
+        if (op === EXPR_OP_NOT) {
+            const arg = resolveExprNode(raw.arg, base, baseAlias, ctx);
+            return arg ? { kind: "not", arg } : undefined;
+        }
+        if (op === FILTER_COMPOSE_AND || op === FILTER_COMPOSE_OR) {
+            if (!Array.isArray(raw.args))
+                return undefined;
+            const args = raw.args.map((a) => resolveExprNode(a, base, baseAlias, ctx));
+            if (args.some((a) => a === undefined))
+                return undefined;
+            return { kind: "logic", op: op === FILTER_COMPOSE_AND ? "and" : "or", args: args };
+        }
+    }
+    return undefined;
+}
 function shortAliasFor(entityName, used) {
     const base = (entityName[0] ?? "x").toLowerCase();
     if (!used.has(base)) {
@@ -217,9 +409,21 @@ function buildJoinTree(projection, base, root, usedAliases, baseAlias, ctx) {
             if (origin.type !== TYPE_ORIGIN)
                 continue;
             // ADR-0039: own (category 4) — origin.* never inherits (ADR-0029).
-            const viaAttr = origin.subType === ORIGIN_SUBTYPE_AGGREGATE
-                ? origin.ownAttr(ORIGIN_AGGREGATE_ATTR_VIA)
-                : origin.ownAttr(ORIGIN_PASSTHROUGH_ATTR_VIA);
+            // Only aggregate (count/sum/avg/min/max/any/all/collect) and passthrough origins
+            // contribute a LEFT-JOIN branch. origin.computed is row-level (no @via); origin.first
+            // (#195) lowers to a CORRELATED subquery, NOT a join — its @via must NOT enter the
+            // join tree (both @from-via and @first-via share the physical name "via", so an
+            // unguarded read would wrongly join a `first`).
+            let viaAttr;
+            if (origin.subType === ORIGIN_SUBTYPE_AGGREGATE) {
+                viaAttr = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_VIA);
+            }
+            else if (origin.subType === ORIGIN_SUBTYPE_PASSTHROUGH) {
+                viaAttr = origin.ownAttr(ORIGIN_PASSTHROUGH_ATTR_VIA);
+            }
+            else {
+                continue;
+            }
             if (!viaAttr)
                 continue;
             const segments = viaAttr.split(".");
@@ -261,6 +465,20 @@ function buildJoinTree(projection, base, root, usedAliases, baseAlias, ctx) {
                 // physical columns now so the ON clause is naming-strategy correct.
                 const fkHolder = referenceHolder === "source" ? currentObj : target;
                 const pkHolder = referenceHolder === "source" ? target : currentObj;
+                // #209 — a belongs-to hop (FK on the parent) whose FK is NOT NULL is
+                // semantically INNER: every base row has a match, so INNER and LEFT OUTER
+                // return the same set, and INNER matches the hand-written view it stands in
+                // for (and keeps `verify --db` fingerprints aligned). A nullable belongs-to
+                // FK, or ANY has-many hop (FK on the child — a base row may have zero
+                // children), stays LEFT OUTER so no base row is dropped.
+                const fkFieldObj = fkHolder.findField(fkField);
+                const selfInner = referenceHolder === "source" && fkFieldObj !== undefined && isRequired(fkFieldObj);
+                // Nested-chain safety: joins render flat + left-associative, so an INNER hop
+                // BELOW any LEFT ancestor drops the base row (its ON references a column the
+                // LEFT ancestor NULLed). An INNER only survives when the ENTIRE ancestor chain
+                // is INNER; otherwise demote to LEFT (lossless — under a LEFT ancestor, LEFT is
+                // the correct type). `path` holds this chain's ancestor hops accumulated so far.
+                const joinType = selfInner && path.every((prior) => prior.joinType === "inner") ? "inner" : "left";
                 path.push({
                     entity: currentObj,
                     relationship: relName,
@@ -268,6 +486,7 @@ function buildJoinTree(projection, base, root, usedAliases, baseAlias, ctx) {
                     fkColumn: joinColumnFor(fkHolder, fkField, ctx),
                     pkColumn: joinColumnFor(pkHolder, resolvedPkField, ctx),
                     referenceHolder,
+                    joinType,
                     targetEntity: stripPackage(targetName),
                 });
                 currentObj = target;
@@ -299,6 +518,7 @@ function buildJoinTree(projection, base, root, usedAliases, baseAlias, ctx) {
             fkColumn: step.fkColumn,
             pkColumn: step.pkColumn,
             referenceHolder: step.referenceHolder,
+            joinType: step.joinType,
             children: Array.from(node.children.values()).map(toJoinNode),
         };
     }
@@ -326,20 +546,23 @@ function findAliasInTree(joinTree, entityName) {
     }
     return recurse(joinTree.joins);
 }
-function buildSelectSpec(projection, base, joinTree, root, ctx) {
+function buildSelectSpec(projection, base, joinTree, root, ctx, usedAliases) {
     const columns = [];
     // FR-024 (ADR-0028): the projection's DECLARED field set IS the exposure —
     // the inclusive list, fail-closed by construction. The pre-FR-024 loop that
     // emitted every base-entity field as an implicit passthrough (the firehose)
     // is removed with the B4b cutover: base columns are declared explicitly as
     // extends-bound fields (`{ field.int: { name: id, extends: "Program.id" } }`).
-    // Fields explicitly declared on the projection.
-    // ADR-0039: own — the projection's DECLARED field set IS the exposure
-    // (FR-024/ADR-0028); iterate own fields + each field's own origin. origin.*
-    // NEVER inherits (ADR-0029), so the origin attr reads below are own (category 4).
-    for (const field of projection.ownChildren()) {
-        if (field.type !== TYPE_FIELD)
-            continue;
+    // #213 — an entity read-view HOST (base === projection, FR-024 §7) exposes its
+    // EFFECTIVE field set: the `o.*` includes fields inherited via extends (a
+    // BaseEntity id/createdAt). A plain projection exposes only its DECLARED (own)
+    // fields — the declared set IS the exposure (FR-024/ADR-0028). Either way, each
+    // field's own origin decides passthrough-from-base vs derived-from-join. origin.*
+    // NEVER inherits (ADR-0029), so the origin reads below are own (category 4).
+    const declaredFields = base === projection
+        ? base.fields()
+        : projection.ownChildren().filter((c) => c.type === TYPE_FIELD);
+    for (const field of declaredFields) {
         const origin = field.ownChildren().find((c) => c.type === TYPE_ORIGIN);
         const dbCol = sourceColumnNameFor(field, ctx);
         if (!origin) {
@@ -384,8 +607,44 @@ function buildSelectSpec(projection, base, joinTree, root, ctx) {
         else if (origin.subType === ORIGIN_SUBTYPE_AGGREGATE) {
             // ADR-0039: own (category 4) — origin.* never inherits (ADR-0029).
             const agg = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_AGG);
+            if (!agg)
+                continue;
+            const filterAttr = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_FILTER);
+            if (agg === AGG_ANY || agg === AGG_ALL) {
+                // #195 predicate quantifier — no @of; the related entity is @via's terminal
+                // hop, and @filter is the (required) quantified predicate.
+                const via = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_VIA);
+                if (!via)
+                    continue;
+                const relatedName = viaTerminalEntity(via, root);
+                if (!relatedName)
+                    continue;
+                const relatedEntity = root.findObject(relatedName);
+                const sourceAlias = findAliasInTree(joinTree, relatedName);
+                if (!relatedEntity || sourceAlias === undefined)
+                    continue;
+                const joinedPk = primaryKeyColumn(relatedEntity, ctx);
+                if (joinedPk === undefined)
+                    continue;
+                const pred = filterAttr !== undefined
+                    ? resolveAggregateFilter(filterAttr, relatedEntity, sourceAlias, ctx)
+                    : undefined;
+                if (pred === undefined)
+                    continue; // loader requires @filter on any/all
+                columns.push({
+                    kind: "predicateAgg",
+                    fieldName: field.name,
+                    dbColAlias: dbCol,
+                    quant: agg === AGG_ANY ? "any" : "all",
+                    sourceAlias,
+                    joinedPkColumn: joinedPk,
+                    pred,
+                });
+                continue;
+            }
+            // collect + the scalar reduces (count/sum/avg/min/max) all name @of.
             const of_ = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_OF);
-            if (!agg || !of_)
+            if (!of_)
                 continue;
             const dotIdx = of_.indexOf(".");
             if (dotIdx < 1)
@@ -399,28 +658,131 @@ function buildSelectSpec(projection, base, joinTree, root, ctx) {
             const targetField = targetEntity.fields().find((f) => f.name === fieldName);
             if (!targetField)
                 continue;
-            // Optional scoping filter — resolved against the aggregated entity (the @of
-            // entity, reached at `sourceAlias`), e.g. max(version) over only active rows.
-            // ADR-0039: own (category 4) — origin.* never inherits (ADR-0029).
-            const filterAttr = origin.ownAttr(ORIGIN_AGGREGATE_ATTR_FILTER);
+            if (agg === AGG_COLLECT) {
+                // #195 array rollup — collect @of across the related set. @distinct = set
+                // semantics; @orderBy (non-distinct) sets element order, else value-ascending.
+                const joinedPk = primaryKeyColumn(targetEntity, ctx);
+                if (joinedPk === undefined)
+                    continue;
+                const distinct = origin.ownAttr(ORIGIN_ATTR_DISTINCT) === true;
+                const orderBy = resolveOrderByKeys(origin.ownAttr(ORIGIN_ATTR_ORDER_BY), targetEntity, ctx);
+                columns.push({
+                    kind: "collectAgg",
+                    fieldName: field.name,
+                    dbColAlias: dbCol,
+                    sourceAlias,
+                    sourceColumn: sourceColumnNameFor(targetField, ctx),
+                    joinedPkColumn: joinedPk,
+                    distinct,
+                    orderBy,
+                });
+                continue;
+            }
+            if (SCALAR_AGG_FUNCTIONS.has(agg)) {
+                // Optional scoping filter — resolved against the aggregated entity (the @of
+                // entity, reached at `sourceAlias`), e.g. max(version) over only active rows.
+                const filter = filterAttr !== undefined
+                    ? resolveAggregateFilter(filterAttr, targetEntity, sourceAlias, ctx)
+                    : undefined;
+                columns.push({
+                    kind: "aggregate",
+                    fieldName: field.name,
+                    dbColAlias: dbCol,
+                    agg: agg,
+                    sourceAlias,
+                    sourceColumn: sourceColumnNameFor(targetField, ctx),
+                    ...(filter !== undefined ? { filter } : {}),
+                });
+            }
+        }
+        else if (origin.subType === ORIGIN_SUBTYPE_COMPUTED) {
+            // #195 row-level computed value from the base entity's own fields (@expr tree,
+            // no @via). ADR-0039: own — origin.* never inherits (ADR-0029).
+            const rawExpr = origin.ownAttr(ORIGIN_COMPUTED_ATTR_EXPR);
+            const expr = resolveExprNode(rawExpr, base, joinTree.baseAlias, ctx);
+            if (expr === undefined)
+                continue;
+            columns.push({ kind: "computed", fieldName: field.name, dbColAlias: dbCol, expr });
+        }
+        else if (origin.subType === ORIGIN_SUBTYPE_FIRST) {
+            // #195 correlated latest-row — argmax-then-project. Resolves to a correlated
+            // subquery (NOT a join). ADR-0039: own — origin.* never inherits (ADR-0029).
+            const of_ = origin.ownAttr(ORIGIN_FIRST_ATTR_OF);
+            if (!of_)
+                continue;
+            const dotIdx = of_.indexOf(".");
+            if (dotIdx < 1)
+                continue;
+            const childName = stripPackage(of_.slice(0, dotIdx));
+            const ofFieldName = of_.slice(dotIdx + 1);
+            const childEntity = root.findObject(childName);
+            if (!childEntity)
+                continue;
+            const ofField = childEntity.fields().find((f) => f.name === ofFieldName);
+            if (!ofField)
+                continue;
+            // The base↔child correlation FK — resolved exactly as buildJoinTree resolves a
+            // single hop (the identity.reference is the FK-direction SSOT). Single-hop @via;
+            // a multi-hop @via on origin.first is not lowered here (rare, and validated away).
+            const ref = findReferenceBetween(base, childEntity);
+            if (!ref)
+                continue;
+            const fkField = ref.referenceIdentity.fields[0];
+            if (!fkField)
+                continue;
+            const pkField = ref.referenceIdentity.resolvedTargetPkField(root) ?? "id";
+            const referenceHolder = ref.holder.name === base.name ? "source" : "target";
+            const fkHolder = referenceHolder === "source" ? base : childEntity;
+            const pkHolder = referenceHolder === "source" ? childEntity : base;
+            const childPk = primaryKeyColumn(childEntity, ctx);
+            if (childPk === undefined)
+                continue;
+            // A FRESH alias — the subquery is an independent correlated scope, never the
+            // JOIN-tree alias (reserved against usedAliases so it can never collide).
+            const childAlias = shortAliasFor(childEntity.name, usedAliases);
+            const orderBy = resolveOrderByKeys(origin.ownAttr(ORIGIN_ATTR_ORDER_BY), childEntity, ctx);
+            const filterAttr = origin.ownAttr(ORIGIN_FIRST_ATTR_FILTER);
             const filter = filterAttr !== undefined
-                ? resolveAggregateFilter(filterAttr, targetEntity, sourceAlias, ctx)
+                ? resolveAggregateFilter(filterAttr, childEntity, childAlias, ctx)
                 : undefined;
             columns.push({
-                kind: "aggregate",
+                kind: "first",
                 fieldName: field.name,
                 dbColAlias: dbCol,
-                agg,
-                sourceAlias,
-                sourceColumn: sourceColumnNameFor(targetField, ctx),
+                childEntity: childEntity.name,
+                childAlias,
+                sourceColumn: sourceColumnNameFor(ofField, ctx),
+                referenceHolder,
+                fkColumn: joinColumnFor(fkHolder, fkField, ctx),
+                pkColumn: joinColumnFor(pkHolder, pkField, ctx),
+                childPkColumn: childPk,
+                orderBy,
                 ...(filter !== undefined ? { filter } : {}),
             });
         }
     }
     return { columns };
 }
+/** The inflation-sensitive aggregate kinds: a non-distinct row multiplication corrupts
+ *  their value (sum/avg double-count; a non-distinct collect duplicates elements).
+ *  count is DISTINCT-guarded; min/max and any/all are inflation-immune. */
+function isInflationSensitive(c) {
+    if (c.kind === "aggregate")
+        return c.agg === "sum" || c.agg === "avg";
+    if (c.kind === "collectAgg")
+        return !c.distinct;
+    return false;
+}
+/** Count top-level join branches that traverse at least one to-many hop. Two or more
+ *  independent many-branches multiply (cartesian) and inflate sensitive aggregates. */
+function countManyBranches(joinTree) {
+    const hasMany = (node) => node.cardinality === "many" || node.children.some(hasMany);
+    return joinTree.joins.filter(hasMany).length;
+}
 function buildGroupBy(spec) {
-    const hasAgg = spec.columns.some((c) => c.kind === "aggregate");
+    // predicateAgg (bool_or/bool_and) and collectAgg (array_agg) are real aggregates and
+    // force GROUP BY too; computed/first are scalar-per-row and never grouped.
+    const hasAgg = spec.columns.some((c) => c.kind === "aggregate" || c.kind === "predicateAgg" || c.kind === "collectAgg");
     if (!hasAgg)
         return [];
     return spec.columns
@@ -441,17 +803,56 @@ function buildGroupBy(spec) {
  * @param ctx         Column naming strategy for SQL identifiers.
  */
 export function extractViewSpec(projection, root, ctx) {
-    const base = baseEntityFor(projection, root);
+    // #213 — a write-through entity (FR-024 §7) IS its own base: stored fields SELECT
+    // from the base alias (o.*), derived (origin.*) fields from the joins. A plain
+    // projection anchors its base via an extends binding (baseEntityFor).
+    const writeThrough = isWriteThrough(projection);
+    const base = writeThrough ? projection : baseEntityFor(projection, root);
     const usedAliases = new Set();
     const baseAlias = shortAliasFor(base.name, usedAliases);
     const joinTree = buildJoinTree(projection, base, root, usedAliases, baseAlias, ctx);
-    const selectSpec = buildSelectSpec(projection, base, joinTree, root, ctx);
+    const selectSpec = buildSelectSpec(projection, base, joinTree, root, ctx, usedAliases);
     const groupBy = buildGroupBy(selectSpec);
+    const view = viewName(projection, ctx);
+    warnOnJoinInflation(projection, view, joinTree, selectSpec);
+    // #207 — a projection's OWN row-scope @filter lowers to the view's outer WHERE.
+    // Gated to projections only (v1 scope): a write-through entity read-view is
+    // NEVER filtered — a filtered replica breaks read-your-writes totality, and the
+    // @filter attr is registered on object.projection (not object.entity), so a
+    // write-through entity cannot carry one anyway. The stored value is already the
+    // desugared canonical { field: { op: value } } form (FilterAttr.desugar at parse).
+    let where;
+    if (!writeThrough) {
+        const rawFilter = projection.ownAttr(OBJECT_PROJECTION_ATTR_FILTER);
+        if (rawFilter !== undefined) {
+            const columnsByField = new Map(selectSpec.columns.map((c) => [c.fieldName, c]));
+            where = resolveViewFilter(rawFilter, columnsByField, projection.name);
+        }
+    }
     return {
-        viewName: viewName(projection, ctx),
+        viewName: view,
         joinTree,
         selectSpec,
         groupBy,
+        ...(where !== undefined ? { where } : {}),
     };
 }
+/**
+ * #195 (spec §6, risk 2) — emit a load-time WARN when an inflation-sensitive aggregate
+ * (`sum`/`avg`/non-distinct `collect`) coexists with ≥2 independent to-many join
+ * branches in one view. Two many-branches multiply (cartesian), silently double-counting
+ * — a latent bug for `sum`/`avg` today, now surfaced. count is DISTINCT-guarded and
+ * min/max/any/all are inflation-immune, so they never trip it.
+ */
+function warnOnJoinInflation(projection, viewName, joinTree, spec) {
+    if (countManyBranches(joinTree) < 2)
+        return;
+    const sensitive = spec.columns.filter(isInflationSensitive).map((c) => c.fieldName);
+    if (sensitive.length === 0)
+        return;
+    console.warn(`[codegen-ts] projection "${projection.name}" (view ${viewName}): inflation-sensitive ` +
+        `aggregate field(s) [${sensitive.join(", ")}] coexist with ${countManyBranches(joinTree)} ` +
+        `independent to-many join branches — the joins multiply, so these values may double-count. ` +
+        `Split them into separate projections, or scope with @filter/@distinct.`);
+}
 //# sourceMappingURL=extract-view-spec.js.map