@prisma-next/target-postgres 0.14.0-dev.11 → 0.14.0-dev.13

package/dist/canonicalize-Bn3BM1Cn.mjs

@@ -0,0 +1,46 @@
+import { createHash } from "node:crypto";
+//#region src/core/rls/canonicalize.ts
+/**
+* Stabilizes an authored predicate for hashing: trim, and collapse runs of
+* internal whitespace to a single space.
+*
+* This is deliberately minimal. The content hash is the equivalence relation
+* for a policy, and the wire name (prefix + hash) is the only thing ever
+* compared — we never recompute the hash from an introspected policy body, so
+* there is no need to match Postgres's reprinted form. Minimal normalization
+* also protects the no-collision property: aggressive rewriting (lowercasing,
+* paren-stripping, cast-alias folding) risks collapsing two distinct predicates
+* onto one hash. Out-of-band alteration of a hashed policy is unsupported.
+*
+* The normalizer is a stability commitment: any change re-suffixes all wire names.
+*/
+function normalizePredicate(sql) {
+	return sql.replace(/\s+/g, " ").trim();
+}
+/**
+* Returns the first 8 lowercase hex characters of the SHA-256 digest over the
+* canonical content tuple for an RLS policy:
+*
+*   [normalize(using), normalize(withCheck), sortedRoles, operation, permissive]
+*
+* Schema and table are excluded (they are orthogonal to policy equivalence).
+* Uses `JSON.stringify` for a deterministic encoding.
+*/
+function computeContentHash(parts) {
+	const using = normalizePredicate(parts.using ?? "");
+	const withCheck = normalizePredicate(parts.withCheck ?? "");
+	const roles = [...new Set(parts.roles)].sort();
+	const permissive = parts.permissive ? "permissive" : "restrictive";
+	const tuple = JSON.stringify([
+		using,
+		withCheck,
+		roles,
+		parts.operation,
+		permissive
+	]);
+	return createHash("sha256").update(tuple).digest("hex").slice(0, 8);
+}
+//#endregion
+export { normalizePredicate as n, computeContentHash as t };
+
+//# sourceMappingURL=canonicalize-Bn3BM1Cn.mjs.map

package/dist/canonicalize-Bn3BM1Cn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize-Bn3BM1Cn.mjs","names":[],"sources":["../src/core/rls/canonicalize.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\nexport type RlsPolicyOperation = 'select' | 'insert' | 'update' | 'delete' | 'all';\n\nexport interface ContentHashParts {\n  readonly using?: string;\n  readonly withCheck?: string;\n  readonly roles: readonly string[];\n  readonly operation: RlsPolicyOperation;\n  readonly permissive: boolean;\n}\n\n/**\n * Stabilizes an authored predicate for hashing: trim, and collapse runs of\n * internal whitespace to a single space.\n *\n * This is deliberately minimal. The content hash is the equivalence relation\n * for a policy, and the wire name (prefix + hash) is the only thing ever\n * compared — we never recompute the hash from an introspected policy body, so\n * there is no need to match Postgres's reprinted form. Minimal normalization\n * also protects the no-collision property: aggressive rewriting (lowercasing,\n * paren-stripping, cast-alias folding) risks collapsing two distinct predicates\n * onto one hash. Out-of-band alteration of a hashed policy is unsupported.\n *\n * The normalizer is a stability commitment: any change re-suffixes all wire names.\n */\nexport function normalizePredicate(sql: string): string {\n  return sql.replace(/\\s+/g, ' ').trim();\n}\n\n/**\n * Returns the first 8 lowercase hex characters of the SHA-256 digest over the\n * canonical content tuple for an RLS policy:\n *\n *   [normalize(using), normalize(withCheck), sortedRoles, operation, permissive]\n *\n * Schema and table are excluded (they are orthogonal to policy equivalence).\n * Uses `JSON.stringify` for a deterministic encoding.\n */\nexport function computeContentHash(parts: ContentHashParts): string {\n  const using = normalizePredicate(parts.using ?? '');\n  const withCheck = normalizePredicate(parts.withCheck ?? '');\n  const roles = [...new Set(parts.roles)].sort();\n  const permissive = parts.permissive ? 'permissive' : 'restrictive';\n\n  const tuple = JSON.stringify([using, withCheck, roles, parts.operation, permissive]);\n  return createHash('sha256').update(tuple).digest('hex').slice(0, 8);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,SAAgB,mBAAmB,KAAqB;CACtD,OAAO,IAAI,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;AACvC;;;;;;;;;;AAWA,SAAgB,mBAAmB,OAAiC;CAClE,MAAM,QAAQ,mBAAmB,MAAM,SAAS,EAAE;CAClD,MAAM,YAAY,mBAAmB,MAAM,aAAa,EAAE;CAC1D,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK;CAC7C,MAAM,aAAa,MAAM,aAAa,eAAe;CAErD,MAAM,QAAQ,KAAK,UAAU;EAAC;EAAO;EAAW;EAAO,MAAM;EAAW;CAAU,CAAC;CACnF,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;AACpE"}

package/dist/canonicalize-CAbXtVtB.d.mts

@@ -0,0 +1,37 @@
+//#region src/core/rls/canonicalize.d.ts
+type RlsPolicyOperation = 'select' | 'insert' | 'update' | 'delete' | 'all';
+interface ContentHashParts {
+  readonly using?: string;
+  readonly withCheck?: string;
+  readonly roles: readonly string[];
+  readonly operation: RlsPolicyOperation;
+  readonly permissive: boolean;
+}
+/**
+ * Stabilizes an authored predicate for hashing: trim, and collapse runs of
+ * internal whitespace to a single space.
+ *
+ * This is deliberately minimal. The content hash is the equivalence relation
+ * for a policy, and the wire name (prefix + hash) is the only thing ever
+ * compared — we never recompute the hash from an introspected policy body, so
+ * there is no need to match Postgres's reprinted form. Minimal normalization
+ * also protects the no-collision property: aggressive rewriting (lowercasing,
+ * paren-stripping, cast-alias folding) risks collapsing two distinct predicates
+ * onto one hash. Out-of-band alteration of a hashed policy is unsupported.
+ *
+ * The normalizer is a stability commitment: any change re-suffixes all wire names.
+ */
+declare function normalizePredicate(sql: string): string;
+/**
+ * Returns the first 8 lowercase hex characters of the SHA-256 digest over the
+ * canonical content tuple for an RLS policy:
+ *
+ *   [normalize(using), normalize(withCheck), sortedRoles, operation, permissive]
+ *
+ * Schema and table are excluded (they are orthogonal to policy equivalence).
+ * Uses `JSON.stringify` for a deterministic encoding.
+ */
+declare function computeContentHash(parts: ContentHashParts): string;
+//#endregion
+export { normalizePredicate as i, RlsPolicyOperation as n, computeContentHash as r, ContentHashParts as t };
+//# sourceMappingURL=canonicalize-CAbXtVtB.d.mts.map

package/dist/canonicalize-CAbXtVtB.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize-CAbXtVtB.d.mts","names":[],"sources":["../src/core/rls/canonicalize.ts"],"mappings":";KAEY,kBAAA;AAAA,UAEK,gBAAA;EAAA,SACN,KAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,SAAA,EAAW,kBAAkB;EAAA,SAC7B,UAAA;AAAA;;;;;;;;;;AAAU;AAiBrB;;;;iBAAgB,kBAAA,CAAmB,GAAW;AAa9C;;;;AAA0D;;;;;AAA1D,iBAAgB,kBAAA,CAAmB,KAAuB,EAAhB,gBAAgB"}

package/dist/contract-free.d.mts

@@ -1,4 +1,4 @@
-import { a as PostgresAlterTable, o as PostgresCreateSchema, r as AnyAlterTableAction, s as PostgresCreateTable, t as AddColumnAction } from "./nodes-pLeLgdis.mjs";
+import { a as PostgresAlterTable, c as PostgresCreateTable, r as AnyAlterTableAction, s as PostgresCreateSchema, t as AddColumnAction } from "./nodes-YvdohJ2X.mjs";
 import { t as PostgresTableSource } from "./table-source-BvFo7gVs.mjs";
 import { DdlColumn, DdlNode, DdlTableConstraint, SelectAst } from "@prisma-next/sql-relational-core/ast";
 import { CfExpr, ColumnDescriptor, ColumnSchema, TableHandle } from "@prisma-next/sql-relational-core/contract-free";

package/dist/contract-free.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"contract-free.d.mts","names":[],"sources":["../src/contract-free/checks.ts","../src/contract-free/columns.ts","../src/contract-free/control-bootstrap.ts","../src/contract-free/ddl.ts"],"mappings":";;;;;;;;;;AAiBA;iBAAgB,UAAA,CAAW,aAAA,WAAwB,MAAM;AAAA,UASxC,uBAAA;EACf,WAAA,IAAe,SAAA;EACf,YAAA,IAAgB,SAAS;AAAA;;;;;;;;;AAAA;iBAYX,cAAA,CAAe,MAAA,UAAgB,KAAA,WAAgB,uBAAuB;AAAA,UAWrE,4BAAA;EACf,iBAAA,IAAqB,SAAA;EACrB,gBAAA,IAAoB,SAAS;AAAA;;;;AAbuD;AAWtF;;;;;;;;;AAE+B;iBAiBf,mBAAA,CAAoB,OAAA;EAAA,SACzB,cAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;AAAA,IACP,4BAA4B;AAAA,UAuDf,wBAAA;EACf,aAAA,IAAiB,SAAA;EACjB,YAAA,IAAgB,SAAS;AAAA;;AAzDK;AAuDhC;;;iBAUgB,eAAA,CAAgB,OAAA;EAAA,SACrB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,wBAAwB;;AAZD;AAQ3B;;iBAgBgB,oBAAA,CAAqB,OAAA;EAAA,SAC1B,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,QAAA;AAAA,IACP,SAAS;AAAA,UAUI,yBAAA;EACf,cAAA,IAAkB,SAAA;EAClB,aAAA,IAAiB,SAAA;EACjB,SAAA,IAAa,SAAA;AAAA;;;;;;;iBASC,gBAAA,CAAiB,OAAA;EAAA,SACtB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,yBAAyB;;;;;;iBAuBb,aAAA,CAAc,OAAA;EAAA,SACnB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,YAAA;AAAA,IACP,SAAS;AAAA,UAiCI,2BAAA;EACf,SAAA,IAAa,SAAA;EACb,QAAA,IAAY,SAAS;AAAA;AAnEvB;;;;;AAAA,iBA2EgB,kBAAA,CAAmB,OAAA;EAAA,SACxB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,cAAA;AAAA,IACP,2BAA2B;AA3EF;AAuB7B;;;;AAvB6B,iBAoHb,eAAA,CAAgB,MAAA,UAAgB,KAAA,WAAgB,SAAS;;;;;iBAYzD,eAAA,CAAgB,OAAA;EAAA,SACrB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,SAAS;AAAA,UAQI,2BAAA;EACf,gBAAA,IAAoB,SAAA;EACpB,eAAA,IAAmB,SAAS;AAAA;;;;AA/EP;iBAsFP,kBAAA,CAAmB,aAAA,WAAwB,2BAA2B;AAAA,UAYrE,uBAAA;EACf,YAAA,IAAgB,SAAA;EAChB,WAAA,IAAe,SAAS;AAAA;;;;;iBAOV,cAAA,CAAe,MAAA,UAAgB,SAAA,WAAoB,uBAAuB;;;KCpVrF,OAAA;EAAA,SAAqB,QAAQ;AAAA;AAAA,cAOrB,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,KAAA,GAAS,IAAA,GAAO,OAAA,KAAU,gBAAiD;AAAA,cAC3E,SAAA,GAAa,IAAA,GAAO,OAAA,KAAU,gBAAsD;AAAA,cACpF,WAAA,GAAe,IAAA,GAAO,OAAA,KAAU,gBACR;ADZoB;AASzD;;;;;;;;;AAE2B;AAY3B;AAvByD,iBC0BzC,OAAA,gBAAuB,YAAA,EACrC,MAAA;EAAA,SAAmB,IAAA;EAAA,SAAuB,MAAA;EAAA,SAA0B,KAAA;AAAA,GACpE,OAAA,EAAS,MAAA,GACR,WAAA,CAAY,MAAA;;;iBCEC,+BAAA,aAA4C,OAAO;AAAA,iBAInD,iCAAA,aAA8C,OAAO;;;;;;;AFnCrE;;;;AAAyD;AASzD;;;;;iBGHgB,WAAA,CAAY,OAAA;EAAA,SACjB,KAAA;EAAA,SACA,MAAA;EAAA,SACA,WAAA;EAAA,SACA,OAAA,WAAkB,SAAA;EAAA,SAClB,WAAA,YAAuB,kBAAA;AAAA,IAC9B,mBAAA;;;;;iBAQY,YAAA,CAAa,OAAA;EAAA,SAClB,MAAA;EAAA,SACA,WAAA;AAAA,IACP,oBAAoB;;;;;;iBASR,eAAA,CAAgB,MAAA,EAAQ,SAAA,GAAY,eAAe;;;AHIpC;AAiB/B;iBGbgB,UAAA,CAAW,OAAA;EAAA,SAChB,KAAA;EAAA,SACA,MAAA;EAAA,SACA,OAAA,WAAkB,mBAAA;AAAA,IACzB,kBAAkB"}
+{"version":3,"file":"contract-free.d.mts","names":[],"sources":["../src/contract-free/checks.ts","../src/contract-free/columns.ts","../src/contract-free/control-bootstrap.ts","../src/contract-free/ddl.ts"],"mappings":";;;;;;;;;;AAiBA;iBAAgB,UAAA,CAAW,aAAA,WAAwB,MAAM;AAAA,UASxC,uBAAA;EACf,WAAA,IAAe,SAAA;EACf,YAAA,IAAgB,SAAS;AAAA;;;;;;;;;AAAA;iBAYX,cAAA,CAAe,MAAA,UAAgB,KAAA,WAAgB,uBAAuB;AAAA,UAWrE,4BAAA;EACf,iBAAA,IAAqB,SAAA;EACrB,gBAAA,IAAoB,SAAS;AAAA;;;;AAbuD;AAWtF;;;;;;;;;AAE+B;iBAiBf,mBAAA,CAAoB,OAAA;EAAA,SACzB,cAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;AAAA,IACP,4BAA4B;AAAA,UAuDf,wBAAA;EACf,aAAA,IAAiB,SAAA;EACjB,YAAA,IAAgB,SAAS;AAAA;;AAzDK;AAuDhC;;;iBAUgB,eAAA,CAAgB,OAAA;EAAA,SACrB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,wBAAwB;;AAZD;AAQ3B;;iBAgBgB,oBAAA,CAAqB,OAAA;EAAA,SAC1B,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,QAAA;AAAA,IACP,SAAS;AAAA,UAUI,yBAAA;EACf,cAAA,IAAkB,SAAA;EAClB,aAAA,IAAiB,SAAA;EACjB,SAAA,IAAa,SAAA;AAAA;;;;;;;iBASC,gBAAA,CAAiB,OAAA;EAAA,SACtB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,yBAAyB;;;;;;iBAuBb,aAAA,CAAc,OAAA;EAAA,SACnB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,YAAA;AAAA,IACP,SAAS;AAAA,UAiCI,2BAAA;EACf,SAAA,IAAa,SAAA;EACb,QAAA,IAAY,SAAS;AAAA;AAnEvB;;;;;AAAA,iBA2EgB,kBAAA,CAAmB,OAAA;EAAA,SACxB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,cAAA;AAAA,IACP,2BAA2B;AA3EF;AAuB7B;;;;AAvB6B,iBAoHb,eAAA,CAAgB,MAAA,UAAgB,KAAA,WAAgB,SAAS;;;;;iBAYzD,eAAA,CAAgB,OAAA;EAAA,SACrB,MAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;AAAA,IACP,SAAS;AAAA,UAQI,2BAAA;EACf,gBAAA,IAAoB,SAAA;EACpB,eAAA,IAAmB,SAAS;AAAA;;;;AA/EP;iBAsFP,kBAAA,CAAmB,aAAA,WAAwB,2BAA2B;AAAA,UAqFrE,uBAAA;EACf,YAAA,IAAgB,SAAA;EAChB,WAAA,IAAe,SAAS;AAAA;AAxGb;AAQb;;;AARa,iBA+GG,cAAA,CAAe,MAAA,UAAgB,SAAA,WAAoB,uBAAuB;;;KC7ZrF,OAAA;EAAA,SAAqB,QAAQ;AAAA;AAAA,cAOrB,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,IAAA,GAAQ,IAAA,GAAO,OAAA,KAAU,gBAAgD;AAAA,cACzE,KAAA,GAAS,IAAA,GAAO,OAAA,KAAU,gBAAiD;AAAA,cAC3E,SAAA,GAAa,IAAA,GAAO,OAAA,KAAU,gBAAsD;AAAA,cACpF,WAAA,GAAe,IAAA,GAAO,OAAA,KAAU,gBACR;ADZoB;AASzD;;;;;;;;;AAE2B;AAY3B;AAvByD,iBC0BzC,OAAA,gBAAuB,YAAA,EACrC,MAAA;EAAA,SAAmB,IAAA;EAAA,SAAuB,MAAA;EAAA,SAA0B,KAAA;AAAA,GACpE,OAAA,EAAS,MAAA,GACR,WAAA,CAAY,MAAA;;;iBCEC,+BAAA,aAA4C,OAAO;AAAA,iBAInD,iCAAA,aAA8C,OAAO;;;;;;;AFnCrE;;;;AAAyD;AASzD;;;;;iBGAgB,WAAA,CAAY,OAAA;EAAA,SACjB,KAAA;EAAA,SACA,MAAA;EAAA,SACA,WAAA;EAAA,SACA,OAAA,WAAkB,SAAA;EAAA,SAClB,WAAA,YAAuB,kBAAA;AAAA,IAC9B,mBAAA;;;;;iBAQY,YAAA,CAAa,OAAA;EAAA,SAClB,MAAA;EAAA,SACA,WAAA;AAAA,IACP,oBAAoB;;;;;;iBASR,eAAA,CAAgB,MAAA,EAAQ,SAAA,GAAY,eAAe;;;AHCpC;AAiB/B;iBGVgB,UAAA,CAAW,OAAA;EAAA,SAChB,KAAA;EAAA,SACA,MAAA;EAAA,SACA,OAAA,WAAkB,mBAAA;AAAA,IACzB,kBAAkB"}

package/dist/contract-free.mjs

@@ -1,6 +1,6 @@
 import { _ as PG_TEXT_CODEC_ID, g as PG_TEXT_ARRAY_CODEC_ID, l as PG_INT4_CODEC_ID, p as PG_JSONB_CODEC_ID, u as PG_INT8_CODEC_ID, v as PG_TIMESTAMPTZ_CODEC_ID } from "./codec-ids-BvytN2P8.mjs";
-import { a as PostgresTableSource } from "./postgres-schema-COGZ1ark.mjs";
-import { a as columnDefaultAst, c as columnTypeAst, d as indexExistsAst, f as noNullValuesAst, g as toRegclass, h as tablePrimaryKeyAst, i as createTable, l as constraintExistsAst, m as tableIsEmptyAst, n as alterTable, o as columnExistsAst, p as tableExistsAst, r as createSchema, s as columnNullabilityAst, t as addColumnAction, u as extensionExistsAst } from "./ddl-QDyOSeLc.mjs";
+import { s as PostgresTableSource } from "./postgres-schema-BVDr_61a.mjs";
+import { _ as tableExistsAst, a as createTable, b as toRegclass, c as columnExistsAst, d as constraintExistsAst, f as extensionExistsAst, i as createSchema, l as columnNullabilityAst, m as noNullValuesAst, n as alterTable, p as indexExistsAst, s as columnDefaultAst, t as addColumnAction, u as columnTypeAst, v as tableIsEmptyAst, y as tablePrimaryKeyAst } from "./ddl-BlsTIBeP.mjs";
 import { col, fn, lit, table } from "@prisma-next/sql-relational-core/contract-free";
 import { APP_SPACE_ID } from "@prisma-next/framework-components/control";
 //#region src/contract-free/columns.ts

package/dist/control.d.mts

@@ -1,4 +1,4 @@
-import { t as PostgresPlanTargetDetails } from "./planner-target-details-CIY6tLeo.mjs";
+import { t as PostgresPlanTargetDetails } from "./planner-target-details-HkP4RrRO.mjs";
 import { SqlControlTargetDescriptor } from "@prisma-next/family-sql/control";
 import { StorageColumn } from "@prisma-next/sql-contract/types";
 import { ColumnDefault } from "@prisma-next/contract/types";

package/dist/control.mjs

@@ -1,14 +1,14 @@
-import { t as postgresTargetDescriptorMeta } from "./descriptor-meta-CpGygXpI.mjs";
+import { t as postgresTargetDescriptorMeta } from "./descriptor-meta-b_SzXwen.mjs";
 import { t as parsePostgresDefault } from "./default-normalizer-DyyCHQWs.mjs";
 import { t as normalizeSchemaNativeType } from "./native-type-normalizer-Bc9XJzWC.mjs";
-import { t as createPostgresMigrationPlanner } from "./planner-Bs_baQax.mjs";
+import { t as createPostgresMigrationPlanner } from "./planner-BbSZJVW7.mjs";
 import { a as renderDefaultLiteral } from "./planner-ddl-builders-B2wOwLqI.mjs";
-import { t as PostgresContractSerializer } from "./postgres-contract-serializer-k3TAcPMY.mjs";
+import { t as PostgresContractSerializer } from "./postgres-contract-serializer-k5eg5ZUZ.mjs";
 import { blindCast } from "@prisma-next/utils/casts";
 import { contractToSchemaIR, extractCodecControlHooks, runnerFailure, runnerSuccess } from "@prisma-next/family-sql/control";
 import { ifDefined } from "@prisma-next/utils/defined";
-import { verifySqlSchema } from "@prisma-next/family-sql/schema-verify";
 import { UNBOUND_NAMESPACE_ID } from "@prisma-next/framework-components/ir";
+import { verifySqlSchema } from "@prisma-next/family-sql/schema-verify";
 import { notOk, ok, okVoid } from "@prisma-next/utils/result";
 import { APP_SPACE_ID } from "@prisma-next/framework-components/control";
 import { SqlQueryError } from "@prisma-next/sql-errors";

package/dist/{data-transform-DDgWdB5o.d.mts → data-transform-qKy1U5V9.d.mts}

@@ -1,4 +1,4 @@
-import { t as PostgresPlanTargetDetails } from "./planner-target-details-CIY6tLeo.mjs";
+import { t as PostgresPlanTargetDetails } from "./planner-target-details-HkP4RrRO.mjs";
 import { SqlMigrationPlanOperation } from "@prisma-next/family-sql/control";
 import { SqlStorage } from "@prisma-next/sql-contract/types";
 import { Contract } from "@prisma-next/contract/types";
@@ -35,4 +35,4 @@ interface DataTransformOptions {
 declare function dataTransform<TContract extends Contract<SqlStorage>>(contract: TContract, name: string, options: DataTransformOptions, adapter: SqlControlAdapter<'postgres'>): Promise<SqlMigrationPlanOperation<PostgresPlanTargetDetails>>;
 //#endregion
 export { DataTransformOptions as n, dataTransform as r, DataTransformClosure as t };
-//# sourceMappingURL=data-transform-DDgWdB5o.d.mts.map
+//# sourceMappingURL=data-transform-qKy1U5V9.d.mts.map

package/dist/{data-transform-DDgWdB5o.d.mts.map → data-transform-qKy1U5V9.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"data-transform-DDgWdB5o.d.mts","names":[],"sources":["../src/core/migrations/operations/data-transform.ts"],"mappings":";;;;;;;;UAqEU,SAAA;EACR,KAAA,IAAS,YAAY,CAAC,CAAA;AAAA;;;AAiCsC;;KA1BlD,oBAAA,SAA6B,YAAA,GAAe,SAAS;AAAA,UAEhD,oBAAA;;;;;;WAMN,WAAA;;;;;;;;WAQA,KAAA,GAAQ,oBAAA;;WAER,GAAA,EAAK,oBAAA,YAAgC,oBAAA;AAAA;AAAA,iBAG1B,aAAA,mBAAgC,QAAA,CAAS,UAAA,GAC7D,QAAA,EAAU,SAAA,EACV,IAAA,UACA,OAAA,EAAS,oBAAA,EACT,OAAA,EAAS,iBAAA,eACR,OAAA,CAAQ,yBAAA,CAA0B,yBAAA"}
+{"version":3,"file":"data-transform-qKy1U5V9.d.mts","names":[],"sources":["../src/core/migrations/operations/data-transform.ts"],"mappings":";;;;;;;;UAqEU,SAAA;EACR,KAAA,IAAS,YAAY,CAAC,CAAA;AAAA;;;AAiCsC;;KA1BlD,oBAAA,SAA6B,YAAA,GAAe,SAAS;AAAA,UAEhD,oBAAA;;;;;;WAMN,WAAA;;;;;;;;WAQA,KAAA,GAAQ,oBAAA;;WAER,GAAA,EAAK,oBAAA,YAAgC,oBAAA;AAAA;AAAA,iBAG1B,aAAA,mBAAgC,QAAA,CAAS,UAAA,GAC7D,QAAA,EAAU,SAAA,EACV,IAAA,UACA,OAAA,EAAS,oBAAA,EACT,OAAA,EAAS,iBAAA,eACR,OAAA,CAAQ,yBAAA,CAA0B,yBAAA"}

package/dist/data-transform.d.mts

@@ -1,2 +1,2 @@
-import { r as dataTransform } from "./data-transform-DDgWdB5o.mjs";
+import { r as dataTransform } from "./data-transform-qKy1U5V9.mjs";
 export { dataTransform };

package/dist/{ddl-QDyOSeLc.mjs → ddl-BlsTIBeP.mjs}

@@ -1,6 +1,6 @@
 import { _ as PG_TEXT_CODEC_ID } from "./codec-ids-BvytN2P8.mjs";
-import { a as PostgresTableSource, i as postgresCreateNamespace } from "./postgres-schema-COGZ1ark.mjs";
-import { i as PostgresCreateTable, n as PostgresAlterTable, r as PostgresCreateSchema, t as AddColumnAction } from "./nodes-Bbhs2rwj.mjs";
+import { i as postgresCreateNamespace, s as PostgresTableSource } from "./postgres-schema-BVDr_61a.mjs";
+import { a as PostgresCreateTable, i as PostgresCreateSchema, n as PostgresAlterTable, r as PostgresCreatePolicy, s as PostgresDropPolicy, t as AddColumnAction } from "./nodes-DhDIIhBT.mjs";
 import { cfExpr, cfTable, exprSelect } from "@prisma-next/sql-relational-core/contract-free";
 //#region src/contract-free/checks.ts
 /**
@@ -194,6 +194,39 @@ function extensionExistsAst(extensionName) {
 	};
 }
 /**
+* Typed RLS-policy existence check over `pg_policies`, with schema, table,
+* and policy names bound as text parameters (never inlined). The `schema`
+* coordinate is the resolved live-database schema name (e.g. `'public'`),
+* compared against `pg_policies.schemaname` as a bound parameter.
+*/
+function rlsPolicyExistsAst(options) {
+	const inner = () => exprSelect().from(cfTable("pg_policies")).project("one", cfExpr.lit(1)).where(cfExpr.allOf([
+		cfExpr.identifierRef("schemaname").eqParam(options.schema, PG_TEXT_CODEC_ID),
+		cfExpr.identifierRef("tablename").eqParam(options.table, PG_TEXT_CODEC_ID),
+		cfExpr.identifierRef("policyname").eqParam(options.policyName, PG_TEXT_CODEC_ID)
+	]));
+	return {
+		policyPresent: () => exprSelect().project("result", cfExpr.exists(inner())).build(),
+		policyAbsent: () => exprSelect().project("result", cfExpr.notExists(inner())).build()
+	};
+}
+/**
+* Typed row-level-security enabled check over `pg_class` joined to
+* `pg_namespace`, comparing `pg_class.relrowsecurity` against the expected
+* boolean. Schema and table names are bound as text parameters.
+*/
+function rlsEnabledAst(schema, table) {
+	const inner = (enabled) => exprSelect().from(cfTable("pg_class", "c")).join(cfTable("pg_namespace", "n"), cfExpr.columnRef("n", "oid").eqExpr(cfExpr.columnRef("c", "relnamespace"))).project("one", cfExpr.lit(1)).where(cfExpr.allOf([
+		cfExpr.columnRef("n", "nspname").eqParam(schema, PG_TEXT_CODEC_ID),
+		cfExpr.columnRef("c", "relname").eqParam(table, PG_TEXT_CODEC_ID),
+		enabled ? cfExpr.columnRef("c", "relrowsecurity") : cfExpr.columnRef("c", "relrowsecurity").not()
+	]));
+	return {
+		rlsEnabled: () => exprSelect().project("result", cfExpr.exists(inner(true))).build(),
+		rlsDisabled: () => exprSelect().project("result", cfExpr.exists(inner(false))).build()
+	};
+}
+/**
 * Typed index existence check riding the same `to_regclass` vocabulary as
 * `tableExistsAst`, with the qualified index name bound as a text parameter.
 */
@@ -245,7 +278,24 @@ function addColumnAction(column) {
 function alterTable(options) {
 	return new PostgresAlterTable(options);
 }
+/**
+* Build a Postgres `CREATE POLICY` DDL node.
+*
+* Identifiers (`schema`, `table`, `name`) are quoted by the renderer.
+* `using` and `withCheck` are emitted verbatim as predicate SQL — callers
+* must supply safe, pre-validated SQL expressions.
+*/
+function createPolicy(options) {
+	return new PostgresCreatePolicy(options);
+}
+/**
+* Build a Postgres `DROP POLICY` DDL node.
+* Identifiers (`schema`, `table`, `name`) are quoted by the renderer.
+*/
+function dropPolicy(options) {
+	return new PostgresDropPolicy(options);
+}
 //#endregion
-export { columnDefaultAst as a, columnTypeAst as c, indexExistsAst as d, noNullValuesAst as f, toRegclass as g, tablePrimaryKeyAst as h, createTable as i, constraintExistsAst as l, tableIsEmptyAst as m, alterTable as n, columnExistsAst as o, tableExistsAst as p, createSchema as r, columnNullabilityAst as s, addColumnAction as t, extensionExistsAst as u };
+export { tableExistsAst as _, createTable as a, toRegclass as b, columnExistsAst as c, constraintExistsAst as d, extensionExistsAst as f, rlsPolicyExistsAst as g, rlsEnabledAst as h, createSchema as i, columnNullabilityAst as l, noNullValuesAst as m, alterTable as n, dropPolicy as o, indexExistsAst as p, createPolicy as r, columnDefaultAst as s, addColumnAction as t, columnTypeAst as u, tableIsEmptyAst as v, tablePrimaryKeyAst as y };
 
-//# sourceMappingURL=ddl-QDyOSeLc.mjs.map
+//# sourceMappingURL=ddl-BlsTIBeP.mjs.map

package/dist/ddl-BlsTIBeP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ddl-BlsTIBeP.mjs","names":[],"sources":["../src/contract-free/checks.ts","../src/contract-free/ddl.ts"],"sourcesContent":["import type { SelectAst } from '@prisma-next/sql-relational-core/ast';\nimport {\n  type CfExpr,\n  type CfExprSelectQuery,\n  cfExpr,\n  cfTable,\n  exprSelect,\n} from '@prisma-next/sql-relational-core/contract-free';\nimport { PostgresTableSource } from '../core/ast/table-source';\nimport { PG_TEXT_CODEC_ID } from '../core/codec-ids';\nimport { postgresCreateNamespace } from '../core/postgres-schema';\n\n/**\n * `to_regclass($1)` with the qualified table name bound as a text parameter.\n * Thin vocabulary wrapper over the core `cfExpr.fn` helper — the target\n * supplies only the template and the codec'd operand.\n */\nexport function toRegclass(qualifiedName: string): CfExpr {\n  return cfExpr.fn({\n    method: 'to_regclass',\n    template: 'to_regclass({{self}})',\n    self: cfExpr.param(qualifiedName, PG_TEXT_CODEC_ID),\n    returns: { codecId: PG_TEXT_CODEC_ID, nullable: true },\n  });\n}\n\nexport interface TableExistsCheckBuilder {\n  tableAbsent(): SelectAst;\n  tablePresent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's table-existence checks. Produces\n * FROM-less `SELECT to_regclass($1) IS [NOT] NULL AS \"result\"` ASTs with the\n * qualified table name bound as a text parameter — never inlined into the SQL.\n *\n * `schema` is a namespace coordinate: the framework `__unbound__` sentinel\n * elides the qualifier (search_path decides at runtime); any other id\n * qualifies as `\"schema\".\"table\"`.\n */\nexport function tableExistsAst(schema: string, table: string): TableExistsCheckBuilder {\n  const qualified = postgresCreateNamespace({ id: schema, entries: { table: {} } }).qualifyTable(\n    table,\n  );\n  const regclass = toRegclass(qualified);\n  return {\n    tableAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n    tablePresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n  };\n}\n\nexport interface ConstraintExistsCheckBuilder {\n  constraintPresent(): SelectAst;\n  constraintAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's constraint-existence checks.\n * Produces `SELECT [NOT ]EXISTS (SELECT 1 FROM pg_constraint c JOIN\n * pg_namespace n ON n.oid = c.connamespace WHERE c.conname = $1 AND\n * n.nspname = $2 [AND c.conrelid = to_regclass($3)]) AS \"result\"` with the\n * constraint name, schema name, and qualified table name bound as text\n * parameters.\n *\n * When `table` is omitted the check matches by name + schema across all\n * tables. Pass `table` to scope the check to a single table (prevents false\n * matches on identically-named constraints in different tables). `schema`\n * is a namespace coordinate: the `__unbound__` sentinel compares `nspname`\n * against `current_schema()` instead of a bound parameter.\n */\nexport function constraintExistsAst(options: {\n  readonly constraintName: string;\n  readonly schema: string;\n  readonly table?: string;\n}): ConstraintExistsCheckBuilder {\n  const namespace = postgresCreateNamespace({ id: options.schema, entries: { table: {} } });\n  const conditions = [\n    cfExpr.columnRef('c', 'conname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n    cfExpr.columnRef('n', 'nspname').eqExpr(namespace.schemaFilterExpression()),\n  ];\n  if (options.table !== undefined) {\n    conditions.push(\n      cfExpr.columnRef('c', 'conrelid').eqExpr(toRegclass(namespace.qualifyTable(options.table))),\n    );\n  }\n  const inner = (): CfExprSelectQuery =>\n    exprSelect()\n      .from(cfTable('pg_constraint', 'c'))\n      .join(\n        cfTable('pg_namespace', 'n'),\n        cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'connamespace')),\n      )\n      .project('one', cfExpr.lit(1))\n      .where(cfExpr.allOf(conditions));\n  return {\n    constraintPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n    constraintAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n  };\n}\n\nfunction checkNamespace(schema: string) {\n  return postgresCreateNamespace({ id: schema, entries: { table: {} } });\n}\n\nfunction informationSchemaColumns(): PostgresTableSource {\n  return new PostgresTableSource({ schema: 'information_schema', name: 'columns' });\n}\n\nfunction infoSchemaColumnConditions(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n}): CfExpr[] {\n  return [\n    cfExpr\n      .identifierRef('table_schema')\n      .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n    cfExpr.identifierRef('table_name').eqParam(options.table, PG_TEXT_CODEC_ID),\n    cfExpr.identifierRef('column_name').eqParam(options.column, PG_TEXT_CODEC_ID),\n  ];\n}\n\nfunction infoSchemaColumnQuery(conditions: ReadonlyArray<CfExpr>): CfExprSelectQuery {\n  return exprSelect()\n    .from(informationSchemaColumns())\n    .project('one', cfExpr.lit(1))\n    .where(cfExpr.allOf(conditions));\n}\n\nexport interface ColumnExistsCheckBuilder {\n  columnPresent(): SelectAst;\n  columnAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for column-existence checks over\n * `information_schema.columns`, with schema, table, and column names bound\n * as text parameters.\n */\nexport function columnExistsAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n}): ColumnExistsCheckBuilder {\n  const inner = () => infoSchemaColumnQuery(infoSchemaColumnConditions(options));\n  return {\n    columnPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n    columnAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n  };\n}\n\n/**\n * Typed nullability check: EXISTS over `information_schema.columns` with\n * `is_nullable` compared against the bound `'YES'` / `'NO'` marker.\n */\nexport function columnNullabilityAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n  readonly nullable: boolean;\n}): SelectAst {\n  const conditions = [\n    ...infoSchemaColumnConditions(options),\n    cfExpr.identifierRef('is_nullable').eqParam(options.nullable ? 'YES' : 'NO', PG_TEXT_CODEC_ID),\n  ];\n  return exprSelect()\n    .project('result', cfExpr.exists(infoSchemaColumnQuery(conditions)))\n    .build();\n}\n\nexport interface ColumnDefaultCheckBuilder {\n  defaultPresent(): SelectAst;\n  defaultAbsent(): SelectAst;\n  noDefault(): SelectAst;\n}\n\n/**\n * Typed default-presence checks over `information_schema.columns`.\n * `defaultPresent` / `defaultAbsent` assert the column row exists with a\n * non-null / null `column_default`; `noDefault` is the NOT EXISTS variant\n * (also true when the column row is missing entirely).\n */\nexport function columnDefaultAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n}): ColumnDefaultCheckBuilder {\n  const withDefault = () =>\n    infoSchemaColumnQuery([\n      ...infoSchemaColumnConditions(options),\n      cfExpr.identifierRef('column_default').isNotNull(),\n    ]);\n  const withoutDefault = () =>\n    infoSchemaColumnQuery([\n      ...infoSchemaColumnConditions(options),\n      cfExpr.identifierRef('column_default').isNull(),\n    ]);\n  return {\n    defaultPresent: () => exprSelect().project('result', cfExpr.exists(withDefault())).build(),\n    defaultAbsent: () => exprSelect().project('result', cfExpr.exists(withoutDefault())).build(),\n    noDefault: () => exprSelect().project('result', cfExpr.notExists(withDefault())).build(),\n  };\n}\n\n/**\n * Typed column-type check: EXISTS over `pg_attribute` joined to `pg_class`\n * and `pg_namespace`, comparing `format_type(a.atttypid, a.atttypmod)`\n * against the bound expected display type and excluding dropped columns.\n */\nexport function columnTypeAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n  readonly expectedType: string;\n}): SelectAst {\n  const formatType = cfExpr.fn({\n    method: 'format_type',\n    template: 'format_type({{self}}, {{arg0}})',\n    self: cfExpr.columnRef('a', 'atttypid'),\n    args: [cfExpr.columnRef('a', 'atttypmod')],\n    returns: { codecId: PG_TEXT_CODEC_ID, nullable: false },\n  });\n  const inner = exprSelect()\n    .from(cfTable('pg_attribute', 'a'))\n    .join(\n      cfTable('pg_class', 'c'),\n      cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('a', 'attrelid')),\n    )\n    .join(\n      cfTable('pg_namespace', 'n'),\n      cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n    )\n    .project('one', cfExpr.lit(1))\n    .where(\n      cfExpr.allOf([\n        cfExpr\n          .columnRef('n', 'nspname')\n          .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n        cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n        cfExpr.columnRef('a', 'attname').eqParam(options.column, PG_TEXT_CODEC_ID),\n        formatType.eqParam(options.expectedType, PG_TEXT_CODEC_ID),\n        cfExpr.columnRef('a', 'attisdropped').not(),\n      ]),\n    );\n  return exprSelect().project('result', cfExpr.exists(inner)).build();\n}\n\nexport interface TablePrimaryKeyCheckBuilder {\n  pkPresent(): SelectAst;\n  pkAbsent(): SelectAst;\n}\n\n/**\n * Typed primary-key existence check over `pg_index` joined to `pg_class`\n * and `pg_namespace`, with a LEFT JOIN on the index relation so an\n * optional `constraintName` can scope the match to a named constraint.\n */\nexport function tablePrimaryKeyAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly constraintName?: string;\n}): TablePrimaryKeyCheckBuilder {\n  const conditions = [\n    cfExpr\n      .columnRef('n', 'nspname')\n      .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n    cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n    cfExpr.columnRef('i', 'indisprimary'),\n  ];\n  if (options.constraintName !== undefined) {\n    conditions.push(\n      cfExpr.columnRef('c2', 'relname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n    );\n  }\n  const inner = () =>\n    exprSelect()\n      .from(cfTable('pg_index', 'i'))\n      .join(\n        cfTable('pg_class', 'c'),\n        cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('i', 'indrelid')),\n      )\n      .join(\n        cfTable('pg_namespace', 'n'),\n        cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n      )\n      .leftJoin(\n        cfTable('pg_class', 'c2'),\n        cfExpr.columnRef('c2', 'oid').eqExpr(cfExpr.columnRef('i', 'indexrelid')),\n      )\n      .project('one', cfExpr.lit(1))\n      .where(cfExpr.allOf(conditions));\n  return {\n    pkPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n    pkAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n  };\n}\n\n/**\n * Typed emptiness check: NOT EXISTS over the user table itself with\n * `LIMIT 1`. The table is addressed through the namespace's polymorphic\n * `tableSource` (qualified for named schemas, bare for the unbound slot).\n */\nexport function tableIsEmptyAst(schema: string, table: string): SelectAst {\n  const inner = exprSelect()\n    .from(checkNamespace(schema).tableSource(table))\n    .project('one', cfExpr.lit(1))\n    .limit(1);\n  return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\n/**\n * Typed no-NULL-values data check used by `SET NOT NULL` prechecks:\n * NOT EXISTS over the user table where the column IS NULL.\n */\nexport function noNullValuesAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly column: string;\n}): SelectAst {\n  const inner = exprSelect()\n    .from(checkNamespace(options.schema).tableSource(options.table))\n    .project('one', cfExpr.lit(1))\n    .where(cfExpr.identifierRef(options.column).isNull());\n  return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\nexport interface ExtensionExistsCheckBuilder {\n  extensionPresent(): SelectAst;\n  extensionAbsent(): SelectAst;\n}\n\n/**\n * Typed extension existence check over `pg_extension`, with the extension\n * name bound as a text parameter.\n */\nexport function extensionExistsAst(extensionName: string): ExtensionExistsCheckBuilder {\n  const inner = () =>\n    exprSelect()\n      .from(cfTable('pg_extension'))\n      .project('one', cfExpr.lit(1))\n      .where(cfExpr.identifierRef('extname').eqParam(extensionName, PG_TEXT_CODEC_ID));\n  return {\n    extensionPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n    extensionAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n  };\n}\n\nexport interface RlsPolicyExistsCheckBuilder {\n  policyPresent(): SelectAst;\n  policyAbsent(): SelectAst;\n}\n\n/**\n * Typed RLS-policy existence check over `pg_policies`, with schema, table,\n * and policy names bound as text parameters (never inlined). The `schema`\n * coordinate is the resolved live-database schema name (e.g. `'public'`),\n * compared against `pg_policies.schemaname` as a bound parameter.\n */\nexport function rlsPolicyExistsAst(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly policyName: string;\n}): RlsPolicyExistsCheckBuilder {\n  const inner = () =>\n    exprSelect()\n      .from(cfTable('pg_policies'))\n      .project('one', cfExpr.lit(1))\n      .where(\n        cfExpr.allOf([\n          cfExpr.identifierRef('schemaname').eqParam(options.schema, PG_TEXT_CODEC_ID),\n          cfExpr.identifierRef('tablename').eqParam(options.table, PG_TEXT_CODEC_ID),\n          cfExpr.identifierRef('policyname').eqParam(options.policyName, PG_TEXT_CODEC_ID),\n        ]),\n      );\n  return {\n    policyPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n    policyAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n  };\n}\n\nexport interface RlsEnabledCheckBuilder {\n  rlsEnabled(): SelectAst;\n  rlsDisabled(): SelectAst;\n}\n\n/**\n * Typed row-level-security enabled check over `pg_class` joined to\n * `pg_namespace`, comparing `pg_class.relrowsecurity` against the expected\n * boolean. Schema and table names are bound as text parameters.\n */\nexport function rlsEnabledAst(schema: string, table: string): RlsEnabledCheckBuilder {\n  const inner = (enabled: boolean) =>\n    exprSelect()\n      .from(cfTable('pg_class', 'c'))\n      .join(\n        cfTable('pg_namespace', 'n'),\n        cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n      )\n      .project('one', cfExpr.lit(1))\n      .where(\n        cfExpr.allOf([\n          cfExpr.columnRef('n', 'nspname').eqParam(schema, PG_TEXT_CODEC_ID),\n          cfExpr.columnRef('c', 'relname').eqParam(table, PG_TEXT_CODEC_ID),\n          enabled\n            ? cfExpr.columnRef('c', 'relrowsecurity')\n            : cfExpr.columnRef('c', 'relrowsecurity').not(),\n        ]),\n      );\n  return {\n    rlsEnabled: () =>\n      exprSelect()\n        .project('result', cfExpr.exists(inner(true)))\n        .build(),\n    rlsDisabled: () =>\n      exprSelect()\n        .project('result', cfExpr.exists(inner(false)))\n        .build(),\n  };\n}\n\nexport interface IndexExistsCheckBuilder {\n  indexPresent(): SelectAst;\n  indexAbsent(): SelectAst;\n}\n\n/**\n * Typed index existence check riding the same `to_regclass` vocabulary as\n * `tableExistsAst`, with the qualified index name bound as a text parameter.\n */\nexport function indexExistsAst(schema: string, indexName: string): IndexExistsCheckBuilder {\n  const regclass = toRegclass(checkNamespace(schema).qualifyTable(indexName));\n  return {\n    indexPresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n    indexAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n  };\n}\n","import type { DdlColumn, DdlTableConstraint } from '@prisma-next/sql-relational-core/ast';\nimport {\n  AddColumnAction,\n  type AnyAlterTableAction,\n  PostgresAlterTable,\n  PostgresCreatePolicy,\n  PostgresCreateSchema,\n  PostgresCreateTable,\n  PostgresDropPolicy,\n  type RlsPolicyOperation,\n} from '../core/ddl/nodes';\n\n/**\n * Build a Postgres `CREATE TABLE` query node.\n *\n * Pass `constraints` for table-level composite primary keys, foreign keys, and\n * unique constraints — use the {@link PrimaryKeyConstraint}, {@link ForeignKeyConstraint},\n * and {@link UniqueConstraint} classes from `@prisma-next/sql-relational-core/ast`.\n *\n * Precondition: identifiers (`table`, `schema`, column names/types) are\n * emitted to SQL verbatim — they are not quoted or escaped, so callers must\n * pass pre-trusted values (e.g. fixed control-plane identifiers). String-literal\n * default values, by contrast, are single-quote-escaped (embedded `'` doubled)\n * by the renderer. Identifier quoting for untrusted identifiers is added when\n * the migration planner adopts this lowering path.\n */\nexport function createTable(options: {\n  readonly table: string;\n  readonly schema?: string;\n  readonly ifNotExists?: boolean;\n  readonly columns: readonly DdlColumn[];\n  readonly constraints?: readonly DdlTableConstraint[];\n}): PostgresCreateTable {\n  return new PostgresCreateTable(options);\n}\n\n/**\n * Build a Postgres `CREATE SCHEMA` query node. See {@link createTable} for the\n * pre-trusted-identifier precondition.\n */\nexport function createSchema(options: {\n  readonly schema: string;\n  readonly ifNotExists?: boolean;\n}): PostgresCreateSchema {\n  return new PostgresCreateSchema(options);\n}\n\n/**\n * Build an `ADD COLUMN` action for use inside {@link alterTable}.\n * The column is a structured `DdlColumn` so codec-encoded defaults flow\n * through the adapter's `pgRenderDdlColumn` → `pgRenderDdlColumnDefault` path.\n */\nexport function addColumnAction(column: DdlColumn): AddColumnAction {\n  return new AddColumnAction(column);\n}\n\n/**\n * Build a Postgres `ALTER TABLE` query node carrying one or more actions.\n * See {@link addColumnAction} for building actions.\n */\nexport function alterTable(options: {\n  readonly table: string;\n  readonly schema?: string;\n  readonly actions: readonly AnyAlterTableAction[];\n}): PostgresAlterTable {\n  return new PostgresAlterTable(options);\n}\n\n/**\n * Build a Postgres `CREATE POLICY` DDL node.\n *\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n * `using` and `withCheck` are emitted verbatim as predicate SQL — callers\n * must supply safe, pre-validated SQL expressions.\n */\nexport function createPolicy(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly name: string;\n  readonly permissive: boolean;\n  readonly operation: RlsPolicyOperation;\n  readonly roles: readonly string[];\n  readonly using?: string;\n  readonly withCheck?: string;\n}): PostgresCreatePolicy {\n  return new PostgresCreatePolicy(options);\n}\n\n/**\n * Build a Postgres `DROP POLICY` DDL node.\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n */\nexport function dropPolicy(options: {\n  readonly schema: string;\n  readonly table: string;\n  readonly name: string;\n}): PostgresDropPolicy {\n  return new PostgresDropPolicy(options);\n}\n"],"mappings":";;;;;;;;;;AAiBA,SAAgB,WAAW,eAA+B;CACxD,OAAO,OAAO,GAAG;EACf,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,MAAM,eAAe,gBAAgB;EAClD,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAK;CACvD,CAAC;AACH;;;;;;;;;;AAgBA,SAAgB,eAAe,QAAgB,OAAwC;CAIrF,MAAM,WAAW,WAHC,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC,CAAC,CAAC,aAChF,KAEkC,CAAC;CACrC,OAAO;EACL,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;EAC3E,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;CACjF;AACF;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,SAIH;CAC/B,MAAM,YAAY,wBAAwB;EAAE,IAAI,QAAQ;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;CACxF,MAAM,aAAa,CACjB,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,GACjF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,OAAO,UAAU,uBAAuB,CAAC,CAC5E;CACA,IAAI,QAAQ,UAAU,KAAA,GACpB,WAAW,KACT,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,UAAU,aAAa,QAAQ,KAAK,CAAC,CAAC,CAC5F;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,iBAAiB,GAAG,CAAC,CAAC,CACnC,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,yBAAyB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACtF,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAC1F;AACF;AAEA,SAAS,eAAe,QAAgB;CACtC,OAAO,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;AACvE;AAEA,SAAS,2BAAgD;CACvD,OAAO,IAAI,oBAAoB;EAAE,QAAQ;EAAsB,MAAM;CAAU,CAAC;AAClF;AAEA,SAAS,2BAA2B,SAIvB;CACX,OAAO;EACL,OACG,cAAc,cAAc,CAAC,CAC7B,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EAC1E,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;CAC9E;AACF;AAEA,SAAS,sBAAsB,YAAsD;CACnF,OAAO,WAAW,CAAC,CAChB,KAAK,yBAAyB,CAAC,CAAC,CAChC,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;AACnC;;;;;;AAYA,SAAgB,gBAAgB,SAIH;CAC3B,MAAM,cAAc,sBAAsB,2BAA2B,OAAO,CAAC;CAC7E,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;AAMA,SAAgB,qBAAqB,SAKvB;CACZ,MAAM,aAAa,CACjB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,WAAW,QAAQ,MAAM,gBAAgB,CAC/F;CACA,OAAO,WAAW,CAAC,CAChB,QAAQ,UAAU,OAAO,OAAO,sBAAsB,UAAU,CAAC,CAAC,CAAC,CACnE,MAAM;AACX;;;;;;;AAcA,SAAgB,iBAAiB,SAIH;CAC5B,MAAM,oBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,UAAU,CACnD,CAAC;CACH,MAAM,uBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,OAAO,CAChD,CAAC;CACH,OAAO;EACL,sBAAsB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;EACzF,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM;EAC3F,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;AAOA,SAAgB,cAAc,SAKhB;CACZ,MAAM,aAAa,OAAO,GAAG;EAC3B,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,UAAU,KAAK,UAAU;EACtC,MAAM,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC;EACzC,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAM;CACxD,CAAC;CACD,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,QAAQ,gBAAgB,GAAG,CAAC,CAAC,CAClC,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EACzE,WAAW,QAAQ,QAAQ,cAAc,gBAAgB;EACzD,OAAO,UAAU,KAAK,cAAc,CAAC,CAAC,IAAI;CAC5C,CAAC,CACH;CACF,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM;AACpE;;;;;;AAYA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,aAAa;EACjB,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,cAAc;CACtC;CACA,IAAI,QAAQ,mBAAmB,KAAA,GAC7B,WAAW,KACT,OAAO,UAAU,MAAM,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,CACpF;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,SACC,QAAQ,YAAY,IAAI,GACxB,OAAO,UAAU,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,YAAY,CAAC,CAC1E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAC9E,gBAAgB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAClF;AACF;;;;;;AAOA,SAAgB,gBAAgB,QAAgB,OAA0B;CACxE,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAC/C,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,CAAC;CACV,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAMA,SAAgB,gBAAgB,SAIlB;CACZ,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,QAAQ,MAAM,CAAC,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,CAC/D,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,OAAO,CAAC;CACtD,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAWA,SAAgB,mBAAmB,eAAoD;CACrF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,cAAc,CAAC,CAAC,CAC7B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,SAAS,CAAC,CAAC,QAAQ,eAAe,gBAAgB,CAAC;CACnF,OAAO;EACL,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACrF,uBAAuB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;;AAaA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,aAAa,CAAC,CAAC,CAC5B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EAC3E,OAAO,cAAc,WAAW,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACzE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,YAAY,gBAAgB;CACjF,CAAC,CACH;CACJ,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;;AAYA,SAAgB,cAAc,QAAgB,OAAuC;CACnF,MAAM,SAAS,YACb,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,OAAO,gBAAgB;EAChE,UACI,OAAO,UAAU,KAAK,gBAAgB,IACtC,OAAO,UAAU,KAAK,gBAAgB,CAAC,CAAC,IAAI;CAClD,CAAC,CACH;CACJ,OAAO;EACL,kBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAC7C,MAAM;EACX,mBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAC9C,MAAM;CACb;AACF;;;;;AAWA,SAAgB,eAAe,QAAgB,WAA4C;CACzF,MAAM,WAAW,WAAW,eAAe,MAAM,CAAC,CAAC,aAAa,SAAS,CAAC;CAC1E,OAAO;EACL,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;EAC/E,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;CAC7E;AACF;;;;;;;;;;;;;;;;;ACzZA,SAAgB,YAAY,SAMJ;CACtB,OAAO,IAAI,oBAAoB,OAAO;AACxC;;;;;AAMA,SAAgB,aAAa,SAGJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;;AAOA,SAAgB,gBAAgB,QAAoC;CAClE,OAAO,IAAI,gBAAgB,MAAM;AACnC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC;;;;;;;;AASA,SAAgB,aAAa,SASJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC"}

package/dist/ddl.d.mts

@@ -1,2 +1,3 @@
-import { a as PostgresAlterTable, c as PostgresDdlNode, i as AnyPostgresDdlNode, l as PostgresDdlVisitor, n as AlterTableActionVisitor, o as PostgresCreateSchema, r as AnyAlterTableAction, s as PostgresCreateTable, t as AddColumnAction } from "./nodes-pLeLgdis.mjs";
-export { AddColumnAction, type AlterTableActionVisitor, type AnyAlterTableAction, type AnyPostgresDdlNode, PostgresAlterTable, PostgresCreateSchema, PostgresCreateTable, PostgresDdlNode, type PostgresDdlVisitor };
+import { n as RlsPolicyOperation } from "./canonicalize-CAbXtVtB.mjs";
+import { a as PostgresAlterTable, c as PostgresCreateTable, d as PostgresDropPolicy, i as AnyPostgresDdlNode, l as PostgresDdlNode, n as AlterTableActionVisitor, o as PostgresCreatePolicy, r as AnyAlterTableAction, s as PostgresCreateSchema, t as AddColumnAction, u as PostgresDdlVisitor } from "./nodes-YvdohJ2X.mjs";
+export { AddColumnAction, type AlterTableActionVisitor, type AnyAlterTableAction, type AnyPostgresDdlNode, PostgresAlterTable, PostgresCreatePolicy, PostgresCreateSchema, PostgresCreateTable, PostgresDdlNode, type PostgresDdlVisitor, PostgresDropPolicy, type RlsPolicyOperation };

package/dist/ddl.mjs

@@ -1,2 +1,2 @@
-import { a as PostgresDdlNode, i as PostgresCreateTable, n as PostgresAlterTable, r as PostgresCreateSchema, t as AddColumnAction } from "./nodes-Bbhs2rwj.mjs";
-export { AddColumnAction, PostgresAlterTable, PostgresCreateSchema, PostgresCreateTable, PostgresDdlNode };
+import { a as PostgresCreateTable, i as PostgresCreateSchema, n as PostgresAlterTable, o as PostgresDdlNode, r as PostgresCreatePolicy, s as PostgresDropPolicy, t as AddColumnAction } from "./nodes-DhDIIhBT.mjs";
+export { AddColumnAction, PostgresAlterTable, PostgresCreatePolicy, PostgresCreateSchema, PostgresCreateTable, PostgresDdlNode, PostgresDropPolicy };

package/dist/descriptor-meta-b_SzXwen.mjs

@@ -0,0 +1,239 @@
+import { c as PostgresRlsPolicySchema, d as PostgresRlsPolicy, i as postgresCreateNamespace, l as PostgresRoleSchema, u as PostgresRole } from "./postgres-schema-BVDr_61a.mjs";
+import { n as normalizePredicate, t as computeContentHash } from "./canonicalize-Bn3BM1Cn.mjs";
+import { temporalAuthoringPresets } from "@prisma-next/family-sql/control";
+//#region src/core/authoring.ts
+const postgresAuthoringTypes = {};
+function readRefParam(block, key) {
+	const param = block.parameters[key];
+	return param?.kind === "ref" ? param.identifier : void 0;
+}
+function readValueParam(block, key) {
+	const param = block.parameters[key];
+	return param?.kind === "value" ? param.raw : void 0;
+}
+function readListRefParams(block, key) {
+	const param = block.parameters[key];
+	if (param?.kind !== "list") return [];
+	return param.items.flatMap((item) => item.kind === "ref" ? [item.identifier] : []);
+}
+function unwrapQuotedString(raw) {
+	if (raw.startsWith("\"") && raw.endsWith("\"") && raw.length >= 2) return raw.slice(1, -1).replace(/\\"/g, "\"");
+	return raw;
+}
+function lowerRlsPolicyFromBlock(block, _ctx) {
+	const prefix = block.name;
+	const targetModelName = readRefParam(block, "target") ?? "";
+	const tableName = targetModelName.charAt(0).toLowerCase() + targetModelName.slice(1);
+	const roles = [...readListRefParams(block, "roles")].sort();
+	const using = unwrapQuotedString(readValueParam(block, "using") ?? "");
+	return new PostgresRlsPolicy({
+		name: `${prefix}_${computeContentHash({
+			using: normalizePredicate(using),
+			roles,
+			operation: "select",
+			permissive: true
+		})}`,
+		prefix,
+		tableName,
+		namespaceId: block.namespaceId,
+		operation: "select",
+		roles,
+		using,
+		permissive: true
+	});
+}
+const postgresAuthoringEntityTypes = {
+	role: {
+		kind: "entity",
+		discriminator: "role",
+		validatorSchema: PostgresRoleSchema,
+		output: { factory: (input) => new PostgresRole(input) }
+	},
+	policy: {
+		kind: "entity",
+		discriminator: "policy",
+		validatorSchema: PostgresRlsPolicySchema,
+		output: { factory: lowerRlsPolicyFromBlock }
+	}
+};
+/**
+* Field presets contributed by the Postgres target pack.
+*
+* These mirror the PSL scalar-to-codec mapping used by the Postgres adapter
+* (see `createPostgresPslScalarTypeDescriptors`), so that authoring a field
+* via the TS callback surface (e.g. `field.int()`) and via the PSL scalar
+* surface (e.g. `Int`) lowers to byte-identical contracts.
+*
+* The `uuidNative` / `id.uuidv4Native` / `id.uuidv7Native` presets use the
+* native Postgres `uuid` type (codecId `pg/uuid@1`). For cross-target
+* portability use `uuidString` / `id.uuidv4String` / `id.uuidv7String` from
+* the family pack instead.
+*/
+/**
+* PSL block descriptor for `policy_select`.
+*
+* The parser learns the block shape from this descriptor; lowering from
+* `PslExtensionBlock` to `PostgresRlsPolicy` is wired in the PSL
+* interpreter (a later dispatch). The `discriminator` matches
+* `PostgresRlsPolicy.kind` so the parsed block node carries the same
+* discriminant as the IR class it will lower to.
+*
+* The `roles` list uses `scope:'cross-space'` because same-namespace
+* role ref resolution requires PSL namespace entries keyed by `refKind`
+* (i.e. `'role'`), which in turn requires the role block discriminator to
+* equal `'role'`. Aligning discriminator with refKind is tracked for
+* slice 4 (cross-space roles). Until then cross-space passes validation
+* unconditionally and the authored role names flow through unchanged.
+*/
+const postgresAuthoringPslBlockDescriptors = { policy_select: {
+	kind: "pslBlock",
+	keyword: "policy_select",
+	discriminator: "policy",
+	name: { required: true },
+	parameters: {
+		target: {
+			kind: "ref",
+			refKind: "model",
+			scope: "same-namespace",
+			required: true
+		},
+		roles: {
+			kind: "list",
+			of: {
+				kind: "ref",
+				refKind: "role",
+				scope: "cross-space"
+			}
+		},
+		using: {
+			kind: "value",
+			codecId: "pg/text@1",
+			required: true
+		}
+	}
+} };
+const postgresAuthoringFieldPresets = {
+	text: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/text@1",
+			nativeType: "text"
+		}
+	},
+	int: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/int4@1",
+			nativeType: "int4"
+		}
+	},
+	bigint: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/int8@1",
+			nativeType: "int8"
+		}
+	},
+	float: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/float8@1",
+			nativeType: "float8"
+		}
+	},
+	decimal: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/numeric@1",
+			nativeType: "numeric"
+		}
+	},
+	boolean: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/bool@1",
+			nativeType: "bool"
+		}
+	},
+	json: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/jsonb@1",
+			nativeType: "jsonb"
+		}
+	},
+	bytes: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/bytea@1",
+			nativeType: "bytea"
+		}
+	},
+	dateTime: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/timestamptz@1",
+			nativeType: "timestamptz"
+		}
+	},
+	temporal: /* @__PURE__ */ temporalAuthoringPresets({
+		codecId: "pg/timestamptz@1",
+		nativeType: "timestamptz"
+	}),
+	uuidNative: {
+		kind: "fieldPreset",
+		output: {
+			codecId: "pg/uuid@1",
+			nativeType: "uuid"
+		}
+	},
+	id: {
+		uuidv4Native: {
+			kind: "fieldPreset",
+			output: {
+				codecId: "pg/uuid@1",
+				nativeType: "uuid",
+				executionDefaults: { onCreate: {
+					kind: "generator",
+					id: "uuidv4"
+				} },
+				id: true
+			}
+		},
+		uuidv7Native: {
+			kind: "fieldPreset",
+			output: {
+				codecId: "pg/uuid@1",
+				nativeType: "uuid",
+				executionDefaults: { onCreate: {
+					kind: "generator",
+					id: "uuidv7"
+				} },
+				id: true
+			}
+		}
+	}
+};
+const postgresTargetDescriptorMetaRuntime = {
+	kind: "target",
+	familyId: "sql",
+	targetId: "postgres",
+	id: "postgres",
+	version: "0.0.1",
+	capabilities: {}
+};
+const postgresTargetDescriptorMeta = {
+	...postgresTargetDescriptorMetaRuntime,
+	defaultNamespaceId: "public",
+	authoring: {
+		type: postgresAuthoringTypes,
+		field: postgresAuthoringFieldPresets,
+		entityTypes: postgresAuthoringEntityTypes,
+		pslBlockDescriptors: postgresAuthoringPslBlockDescriptors,
+		createNamespace: postgresCreateNamespace
+	}
+};
+//#endregion
+export { postgresTargetDescriptorMetaRuntime as n, postgresAuthoringEntityTypes as r, postgresTargetDescriptorMeta as t };
+
+//# sourceMappingURL=descriptor-meta-b_SzXwen.mjs.map

package/dist/descriptor-meta-b_SzXwen.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor-meta-b_SzXwen.mjs","names":[],"sources":["../src/core/authoring.ts","../src/core/descriptor-meta-runtime.ts","../src/core/descriptor-meta.ts"],"sourcesContent":["import { temporalAuthoringPresets } from '@prisma-next/family-sql/control';\nimport type {\n  AuthoringEntityContext,\n  AuthoringEntityTypeNamespace,\n  AuthoringFieldNamespace,\n  AuthoringPslBlockDescriptorNamespace,\n  AuthoringTypeNamespace,\n  PslExtensionBlock,\n} from '@prisma-next/framework-components/authoring';\nimport { PostgresRlsPolicy } from './postgres-rls-policy';\nimport { PostgresRole, type PostgresRoleInput } from './postgres-role';\nimport { PostgresRlsPolicySchema, PostgresRoleSchema } from './postgres-validators';\nimport { computeContentHash, normalizePredicate } from './rls/canonicalize';\n\nexport const postgresAuthoringTypes = {} as const satisfies AuthoringTypeNamespace;\n\nexport interface RlsPolicyExtensionBlock extends PslExtensionBlock {\n  readonly namespaceId: string;\n}\n\nfunction readRefParam(block: PslExtensionBlock, key: string): string | undefined {\n  const param = block.parameters[key];\n  return param?.kind === 'ref' ? param.identifier : undefined;\n}\n\nfunction readValueParam(block: PslExtensionBlock, key: string): string | undefined {\n  const param = block.parameters[key];\n  return param?.kind === 'value' ? param.raw : undefined;\n}\n\nfunction readListRefParams(block: PslExtensionBlock, key: string): string[] {\n  const param = block.parameters[key];\n  if (param?.kind !== 'list') return [];\n  return param.items.flatMap((item) => (item.kind === 'ref' ? [item.identifier] : []));\n}\n\nfunction unwrapQuotedString(raw: string): string {\n  if (raw.startsWith('\"') && raw.endsWith('\"') && raw.length >= 2) {\n    return raw.slice(1, -1).replace(/\\\\\"/g, '\"');\n  }\n  return raw;\n}\n\nfunction lowerRlsPolicyFromBlock(\n  block: RlsPolicyExtensionBlock,\n  _ctx: AuthoringEntityContext,\n): PostgresRlsPolicy {\n  const prefix = block.name;\n  const targetModelName = readRefParam(block, 'target') ?? '';\n  const tableName = targetModelName.charAt(0).toLowerCase() + targetModelName.slice(1);\n  const roles = [...readListRefParams(block, 'roles')].sort();\n  const using = unwrapQuotedString(readValueParam(block, 'using') ?? '');\n\n  const wireHash = computeContentHash({\n    using: normalizePredicate(using),\n    roles,\n    operation: 'select',\n    permissive: true,\n  });\n  const wireName = `${prefix}_${wireHash}`;\n\n  return new PostgresRlsPolicy({\n    name: wireName,\n    prefix,\n    tableName,\n    namespaceId: block.namespaceId,\n    operation: 'select',\n    roles,\n    using,\n    permissive: true,\n  });\n}\n\nexport const postgresAuthoringEntityTypes = {\n  role: {\n    kind: 'entity',\n    discriminator: 'role',\n    validatorSchema: PostgresRoleSchema,\n    output: {\n      factory: (input: PostgresRoleInput): PostgresRole => new PostgresRole(input),\n    },\n  },\n  policy: {\n    kind: 'entity',\n    discriminator: 'policy',\n    validatorSchema: PostgresRlsPolicySchema,\n    output: {\n      factory: lowerRlsPolicyFromBlock,\n    },\n  },\n} as const satisfies AuthoringEntityTypeNamespace;\n\n/**\n * Field presets contributed by the Postgres target pack.\n *\n * These mirror the PSL scalar-to-codec mapping used by the Postgres adapter\n * (see `createPostgresPslScalarTypeDescriptors`), so that authoring a field\n * via the TS callback surface (e.g. `field.int()`) and via the PSL scalar\n * surface (e.g. `Int`) lowers to byte-identical contracts.\n *\n * The `uuidNative` / `id.uuidv4Native` / `id.uuidv7Native` presets use the\n * native Postgres `uuid` type (codecId `pg/uuid@1`). For cross-target\n * portability use `uuidString` / `id.uuidv4String` / `id.uuidv7String` from\n * the family pack instead.\n */\n/**\n * PSL block descriptor for `policy_select`.\n *\n * The parser learns the block shape from this descriptor; lowering from\n * `PslExtensionBlock` to `PostgresRlsPolicy` is wired in the PSL\n * interpreter (a later dispatch). The `discriminator` matches\n * `PostgresRlsPolicy.kind` so the parsed block node carries the same\n * discriminant as the IR class it will lower to.\n *\n * The `roles` list uses `scope:'cross-space'` because same-namespace\n * role ref resolution requires PSL namespace entries keyed by `refKind`\n * (i.e. `'role'`), which in turn requires the role block discriminator to\n * equal `'role'`. Aligning discriminator with refKind is tracked for\n * slice 4 (cross-space roles). Until then cross-space passes validation\n * unconditionally and the authored role names flow through unchanged.\n */\nexport const postgresAuthoringPslBlockDescriptors = {\n  policy_select: {\n    kind: 'pslBlock',\n    keyword: 'policy_select',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: {\n      target: { kind: 'ref', refKind: 'model', scope: 'same-namespace', required: true },\n      roles: {\n        kind: 'list',\n        of: { kind: 'ref', refKind: 'role', scope: 'cross-space' },\n      },\n      using: { kind: 'value', codecId: 'pg/text@1', required: true },\n    },\n  },\n} as const satisfies AuthoringPslBlockDescriptorNamespace;\n\nexport const postgresAuthoringFieldPresets = {\n  text: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/text@1',\n      nativeType: 'text',\n    },\n  },\n  int: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/int4@1',\n      nativeType: 'int4',\n    },\n  },\n  bigint: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/int8@1',\n      nativeType: 'int8',\n    },\n  },\n  float: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/float8@1',\n      nativeType: 'float8',\n    },\n  },\n  decimal: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/numeric@1',\n      nativeType: 'numeric',\n    },\n  },\n  boolean: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/bool@1',\n      nativeType: 'bool',\n    },\n  },\n  json: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/jsonb@1',\n      nativeType: 'jsonb',\n    },\n  },\n  bytes: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/bytea@1',\n      nativeType: 'bytea',\n    },\n  },\n  dateTime: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/timestamptz@1',\n      nativeType: 'timestamptz',\n    },\n  },\n  temporal: /* @__PURE__ */ temporalAuthoringPresets({\n    codecId: 'pg/timestamptz@1',\n    nativeType: 'timestamptz',\n  }),\n  uuidNative: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/uuid@1',\n      nativeType: 'uuid',\n    },\n  },\n  id: {\n    uuidv4Native: {\n      kind: 'fieldPreset',\n      output: {\n        codecId: 'pg/uuid@1',\n        nativeType: 'uuid',\n        executionDefaults: {\n          onCreate: {\n            kind: 'generator',\n            id: 'uuidv4',\n          },\n        },\n        id: true,\n      },\n    },\n    uuidv7Native: {\n      kind: 'fieldPreset',\n      output: {\n        codecId: 'pg/uuid@1',\n        nativeType: 'uuid',\n        executionDefaults: {\n          onCreate: {\n            kind: 'generator',\n            id: 'uuidv7',\n          },\n        },\n        id: true,\n      },\n    },\n  },\n} as const satisfies AuthoringFieldNamespace;\n","// Runtime-safe slice of the postgres target descriptor metadata.\n//\n// This file exists separately from ./descriptor-meta on purpose: the runtime\n// plane reads only `kind/familyId/targetId/id/version/capabilities` (plus the\n// `__codecTypes` phantom). The `authoring` slot lives on the pack/control\n// descriptor only, because authoring contributions are consumed at\n// contract-construction time by `assembleAuthoringContributions` (control\n// plane) and the PSL interpreter — never at runtime.\n//\n// Keeping the runtime closure free of the `./authoring` import is what lets\n// the bundler tree-shake `@prisma-next/family-sql/control` (and its\n// transitive `verify-sql-schema` chunk) out of the runtime entry. Do not\n// add an `authoring` field here — if you need to, the pack/control meta in\n// `./descriptor-meta` is the right place. See TML-2766 for context.\nimport type { CodecTypes } from '../exports/codec-types';\n\nconst postgresTargetDescriptorMetaRuntimeBase = {\n  kind: 'target',\n  familyId: 'sql',\n  targetId: 'postgres',\n  id: 'postgres',\n  version: '0.0.1',\n  capabilities: {},\n} as const;\n\nexport const postgresTargetDescriptorMetaRuntime: typeof postgresTargetDescriptorMetaRuntimeBase & {\n  readonly __codecTypes?: CodecTypes;\n} = postgresTargetDescriptorMetaRuntimeBase;\n","import type { CodecTypes } from '../exports/codec-types';\nimport {\n  postgresAuthoringEntityTypes,\n  postgresAuthoringFieldPresets,\n  postgresAuthoringPslBlockDescriptors,\n  postgresAuthoringTypes,\n} from './authoring';\nimport { postgresTargetDescriptorMetaRuntime } from './descriptor-meta-runtime';\nimport { postgresCreateNamespace } from './postgres-schema';\n\nconst postgresTargetDescriptorMetaBase = {\n  ...postgresTargetDescriptorMetaRuntime,\n  defaultNamespaceId: 'public',\n  authoring: {\n    type: postgresAuthoringTypes,\n    field: postgresAuthoringFieldPresets,\n    entityTypes: postgresAuthoringEntityTypes,\n    pslBlockDescriptors: postgresAuthoringPslBlockDescriptors,\n    createNamespace: postgresCreateNamespace,\n  },\n} as const;\n\nexport const postgresTargetDescriptorMeta: typeof postgresTargetDescriptorMetaBase & {\n  readonly __codecTypes?: CodecTypes;\n} = postgresTargetDescriptorMetaBase;\n"],"mappings":";;;;AAcA,MAAa,yBAAyB,CAAC;AAMvC,SAAS,aAAa,OAA0B,KAAiC;CAC/E,MAAM,QAAQ,MAAM,WAAW;CAC/B,OAAO,OAAO,SAAS,QAAQ,MAAM,aAAa,KAAA;AACpD;AAEA,SAAS,eAAe,OAA0B,KAAiC;CACjF,MAAM,QAAQ,MAAM,WAAW;CAC/B,OAAO,OAAO,SAAS,UAAU,MAAM,MAAM,KAAA;AAC/C;AAEA,SAAS,kBAAkB,OAA0B,KAAuB;CAC1E,MAAM,QAAQ,MAAM,WAAW;CAC/B,IAAI,OAAO,SAAS,QAAQ,OAAO,CAAC;CACpC,OAAO,MAAM,MAAM,SAAS,SAAU,KAAK,SAAS,QAAQ,CAAC,KAAK,UAAU,IAAI,CAAC,CAAE;AACrF;AAEA,SAAS,mBAAmB,KAAqB;CAC/C,IAAI,IAAI,WAAW,IAAG,KAAK,IAAI,SAAS,IAAG,KAAK,IAAI,UAAU,GAC5D,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,QAAQ,IAAG;CAE7C,OAAO;AACT;AAEA,SAAS,wBACP,OACA,MACmB;CACnB,MAAM,SAAS,MAAM;CACrB,MAAM,kBAAkB,aAAa,OAAO,QAAQ,KAAK;CACzD,MAAM,YAAY,gBAAgB,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,gBAAgB,MAAM,CAAC;CACnF,MAAM,QAAQ,CAAC,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK;CAC1D,MAAM,QAAQ,mBAAmB,eAAe,OAAO,OAAO,KAAK,EAAE;CAUrE,OAAO,IAAI,kBAAkB;EAC3B,MAAM,GAHY,OAAO,GANV,mBAAmB;GAClC,OAAO,mBAAmB,KAAK;GAC/B;GACA,WAAW;GACX,YAAY;EACd,CACqC;EAInC;EACA;EACA,aAAa,MAAM;EACnB,WAAW;EACX;EACA;EACA,YAAY;CACd,CAAC;AACH;AAEA,MAAa,+BAA+B;CAC1C,MAAM;EACJ,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ,EACN,UAAU,UAA2C,IAAI,aAAa,KAAK,EAC7E;CACF;CACA,QAAQ;EACN,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ,EACN,SAAS,wBACX;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,MAAa,uCAAuC,EAClD,eAAe;CACb,MAAM;CACN,SAAS;CACT,eAAe;CACf,MAAM,EAAE,UAAU,KAAK;CACvB,YAAY;EACV,QAAQ;GAAE,MAAM;GAAO,SAAS;GAAS,OAAO;GAAkB,UAAU;EAAK;EACjF,OAAO;GACL,MAAM;GACN,IAAI;IAAE,MAAM;IAAO,SAAS;IAAQ,OAAO;GAAc;EAC3D;EACA,OAAO;GAAE,MAAM;GAAS,SAAS;GAAa,UAAU;EAAK;CAC/D;AACF,EACF;AAEA,MAAa,gCAAgC;CAC3C,MAAM;EACJ,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,KAAK;EACH,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,QAAQ;EACN,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,OAAO;EACL,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,SAAS;EACP,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,SAAS;EACP,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,MAAM;EACJ,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,OAAO;EACL,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,UAAU;EACR,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,UAA0B,yCAAyB;EACjD,SAAS;EACT,YAAY;CACd,CAAC;CACD,YAAY;EACV,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,IAAI;EACF,cAAc;GACZ,MAAM;GACN,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,mBAAmB,EACjB,UAAU;KACR,MAAM;KACN,IAAI;IACN,EACF;IACA,IAAI;GACN;EACF;EACA,cAAc;GACZ,MAAM;GACN,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,mBAAmB,EACjB,UAAU;KACR,MAAM;KACN,IAAI;IACN,EACF;IACA,IAAI;GACN;EACF;CACF;AACF;AC1NA,MAAa,sCAET;CAVF,MAAM;CACN,UAAU;CACV,UAAU;CACV,IAAI;CACJ,SAAS;CACT,cAAc,CAAC;AAKb;ACLJ,MAAa,+BAET;CAbF,GAAG;CACH,oBAAoB;CACpB,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,qBAAqB;EACrB,iBAAiB;CACnB;AAKE"}