@prisma-next/target-postgres 0.14.0-dev.60 → 0.14.0-dev.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/dist/{authoring-WkqG_MkU.mjs → authoring-BLkL4fFG.mjs} +147 -38
  2. package/dist/authoring-BLkL4fFG.mjs.map +1 -0
  3. package/dist/contract-free.mjs +2 -2
  4. package/dist/{control-policy-Co_13Hxa.mjs → control-policy-BpmChlAK.mjs} +27 -4
  5. package/dist/{control-policy-Co_13Hxa.mjs.map → control-policy-BpmChlAK.mjs.map} +1 -1
  6. package/dist/control.mjs +6 -5
  7. package/dist/control.mjs.map +1 -1
  8. package/dist/{ddl-B-krEXY1.mjs → ddl-BovUVFVi.mjs} +2 -2
  9. package/dist/{ddl-B-krEXY1.mjs.map → ddl-BovUVFVi.mjs.map} +1 -1
  10. package/dist/{descriptor-meta-BOcKPaLE.mjs → descriptor-meta-C1T4BXJ8.mjs} +3 -3
  11. package/dist/{descriptor-meta-BOcKPaLE.mjs.map → descriptor-meta-C1T4BXJ8.mjs.map} +1 -1
  12. package/dist/{diff-database-schema-BOsDnH64.mjs → diff-database-schema-RMwnSOnz.mjs} +46 -14
  13. package/dist/diff-database-schema-RMwnSOnz.mjs.map +1 -0
  14. package/dist/diff-database-schema.d.mts +4 -4
  15. package/dist/diff-database-schema.d.mts.map +1 -1
  16. package/dist/diff-database-schema.mjs +1 -1
  17. package/dist/issue-planner.mjs +1 -1
  18. package/dist/migration.mjs +2 -2
  19. package/dist/{op-factory-call-DxNNKUeZ.mjs → op-factory-call-CI00nS4z.mjs} +3 -3
  20. package/dist/{op-factory-call-DxNNKUeZ.mjs.map → op-factory-call-CI00nS4z.mjs.map} +1 -1
  21. package/dist/op-factory-call.mjs +1 -1
  22. package/dist/pack.d.mts +146 -3
  23. package/dist/pack.d.mts.map +1 -1
  24. package/dist/pack.mjs +1 -1
  25. package/dist/{planner-CNrc1Odu.mjs → planner-CAHZN1Ez.mjs} +8 -8
  26. package/dist/planner-CAHZN1Ez.mjs.map +1 -0
  27. package/dist/{planner-produced-postgres-migration-NI-oGKcw.mjs → planner-produced-postgres-migration-flkG4Y7n.mjs} +2 -2
  28. package/dist/{planner-produced-postgres-migration-NI-oGKcw.mjs.map → planner-produced-postgres-migration-flkG4Y7n.mjs.map} +1 -1
  29. package/dist/planner-produced-postgres-migration.mjs +1 -1
  30. package/dist/{planner-sql-checks-AXoxB1Jl.mjs → planner-sql-checks-C1-Kk3Eu.mjs} +2 -2
  31. package/dist/{planner-sql-checks-AXoxB1Jl.mjs.map → planner-sql-checks-C1-Kk3Eu.mjs.map} +1 -1
  32. package/dist/planner-sql-checks.mjs +1 -1
  33. package/dist/planner.d.mts +2 -2
  34. package/dist/planner.d.mts.map +1 -1
  35. package/dist/planner.mjs +2 -2
  36. package/dist/{postgres-contract-view-Dg-N7KA7.mjs → postgres-contract-view-DWLNQbdR.mjs} +3 -3
  37. package/dist/{postgres-contract-view-Dg-N7KA7.mjs.map → postgres-contract-view-DWLNQbdR.mjs.map} +1 -1
  38. package/dist/{postgres-database-schema-node-CfdTY-Qs.d.mts → postgres-database-schema-node-BVdOffjC.d.mts} +9 -6
  39. package/dist/{postgres-database-schema-node-CfdTY-Qs.d.mts.map → postgres-database-schema-node-BVdOffjC.d.mts.map} +1 -1
  40. package/dist/{postgres-migration-ChyRsWvE.mjs → postgres-migration-C92swCzd.mjs} +3 -3
  41. package/dist/{postgres-migration-ChyRsWvE.mjs.map → postgres-migration-C92swCzd.mjs.map} +1 -1
  42. package/dist/{postgres-role-schema-node-BiSTCTNg.mjs → postgres-role-schema-node-BmCboEa_.mjs} +10 -7
  43. package/dist/postgres-role-schema-node-BmCboEa_.mjs.map +1 -0
  44. package/dist/{postgres-schema-DTLA_aRi.mjs → postgres-schema-COEca21H.mjs} +20 -3
  45. package/dist/postgres-schema-COEca21H.mjs.map +1 -0
  46. package/dist/{postgres-schema-CU4gF6QZ.d.mts → postgres-schema-DsrtYp2v.d.mts} +13 -1
  47. package/dist/postgres-schema-DsrtYp2v.d.mts.map +1 -0
  48. package/dist/postgres-table-schema-node-9FCtCUz2.mjs.map +1 -1
  49. package/dist/{resolve-ddl-schema-Ca88Tg6W.mjs → resolve-ddl-schema-ZkKxt2Fm.mjs} +2 -2
  50. package/dist/{resolve-ddl-schema-Ca88Tg6W.mjs.map → resolve-ddl-schema-ZkKxt2Fm.mjs.map} +1 -1
  51. package/dist/runtime.mjs +1 -1
  52. package/dist/schema-ir-annotations.mjs +1 -1
  53. package/dist/types.d.mts +2 -2
  54. package/dist/types.mjs +2 -2
  55. package/package.json +20 -20
  56. package/src/core/authoring.ts +136 -25
  57. package/src/core/migrations/control-policy.ts +29 -0
  58. package/src/core/migrations/diff-database-schema.ts +47 -11
  59. package/src/core/migrations/planner.ts +5 -0
  60. package/src/core/postgres-role.ts +22 -0
  61. package/src/core/postgres-validators.ts +1 -0
  62. package/src/core/psl-infer/infer-psl-contract.ts +1 -0
  63. package/src/core/schema-ir/postgres-database-schema-node.ts +5 -4
  64. package/src/core/schema-ir/postgres-role-schema-node.ts +4 -2
  65. package/src/core/schema-ir/schema-node-kinds.ts +7 -0
  66. package/dist/authoring-WkqG_MkU.mjs.map +0 -1
  67. package/dist/diff-database-schema-BOsDnH64.mjs.map +0 -1
  68. package/dist/planner-CNrc1Odu.mjs.map +0 -1
  69. package/dist/postgres-role-schema-node-BiSTCTNg.mjs.map +0 -1
  70. package/dist/postgres-schema-CU4gF6QZ.d.mts.map +0 -1
  71. package/dist/postgres-schema-DTLA_aRi.mjs.map +0 -1
@@ -1 +1 @@
1
- {"version":3,"file":"ddl-B-krEXY1.mjs","names":[],"sources":["../src/contract-free/checks.ts","../src/contract-free/ddl.ts"],"sourcesContent":["import type { SelectAst } from '@prisma-next/sql-relational-core/ast';\nimport {\n type CfExpr,\n type CfExprSelectQuery,\n cfExpr,\n cfTable,\n exprSelect,\n} from '@prisma-next/sql-relational-core/contract-free';\nimport { PostgresTableSource } from '../core/ast/table-source';\nimport { PG_TEXT_CODEC_ID } from '../core/codec-ids';\nimport { postgresCreateNamespace } from '../core/postgres-schema';\n\n/**\n * `to_regclass($1)` with the qualified table name bound as a text parameter.\n * Thin vocabulary wrapper over the core `cfExpr.fn` helper — the target\n * supplies only the template and the codec'd operand.\n */\nexport function toRegclass(qualifiedName: string): CfExpr {\n return cfExpr.fn({\n method: 'to_regclass',\n template: 'to_regclass({{self}})',\n self: cfExpr.param(qualifiedName, PG_TEXT_CODEC_ID),\n returns: { codecId: PG_TEXT_CODEC_ID, nullable: true },\n });\n}\n\nexport interface TableExistsCheckBuilder {\n tableAbsent(): SelectAst;\n tablePresent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's table-existence checks. Produces\n * FROM-less `SELECT to_regclass($1) IS [NOT] NULL AS \"result\"` ASTs with the\n * qualified table name bound as a text parameter — never inlined into the SQL.\n *\n * `schema` is a namespace coordinate: the framework `__unbound__` sentinel\n * elides the qualifier (search_path decides at runtime); any other id\n * qualifies as `\"schema\".\"table\"`.\n */\nexport function tableExistsAst(schema: string, table: string): TableExistsCheckBuilder {\n const qualified = postgresCreateNamespace({ id: schema, entries: { table: {} } }).qualifyTable(\n table,\n );\n const regclass = toRegclass(qualified);\n return {\n tableAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n tablePresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n };\n}\n\nexport interface ConstraintExistsCheckBuilder {\n constraintPresent(): SelectAst;\n constraintAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's constraint-existence checks.\n * Produces `SELECT [NOT ]EXISTS (SELECT 1 FROM pg_constraint c JOIN\n * pg_namespace n ON n.oid = c.connamespace WHERE c.conname = $1 AND\n * n.nspname = $2 [AND c.conrelid = to_regclass($3)]) AS \"result\"` with the\n * constraint name, schema name, and qualified table name bound as text\n * parameters.\n *\n * When `table` is omitted the check matches by name + schema across all\n * tables. Pass `table` to scope the check to a single table (prevents false\n * matches on identically-named constraints in different tables). `schema`\n * is a namespace coordinate: the `__unbound__` sentinel compares `nspname`\n * against `current_schema()` instead of a bound parameter.\n */\nexport function constraintExistsAst(options: {\n readonly constraintName: string;\n readonly schema: string;\n readonly table?: string;\n}): ConstraintExistsCheckBuilder {\n const namespace = postgresCreateNamespace({ id: options.schema, entries: { table: {} } });\n const conditions = [\n cfExpr.columnRef('c', 'conname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('n', 'nspname').eqExpr(namespace.schemaFilterExpression()),\n ];\n if (options.table !== undefined) {\n conditions.push(\n cfExpr.columnRef('c', 'conrelid').eqExpr(toRegclass(namespace.qualifyTable(options.table))),\n );\n }\n const inner = (): CfExprSelectQuery =>\n exprSelect()\n .from(cfTable('pg_constraint', 'c'))\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'connamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n return {\n constraintPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n constraintAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nfunction checkNamespace(schema: string) {\n return postgresCreateNamespace({ id: schema, entries: { table: {} } });\n}\n\nfunction informationSchemaColumns(): PostgresTableSource {\n return new PostgresTableSource({ schema: 'information_schema', name: 'columns' });\n}\n\nfunction infoSchemaColumnConditions(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): CfExpr[] {\n return [\n cfExpr\n .identifierRef('table_schema')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.identifierRef('table_name').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('column_name').eqParam(options.column, PG_TEXT_CODEC_ID),\n ];\n}\n\nfunction infoSchemaColumnQuery(conditions: ReadonlyArray<CfExpr>): CfExprSelectQuery {\n return exprSelect()\n .from(informationSchemaColumns())\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n}\n\nexport interface ColumnExistsCheckBuilder {\n columnPresent(): SelectAst;\n columnAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for column-existence checks over\n * `information_schema.columns`, with schema, table, and column names bound\n * as text parameters.\n */\nexport function columnExistsAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): ColumnExistsCheckBuilder {\n const inner = () => infoSchemaColumnQuery(infoSchemaColumnConditions(options));\n return {\n columnPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n columnAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\n/**\n * Typed nullability check: EXISTS over `information_schema.columns` with\n * `is_nullable` compared against the bound `'YES'` / `'NO'` marker.\n */\nexport function columnNullabilityAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n readonly nullable: boolean;\n}): SelectAst {\n const conditions = [\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('is_nullable').eqParam(options.nullable ? 'YES' : 'NO', PG_TEXT_CODEC_ID),\n ];\n return exprSelect()\n .project('result', cfExpr.exists(infoSchemaColumnQuery(conditions)))\n .build();\n}\n\nexport interface ColumnDefaultCheckBuilder {\n defaultPresent(): SelectAst;\n defaultAbsent(): SelectAst;\n noDefault(): SelectAst;\n}\n\n/**\n * Typed default-presence checks over `information_schema.columns`.\n * `defaultPresent` / `defaultAbsent` assert the column row exists with a\n * non-null / null `column_default`; `noDefault` is the NOT EXISTS variant\n * (also true when the column row is missing entirely).\n */\nexport function columnDefaultAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): ColumnDefaultCheckBuilder {\n const withDefault = () =>\n infoSchemaColumnQuery([\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('column_default').isNotNull(),\n ]);\n const withoutDefault = () =>\n infoSchemaColumnQuery([\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('column_default').isNull(),\n ]);\n return {\n defaultPresent: () => exprSelect().project('result', cfExpr.exists(withDefault())).build(),\n defaultAbsent: () => exprSelect().project('result', cfExpr.exists(withoutDefault())).build(),\n noDefault: () => exprSelect().project('result', cfExpr.notExists(withDefault())).build(),\n };\n}\n\n/**\n * Typed column-type check: EXISTS over `pg_attribute` joined to `pg_class`\n * and `pg_namespace`, comparing `format_type(a.atttypid, a.atttypmod)`\n * against the bound expected display type and excluding dropped columns.\n */\nexport function columnTypeAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n readonly expectedType: string;\n}): SelectAst {\n const formatType = cfExpr.fn({\n method: 'format_type',\n template: 'format_type({{self}}, {{arg0}})',\n self: cfExpr.columnRef('a', 'atttypid'),\n args: [cfExpr.columnRef('a', 'atttypmod')],\n returns: { codecId: PG_TEXT_CODEC_ID, nullable: false },\n });\n const inner = exprSelect()\n .from(cfTable('pg_attribute', 'a'))\n .join(\n cfTable('pg_class', 'c'),\n cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('a', 'attrelid')),\n )\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr\n .columnRef('n', 'nspname')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('a', 'attname').eqParam(options.column, PG_TEXT_CODEC_ID),\n formatType.eqParam(options.expectedType, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('a', 'attisdropped').not(),\n ]),\n );\n return exprSelect().project('result', cfExpr.exists(inner)).build();\n}\n\nexport interface TablePrimaryKeyCheckBuilder {\n pkPresent(): SelectAst;\n pkAbsent(): SelectAst;\n}\n\n/**\n * Typed primary-key existence check over `pg_index` joined to `pg_class`\n * and `pg_namespace`, with a LEFT JOIN on the index relation so an\n * optional `constraintName` can scope the match to a named constraint.\n */\nexport function tablePrimaryKeyAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly constraintName?: string;\n}): TablePrimaryKeyCheckBuilder {\n const conditions = [\n cfExpr\n .columnRef('n', 'nspname')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('i', 'indisprimary'),\n ];\n if (options.constraintName !== undefined) {\n conditions.push(\n cfExpr.columnRef('c2', 'relname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n );\n }\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_index', 'i'))\n .join(\n cfTable('pg_class', 'c'),\n cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('i', 'indrelid')),\n )\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .leftJoin(\n cfTable('pg_class', 'c2'),\n cfExpr.columnRef('c2', 'oid').eqExpr(cfExpr.columnRef('i', 'indexrelid')),\n )\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n return {\n pkPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n pkAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\n/**\n * Typed emptiness check: NOT EXISTS over the user table itself with\n * `LIMIT 1`. The table is addressed through the namespace's polymorphic\n * `tableSource` (qualified for named schemas, bare for the unbound slot).\n */\nexport function tableIsEmptyAst(schema: string, table: string): SelectAst {\n const inner = exprSelect()\n .from(checkNamespace(schema).tableSource(table))\n .project('one', cfExpr.lit(1))\n .limit(1);\n return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\n/**\n * Typed no-NULL-values data check used by `SET NOT NULL` prechecks:\n * NOT EXISTS over the user table where the column IS NULL.\n */\nexport function noNullValuesAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): SelectAst {\n const inner = exprSelect()\n .from(checkNamespace(options.schema).tableSource(options.table))\n .project('one', cfExpr.lit(1))\n .where(cfExpr.identifierRef(options.column).isNull());\n return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\nexport interface ExtensionExistsCheckBuilder {\n extensionPresent(): SelectAst;\n extensionAbsent(): SelectAst;\n}\n\n/**\n * Typed extension existence check over `pg_extension`, with the extension\n * name bound as a text parameter.\n */\nexport function extensionExistsAst(extensionName: string): ExtensionExistsCheckBuilder {\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_extension'))\n .project('one', cfExpr.lit(1))\n .where(cfExpr.identifierRef('extname').eqParam(extensionName, PG_TEXT_CODEC_ID));\n return {\n extensionPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n extensionAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nexport interface RlsPolicyExistsCheckBuilder {\n policyPresent(): SelectAst;\n policyAbsent(): SelectAst;\n}\n\n/**\n * Typed RLS-policy existence check over `pg_policies`, with schema, table,\n * and policy names bound as text parameters (never inlined). The `schema`\n * coordinate is the resolved live-database schema name (e.g. `'public'`),\n * compared against `pg_policies.schemaname` as a bound parameter.\n */\nexport function rlsPolicyExistsAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly policyName: string;\n}): RlsPolicyExistsCheckBuilder {\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_policies'))\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr.identifierRef('schemaname').eqParam(options.schema, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('tablename').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('policyname').eqParam(options.policyName, PG_TEXT_CODEC_ID),\n ]),\n );\n return {\n policyPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n policyAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nexport interface RlsEnabledCheckBuilder {\n rlsEnabled(): SelectAst;\n rlsDisabled(): SelectAst;\n}\n\n/**\n * Typed row-level-security enabled check over `pg_class` joined to\n * `pg_namespace`, comparing `pg_class.relrowsecurity` against the expected\n * boolean. Schema and table names are bound as text parameters.\n */\nexport function rlsEnabledAst(schema: string, table: string): RlsEnabledCheckBuilder {\n const inner = (enabled: boolean) =>\n exprSelect()\n .from(cfTable('pg_class', 'c'))\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr.columnRef('n', 'nspname').eqParam(schema, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('c', 'relname').eqParam(table, PG_TEXT_CODEC_ID),\n enabled\n ? cfExpr.columnRef('c', 'relrowsecurity')\n : cfExpr.columnRef('c', 'relrowsecurity').not(),\n ]),\n );\n return {\n rlsEnabled: () =>\n exprSelect()\n .project('result', cfExpr.exists(inner(true)))\n .build(),\n rlsDisabled: () =>\n exprSelect()\n .project('result', cfExpr.exists(inner(false)))\n .build(),\n };\n}\n\nexport interface IndexExistsCheckBuilder {\n indexPresent(): SelectAst;\n indexAbsent(): SelectAst;\n}\n\n/**\n * Typed index existence check riding the same `to_regclass` vocabulary as\n * `tableExistsAst`, with the qualified index name bound as a text parameter.\n */\nexport function indexExistsAst(schema: string, indexName: string): IndexExistsCheckBuilder {\n const regclass = toRegclass(checkNamespace(schema).qualifyTable(indexName));\n return {\n indexPresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n indexAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n };\n}\n","import type { DdlColumn, DdlTableConstraint } from '@prisma-next/sql-relational-core/ast';\nimport {\n AddColumnAction,\n type AnyAlterTableAction,\n DropDefaultAction,\n PostgresAlterPolicyRename,\n PostgresAlterTable,\n PostgresCreatePolicy,\n PostgresCreateSchema,\n PostgresCreateTable,\n PostgresDisableRowLevelSecurity,\n PostgresDropPolicy,\n type RlsPolicyOperation,\n} from '../core/ddl/nodes';\n\n/**\n * Build a Postgres `CREATE TABLE` query node.\n *\n * Pass `constraints` for table-level composite primary keys, foreign keys, and\n * unique constraints — use the {@link PrimaryKeyConstraint}, {@link ForeignKeyConstraint},\n * and {@link UniqueConstraint} classes from `@prisma-next/sql-relational-core/ast`.\n *\n * Precondition: identifiers (`table`, `schema`, column names/types) are\n * emitted to SQL verbatim — they are not quoted or escaped, so callers must\n * pass pre-trusted values (e.g. fixed control-plane identifiers). String-literal\n * default values, by contrast, are single-quote-escaped (embedded `'` doubled)\n * by the renderer. Identifier quoting for untrusted identifiers is added when\n * the migration planner adopts this lowering path.\n */\nexport function createTable(options: {\n readonly table: string;\n readonly schema?: string;\n readonly ifNotExists?: boolean;\n readonly columns: readonly DdlColumn[];\n readonly constraints?: readonly DdlTableConstraint[];\n}): PostgresCreateTable {\n return new PostgresCreateTable(options);\n}\n\n/**\n * Build a Postgres `CREATE SCHEMA` query node. See {@link createTable} for the\n * pre-trusted-identifier precondition.\n */\nexport function createSchema(options: {\n readonly schema: string;\n readonly ifNotExists?: boolean;\n}): PostgresCreateSchema {\n return new PostgresCreateSchema(options);\n}\n\n/**\n * Build an `ADD COLUMN` action for use inside {@link alterTable}.\n * The column is a structured `DdlColumn` so codec-encoded defaults flow\n * through the adapter's `pgRenderDdlColumn` → `pgRenderDdlColumnDefault` path.\n */\nexport function addColumnAction(column: DdlColumn): AddColumnAction {\n return new AddColumnAction(column);\n}\n\n/**\n * Build a `DROP DEFAULT` action (`ALTER COLUMN \"<name>\" DROP DEFAULT`) for\n * use inside {@link alterTable}. The renderer quotes the column name.\n */\nexport function dropDefaultAction(columnName: string): DropDefaultAction {\n return new DropDefaultAction(columnName);\n}\n\n/**\n * Build a Postgres `ALTER TABLE` query node carrying one or more actions.\n * See {@link addColumnAction} / {@link dropDefaultAction} for building actions.\n */\nexport function alterTable(options: {\n readonly table: string;\n readonly schema?: string;\n readonly actions: readonly AnyAlterTableAction[];\n}): PostgresAlterTable {\n return new PostgresAlterTable(options);\n}\n\n/**\n * Build a Postgres `CREATE POLICY` DDL node.\n *\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n * `using` and `withCheck` are emitted verbatim as predicate SQL — callers\n * must supply safe, pre-validated SQL expressions.\n */\nexport function createPolicy(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n readonly permissive: boolean;\n readonly operation: RlsPolicyOperation;\n readonly roles: readonly string[];\n readonly using?: string;\n readonly withCheck?: string;\n}): PostgresCreatePolicy {\n return new PostgresCreatePolicy(options);\n}\n\n/**\n * Build a Postgres `DROP POLICY` DDL node.\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n */\nexport function dropPolicy(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n}): PostgresDropPolicy {\n return new PostgresDropPolicy(options);\n}\n\n/**\n * Build a Postgres `ALTER POLICY … RENAME TO` DDL node.\n * Identifiers (`schema`, `table`, `name`, `newName`) are quoted by the renderer.\n */\nexport function alterPolicyRename(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n readonly newName: string;\n}): PostgresAlterPolicyRename {\n return new PostgresAlterPolicyRename(options);\n}\n\n/**\n * Build a Postgres `ALTER TABLE … DISABLE ROW LEVEL SECURITY` DDL node.\n * Identifiers (`schema`, `table`) are quoted by the renderer.\n */\nexport function disableRowLevelSecurity(options: {\n readonly schema: string;\n readonly table: string;\n}): PostgresDisableRowLevelSecurity {\n return new PostgresDisableRowLevelSecurity(options);\n}\n"],"mappings":";;;;;;;;;;AAiBA,SAAgB,WAAW,eAA+B;CACxD,OAAO,OAAO,GAAG;EACf,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,MAAM,eAAe,gBAAgB;EAClD,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAK;CACvD,CAAC;AACH;;;;;;;;;;AAgBA,SAAgB,eAAe,QAAgB,OAAwC;CAIrF,MAAM,WAAW,WAHC,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC,CAAC,CAAC,aAChF,KAEkC,CAAC;CACrC,OAAO;EACL,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;EAC3E,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;CACjF;AACF;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,SAIH;CAC/B,MAAM,YAAY,wBAAwB;EAAE,IAAI,QAAQ;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;CACxF,MAAM,aAAa,CACjB,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,GACjF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,OAAO,UAAU,uBAAuB,CAAC,CAC5E;CACA,IAAI,QAAQ,UAAU,KAAA,GACpB,WAAW,KACT,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,UAAU,aAAa,QAAQ,KAAK,CAAC,CAAC,CAC5F;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,iBAAiB,GAAG,CAAC,CAAC,CACnC,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,yBAAyB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACtF,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAC1F;AACF;AAEA,SAAS,eAAe,QAAgB;CACtC,OAAO,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;AACvE;AAEA,SAAS,2BAAgD;CACvD,OAAO,IAAI,oBAAoB;EAAE,QAAQ;EAAsB,MAAM;CAAU,CAAC;AAClF;AAEA,SAAS,2BAA2B,SAIvB;CACX,OAAO;EACL,OACG,cAAc,cAAc,CAAC,CAC7B,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EAC1E,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;CAC9E;AACF;AAEA,SAAS,sBAAsB,YAAsD;CACnF,OAAO,WAAW,CAAC,CAChB,KAAK,yBAAyB,CAAC,CAAC,CAChC,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;AACnC;;;;;;AAYA,SAAgB,gBAAgB,SAIH;CAC3B,MAAM,cAAc,sBAAsB,2BAA2B,OAAO,CAAC;CAC7E,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;AAMA,SAAgB,qBAAqB,SAKvB;CACZ,MAAM,aAAa,CACjB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,WAAW,QAAQ,MAAM,gBAAgB,CAC/F;CACA,OAAO,WAAW,CAAC,CAChB,QAAQ,UAAU,OAAO,OAAO,sBAAsB,UAAU,CAAC,CAAC,CAAC,CACnE,MAAM;AACX;;;;;;;AAcA,SAAgB,iBAAiB,SAIH;CAC5B,MAAM,oBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,UAAU,CACnD,CAAC;CACH,MAAM,uBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,OAAO,CAChD,CAAC;CACH,OAAO;EACL,sBAAsB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;EACzF,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM;EAC3F,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;AAOA,SAAgB,cAAc,SAKhB;CACZ,MAAM,aAAa,OAAO,GAAG;EAC3B,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,UAAU,KAAK,UAAU;EACtC,MAAM,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC;EACzC,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAM;CACxD,CAAC;CACD,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,QAAQ,gBAAgB,GAAG,CAAC,CAAC,CAClC,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EACzE,WAAW,QAAQ,QAAQ,cAAc,gBAAgB;EACzD,OAAO,UAAU,KAAK,cAAc,CAAC,CAAC,IAAI;CAC5C,CAAC,CACH;CACF,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM;AACpE;;;;;;AAYA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,aAAa;EACjB,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,cAAc;CACtC;CACA,IAAI,QAAQ,mBAAmB,KAAA,GAC7B,WAAW,KACT,OAAO,UAAU,MAAM,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,CACpF;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,SACC,QAAQ,YAAY,IAAI,GACxB,OAAO,UAAU,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,YAAY,CAAC,CAC1E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAC9E,gBAAgB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAClF;AACF;;;;;;AAOA,SAAgB,gBAAgB,QAAgB,OAA0B;CACxE,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAC/C,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,CAAC;CACV,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAMA,SAAgB,gBAAgB,SAIlB;CACZ,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,QAAQ,MAAM,CAAC,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,CAC/D,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,OAAO,CAAC;CACtD,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAWA,SAAgB,mBAAmB,eAAoD;CACrF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,cAAc,CAAC,CAAC,CAC7B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,SAAS,CAAC,CAAC,QAAQ,eAAe,gBAAgB,CAAC;CACnF,OAAO;EACL,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACrF,uBAAuB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;;AAaA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,aAAa,CAAC,CAAC,CAC5B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EAC3E,OAAO,cAAc,WAAW,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACzE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,YAAY,gBAAgB;CACjF,CAAC,CACH;CACJ,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;;AAYA,SAAgB,cAAc,QAAgB,OAAuC;CACnF,MAAM,SAAS,YACb,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,OAAO,gBAAgB;EAChE,UACI,OAAO,UAAU,KAAK,gBAAgB,IACtC,OAAO,UAAU,KAAK,gBAAgB,CAAC,CAAC,IAAI;CAClD,CAAC,CACH;CACJ,OAAO;EACL,kBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAC7C,MAAM;EACX,mBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAC9C,MAAM;CACb;AACF;;;;;AAWA,SAAgB,eAAe,QAAgB,WAA4C;CACzF,MAAM,WAAW,WAAW,eAAe,MAAM,CAAC,CAAC,aAAa,SAAS,CAAC;CAC1E,OAAO;EACL,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;EAC/E,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;CAC7E;AACF;;;;;;;;;;;;;;;;;ACtZA,SAAgB,YAAY,SAMJ;CACtB,OAAO,IAAI,oBAAoB,OAAO;AACxC;;;;;AAMA,SAAgB,aAAa,SAGJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;;AAOA,SAAgB,gBAAgB,QAAoC;CAClE,OAAO,IAAI,gBAAgB,MAAM;AACnC;;;;;AAMA,SAAgB,kBAAkB,YAAuC;CACvE,OAAO,IAAI,kBAAkB,UAAU;AACzC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC;;;;;;;;AASA,SAAgB,aAAa,SASJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC;;;;;AAMA,SAAgB,kBAAkB,SAKJ;CAC5B,OAAO,IAAI,0BAA0B,OAAO;AAC9C;;;;;AAMA,SAAgB,wBAAwB,SAGJ;CAClC,OAAO,IAAI,gCAAgC,OAAO;AACpD"}
1
+ {"version":3,"file":"ddl-BovUVFVi.mjs","names":[],"sources":["../src/contract-free/checks.ts","../src/contract-free/ddl.ts"],"sourcesContent":["import type { SelectAst } from '@prisma-next/sql-relational-core/ast';\nimport {\n type CfExpr,\n type CfExprSelectQuery,\n cfExpr,\n cfTable,\n exprSelect,\n} from '@prisma-next/sql-relational-core/contract-free';\nimport { PostgresTableSource } from '../core/ast/table-source';\nimport { PG_TEXT_CODEC_ID } from '../core/codec-ids';\nimport { postgresCreateNamespace } from '../core/postgres-schema';\n\n/**\n * `to_regclass($1)` with the qualified table name bound as a text parameter.\n * Thin vocabulary wrapper over the core `cfExpr.fn` helper — the target\n * supplies only the template and the codec'd operand.\n */\nexport function toRegclass(qualifiedName: string): CfExpr {\n return cfExpr.fn({\n method: 'to_regclass',\n template: 'to_regclass({{self}})',\n self: cfExpr.param(qualifiedName, PG_TEXT_CODEC_ID),\n returns: { codecId: PG_TEXT_CODEC_ID, nullable: true },\n });\n}\n\nexport interface TableExistsCheckBuilder {\n tableAbsent(): SelectAst;\n tablePresent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's table-existence checks. Produces\n * FROM-less `SELECT to_regclass($1) IS [NOT] NULL AS \"result\"` ASTs with the\n * qualified table name bound as a text parameter — never inlined into the SQL.\n *\n * `schema` is a namespace coordinate: the framework `__unbound__` sentinel\n * elides the qualifier (search_path decides at runtime); any other id\n * qualifies as `\"schema\".\"table\"`.\n */\nexport function tableExistsAst(schema: string, table: string): TableExistsCheckBuilder {\n const qualified = postgresCreateNamespace({ id: schema, entries: { table: {} } }).qualifyTable(\n table,\n );\n const regclass = toRegclass(qualified);\n return {\n tableAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n tablePresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n };\n}\n\nexport interface ConstraintExistsCheckBuilder {\n constraintPresent(): SelectAst;\n constraintAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for the migration planner's constraint-existence checks.\n * Produces `SELECT [NOT ]EXISTS (SELECT 1 FROM pg_constraint c JOIN\n * pg_namespace n ON n.oid = c.connamespace WHERE c.conname = $1 AND\n * n.nspname = $2 [AND c.conrelid = to_regclass($3)]) AS \"result\"` with the\n * constraint name, schema name, and qualified table name bound as text\n * parameters.\n *\n * When `table` is omitted the check matches by name + schema across all\n * tables. Pass `table` to scope the check to a single table (prevents false\n * matches on identically-named constraints in different tables). `schema`\n * is a namespace coordinate: the `__unbound__` sentinel compares `nspname`\n * against `current_schema()` instead of a bound parameter.\n */\nexport function constraintExistsAst(options: {\n readonly constraintName: string;\n readonly schema: string;\n readonly table?: string;\n}): ConstraintExistsCheckBuilder {\n const namespace = postgresCreateNamespace({ id: options.schema, entries: { table: {} } });\n const conditions = [\n cfExpr.columnRef('c', 'conname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('n', 'nspname').eqExpr(namespace.schemaFilterExpression()),\n ];\n if (options.table !== undefined) {\n conditions.push(\n cfExpr.columnRef('c', 'conrelid').eqExpr(toRegclass(namespace.qualifyTable(options.table))),\n );\n }\n const inner = (): CfExprSelectQuery =>\n exprSelect()\n .from(cfTable('pg_constraint', 'c'))\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'connamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n return {\n constraintPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n constraintAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nfunction checkNamespace(schema: string) {\n return postgresCreateNamespace({ id: schema, entries: { table: {} } });\n}\n\nfunction informationSchemaColumns(): PostgresTableSource {\n return new PostgresTableSource({ schema: 'information_schema', name: 'columns' });\n}\n\nfunction infoSchemaColumnConditions(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): CfExpr[] {\n return [\n cfExpr\n .identifierRef('table_schema')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.identifierRef('table_name').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('column_name').eqParam(options.column, PG_TEXT_CODEC_ID),\n ];\n}\n\nfunction infoSchemaColumnQuery(conditions: ReadonlyArray<CfExpr>): CfExprSelectQuery {\n return exprSelect()\n .from(informationSchemaColumns())\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n}\n\nexport interface ColumnExistsCheckBuilder {\n columnPresent(): SelectAst;\n columnAbsent(): SelectAst;\n}\n\n/**\n * Typed builder for column-existence checks over\n * `information_schema.columns`, with schema, table, and column names bound\n * as text parameters.\n */\nexport function columnExistsAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): ColumnExistsCheckBuilder {\n const inner = () => infoSchemaColumnQuery(infoSchemaColumnConditions(options));\n return {\n columnPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n columnAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\n/**\n * Typed nullability check: EXISTS over `information_schema.columns` with\n * `is_nullable` compared against the bound `'YES'` / `'NO'` marker.\n */\nexport function columnNullabilityAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n readonly nullable: boolean;\n}): SelectAst {\n const conditions = [\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('is_nullable').eqParam(options.nullable ? 'YES' : 'NO', PG_TEXT_CODEC_ID),\n ];\n return exprSelect()\n .project('result', cfExpr.exists(infoSchemaColumnQuery(conditions)))\n .build();\n}\n\nexport interface ColumnDefaultCheckBuilder {\n defaultPresent(): SelectAst;\n defaultAbsent(): SelectAst;\n noDefault(): SelectAst;\n}\n\n/**\n * Typed default-presence checks over `information_schema.columns`.\n * `defaultPresent` / `defaultAbsent` assert the column row exists with a\n * non-null / null `column_default`; `noDefault` is the NOT EXISTS variant\n * (also true when the column row is missing entirely).\n */\nexport function columnDefaultAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): ColumnDefaultCheckBuilder {\n const withDefault = () =>\n infoSchemaColumnQuery([\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('column_default').isNotNull(),\n ]);\n const withoutDefault = () =>\n infoSchemaColumnQuery([\n ...infoSchemaColumnConditions(options),\n cfExpr.identifierRef('column_default').isNull(),\n ]);\n return {\n defaultPresent: () => exprSelect().project('result', cfExpr.exists(withDefault())).build(),\n defaultAbsent: () => exprSelect().project('result', cfExpr.exists(withoutDefault())).build(),\n noDefault: () => exprSelect().project('result', cfExpr.notExists(withDefault())).build(),\n };\n}\n\n/**\n * Typed column-type check: EXISTS over `pg_attribute` joined to `pg_class`\n * and `pg_namespace`, comparing `format_type(a.atttypid, a.atttypmod)`\n * against the bound expected display type and excluding dropped columns.\n */\nexport function columnTypeAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n readonly expectedType: string;\n}): SelectAst {\n const formatType = cfExpr.fn({\n method: 'format_type',\n template: 'format_type({{self}}, {{arg0}})',\n self: cfExpr.columnRef('a', 'atttypid'),\n args: [cfExpr.columnRef('a', 'atttypmod')],\n returns: { codecId: PG_TEXT_CODEC_ID, nullable: false },\n });\n const inner = exprSelect()\n .from(cfTable('pg_attribute', 'a'))\n .join(\n cfTable('pg_class', 'c'),\n cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('a', 'attrelid')),\n )\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr\n .columnRef('n', 'nspname')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('a', 'attname').eqParam(options.column, PG_TEXT_CODEC_ID),\n formatType.eqParam(options.expectedType, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('a', 'attisdropped').not(),\n ]),\n );\n return exprSelect().project('result', cfExpr.exists(inner)).build();\n}\n\nexport interface TablePrimaryKeyCheckBuilder {\n pkPresent(): SelectAst;\n pkAbsent(): SelectAst;\n}\n\n/**\n * Typed primary-key existence check over `pg_index` joined to `pg_class`\n * and `pg_namespace`, with a LEFT JOIN on the index relation so an\n * optional `constraintName` can scope the match to a named constraint.\n */\nexport function tablePrimaryKeyAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly constraintName?: string;\n}): TablePrimaryKeyCheckBuilder {\n const conditions = [\n cfExpr\n .columnRef('n', 'nspname')\n .eqExpr(checkNamespace(options.schema).schemaFilterExpression()),\n cfExpr.columnRef('c', 'relname').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('i', 'indisprimary'),\n ];\n if (options.constraintName !== undefined) {\n conditions.push(\n cfExpr.columnRef('c2', 'relname').eqParam(options.constraintName, PG_TEXT_CODEC_ID),\n );\n }\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_index', 'i'))\n .join(\n cfTable('pg_class', 'c'),\n cfExpr.columnRef('c', 'oid').eqExpr(cfExpr.columnRef('i', 'indrelid')),\n )\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .leftJoin(\n cfTable('pg_class', 'c2'),\n cfExpr.columnRef('c2', 'oid').eqExpr(cfExpr.columnRef('i', 'indexrelid')),\n )\n .project('one', cfExpr.lit(1))\n .where(cfExpr.allOf(conditions));\n return {\n pkPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n pkAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\n/**\n * Typed emptiness check: NOT EXISTS over the user table itself with\n * `LIMIT 1`. The table is addressed through the namespace's polymorphic\n * `tableSource` (qualified for named schemas, bare for the unbound slot).\n */\nexport function tableIsEmptyAst(schema: string, table: string): SelectAst {\n const inner = exprSelect()\n .from(checkNamespace(schema).tableSource(table))\n .project('one', cfExpr.lit(1))\n .limit(1);\n return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\n/**\n * Typed no-NULL-values data check used by `SET NOT NULL` prechecks:\n * NOT EXISTS over the user table where the column IS NULL.\n */\nexport function noNullValuesAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly column: string;\n}): SelectAst {\n const inner = exprSelect()\n .from(checkNamespace(options.schema).tableSource(options.table))\n .project('one', cfExpr.lit(1))\n .where(cfExpr.identifierRef(options.column).isNull());\n return exprSelect().project('result', cfExpr.notExists(inner)).build();\n}\n\nexport interface ExtensionExistsCheckBuilder {\n extensionPresent(): SelectAst;\n extensionAbsent(): SelectAst;\n}\n\n/**\n * Typed extension existence check over `pg_extension`, with the extension\n * name bound as a text parameter.\n */\nexport function extensionExistsAst(extensionName: string): ExtensionExistsCheckBuilder {\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_extension'))\n .project('one', cfExpr.lit(1))\n .where(cfExpr.identifierRef('extname').eqParam(extensionName, PG_TEXT_CODEC_ID));\n return {\n extensionPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n extensionAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nexport interface RlsPolicyExistsCheckBuilder {\n policyPresent(): SelectAst;\n policyAbsent(): SelectAst;\n}\n\n/**\n * Typed RLS-policy existence check over `pg_policies`, with schema, table,\n * and policy names bound as text parameters (never inlined). The `schema`\n * coordinate is the resolved live-database schema name (e.g. `'public'`),\n * compared against `pg_policies.schemaname` as a bound parameter.\n */\nexport function rlsPolicyExistsAst(options: {\n readonly schema: string;\n readonly table: string;\n readonly policyName: string;\n}): RlsPolicyExistsCheckBuilder {\n const inner = () =>\n exprSelect()\n .from(cfTable('pg_policies'))\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr.identifierRef('schemaname').eqParam(options.schema, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('tablename').eqParam(options.table, PG_TEXT_CODEC_ID),\n cfExpr.identifierRef('policyname').eqParam(options.policyName, PG_TEXT_CODEC_ID),\n ]),\n );\n return {\n policyPresent: () => exprSelect().project('result', cfExpr.exists(inner())).build(),\n policyAbsent: () => exprSelect().project('result', cfExpr.notExists(inner())).build(),\n };\n}\n\nexport interface RlsEnabledCheckBuilder {\n rlsEnabled(): SelectAst;\n rlsDisabled(): SelectAst;\n}\n\n/**\n * Typed row-level-security enabled check over `pg_class` joined to\n * `pg_namespace`, comparing `pg_class.relrowsecurity` against the expected\n * boolean. Schema and table names are bound as text parameters.\n */\nexport function rlsEnabledAst(schema: string, table: string): RlsEnabledCheckBuilder {\n const inner = (enabled: boolean) =>\n exprSelect()\n .from(cfTable('pg_class', 'c'))\n .join(\n cfTable('pg_namespace', 'n'),\n cfExpr.columnRef('n', 'oid').eqExpr(cfExpr.columnRef('c', 'relnamespace')),\n )\n .project('one', cfExpr.lit(1))\n .where(\n cfExpr.allOf([\n cfExpr.columnRef('n', 'nspname').eqParam(schema, PG_TEXT_CODEC_ID),\n cfExpr.columnRef('c', 'relname').eqParam(table, PG_TEXT_CODEC_ID),\n enabled\n ? cfExpr.columnRef('c', 'relrowsecurity')\n : cfExpr.columnRef('c', 'relrowsecurity').not(),\n ]),\n );\n return {\n rlsEnabled: () =>\n exprSelect()\n .project('result', cfExpr.exists(inner(true)))\n .build(),\n rlsDisabled: () =>\n exprSelect()\n .project('result', cfExpr.exists(inner(false)))\n .build(),\n };\n}\n\nexport interface IndexExistsCheckBuilder {\n indexPresent(): SelectAst;\n indexAbsent(): SelectAst;\n}\n\n/**\n * Typed index existence check riding the same `to_regclass` vocabulary as\n * `tableExistsAst`, with the qualified index name bound as a text parameter.\n */\nexport function indexExistsAst(schema: string, indexName: string): IndexExistsCheckBuilder {\n const regclass = toRegclass(checkNamespace(schema).qualifyTable(indexName));\n return {\n indexPresent: () => exprSelect().project('result', regclass.isNotNull()).build(),\n indexAbsent: () => exprSelect().project('result', regclass.isNull()).build(),\n };\n}\n","import type { DdlColumn, DdlTableConstraint } from '@prisma-next/sql-relational-core/ast';\nimport {\n AddColumnAction,\n type AnyAlterTableAction,\n DropDefaultAction,\n PostgresAlterPolicyRename,\n PostgresAlterTable,\n PostgresCreatePolicy,\n PostgresCreateSchema,\n PostgresCreateTable,\n PostgresDisableRowLevelSecurity,\n PostgresDropPolicy,\n type RlsPolicyOperation,\n} from '../core/ddl/nodes';\n\n/**\n * Build a Postgres `CREATE TABLE` query node.\n *\n * Pass `constraints` for table-level composite primary keys, foreign keys, and\n * unique constraints — use the {@link PrimaryKeyConstraint}, {@link ForeignKeyConstraint},\n * and {@link UniqueConstraint} classes from `@prisma-next/sql-relational-core/ast`.\n *\n * Precondition: identifiers (`table`, `schema`, column names/types) are\n * emitted to SQL verbatim — they are not quoted or escaped, so callers must\n * pass pre-trusted values (e.g. fixed control-plane identifiers). String-literal\n * default values, by contrast, are single-quote-escaped (embedded `'` doubled)\n * by the renderer. Identifier quoting for untrusted identifiers is added when\n * the migration planner adopts this lowering path.\n */\nexport function createTable(options: {\n readonly table: string;\n readonly schema?: string;\n readonly ifNotExists?: boolean;\n readonly columns: readonly DdlColumn[];\n readonly constraints?: readonly DdlTableConstraint[];\n}): PostgresCreateTable {\n return new PostgresCreateTable(options);\n}\n\n/**\n * Build a Postgres `CREATE SCHEMA` query node. See {@link createTable} for the\n * pre-trusted-identifier precondition.\n */\nexport function createSchema(options: {\n readonly schema: string;\n readonly ifNotExists?: boolean;\n}): PostgresCreateSchema {\n return new PostgresCreateSchema(options);\n}\n\n/**\n * Build an `ADD COLUMN` action for use inside {@link alterTable}.\n * The column is a structured `DdlColumn` so codec-encoded defaults flow\n * through the adapter's `pgRenderDdlColumn` → `pgRenderDdlColumnDefault` path.\n */\nexport function addColumnAction(column: DdlColumn): AddColumnAction {\n return new AddColumnAction(column);\n}\n\n/**\n * Build a `DROP DEFAULT` action (`ALTER COLUMN \"<name>\" DROP DEFAULT`) for\n * use inside {@link alterTable}. The renderer quotes the column name.\n */\nexport function dropDefaultAction(columnName: string): DropDefaultAction {\n return new DropDefaultAction(columnName);\n}\n\n/**\n * Build a Postgres `ALTER TABLE` query node carrying one or more actions.\n * See {@link addColumnAction} / {@link dropDefaultAction} for building actions.\n */\nexport function alterTable(options: {\n readonly table: string;\n readonly schema?: string;\n readonly actions: readonly AnyAlterTableAction[];\n}): PostgresAlterTable {\n return new PostgresAlterTable(options);\n}\n\n/**\n * Build a Postgres `CREATE POLICY` DDL node.\n *\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n * `using` and `withCheck` are emitted verbatim as predicate SQL — callers\n * must supply safe, pre-validated SQL expressions.\n */\nexport function createPolicy(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n readonly permissive: boolean;\n readonly operation: RlsPolicyOperation;\n readonly roles: readonly string[];\n readonly using?: string;\n readonly withCheck?: string;\n}): PostgresCreatePolicy {\n return new PostgresCreatePolicy(options);\n}\n\n/**\n * Build a Postgres `DROP POLICY` DDL node.\n * Identifiers (`schema`, `table`, `name`) are quoted by the renderer.\n */\nexport function dropPolicy(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n}): PostgresDropPolicy {\n return new PostgresDropPolicy(options);\n}\n\n/**\n * Build a Postgres `ALTER POLICY … RENAME TO` DDL node.\n * Identifiers (`schema`, `table`, `name`, `newName`) are quoted by the renderer.\n */\nexport function alterPolicyRename(options: {\n readonly schema: string;\n readonly table: string;\n readonly name: string;\n readonly newName: string;\n}): PostgresAlterPolicyRename {\n return new PostgresAlterPolicyRename(options);\n}\n\n/**\n * Build a Postgres `ALTER TABLE … DISABLE ROW LEVEL SECURITY` DDL node.\n * Identifiers (`schema`, `table`) are quoted by the renderer.\n */\nexport function disableRowLevelSecurity(options: {\n readonly schema: string;\n readonly table: string;\n}): PostgresDisableRowLevelSecurity {\n return new PostgresDisableRowLevelSecurity(options);\n}\n"],"mappings":";;;;;;;;;;AAiBA,SAAgB,WAAW,eAA+B;CACxD,OAAO,OAAO,GAAG;EACf,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,MAAM,eAAe,gBAAgB;EAClD,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAK;CACvD,CAAC;AACH;;;;;;;;;;AAgBA,SAAgB,eAAe,QAAgB,OAAwC;CAIrF,MAAM,WAAW,WAHC,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC,CAAC,CAAC,aAChF,KAEkC,CAAC;CACrC,OAAO;EACL,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;EAC3E,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;CACjF;AACF;;;;;;;;;;;;;;;AAqBA,SAAgB,oBAAoB,SAIH;CAC/B,MAAM,YAAY,wBAAwB;EAAE,IAAI,QAAQ;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;CACxF,MAAM,aAAa,CACjB,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,GACjF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,OAAO,UAAU,uBAAuB,CAAC,CAC5E;CACA,IAAI,QAAQ,UAAU,KAAA,GACpB,WAAW,KACT,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,UAAU,aAAa,QAAQ,KAAK,CAAC,CAAC,CAC5F;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,iBAAiB,GAAG,CAAC,CAAC,CACnC,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,yBAAyB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACtF,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAC1F;AACF;AAEA,SAAS,eAAe,QAAgB;CACtC,OAAO,wBAAwB;EAAE,IAAI;EAAQ,SAAS,EAAE,OAAO,CAAC,EAAE;CAAE,CAAC;AACvE;AAEA,SAAS,2BAAgD;CACvD,OAAO,IAAI,oBAAoB;EAAE,QAAQ;EAAsB,MAAM;CAAU,CAAC;AAClF;AAEA,SAAS,2BAA2B,SAIvB;CACX,OAAO;EACL,OACG,cAAc,cAAc,CAAC,CAC7B,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EAC1E,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;CAC9E;AACF;AAEA,SAAS,sBAAsB,YAAsD;CACnF,OAAO,WAAW,CAAC,CAChB,KAAK,yBAAyB,CAAC,CAAC,CAChC,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;AACnC;;;;;;AAYA,SAAgB,gBAAgB,SAIH;CAC3B,MAAM,cAAc,sBAAsB,2BAA2B,OAAO,CAAC;CAC7E,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;AAMA,SAAgB,qBAAqB,SAKvB;CACZ,MAAM,aAAa,CACjB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,aAAa,CAAC,CAAC,QAAQ,QAAQ,WAAW,QAAQ,MAAM,gBAAgB,CAC/F;CACA,OAAO,WAAW,CAAC,CAChB,QAAQ,UAAU,OAAO,OAAO,sBAAsB,UAAU,CAAC,CAAC,CAAC,CACnE,MAAM;AACX;;;;;;;AAcA,SAAgB,iBAAiB,SAIH;CAC5B,MAAM,oBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,UAAU,CACnD,CAAC;CACH,MAAM,uBACJ,sBAAsB,CACpB,GAAG,2BAA2B,OAAO,GACrC,OAAO,cAAc,gBAAgB,CAAC,CAAC,OAAO,CAChD,CAAC;CACH,OAAO;EACL,sBAAsB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;EACzF,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM;EAC3F,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;AAOA,SAAgB,cAAc,SAKhB;CACZ,MAAM,aAAa,OAAO,GAAG;EAC3B,QAAQ;EACR,UAAU;EACV,MAAM,OAAO,UAAU,KAAK,UAAU;EACtC,MAAM,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC;EACzC,SAAS;GAAE,SAAS;GAAkB,UAAU;EAAM;CACxD,CAAC;CACD,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,QAAQ,gBAAgB,GAAG,CAAC,CAAC,CAClC,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EACzE,WAAW,QAAQ,QAAQ,cAAc,gBAAgB;EACzD,OAAO,UAAU,KAAK,cAAc,CAAC,CAAC,IAAI;CAC5C,CAAC,CACH;CACF,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM;AACpE;;;;;;AAYA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,aAAa;EACjB,OACG,UAAU,KAAK,SAAS,CAAC,CACzB,OAAO,eAAe,QAAQ,MAAM,CAAC,CAAC,uBAAuB,CAAC;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACxE,OAAO,UAAU,KAAK,cAAc;CACtC;CACA,IAAI,QAAQ,mBAAmB,KAAA,GAC7B,WAAW,KACT,OAAO,UAAU,MAAM,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB,gBAAgB,CACpF;CAEF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,YAAY,GAAG,GACvB,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,UAAU,CAAC,CACvE,CAAC,CACA,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,SACC,QAAQ,YAAY,IAAI,GACxB,OAAO,UAAU,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,YAAY,CAAC,CAC1E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,MAAM,UAAU,CAAC;CACnC,OAAO;EACL,iBAAiB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAC9E,gBAAgB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CAClF;AACF;;;;;;AAOA,SAAgB,gBAAgB,QAAgB,OAA0B;CACxE,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAC/C,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,CAAC;CACV,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAMA,SAAgB,gBAAgB,SAIlB;CACZ,MAAM,QAAQ,WAAW,CAAC,CACvB,KAAK,eAAe,QAAQ,MAAM,CAAC,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,CAC/D,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,QAAQ,MAAM,CAAC,CAAC,OAAO,CAAC;CACtD,OAAO,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,MAAM;AACvE;;;;;AAWA,SAAgB,mBAAmB,eAAoD;CACrF,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,cAAc,CAAC,CAAC,CAC7B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MAAM,OAAO,cAAc,SAAS,CAAC,CAAC,QAAQ,eAAe,gBAAgB,CAAC;CACnF,OAAO;EACL,wBAAwB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EACrF,uBAAuB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACzF;AACF;;;;;;;AAaA,SAAgB,mBAAmB,SAIH;CAC9B,MAAM,cACJ,WAAW,CAAC,CACT,KAAK,QAAQ,aAAa,CAAC,CAAC,CAC5B,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,QAAQ,gBAAgB;EAC3E,OAAO,cAAc,WAAW,CAAC,CAAC,QAAQ,QAAQ,OAAO,gBAAgB;EACzE,OAAO,cAAc,YAAY,CAAC,CAAC,QAAQ,QAAQ,YAAY,gBAAgB;CACjF,CAAC,CACH;CACJ,OAAO;EACL,qBAAqB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;EAClF,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,OAAO,UAAU,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;CACtF;AACF;;;;;;AAYA,SAAgB,cAAc,QAAgB,OAAuC;CACnF,MAAM,SAAS,YACb,WAAW,CAAC,CACT,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAC,CAC9B,KACC,QAAQ,gBAAgB,GAAG,GAC3B,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,UAAU,KAAK,cAAc,CAAC,CAC3E,CAAC,CACA,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAC7B,MACC,OAAO,MAAM;EACX,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,QAAQ,gBAAgB;EACjE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,QAAQ,OAAO,gBAAgB;EAChE,UACI,OAAO,UAAU,KAAK,gBAAgB,IACtC,OAAO,UAAU,KAAK,gBAAgB,CAAC,CAAC,IAAI;CAClD,CAAC,CACH;CACJ,OAAO;EACL,kBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,CAAC,CAC7C,MAAM;EACX,mBACE,WAAW,CAAC,CACT,QAAQ,UAAU,OAAO,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAC9C,MAAM;CACb;AACF;;;;;AAWA,SAAgB,eAAe,QAAgB,WAA4C;CACzF,MAAM,WAAW,WAAW,eAAe,MAAM,CAAC,CAAC,aAAa,SAAS,CAAC;CAC1E,OAAO;EACL,oBAAoB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,UAAU,CAAC,CAAC,CAAC,MAAM;EAC/E,mBAAmB,WAAW,CAAC,CAAC,QAAQ,UAAU,SAAS,OAAO,CAAC,CAAC,CAAC,MAAM;CAC7E;AACF;;;;;;;;;;;;;;;;;ACtZA,SAAgB,YAAY,SAMJ;CACtB,OAAO,IAAI,oBAAoB,OAAO;AACxC;;;;;AAMA,SAAgB,aAAa,SAGJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;;AAOA,SAAgB,gBAAgB,QAAoC;CAClE,OAAO,IAAI,gBAAgB,MAAM;AACnC;;;;;AAMA,SAAgB,kBAAkB,YAAuC;CACvE,OAAO,IAAI,kBAAkB,UAAU;AACzC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC;;;;;;;;AASA,SAAgB,aAAa,SASJ;CACvB,OAAO,IAAI,qBAAqB,OAAO;AACzC;;;;;AAMA,SAAgB,WAAW,SAIJ;CACrB,OAAO,IAAI,mBAAmB,OAAO;AACvC;;;;;AAMA,SAAgB,kBAAkB,SAKJ;CAC5B,OAAO,IAAI,0BAA0B,OAAO;AAC9C;;;;;AAMA,SAAgB,wBAAwB,SAGJ;CAClC,OAAO,IAAI,gCAAgC,OAAO;AACpD"}
@@ -1,7 +1,7 @@
1
1
  import { T as postgresQualifyColumnType } from "./codecs-CkVQrZ4G.mjs";
2
2
  import { t as DEFAULT_NAMESPACE_ID } from "./namespace-ids-xtp_ZY86.mjs";
3
- import { i as postgresCreateNamespace } from "./postgres-schema-DTLA_aRi.mjs";
4
- import { a as postgresAuthoringTypes, i as postgresAuthoringPslBlockDescriptors, n as postgresAuthoringFieldPresets, r as postgresAuthoringModelAttributes, t as postgresAuthoringEntityTypes } from "./authoring-WkqG_MkU.mjs";
3
+ import { i as postgresCreateNamespace } from "./postgres-schema-COEca21H.mjs";
4
+ import { a as postgresAuthoringTypes, i as postgresAuthoringPslBlockDescriptors, n as postgresAuthoringFieldPresets, r as postgresAuthoringModelAttributes, t as postgresAuthoringEntityTypes } from "./authoring-BLkL4fFG.mjs";
5
5
  import { t as postgresTargetDescriptorMetaRuntime } from "./descriptor-meta-runtime-UwYdV8fD.mjs";
6
6
  const postgresTargetDescriptorMeta = {
7
7
  ...postgresTargetDescriptorMetaRuntime,
@@ -19,4 +19,4 @@ const postgresTargetDescriptorMeta = {
19
19
  //#endregion
20
20
  export { postgresTargetDescriptorMeta as t };
21
21
 
22
- //# sourceMappingURL=descriptor-meta-BOcKPaLE.mjs.map
22
+ //# sourceMappingURL=descriptor-meta-C1T4BXJ8.mjs.map
@@ -1 +1 @@
1
- {"version":3,"file":"descriptor-meta-BOcKPaLE.mjs","names":[],"sources":["../src/core/descriptor-meta.ts"],"sourcesContent":["import type { CodecTypes } from '../exports/codec-types';\nimport {\n postgresAuthoringEntityTypes,\n postgresAuthoringFieldPresets,\n postgresAuthoringModelAttributes,\n postgresAuthoringPslBlockDescriptors,\n postgresAuthoringTypes,\n} from './authoring';\nimport { postgresQualifyColumnType } from './codecs';\nimport { postgresTargetDescriptorMetaRuntime } from './descriptor-meta-runtime';\nimport { DEFAULT_NAMESPACE_ID } from './namespace-ids';\nimport { postgresCreateNamespace } from './postgres-schema';\n\nconst postgresTargetDescriptorMetaBase = {\n ...postgresTargetDescriptorMetaRuntime,\n defaultNamespaceId: DEFAULT_NAMESPACE_ID,\n authoring: {\n type: postgresAuthoringTypes,\n field: postgresAuthoringFieldPresets,\n entityTypes: postgresAuthoringEntityTypes,\n pslBlockDescriptors: postgresAuthoringPslBlockDescriptors,\n modelAttributes: postgresAuthoringModelAttributes,\n createNamespace: postgresCreateNamespace,\n qualifyColumnType: postgresQualifyColumnType,\n },\n} as const;\n\nexport const postgresTargetDescriptorMeta: typeof postgresTargetDescriptorMetaBase & {\n readonly __codecTypes?: CodecTypes;\n} = postgresTargetDescriptorMetaBase;\n"],"mappings":";;;;;AA2BA,MAAa,+BAET;CAfF,GAAG;CACH,oBAAoB;CACpB,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,qBAAqB;EACrB,iBAAiB;EACjB,iBAAiB;EACjB,mBAAmB;CACrB;AAKE"}
1
+ {"version":3,"file":"descriptor-meta-C1T4BXJ8.mjs","names":[],"sources":["../src/core/descriptor-meta.ts"],"sourcesContent":["import type { CodecTypes } from '../exports/codec-types';\nimport {\n postgresAuthoringEntityTypes,\n postgresAuthoringFieldPresets,\n postgresAuthoringModelAttributes,\n postgresAuthoringPslBlockDescriptors,\n postgresAuthoringTypes,\n} from './authoring';\nimport { postgresQualifyColumnType } from './codecs';\nimport { postgresTargetDescriptorMetaRuntime } from './descriptor-meta-runtime';\nimport { DEFAULT_NAMESPACE_ID } from './namespace-ids';\nimport { postgresCreateNamespace } from './postgres-schema';\n\nconst postgresTargetDescriptorMetaBase = {\n ...postgresTargetDescriptorMetaRuntime,\n defaultNamespaceId: DEFAULT_NAMESPACE_ID,\n authoring: {\n type: postgresAuthoringTypes,\n field: postgresAuthoringFieldPresets,\n entityTypes: postgresAuthoringEntityTypes,\n pslBlockDescriptors: postgresAuthoringPslBlockDescriptors,\n modelAttributes: postgresAuthoringModelAttributes,\n createNamespace: postgresCreateNamespace,\n qualifyColumnType: postgresQualifyColumnType,\n },\n} as const;\n\nexport const postgresTargetDescriptorMeta: typeof postgresTargetDescriptorMetaBase & {\n readonly __codecTypes?: CodecTypes;\n} = postgresTargetDescriptorMetaBase;\n"],"mappings":";;;;;AA2BA,MAAa,+BAET;CAfF,GAAG;CACH,oBAAoB;CACpB,WAAW;EACT,MAAM;EACN,OAAO;EACP,aAAa;EACb,qBAAqB;EACrB,iBAAiB;EACjB,iBAAiB;EACjB,mBAAmB;CACrB;AAKE"}
@@ -1,8 +1,8 @@
1
- import { r as isPostgresSchema } from "./postgres-schema-DTLA_aRi.mjs";
1
+ import { r as isPostgresSchema } from "./postgres-schema-COEca21H.mjs";
2
2
  import { i as postgresDiffSubjectGranularity, t as PostgresTableSchemaNode } from "./postgres-table-schema-node-9FCtCUz2.mjs";
3
- import { i as PostgresDatabaseSchemaNode, n as PostgresPolicySchemaNode, r as PostgresNamespaceSchemaNode, t as PostgresRoleSchemaNode } from "./postgres-role-schema-node-BiSTCTNg.mjs";
4
- import { t as resolveDdlSchemaForNamespaceStorage } from "./resolve-ddl-schema-Ca88Tg6W.mjs";
5
- import { i as resolvePostgresNodeIssueControlPolicySubject } from "./control-policy-Co_13Hxa.mjs";
3
+ import { i as PostgresDatabaseSchemaNode, n as PostgresPolicySchemaNode, r as PostgresNamespaceSchemaNode, t as PostgresRoleSchemaNode } from "./postgres-role-schema-node-BmCboEa_.mjs";
4
+ import { t as resolveDdlSchemaForNamespaceStorage } from "./resolve-ddl-schema-ZkKxt2Fm.mjs";
5
+ import { i as resolvePostgresNodeIssueControlPolicySubject } from "./control-policy-BpmChlAK.mjs";
6
6
  import { UNBOUND_NAMESPACE_ID } from "@prisma-next/framework-components/ir";
7
7
  import { blindCast } from "@prisma-next/utils/casts";
8
8
  import { buildNativeTypeExpander, contractNamespaceToSchemaIR } from "@prisma-next/family-sql/control";
@@ -122,6 +122,26 @@ function contractToPostgresDatabaseSchemaNode(contract, options) {
122
122
  }
123
123
  //#endregion
124
124
  //#region src/core/migrations/diff-database-schema.ts
125
+ /**
126
+ * Whether a diff issue's subject node is cluster-scoped — it carries its own
127
+ * `namespaceId` field (only role and policy diff nodes do) and that
128
+ * coordinate is the unbound sentinel, meaning the node is not owned by any
129
+ * schema/namespace. A role node is always cluster-scoped (roles are
130
+ * cluster-level objects); a policy node's `namespaceId` is always its
131
+ * table's resolved DDL schema, never the sentinel. Namespace-ownership
132
+ * scoping (which compares `issue.path[1]` against the set of DDL schemas
133
+ * the contract owns) makes no sense for a cluster-scoped subject — its path
134
+ * segment at that index is the object's own name, not a schema name — so
135
+ * such an issue bypasses that scoping entirely.
136
+ */
137
+ function isClusterScopedIssue(issue) {
138
+ const node = issue.expected ?? issue.actual;
139
+ return node !== void 0 && nodeNamespaceId(node) === UNBOUND_NAMESPACE_ID;
140
+ }
141
+ function nodeNamespaceId(node) {
142
+ if (!Object.hasOwn(node, "namespaceId")) return void 0;
143
+ return blindCast(node).namespaceId;
144
+ }
125
145
  function ownedSchemaNames(expected) {
126
146
  const policyNamespaces = Object.values(expected.namespaces).flatMap((ns) => Object.values(ns.tables).flatMap((t) => t.policies.map((p) => p.namespaceId)));
127
147
  return new Set([...policyNamespaces, ...expected.existingSchemas]);
@@ -148,10 +168,17 @@ function pruneTableLessNamespaces(expected) {
148
168
  });
149
169
  }
150
170
  /**
151
- * Resolves a verdict-diff issue's subject table's declared control policy
152
- * directly from the contract, by delegating to the same node-typed resolver
171
+ * Resolves a verdict-diff issue's subject's declared control policy directly
172
+ * from the contract, by delegating to the same node-typed resolver
153
173
  * ({@link resolvePostgresNodeIssueControlPolicySubject}) the planner uses to
154
- * gate DDL calls. `undefined` when the issue resolves to no contract table.
174
+ * gate DDL calls. `undefined` when the issue resolves to no contract subject.
175
+ *
176
+ * A role issue resolves through that same resolver to `external`
177
+ * unconditionally (see its role branch), regardless of the contract's own
178
+ * default policy: a role is referenced by the contract but not owned, and
179
+ * `external`'s existing semantics — a missing declared subject still fails,
180
+ * every extra is suppressed — are exactly the wanted asymmetric grading for
181
+ * a cluster object the framework does not own.
155
182
  */
156
183
  function resolveControlPolicy(issue, contract) {
157
184
  return resolvePostgresNodeIssueControlPolicySubject(blindCast(issue), contract)?.explicitNodeControlPolicy;
@@ -161,8 +188,9 @@ function resolveControlPolicy(issue, contract) {
161
188
  * the expected tree (resolved leaf values, expander threaded, FK schemas
162
189
  * resolved, table-less namespaces pruned), run the generic
163
190
  * differ over the trees as derived, and scope out `not-expected` findings under namespaces the
164
- * contract does not own. Ownership is role-aware, mirroring the legacy
165
- * decomposition: relational extras check the PRUNED owned set (the legacy
191
+ * contract does not own. Ownership scoping bypasses cluster-scoped subjects
192
+ * (roles today), mirroring the legacy decomposition: relational extras check
193
+ * the PRUNED owned set (the legacy
166
194
  * per-namespace walk never visited a table-less namespace, so its live
167
195
  * relational contents are invisible), while `structural` extras (RLS
168
196
  * policies) check the FULL owned set (the legacy policy diff governed
@@ -186,9 +214,11 @@ function diffPostgresSchema(input) {
186
214
  return {
187
215
  issues: diffSchemas(expected, actual).filter((issue) => {
188
216
  if (issue.reason !== "not-expected") return true;
217
+ if (isClusterScopedIssue(issue)) return true;
218
+ const granularity = classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity);
189
219
  const namespaceSegment = issue.path[1];
190
220
  if (namespaceSegment === void 0) return true;
191
- return (classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity) === "structural" ? structuralOwned : relationalOwned).has(namespaceSegment);
221
+ return (granularity === "structural" ? structuralOwned : relationalOwned).has(namespaceSegment);
192
222
  }),
193
223
  resolveControlPolicy: (issue) => resolveControlPolicy(issue, postgresContract),
194
224
  namespacePairs: Object.values(expected.namespaces).map((ns) => ({ actual: actual.namespaces[ns.schemaName] }))
@@ -228,8 +258,8 @@ function padActualNamespaces(expected, actual) {
228
258
  /**
229
259
  * The Postgres planner's diff input: the SAME tree-building
230
260
  * `diffPostgresSchema` uses (expander threaded, FK schemas resolved,
231
- * table-less namespaces pruned, role-aware ownership filter) plus actual
232
- * namespace padding (so a missing
261
+ * table-less namespaces pruned, cluster-scope-aware ownership filter) plus
262
+ * actual namespace padding (so a missing
233
263
  * schema's tables surface as `not-found` instead of a swallowed namespace
234
264
  * `not-found`). One differ drives both verify and plan; this is the
235
265
  * plan-side derivation. The single issue list covers tables / columns /
@@ -254,13 +284,15 @@ function buildPostgresPlanDiff(input) {
254
284
  actual: paddedActual,
255
285
  issues: blindCast(diffSchemas(expected, paddedActual)).filter((issue) => {
256
286
  if (issue.reason !== "not-expected") return true;
287
+ if (isClusterScopedIssue(issue)) return true;
288
+ const granularity = classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity);
257
289
  const namespaceSegment = issue.path[1];
258
290
  if (namespaceSegment === void 0) return true;
259
- return (classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity) === "structural" ? structuralOwned : relationalOwned).has(namespaceSegment);
291
+ return (granularity === "structural" ? structuralOwned : relationalOwned).has(namespaceSegment);
260
292
  })
261
293
  };
262
294
  }
263
295
  //#endregion
264
296
  export { diffPostgresSchema as n, contractToPostgresDatabaseSchemaNode as r, buildPostgresPlanDiff as t };
265
297
 
266
- //# sourceMappingURL=diff-database-schema-BOsDnH64.mjs.map
298
+ //# sourceMappingURL=diff-database-schema-RMwnSOnz.mjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"diff-database-schema-RMwnSOnz.mjs","names":[],"sources":["../src/core/migrations/contract-to-postgres-database-schema-node.ts","../src/core/migrations/diff-database-schema.ts"],"sourcesContent":["import type { ContractToSchemaIROptions } from '@prisma-next/family-sql/control';\nimport { contractNamespaceToSchemaIR } from '@prisma-next/family-sql/control';\nimport { UNBOUND_NAMESPACE_ID } from '@prisma-next/framework-components/ir';\nimport { SqlForeignKeyIR } from '@prisma-next/sql-schema-ir/types';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport type { PostgresRlsPolicy } from '../postgres-rls-policy';\nimport type { PostgresContract } from '../postgres-schema';\nimport { isPostgresSchema } from '../postgres-schema';\nimport { PostgresDatabaseSchemaNode } from '../schema-ir/postgres-database-schema-node';\nimport { PostgresNamespaceSchemaNode } from '../schema-ir/postgres-namespace-schema-node';\nimport { PostgresPolicySchemaNode } from '../schema-ir/postgres-policy-schema-node';\nimport { PostgresRoleSchemaNode } from '../schema-ir/postgres-role-schema-node';\nimport { PostgresTableSchemaNode } from '../schema-ir/postgres-table-schema-node';\nimport { resolveDdlSchemaForNamespaceStorage } from './resolve-ddl-schema';\n\nfunction toPolicyNode(policy: PostgresRlsPolicy, namespaceId: string): PostgresPolicySchemaNode {\n return new PostgresPolicySchemaNode({\n name: policy.name,\n prefix: policy.prefix,\n tableName: policy.tableName,\n namespaceId,\n operation: policy.operation,\n roles: [...policy.roles],\n ...ifDefined('using', policy.using),\n ...ifDefined('withCheck', policy.withCheck),\n permissive: policy.permissive,\n });\n}\n\n/**\n * Projects a Postgres contract into the expected schema-diff tree: a\n * `PostgresDatabaseSchemaNode` root holding one `PostgresNamespaceSchemaNode`\n * per Postgres namespace, each holding its `PostgresTableSchemaNode`s with\n * their `PostgresPolicySchemaNode`s, plus the database roles on the root.\n *\n * Not a duplicate of the family's `contractToSchemaIR`: that builds a flat,\n * single `{ tables }` map (and throws on cross-namespace name collisions, with\n * no RLS/role concept) for SQLite's single-schema world. This is the\n * Postgres-specific *tree* shape — multi-schema, RLS-policy-aware, role-aware.\n * It reuses the family's per-namespace table conversion (`contractNamespaceToSchemaIR`)\n * for column/FK/index building and only adds the Postgres tree/policy/role shape.\n *\n * Tables are grouped by their owning namespace (resolved DDL schema name) so\n * the tree mirrors Postgres's object hierarchy. The DDL schema name is\n * resolved once per namespace.\n *\n * A policy that references a table absent from its namespace is a malformed\n * contract — the loop throws rather than fabricating a stub table.\n */\nexport function contractToPostgresDatabaseSchemaNode(\n contract: PostgresContract | null,\n options: ContractToSchemaIROptions,\n): PostgresDatabaseSchemaNode {\n if (contract === null) {\n return new PostgresDatabaseSchemaNode({\n namespaces: {},\n roles: [],\n existingSchemas: [],\n pgVersion: '',\n });\n }\n\n const namespaces: Record<string, PostgresNamespaceSchemaNode> = {};\n const roles: PostgresRoleSchemaNode[] = [];\n const ownedSchemas: string[] = [];\n\n for (const ns of Object.values(contract.storage.namespaces)) {\n if (!isPostgresSchema(ns)) continue;\n const ddlSchema = resolveDdlSchemaForNamespaceStorage(contract.storage, ns.id);\n ownedSchemas.push(ddlSchema);\n\n // Convert only THIS namespace's tables (passing the full storage for\n // type/value-set/enum resolution that spans namespaces), so the same table\n // name can exist in two schemas without colliding in a bare-keyed record.\n const sqlTables = contractNamespaceToSchemaIR(contract.storage, ns.id, options).tables;\n\n const policiesByTable = new Map<string, PostgresPolicySchemaNode[]>();\n for (const policy of Object.values(ns.policy)) {\n const list = policiesByTable.get(policy.tableName) ?? [];\n list.push(toPolicyNode(policy, ddlSchema));\n policiesByTable.set(policy.tableName, list);\n }\n\n const tables: Record<string, PostgresTableSchemaNode> = {};\n for (const tableName of Object.keys(ns.table)) {\n const sqlTable = sqlTables[tableName];\n if (sqlTable === undefined) continue;\n // The family conversion stamps `referencedSchema` only for bound FK\n // targets; an absent value means the FK targets the unbound namespace.\n // Postgres restores its own coordinate for that slot (the unbound\n // singleton's id) so the raw coordinate keeps qualifying REFERENCES\n // clauses, and resolves the real live DDL schema — introspected FKs\n // already carry the live schema, so this is what lets an expected FK\n // pair (by diff-node id) with its introspected counterpart.\n const foreignKeys = sqlTable.foreignKeys.map(\n (fk) =>\n new SqlForeignKeyIR({\n columns: fk.columns,\n referencedTable: fk.referencedTable,\n referencedColumns: fk.referencedColumns,\n referencedSchema: fk.referencedSchema ?? UNBOUND_NAMESPACE_ID,\n ...ifDefined('name', fk.name),\n ...ifDefined('onDelete', fk.onDelete),\n ...ifDefined('onUpdate', fk.onUpdate),\n ...ifDefined('annotations', fk.annotations),\n resolvedReferencedNamespace: resolveDdlSchemaForNamespaceStorage(\n contract.storage,\n fk.referencedSchema ?? UNBOUND_NAMESPACE_ID,\n ),\n }),\n );\n tables[tableName] = new PostgresTableSchemaNode({\n name: sqlTable.name,\n columns: sqlTable.columns,\n foreignKeys,\n uniques: sqlTable.uniques,\n indexes: sqlTable.indexes,\n ...ifDefined('primaryKey', sqlTable.primaryKey),\n ...ifDefined('annotations', sqlTable.annotations),\n ...ifDefined('checks', sqlTable.checks),\n policies: policiesByTable.get(tableName) ?? [],\n // Marker-driven, never derived from the policy set: the `rls` entry\n // is the single authored source of enablement.\n rlsEnabled: Object.hasOwn(ns.rls, tableName),\n });\n }\n\n for (const [tableName, tablePolicies] of policiesByTable) {\n if (!(tableName in tables)) {\n const policyName = tablePolicies[0]?.name ?? '(unknown)';\n throw new Error(\n `contract-to-postgres-database-schema-node: policy \"${policyName}\" references table \"${tableName}\" not present in namespace \"${ddlSchema}\"`,\n );\n }\n if (!Object.hasOwn(ns.rls, tableName)) {\n const policyPrefix = tablePolicies[0]?.prefix ?? '(unknown)';\n throw new Error(\n `contract-to-postgres-database-schema-node: policy \"${policyPrefix}\" targets table \"${tableName}\" in namespace \"${ddlSchema}\", which is not RLS-controlled. Mark the model with @@rls (entries.rls[\"${tableName}\"]) or remove the policy.`,\n );\n }\n }\n\n namespaces[ddlSchema] = new PostgresNamespaceSchemaNode({\n schemaName: ddlSchema,\n tables,\n nativeEnumTypeNames: [],\n });\n\n for (const role of Object.values(ns.role)) {\n roles.push(new PostgresRoleSchemaNode({ name: role.name, namespaceId: role.namespaceId }));\n }\n }\n\n return new PostgresDatabaseSchemaNode({\n namespaces,\n roles,\n existingSchemas: ownedSchemas,\n pgVersion: '',\n });\n}\n","import type { Contract, ControlPolicy } from '@prisma-next/contract/types';\nimport type { SqlSchemaDiffResult } from '@prisma-next/family-sql/control';\nimport { buildNativeTypeExpander } from '@prisma-next/family-sql/control';\nimport { classifyDiffSubjectGranularity } from '@prisma-next/family-sql/diff';\nimport type { TargetBoundComponentDescriptor } from '@prisma-next/framework-components/components';\nimport type { DiffableNode, SchemaDiffIssue } from '@prisma-next/framework-components/control';\nimport { diffSchemas } from '@prisma-next/framework-components/control';\nimport { UNBOUND_NAMESPACE_ID } from '@prisma-next/framework-components/ir';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlSchemaIRNode } from '@prisma-next/sql-schema-ir/types';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport type { PostgresContract } from '../postgres-schema';\nimport { PostgresDatabaseSchemaNode } from '../schema-ir/postgres-database-schema-node';\nimport { PostgresNamespaceSchemaNode } from '../schema-ir/postgres-namespace-schema-node';\nimport {\n postgresDiffSubjectGranularity,\n type SqlSchemaDiffNode,\n} from '../schema-ir/schema-node-kinds';\nimport { contractToPostgresDatabaseSchemaNode } from './contract-to-postgres-database-schema-node';\nimport { resolvePostgresNodeIssueControlPolicySubject } from './control-policy';\n\n/**\n * Whether a diff issue's subject node is cluster-scoped — it carries its own\n * `namespaceId` field (only role and policy diff nodes do) and that\n * coordinate is the unbound sentinel, meaning the node is not owned by any\n * schema/namespace. A role node is always cluster-scoped (roles are\n * cluster-level objects); a policy node's `namespaceId` is always its\n * table's resolved DDL schema, never the sentinel. Namespace-ownership\n * scoping (which compares `issue.path[1]` against the set of DDL schemas\n * the contract owns) makes no sense for a cluster-scoped subject — its path\n * segment at that index is the object's own name, not a schema name — so\n * such an issue bypasses that scoping entirely.\n */\nfunction isClusterScopedIssue(issue: SchemaDiffIssue): boolean {\n const node = issue.expected ?? issue.actual;\n return node !== undefined && nodeNamespaceId(node) === UNBOUND_NAMESPACE_ID;\n}\n\nfunction nodeNamespaceId(node: DiffableNode): string | undefined {\n if (!Object.hasOwn(node, 'namespaceId')) return undefined;\n return blindCast<\n { namespaceId: string },\n 'presence of an own namespaceId field was just checked via Object.hasOwn'\n >(node).namespaceId;\n}\n\nfunction ownedSchemaNames(expected: PostgresDatabaseSchemaNode): ReadonlySet<string> {\n const policyNamespaces = Object.values(expected.namespaces).flatMap((ns) =>\n Object.values(ns.tables).flatMap((t) => t.policies.map((p) => p.namespaceId)),\n );\n return new Set([...policyNamespaces, ...expected.existingSchemas]);\n}\n\n/**\n * Drops contract namespaces that declare no tables from the verdict-diff\n * expected tree and the relational owned-schema set. The legacy relational\n * walk skipped a table-less namespace (e.g. an enums-only schema) before\n * pairing, so neither its DDL schema's absence nor that schema's live\n * relational contents ever reached the verdict — the pruned tree\n * reproduces that. The prune loses no expected policies: policies attach\n * to tables, so a table-less namespace carries none (the projection\n * throws on a policy referencing an absent table). Live policies in a\n * pruned schema remain governed via the full owned set (see\n * {@link diffPostgresSchema}).\n */\nfunction pruneTableLessNamespaces(\n expected: PostgresDatabaseSchemaNode,\n): PostgresDatabaseSchemaNode {\n const namespaces = Object.fromEntries(\n Object.entries(expected.namespaces).filter(([, ns]) => Object.keys(ns.tables).length > 0),\n );\n return new PostgresDatabaseSchemaNode({\n namespaces,\n roles: [...expected.roles],\n existingSchemas: expected.existingSchemas.filter((s) => namespaces[s] !== undefined),\n pgVersion: expected.pgVersion,\n });\n}\n\n/**\n * Resolves a verdict-diff issue's subject's declared control policy directly\n * from the contract, by delegating to the same node-typed resolver\n * ({@link resolvePostgresNodeIssueControlPolicySubject}) the planner uses to\n * gate DDL calls. `undefined` when the issue resolves to no contract subject.\n *\n * A role issue resolves through that same resolver to `external`\n * unconditionally (see its role branch), regardless of the contract's own\n * default policy: a role is referenced by the contract but not owned, and\n * `external`'s existing semantics — a missing declared subject still fails,\n * every extra is suppressed — are exactly the wanted asymmetric grading for\n * a cluster object the framework does not own.\n */\nfunction resolveControlPolicy(\n issue: SchemaDiffIssue,\n contract: Contract<SqlStorage>,\n): ControlPolicy | undefined {\n const nodeIssue = blindCast<\n SchemaDiffIssue<SqlSchemaDiffNode>,\n 'every node in a Postgres schema diff tree is a SqlSchemaDiffNode'\n >(issue);\n return resolvePostgresNodeIssueControlPolicySubject(nodeIssue, contract)\n ?.explicitNodeControlPolicy;\n}\n\n/**\n * The Postgres full-tree node diff for the family verify verdict: derive\n * the expected tree (resolved leaf values, expander threaded, FK schemas\n * resolved, table-less namespaces pruned), run the generic\n * differ over the trees as derived, and scope out `not-expected` findings under namespaces the\n * contract does not own. Ownership scoping bypasses cluster-scoped subjects\n * (roles today), mirroring the legacy decomposition: relational extras check\n * the PRUNED owned set (the legacy\n * per-namespace walk never visited a table-less namespace, so its live\n * relational contents are invisible), while `structural` extras (RLS\n * policies) check the FULL owned set (the legacy policy diff governed\n * every contract schema regardless of tables — RLS governance does not\n * shrink because a namespace declares no tables). The codec `verifyType`\n * hooks run once per contract namespace with tables against that\n * namespace's paired actual node (the hooks read namespace-scoped state\n * such as `nativeEnumTypeNames`).\n */\nexport function diffPostgresSchema(input: {\n readonly contract: Contract<SqlStorage>;\n readonly schema: SqlSchemaIRNode;\n readonly frameworkComponents: ReadonlyArray<TargetBoundComponentDescriptor<'sql', string>>;\n}): SqlSchemaDiffResult {\n const postgresContract = blindCast<\n PostgresContract,\n 'diffPostgresSchema is only called with a postgres contract'\n >(input.contract);\n PostgresDatabaseSchemaNode.assert(input.schema);\n const actual = input.schema;\n const expandNativeType = buildNativeTypeExpander(input.frameworkComponents);\n const fullExpected = contractToPostgresDatabaseSchemaNode(postgresContract, {\n annotationNamespace: 'pg',\n ...ifDefined('expandNativeType', expandNativeType),\n });\n const expected = pruneTableLessNamespaces(fullExpected);\n const relationalOwned = ownedSchemaNames(expected);\n const structuralOwned = ownedSchemaNames(fullExpected);\n const issues = diffSchemas(expected, actual).filter((issue) => {\n if (issue.reason !== 'not-expected') return true;\n if (isClusterScopedIssue(issue)) return true;\n const granularity = classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity);\n const namespaceSegment = issue.path[1];\n if (namespaceSegment === undefined) return true;\n const owned = granularity === 'structural' ? structuralOwned : relationalOwned;\n return owned.has(namespaceSegment);\n });\n const namespacePairs = Object.values(expected.namespaces).map((ns) => ({\n actual: actual.namespaces[ns.schemaName],\n }));\n return {\n issues,\n resolveControlPolicy: (issue) => resolveControlPolicy(issue, postgresContract),\n namespacePairs,\n };\n}\n\n/**\n * Adds an empty namespace node to the actual tree for every expected namespace\n * absent from it. The relational plan diff pairs on namespace: a contract\n * namespace whose live schema does not exist yet must surface each of its\n * tables as `not-found` (→ `CREATE TABLE`), NOT as a single namespace\n * `not-found` that subtree-coalescing would collapse (leaving `CREATE SCHEMA`\n * with no tables). Padding makes the namespaces pair, so only table/column/\n * policy drift surfaces; `CREATE SCHEMA` comes separately from the synthesized\n * namespace-presence stitch (`verifyPostgresNamespacePresence`), never from the\n * tree diff — matching the retired per-namespace-paired relational walk, which\n * paired a missing schema against an empty namespace node.\n */\nfunction padActualNamespaces(\n expected: PostgresDatabaseSchemaNode,\n actual: PostgresDatabaseSchemaNode,\n): PostgresDatabaseSchemaNode {\n const namespaces: Record<string, PostgresNamespaceSchemaNode> = { ...actual.namespaces };\n let padded = false;\n for (const schemaName of Object.keys(expected.namespaces)) {\n if (namespaces[schemaName] === undefined) {\n namespaces[schemaName] = new PostgresNamespaceSchemaNode({\n schemaName,\n tables: {},\n nativeEnumTypeNames: [],\n });\n padded = true;\n }\n }\n if (!padded) return actual;\n return new PostgresDatabaseSchemaNode({\n namespaces,\n roles: [...actual.roles],\n existingSchemas: [...actual.existingSchemas],\n pgVersion: actual.pgVersion,\n });\n}\n\nexport interface PostgresPlanDiff {\n /** The desired (\"end\") tree — resolved leaf values (incl. `codecRef`) on every column, table-less namespaces pruned. */\n readonly expected: PostgresDatabaseSchemaNode;\n /** The live (\"start\") tree, padded with empty namespaces so a missing schema's tables pair. */\n readonly actual: PostgresDatabaseSchemaNode;\n /** The one node diff over the two trees: relational + policy drift, cluster-scope-aware ownership filtered. */\n readonly issues: readonly SchemaDiffIssue<SqlSchemaDiffNode>[];\n}\n\n/**\n * The Postgres planner's diff input: the SAME tree-building\n * `diffPostgresSchema` uses (expander threaded, FK schemas resolved,\n * table-less namespaces pruned, cluster-scope-aware ownership filter) plus\n * actual namespace padding (so a missing\n * schema's tables surface as `not-found` instead of a swallowed namespace\n * `not-found`). One differ drives both verify and plan; this is the\n * plan-side derivation. The single issue list covers tables / columns /\n * constraints / indexes / defaults AND policies — the caller splits it\n * (relational → `mapNodeIssueToCall`; policy → RLS ops) and stitches in\n * `CREATE SCHEMA` separately.\n */\nexport function buildPostgresPlanDiff(input: {\n readonly contract: Contract<SqlStorage>;\n readonly actualSchema: SqlSchemaIRNode;\n readonly frameworkComponents: ReadonlyArray<TargetBoundComponentDescriptor<'sql', string>>;\n}): PostgresPlanDiff {\n const postgresContract = blindCast<\n PostgresContract,\n 'buildPostgresPlanDiff is only called with a postgres contract'\n >(input.contract);\n PostgresDatabaseSchemaNode.assert(input.actualSchema);\n const actual = input.actualSchema;\n const expandNativeType = buildNativeTypeExpander(input.frameworkComponents);\n const projectionOptions = {\n annotationNamespace: 'pg',\n ...ifDefined('expandNativeType', expandNativeType),\n };\n const fullExpected = contractToPostgresDatabaseSchemaNode(postgresContract, projectionOptions);\n const expected = pruneTableLessNamespaces(fullExpected);\n const paddedActual = padActualNamespaces(expected, actual);\n const relationalOwned = ownedSchemaNames(expected);\n const structuralOwned = ownedSchemaNames(fullExpected);\n const issues = blindCast<\n readonly SchemaDiffIssue<SqlSchemaDiffNode>[],\n 'both trees are PostgresDatabaseSchemaNodes, so every diff-issue node is a SqlSchemaDiffNode'\n >(diffSchemas(expected, paddedActual)).filter((issue) => {\n if (issue.reason !== 'not-expected') return true;\n if (isClusterScopedIssue(issue)) return true;\n const granularity = classifyDiffSubjectGranularity(issue, postgresDiffSubjectGranularity);\n const namespaceSegment = issue.path[1];\n if (namespaceSegment === undefined) return true;\n const owned = granularity === 'structural' ? structuralOwned : relationalOwned;\n return owned.has(namespaceSegment);\n });\n return { expected, actual: paddedActual, issues };\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,SAAS,aAAa,QAA2B,aAA+C;CAC9F,OAAO,IAAI,yBAAyB;EAClC,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,WAAW,OAAO;EAClB;EACA,WAAW,OAAO;EAClB,OAAO,CAAC,GAAG,OAAO,KAAK;EACvB,GAAG,UAAU,SAAS,OAAO,KAAK;EAClC,GAAG,UAAU,aAAa,OAAO,SAAS;EAC1C,YAAY,OAAO;CACrB,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,qCACd,UACA,SAC4B;CAC5B,IAAI,aAAa,MACf,OAAO,IAAI,2BAA2B;EACpC,YAAY,CAAC;EACb,OAAO,CAAC;EACR,iBAAiB,CAAC;EAClB,WAAW;CACb,CAAC;CAGH,MAAM,aAA0D,CAAC;CACjE,MAAM,QAAkC,CAAC;CACzC,MAAM,eAAyB,CAAC;CAEhC,KAAK,MAAM,MAAM,OAAO,OAAO,SAAS,QAAQ,UAAU,GAAG;EAC3D,IAAI,CAAC,iBAAiB,EAAE,GAAG;EAC3B,MAAM,YAAY,oCAAoC,SAAS,SAAS,GAAG,EAAE;EAC7E,aAAa,KAAK,SAAS;EAK3B,MAAM,YAAY,4BAA4B,SAAS,SAAS,GAAG,IAAI,OAAO,CAAC,CAAC;EAEhF,MAAM,kCAAkB,IAAI,IAAwC;EACpE,KAAK,MAAM,UAAU,OAAO,OAAO,GAAG,MAAM,GAAG;GAC7C,MAAM,OAAO,gBAAgB,IAAI,OAAO,SAAS,KAAK,CAAC;GACvD,KAAK,KAAK,aAAa,QAAQ,SAAS,CAAC;GACzC,gBAAgB,IAAI,OAAO,WAAW,IAAI;EAC5C;EAEA,MAAM,SAAkD,CAAC;EACzD,KAAK,MAAM,aAAa,OAAO,KAAK,GAAG,KAAK,GAAG;GAC7C,MAAM,WAAW,UAAU;GAC3B,IAAI,aAAa,KAAA,GAAW;GAQ5B,MAAM,cAAc,SAAS,YAAY,KACtC,OACC,IAAI,gBAAgB;IAClB,SAAS,GAAG;IACZ,iBAAiB,GAAG;IACpB,mBAAmB,GAAG;IACtB,kBAAkB,GAAG,oBAAoB;IACzC,GAAG,UAAU,QAAQ,GAAG,IAAI;IAC5B,GAAG,UAAU,YAAY,GAAG,QAAQ;IACpC,GAAG,UAAU,YAAY,GAAG,QAAQ;IACpC,GAAG,UAAU,eAAe,GAAG,WAAW;IAC1C,6BAA6B,oCAC3B,SAAS,SACT,GAAG,oBAAoB,oBACzB;GACF,CAAC,CACL;GACA,OAAO,aAAa,IAAI,wBAAwB;IAC9C,MAAM,SAAS;IACf,SAAS,SAAS;IAClB;IACA,SAAS,SAAS;IAClB,SAAS,SAAS;IAClB,GAAG,UAAU,cAAc,SAAS,UAAU;IAC9C,GAAG,UAAU,eAAe,SAAS,WAAW;IAChD,GAAG,UAAU,UAAU,SAAS,MAAM;IACtC,UAAU,gBAAgB,IAAI,SAAS,KAAK,CAAC;IAG7C,YAAY,OAAO,OAAO,GAAG,KAAK,SAAS;GAC7C,CAAC;EACH;EAEA,KAAK,MAAM,CAAC,WAAW,kBAAkB,iBAAiB;GACxD,IAAI,EAAE,aAAa,SAAS;IAC1B,MAAM,aAAa,cAAc,EAAE,EAAE,QAAQ;IAC7C,MAAM,IAAI,MACR,sDAAsD,WAAW,sBAAsB,UAAU,8BAA8B,UAAU,EAC3I;GACF;GACA,IAAI,CAAC,OAAO,OAAO,GAAG,KAAK,SAAS,GAAG;IACrC,MAAM,eAAe,cAAc,EAAE,EAAE,UAAU;IACjD,MAAM,IAAI,MACR,sDAAsD,aAAa,mBAAmB,UAAU,kBAAkB,UAAU,0EAA0E,UAAU,0BAClN;GACF;EACF;EAEA,WAAW,aAAa,IAAI,4BAA4B;GACtD,YAAY;GACZ;GACA,qBAAqB,CAAC;EACxB,CAAC;EAED,KAAK,MAAM,QAAQ,OAAO,OAAO,GAAG,IAAI,GACtC,MAAM,KAAK,IAAI,uBAAuB;GAAE,MAAM,KAAK;GAAM,aAAa,KAAK;EAAY,CAAC,CAAC;CAE7F;CAEA,OAAO,IAAI,2BAA2B;EACpC;EACA;EACA,iBAAiB;EACjB,WAAW;CACb,CAAC;AACH;;;;;;;;;;;;;;;AC7HA,SAAS,qBAAqB,OAAiC;CAC7D,MAAM,OAAO,MAAM,YAAY,MAAM;CACrC,OAAO,SAAS,KAAA,KAAa,gBAAgB,IAAI,MAAM;AACzD;AAEA,SAAS,gBAAgB,MAAwC;CAC/D,IAAI,CAAC,OAAO,OAAO,MAAM,aAAa,GAAG,OAAO,KAAA;CAChD,OAAO,UAGL,IAAI,CAAC,CAAC;AACV;AAEA,SAAS,iBAAiB,UAA2D;CACnF,MAAM,mBAAmB,OAAO,OAAO,SAAS,UAAU,CAAC,CAAC,SAAS,OACnE,OAAO,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,SAAS,KAAK,MAAM,EAAE,WAAW,CAAC,CAC9E;CACA,OAAO,IAAI,IAAI,CAAC,GAAG,kBAAkB,GAAG,SAAS,eAAe,CAAC;AACnE;;;;;;;;;;;;;AAcA,SAAS,yBACP,UAC4B;CAC5B,MAAM,aAAa,OAAO,YACxB,OAAO,QAAQ,SAAS,UAAU,CAAC,CAAC,QAAQ,GAAG,QAAQ,OAAO,KAAK,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,CAC1F;CACA,OAAO,IAAI,2BAA2B;EACpC;EACA,OAAO,CAAC,GAAG,SAAS,KAAK;EACzB,iBAAiB,SAAS,gBAAgB,QAAQ,MAAM,WAAW,OAAO,KAAA,CAAS;EACnF,WAAW,SAAS;CACtB,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAS,qBACP,OACA,UAC2B;CAK3B,OAAO,6CAJW,UAGhB,KAC0D,GAAG,QAAQ,CAAC,EACpE;AACN;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,mBAAmB,OAIX;CACtB,MAAM,mBAAmB,UAGvB,MAAM,QAAQ;CAChB,2BAA2B,OAAO,MAAM,MAAM;CAC9C,MAAM,SAAS,MAAM;CAErB,MAAM,eAAe,qCAAqC,kBAAkB;EAC1E,qBAAqB;EACrB,GAAG,UAAU,oBAHU,wBAAwB,MAAM,mBAGL,CAAC;CACnD,CAAC;CACD,MAAM,WAAW,yBAAyB,YAAY;CACtD,MAAM,kBAAkB,iBAAiB,QAAQ;CACjD,MAAM,kBAAkB,iBAAiB,YAAY;CAarD,OAAO;EACL,QAba,YAAY,UAAU,MAAM,CAAC,CAAC,QAAQ,UAAU;GAC7D,IAAI,MAAM,WAAW,gBAAgB,OAAO;GAC5C,IAAI,qBAAqB,KAAK,GAAG,OAAO;GACxC,MAAM,cAAc,+BAA+B,OAAO,8BAA8B;GACxF,MAAM,mBAAmB,MAAM,KAAK;GACpC,IAAI,qBAAqB,KAAA,GAAW,OAAO;GAE3C,QADc,gBAAgB,eAAe,kBAAkB,gBAAA,CAClD,IAAI,gBAAgB;EACnC,CAKO;EACL,uBAAuB,UAAU,qBAAqB,OAAO,gBAAgB;EAC7E,gBANqB,OAAO,OAAO,SAAS,UAAU,CAAC,CAAC,KAAK,QAAQ,EACrE,QAAQ,OAAO,WAAW,GAAG,YAC/B,EAIe;CACf;AACF;;;;;;;;;;;;;AAcA,SAAS,oBACP,UACA,QAC4B;CAC5B,MAAM,aAA0D,EAAE,GAAG,OAAO,WAAW;CACvF,IAAI,SAAS;CACb,KAAK,MAAM,cAAc,OAAO,KAAK,SAAS,UAAU,GACtD,IAAI,WAAW,gBAAgB,KAAA,GAAW;EACxC,WAAW,cAAc,IAAI,4BAA4B;GACvD;GACA,QAAQ,CAAC;GACT,qBAAqB,CAAC;EACxB,CAAC;EACD,SAAS;CACX;CAEF,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO,IAAI,2BAA2B;EACpC;EACA,OAAO,CAAC,GAAG,OAAO,KAAK;EACvB,iBAAiB,CAAC,GAAG,OAAO,eAAe;EAC3C,WAAW,OAAO;CACpB,CAAC;AACH;;;;;;;;;;;;;AAuBA,SAAgB,sBAAsB,OAIjB;CACnB,MAAM,mBAAmB,UAGvB,MAAM,QAAQ;CAChB,2BAA2B,OAAO,MAAM,YAAY;CACpD,MAAM,SAAS,MAAM;CAMrB,MAAM,eAAe,qCAAqC,kBAAkB;EAH1E,qBAAqB;EACrB,GAAG,UAAU,oBAHU,wBAAwB,MAAM,mBAGL,CAAC;CAEyC,CAAC;CAC7F,MAAM,WAAW,yBAAyB,YAAY;CACtD,MAAM,eAAe,oBAAoB,UAAU,MAAM;CACzD,MAAM,kBAAkB,iBAAiB,QAAQ;CACjD,MAAM,kBAAkB,iBAAiB,YAAY;CAarD,OAAO;EAAE;EAAU,QAAQ;EAAc,QAZ1B,UAGb,YAAY,UAAU,YAAY,CAAC,CAAC,CAAC,QAAQ,UAAU;GACvD,IAAI,MAAM,WAAW,gBAAgB,OAAO;GAC5C,IAAI,qBAAqB,KAAK,GAAG,OAAO;GACxC,MAAM,cAAc,+BAA+B,OAAO,8BAA8B;GACxF,MAAM,mBAAmB,MAAM,KAAK;GACpC,IAAI,qBAAqB,KAAA,GAAW,OAAO;GAE3C,QADc,gBAAgB,eAAe,kBAAkB,gBAAA,CAClD,IAAI,gBAAgB;EACnC,CAC8C;CAAE;AAClD"}
@@ -1,4 +1,4 @@
1
- import { t as PostgresDatabaseSchemaNode } from "./postgres-database-schema-node-CfdTY-Qs.mjs";
1
+ import { t as PostgresDatabaseSchemaNode } from "./postgres-database-schema-node-BVdOffjC.mjs";
2
2
  import { SqlStorage } from "@prisma-next/sql-contract/types";
3
3
  import { SqlSchemaIRNode } from "@prisma-next/sql-schema-ir/types";
4
4
  import { DiffableNode, SchemaDiffIssue } from "@prisma-next/framework-components/control";
@@ -21,14 +21,14 @@ interface PostgresPlanDiff {
21
21
  readonly expected: PostgresDatabaseSchemaNode;
22
22
  /** The live ("start") tree, padded with empty namespaces so a missing schema's tables pair. */
23
23
  readonly actual: PostgresDatabaseSchemaNode;
24
- /** The one node diff over the two trees: relational + policy drift, role-aware ownership filtered. */
24
+ /** The one node diff over the two trees: relational + policy drift, cluster-scope-aware ownership filtered. */
25
25
  readonly issues: readonly SchemaDiffIssue<SqlSchemaDiffNode>[];
26
26
  }
27
27
  /**
28
28
  * The Postgres planner's diff input: the SAME tree-building
29
29
  * `diffPostgresSchema` uses (expander threaded, FK schemas resolved,
30
- * table-less namespaces pruned, role-aware ownership filter) plus actual
31
- * namespace padding (so a missing
30
+ * table-less namespaces pruned, cluster-scope-aware ownership filter) plus
31
+ * actual namespace padding (so a missing
32
32
  * schema's tables surface as `not-found` instead of a swallowed namespace
33
33
  * `not-found`). One differ drives both verify and plan; this is the
34
34
  * plan-side derivation. The single issue list covers tables / columns /
@@ -1 +1 @@
1
- {"version":3,"file":"diff-database-schema.d.mts","names":[],"sources":["../src/core/schema-ir/schema-node-kinds.ts","../src/core/migrations/diff-database-schema.ts"],"mappings":";;;;;;;;;;;;;;;KAiBY,iBAAA,GAAoB,eAAA,GAAkB,YAAY;;;UCiJ7C,gBAAA;EAMN;EAAA,SAJA,QAAA,EAAU,0BAAA;EAIuB;EAAA,SAFjC,MAAA,EAAQ,0BAAA;EAE0C;EAAA,SAAlD,MAAA,WAAiB,eAAA,CAAgB,iBAAA;AAAA;;;;;;;;;;;;;iBAe5B,qBAAA,CAAsB,KAAA;EAAA,SAC3B,QAAA,EAAU,QAAA,CAAS,UAAA;EAAA,SACnB,YAAA,EAAc,eAAA;EAAA,SACd,mBAAA,EAAqB,aAAA,CAAc,8BAAA;AAAA,IAC1C,gBAAA"}
1
+ {"version":3,"file":"diff-database-schema.d.mts","names":[],"sources":["../src/core/schema-ir/schema-node-kinds.ts","../src/core/migrations/diff-database-schema.ts"],"mappings":";;;;;;;;;;;;;;;KAiBY,iBAAA,GAAoB,eAAA,GAAkB,YAAY;;;UCoL7C,gBAAA;EAMW;EAAA,SAJjB,QAAA,EAAU,0BAAA;EAIwC;EAAA,SAFlD,MAAA,EAAQ,0BAAA;EAiBH;EAAA,SAfL,MAAA,WAAiB,eAAA,CAAgB,iBAAA;AAAA;;;;;;;;;;;;;iBAe5B,qBAAA,CAAsB,KAAA;EAAA,SAC3B,QAAA,EAAU,QAAA,CAAS,UAAA;EAAA,SACnB,YAAA,EAAc,eAAA;EAAA,SACd,mBAAA,EAAqB,aAAA,CAAc,8BAAA;AAAA,IAC1C,gBAAA"}
@@ -1,2 +1,2 @@
1
- import { t as buildPostgresPlanDiff } from "./diff-database-schema-BOsDnH64.mjs";
1
+ import { t as buildPostgresPlanDiff } from "./diff-database-schema-RMwnSOnz.mjs";
2
2
  export { buildPostgresPlanDiff };
@@ -1,2 +1,2 @@
1
- import { o as coalesceSubtreeIssues, u as planIssues } from "./control-policy-Co_13Hxa.mjs";
1
+ import { o as coalesceSubtreeIssues, u as planIssues } from "./control-policy-BpmChlAK.mjs";
2
2
  export { coalesceSubtreeIssues, planIssues };
@@ -1,6 +1,6 @@
1
- import { j as createExtension } from "./op-factory-call-DxNNKUeZ.mjs";
1
+ import { j as createExtension } from "./op-factory-call-CI00nS4z.mjs";
2
2
  import { t as dataTransform } from "./data-transform-BOWpliq8.mjs";
3
- import { t as PostgresMigration } from "./postgres-migration-ChyRsWvE.mjs";
3
+ import { t as PostgresMigration } from "./postgres-migration-C92swCzd.mjs";
4
4
  import { checkExpression, col, fn, foreignKey, lit, primaryKey, unique } from "@prisma-next/sql-relational-core/contract-free";
5
5
  import { placeholder } from "@prisma-next/errors/migration";
6
6
  import { MigrationCLI } from "@prisma-next/cli/migration-cli";
@@ -1,7 +1,7 @@
1
1
  import { t as DEFAULT_NAMESPACE_ID } from "./namespace-ids-xtp_ZY86.mjs";
2
2
  import { i as quoteIdentifier, n as escapeLiteral } from "./sql-utils-DcfMz4MQ.mjs";
3
- import { _ as noNullValuesAst, a as createSchema, b as tableExistsAst, c as dropDefaultAction, d as columnExistsAst, f as columnNullabilityAst, g as indexExistsAst, h as extensionExistsAst, i as createPolicy, l as dropPolicy, m as constraintExistsAst, n as alterPolicyRename, o as createTable, p as columnTypeAst, r as alterTable, s as disableRowLevelSecurity$1, t as addColumnAction, u as columnDefaultAst, v as rlsEnabledAst, x as tableIsEmptyAst, y as rlsPolicyExistsAst } from "./ddl-B-krEXY1.mjs";
4
- import { n as qualifyTableName } from "./planner-sql-checks-AXoxB1Jl.mjs";
3
+ import { _ as noNullValuesAst, a as createSchema, b as tableExistsAst, c as dropDefaultAction, d as columnExistsAst, f as columnNullabilityAst, g as indexExistsAst, h as extensionExistsAst, i as createPolicy, l as dropPolicy, m as constraintExistsAst, n as alterPolicyRename, o as createTable, p as columnTypeAst, r as alterTable, s as disableRowLevelSecurity$1, t as addColumnAction, u as columnDefaultAst, v as rlsEnabledAst, x as tableIsEmptyAst, y as rlsPolicyExistsAst } from "./ddl-BovUVFVi.mjs";
4
+ import { n as qualifyTableName } from "./planner-sql-checks-C1-Kk3Eu.mjs";
5
5
  import { n as buildColumnTypeSql } from "./planner-ddl-builders-B8Nn6nHN.mjs";
6
6
  import { FunctionColumnDefault, LiteralColumnDefault } from "@prisma-next/sql-relational-core/ast";
7
7
  import { UNBOUND_NAMESPACE_ID } from "@prisma-next/framework-components/ir";
@@ -1756,4 +1756,4 @@ var RenamePostgresRlsPolicyCall = class extends PostgresOpFactoryCallNode {
1756
1756
  //#endregion
1757
1757
  export { buildTargetDetails as A, DropTableCall as C, SetDefaultCall as D, RenamePostgresRlsPolicyCall as E, installExtension as M, SetNotNullCall as O, DropPostgresRlsPolicyCall as S, RawSqlCall as T, DropColumnCall as _, AddNotNullColumnWithTempDefaultCall as a, DropIndexCall as b, AlterColumnTypeCall as c, CreatePostgresRlsPolicyCall as d, CreateSchemaCall as f, DropCheckConstraintCall as g, DisableRowLevelSecurityCall as h, AddNotNullColumnDirectCall as i, createExtension as j, postgresDefaultToDdlColumnDefault as k, CreateExtensionCall as l, DataTransformCall as m, AddColumnCall as n, AddPrimaryKeyCall as o, CreateTableCall as p, AddForeignKeyCall as r, AddUniqueCall as s, AddCheckConstraintCall as t, CreateIndexCall as u, DropConstraintCall as v, EnableRowLevelSecurityCall as w, DropNotNullCall as x, DropDefaultCall as y };
1758
1758
 
1759
- //# sourceMappingURL=op-factory-call-DxNNKUeZ.mjs.map
1759
+ //# sourceMappingURL=op-factory-call-CI00nS4z.mjs.map