@prisma-next/target-postgres 0.16.0-dev.3 → 0.16.0-dev.30

package/README.md

@@ -107,7 +107,7 @@ import { defineContract } from '@prisma-next/sql-contract-ts/contract-builder';
 export const contract = defineContract({
   family: sqlFamily,
   target: postgresPack,
-  extensionPacks: { pgvector },
+  extensions: { pgvector },
 });
 ```
 

package/dist/{authoring-34L18kA1.mjs → authoring-DnO1B0N9.mjs}

@@ -1,12 +1,14 @@
 import { o as PG_ENUM_CODEC_ID } from "./codec-ids-D3G8K0YM.mjs";
+import { n as postgresError } from "./errors-DBSNx7EJ.mjs";
 import { t as PostgresNativeEnum } from "./postgres-native-enum-BwVNf0Ku.mjs";
-import { _ as PostgresRlsEnablement, d as PostgresRlsEnablementSchema, f as PostgresRlsPolicySchema, g as PostgresRlsPolicy, m as PostgresRole, p as PostgresRoleSchema, u as PostgresNativeEnumSchema } from "./postgres-schema-CewLYHB7.mjs";
-import { a as normalizePredicate, i as computeContentHash, r as POLICY_OPERATION_PREDICATES, t as formatRlsPolicyWireName } from "./wire-name-DbQ9-2RC.mjs";
+import { _ as PostgresRlsEnablement, d as PostgresRlsEnablementSchema, f as PostgresRlsPolicySchema, g as PostgresRlsPolicy, m as PostgresRole, p as PostgresRoleSchema, u as PostgresNativeEnumSchema } from "./postgres-schema-CTplQZDK.mjs";
+import { n as computeContentHash, t as POLICY_OPERATION_PREDICATES } from "./canonicalize-C7zKHw8m.mjs";
 import { UNBOUND_NAMESPACE_ID } from "@prisma-next/framework-components/ir";
 import { blindCast } from "@prisma-next/utils/casts";
 import { temporalAuthoringPresets, temporalCodecPresetWithPrecision } from "@prisma-next/family-sql/control";
 import { ifDefined } from "@prisma-next/utils/defined";
 import { modelAttribute } from "@prisma-next/psl-parser";
+import { assertWireNamePrefixLength, formatWireName, normalizeSqlBody } from "@prisma-next/sql-schema-ir/naming";
 import { assertDefined } from "@prisma-next/utils/assertions";
 //#region src/core/authoring.ts
 /**
@@ -82,14 +84,14 @@ function unwrapQuotedString(raw) {
 */
 function buildRlsPolicyEntity(input) {
 	const wireHash = computeContentHash({
-		...ifDefined("using", input.using !== void 0 ? normalizePredicate(input.using) : void 0),
-		...ifDefined("withCheck", input.withCheck !== void 0 ? normalizePredicate(input.withCheck) : void 0),
+		...ifDefined("using", input.using !== void 0 ? normalizeSqlBody(input.using) : void 0),
+		...ifDefined("withCheck", input.withCheck !== void 0 ? normalizeSqlBody(input.withCheck) : void 0),
 		roles: input.roles,
 		operation: input.operation,
 		permissive: true
 	});
 	return new PostgresRlsPolicy({
-		name: formatRlsPolicyWireName(input.prefix, wireHash),
+		name: formatWireName(input.prefix, wireHash),
 		prefix: input.prefix,
 		tableName: input.tableName,
 		namespaceId: input.namespaceId,
@@ -568,11 +570,6 @@ const postgresAuthoringFieldPresets = {
 	}
 };
 /**
-* Postgres identifiers cap at 63 characters and the wire name appends a
-* 9-character `_<8hex>` suffix, so the authored prefix is bounded at 54.
-*/
-const RLS_POLICY_PREFIX_MAX_LENGTH = 54;
-/**
 * Resolves an entity handle's `target` ref to a table coordinate of this
 * contract, or throws the load-time diagnostic naming the handle: a
 * cross-space target is rejected (you cannot CREATE POLICY on a table
@@ -584,8 +581,11 @@ function requireLocalTarget(refs, subject) {
 		namespaceId: target.namespaceId,
 		tableName: target.tableName
 	};
-	if (target !== void 0 && target.kind === "cross-space") throw new Error(`defineContract: ${subject} targets model "${target.modelName ?? target.tableName}", which lives in another contract space. Policies and rlsEnabled entries must target a model declared in this contract.`);
-	throw new Error(`defineContract: ${subject} targets model "${target?.modelName ?? "<anonymous>"}", which is not in the contract's models. Add the model to \`models\`.`);
+	if (target !== void 0 && target.kind === "cross-space") throw postgresError("CONTRACT.POLICY_INVALID", `defineContract: ${subject} targets model "${target.modelName ?? target.tableName}", which lives in another contract space. Policies and rlsEnabled entries must target a model declared in this contract.`, { meta: {
+		model: target.modelName ?? target.tableName,
+		reason: "cross-space-target"
+	} });
+	throw postgresError("CONTRACT.MODEL_UNKNOWN", `defineContract: ${subject} targets model "${target?.modelName ?? "<anonymous>"}", which is not in the contract's models. Add the model to \`models\`.`, { meta: { model: target?.modelName ?? "<anonymous>" } });
 }
 /**
 * The SQL-family entity-handle batch lowering hook for the Postgres pack
@@ -618,7 +618,10 @@ function postgresLowerEntityHandles(input) {
 		}
 		case "role": {
 			const roleHandle = blindCast(handle);
-			if (roles.has(roleHandle.name)) throw new Error(`defineContract: role "${roleHandle.name}" is declared more than once in the entities list.`);
+			if (roles.has(roleHandle.name)) throw postgresError("CONTRACT.ROLE_INVALID", `defineContract: role "${roleHandle.name}" is declared more than once in the entities list.`, { meta: {
+				role: roleHandle.name,
+				reason: "duplicate"
+			} });
 			roles.set(roleHandle.name, new PostgresRole({
 				name: roleHandle.name,
 				namespaceId: UNBOUND_NAMESPACE_ID
@@ -633,20 +636,28 @@ function postgresLowerEntityHandles(input) {
 			});
 			break;
 		}
-		default: throw new Error(`defineContract: the postgres pack does not lower "${handle.entityKind}" handles from the entities list.`);
+		default: throw postgresError("CONTRACT.ENTITY_KIND_INVALID", `defineContract: the postgres pack does not lower "${handle.entityKind}" handles from the entities list.`, { meta: { entityKind: handle.entityKind } });
 	}
 	const rows = [];
 	const seenPrefixes = /* @__PURE__ */ new Set();
 	for (const { handle: policy, refs } of policies) {
 		const prefix = policy.name;
-		if (prefix.length > RLS_POLICY_PREFIX_MAX_LENGTH) throw new Error(`defineContract: policy prefix "${prefix}" exceeds the ${RLS_POLICY_PREFIX_MAX_LENGTH}-character maximum (Postgres identifiers cap at 63 characters and the wire name appends a 9-character hash suffix).`);
+		assertWireNamePrefixLength(prefix, "defineContract: policy prefix");
 		const coordinate = requireLocalTarget(refs, `policy "${prefix}"`);
 		if (!enablements.has(coordinateKey(coordinate))) {
 			const target = refs["target"];
-			throw new Error(`defineContract: policy "${prefix}" targets model "${target?.modelName ?? coordinate.tableName}", whose table is not RLS-enabled. Add rlsEnabled(<model>) to the entities list.`);
+			throw postgresError("CONTRACT.POLICY_INVALID", `defineContract: policy "${prefix}" targets model "${target?.modelName ?? coordinate.tableName}", whose table is not RLS-enabled. Add rlsEnabled(<model>) to the entities list.`, { meta: {
+				prefix,
+				model: target?.modelName ?? coordinate.tableName,
+				reason: "target-not-rls-enabled"
+			} });
 		}
 		const prefixKey = `${coordinate.namespaceId} ${prefix}`;
-		if (seenPrefixes.has(prefixKey)) throw new Error(`defineContract: policy prefix "${prefix}" is declared more than once in namespace "${coordinate.namespaceId}". Policy prefixes must be unique per namespace.`);
+		if (seenPrefixes.has(prefixKey)) throw postgresError("CONTRACT.POLICY_INVALID", `defineContract: policy prefix "${prefix}" is declared more than once in namespace "${coordinate.namespaceId}". Policy prefixes must be unique per namespace.`, { meta: {
+			prefix,
+			namespaceId: coordinate.namespaceId,
+			reason: "duplicate-prefix"
+		} });
 		seenPrefixes.add(prefixKey);
 		const roleNames = [...new Set(policy.roles.map((roleHandle) => roleHandle.name))].sort();
 		rows.push({
@@ -681,4 +692,4 @@ function postgresLowerEntityHandles(input) {
 //#endregion
 export { postgresAuthoringTypes as a, postgresAuthoringPslBlockDescriptors as i, postgresAuthoringFieldPresets as n, postgresLowerEntityHandles as o, postgresAuthoringModelAttributes as r, postgresAuthoringEntityTypes as t };
 
-//# sourceMappingURL=authoring-34L18kA1.mjs.map
+//# sourceMappingURL=authoring-DnO1B0N9.mjs.map

package/dist/authoring-DnO1B0N9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring-DnO1B0N9.mjs","names":[],"sources":["../src/core/authoring.ts"],"sourcesContent":["import {\n  temporalAuthoringPresets,\n  temporalCodecPresetWithPrecision,\n} from '@prisma-next/family-sql/control';\nimport type {\n  AuthoringEntityContext,\n  AuthoringEntityTypeFactoryOutput,\n  AuthoringEntityTypeNamespace,\n  AuthoringFieldNamespace,\n  AuthoringModelAttributeContext,\n  AuthoringModelAttributeDescriptorNamespace,\n  AuthoringPslBlockDescriptorNamespace,\n  AuthoringTypeNamespace,\n  PslExtensionBlock,\n} from '@prisma-next/framework-components/authoring';\nimport { UNBOUND_NAMESPACE_ID } from '@prisma-next/framework-components/ir';\nimport { modelAttribute } from '@prisma-next/psl-parser';\nimport type {\n  EntityHandleLoweringInput,\n  LoweredPackEntity,\n  ResolvedEntityHandleRef,\n  ResolvedPslModelRefs,\n} from '@prisma-next/sql-contract/entity-handle-lowering-hook';\nimport type { SqlValueSetDerivingEntityTypeOutput } from '@prisma-next/sql-contract/value-set-derivation-hook';\nimport {\n  assertWireNamePrefixLength,\n  formatWireName,\n  normalizeSqlBody,\n} from '@prisma-next/sql-schema-ir/naming';\nimport { assertDefined } from '@prisma-next/utils/assertions';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { PG_ENUM_CODEC_ID } from './codec-ids';\nimport { postgresError } from './errors';\nimport { PostgresNativeEnum } from './postgres-native-enum';\nimport { PostgresRlsEnablement, type PostgresRlsEnablementInput } from './postgres-rls-enablement';\nimport { PostgresRlsPolicy, type RlsPolicyOperation } from './postgres-rls-policy';\nimport { PostgresRole } from './postgres-role';\nimport {\n  PostgresNativeEnumSchema,\n  PostgresRlsEnablementSchema,\n  PostgresRlsPolicySchema,\n  PostgresRoleSchema,\n} from './postgres-validators';\nimport { computeContentHash, POLICY_OPERATION_PREDICATES } from './rls/canonicalize';\n\n/**\n * `pg.enum(<ref>)` registers as an ordinary type constructor whose sole\n * positional argument names a `native_enum` entity instead of carrying a\n * literal value. The interpreter resolves the ref to the `native_enum`\n * entity generically (driven by `entityRefArg`); the `pg/enum@1` codec\n * descriptor's `columnFromEntity` hook (see `codecs.ts`) converts that\n * entity into the column's `typeParams` and native type.\n */\nexport const postgresAuthoringTypes = {\n  pg: {\n    enum: {\n      kind: 'typeConstructor',\n      entityRefArg: { index: 0, entityKind: 'native_enum' },\n      output: {\n        codecId: PG_ENUM_CODEC_ID,\n      },\n    },\n  },\n} as const satisfies AuthoringTypeNamespace;\n\nexport interface RlsPolicyExtensionBlock extends PslExtensionBlock {\n  readonly namespaceId: string;\n  /**\n   * Model refs the family interpreter resolved from the block's descriptor-\n   * declared `refKind: 'model'` parameters before invoking this factory\n   * (keyed by parameter name). An unresolved required ref is the\n   * interpreter's diagnostic; the factory is never called with one missing.\n   */\n  readonly resolvedModelRefs?: ResolvedPslModelRefs;\n}\n\n/** A parsed `role` block annotated with its lexical namespace id by the interpreter. */\nexport interface RoleExtensionBlock extends PslExtensionBlock {\n  readonly namespaceId: string;\n}\n\n/**\n * Maps a `policy_<op>` keyword to the RLS operation it authors. The keyword\n * IS the operation (per the project's rejection of a `policy { operation = … }`\n * conditional block).\n */\nconst POLICY_KEYWORD_OPERATION: Readonly<Record<string, RlsPolicyOperation>> = {\n  policy_select: 'select',\n  policy_insert: 'insert',\n  policy_update: 'update',\n  policy_delete: 'delete',\n  policy_all: 'all',\n};\n\nfunction readValueParam(block: PslExtensionBlock, key: string): string | undefined {\n  const param = block.parameters[key];\n  return param?.kind === 'value' ? param.raw : undefined;\n}\n\nfunction readListRefParams(block: PslExtensionBlock, key: string): string[] {\n  const param = block.parameters[key];\n  if (param?.kind !== 'list') return [];\n  return param.items.flatMap((item) => (item.kind === 'ref' ? [item.identifier] : []));\n}\n\n/**\n * Unwraps a quoted PSL string argument, inverting the printer's\n * `escapePslString` escapes (`\\\\`, `\\\"`, `\\n`, `\\r`). An unknown escape\n * sequence is kept verbatim, matching the printer-side `unescapePslString`\n * convention.\n */\nfunction unwrapQuotedString(raw: string): string {\n  if (!(raw.startsWith('\"') && raw.endsWith('\"') && raw.length >= 2)) {\n    return raw;\n  }\n  const inner = raw.slice(1, -1);\n  let result = '';\n  for (let i = 0; i < inner.length; i++) {\n    if (inner[i] !== '\\\\' || i + 1 >= inner.length) {\n      result += inner[i];\n      continue;\n    }\n    const next = inner[i + 1];\n    if (next === '\\\\' || next === '\"') {\n      result += next;\n    } else if (next === 'n') {\n      result += '\\n';\n    } else if (next === 'r') {\n      result += '\\r';\n    } else {\n      result += '\\\\';\n      result += next;\n    }\n    i++;\n  }\n  return result;\n}\n\n/**\n * Assembles a {@link PostgresRlsPolicy} from lowered inputs: normalizes the\n * predicates, computes the content-hash wire name, and constructs the frozen\n * entity. The single hash-assembly body shared by the PSL block lowering\n * ({@link lowerRlsPolicyFromBlock}) and the TS entity-handle lowering\n * ({@link postgresLowerEntityHandles}) so the two surfaces cannot drift.\n */\nfunction buildRlsPolicyEntity(input: {\n  readonly prefix: string;\n  readonly tableName: string;\n  readonly namespaceId: string;\n  readonly operation: RlsPolicyOperation;\n  readonly roles: readonly string[];\n  readonly using?: string;\n  readonly withCheck?: string;\n}): PostgresRlsPolicy {\n  const wireHash = computeContentHash({\n    ...ifDefined('using', input.using !== undefined ? normalizeSqlBody(input.using) : undefined),\n    ...ifDefined(\n      'withCheck',\n      input.withCheck !== undefined ? normalizeSqlBody(input.withCheck) : undefined,\n    ),\n    roles: input.roles,\n    operation: input.operation,\n    permissive: true,\n  });\n\n  return new PostgresRlsPolicy({\n    name: formatWireName(input.prefix, wireHash),\n    prefix: input.prefix,\n    tableName: input.tableName,\n    namespaceId: input.namespaceId,\n    operation: input.operation,\n    roles: input.roles,\n    ...ifDefined('using', input.using),\n    ...ifDefined('withCheck', input.withCheck),\n    permissive: true,\n  });\n}\n\nfunction lowerRlsPolicyFromBlock(\n  block: RlsPolicyExtensionBlock,\n  ctx: AuthoringEntityContext,\n): PostgresRlsPolicy | undefined {\n  const prefix = block.name;\n  const operation = POLICY_KEYWORD_OPERATION[block.keyword] ?? 'select';\n  // The interpreter resolves the descriptor-declared `target` model ref to\n  // its storage table name before invoking this factory (an unresolved or\n  // missing required ref is the interpreter's diagnostic), so a lookup miss\n  // here is structurally impossible.\n  const tableName = block.resolvedModelRefs?.['target']?.tableName;\n  assertDefined(\n    tableName,\n    `lowerRlsPolicyFromBlock: policy \"${block.name}\" reached the factory without a resolved \\`target\\` ref; the interpreter resolves same-namespace model refs before invoking entity factories.`,\n  );\n  const roles = [...readListRefParams(block, 'roles')].sort();\n\n  const usingRaw = readValueParam(block, 'using');\n  const withCheckRaw = readValueParam(block, 'withCheck');\n\n  // Reject a predicate the operation does not take (e.g. `using` on INSERT, or\n  // `withCheck` on SELECT/DELETE). The descriptor's param set already omits it,\n  // but the generic descriptor validator is not wired into the SQL-family\n  // interpreter, so the lowering enforces the per-operation predicate matrix\n  // directly — a wrong predicate is a load-time diagnostic, not a silent drop.\n  const support = POLICY_OPERATION_PREDICATES[operation];\n  const rejectPredicate = (predicate: 'using' | 'withCheck'): undefined => {\n    ctx.diagnostics?.push({\n      code: 'PSL_RLS_PREDICATE_NOT_FOR_OPERATION',\n      message: `\\`${block.keyword}\\` policy \"${block.name}\" does not take a \\`${predicate}\\` predicate; the ${operation.toUpperCase()} operation uses ${support.using ? '`using`' : '`withCheck`'}${support.using && support.withCheck ? ' and `withCheck`' : ' only'}.`,\n      sourceId: ctx.sourceId ?? 'unknown',\n      span: block.parameters[predicate]?.span ?? block.span,\n    });\n    return undefined;\n  };\n  if (usingRaw !== undefined && !support.using) return rejectPredicate('using');\n  if (withCheckRaw !== undefined && !support.withCheck) return rejectPredicate('withCheck');\n\n  const using = usingRaw !== undefined ? unwrapQuotedString(usingRaw) : undefined;\n  const withCheck = withCheckRaw !== undefined ? unwrapQuotedString(withCheckRaw) : undefined;\n\n  return buildRlsPolicyEntity({\n    prefix,\n    tableName,\n    namespaceId: block.namespaceId,\n    operation,\n    roles,\n    ...ifDefined('using', using),\n    ...ifDefined('withCheck', withCheck),\n  });\n}\n\n/**\n * Lowers a `native_enum { memberName = \"value\" … @@map(\"type_name\") }` block\n * into a {@link PostgresNativeEnum}. Members must be authored as explicit\n * `key = \"value\"` pairs — a bare (value-less) member is a diagnostic, not\n * accepted (authoring-design.md §2.1). The parsed `memberName` is only used\n * to duplicate-check and report diagnostics; the lowered entity carries just\n * the member values (a native enum is value-only — the member \"name\" isn't\n * a separate authoring concept from the value). `typeName` comes from\n * `@@map` or defaults to the block name verbatim.\n */\nfunction lowerNativeEnumFromBlock(\n  block: PslExtensionBlock,\n  ctx: AuthoringEntityContext,\n): PostgresNativeEnum | undefined {\n  const sourceId = ctx.sourceId ?? 'unknown';\n  const diagnostics = ctx.diagnostics;\n\n  const mapAttr = block.blockAttributes.find((a) => a.name === 'map');\n  let typeName = block.name;\n  if (mapAttr) {\n    const rawArg = mapAttr.args[0]?.value;\n    const mapped = rawArg !== undefined ? unwrapQuotedString(rawArg) : undefined;\n    if (mapped === undefined) {\n      diagnostics?.push({\n        code: 'PSL_NATIVE_ENUM_INVALID_MAP',\n        message: `native_enum \"${block.name}\" @@map attribute must have a quoted type-name argument`,\n        sourceId,\n        span: mapAttr.span,\n      });\n      return undefined;\n    }\n    typeName = mapped;\n  }\n\n  let memberError = false;\n  const seenValues = new Set<string>();\n  const members: string[] = [];\n  for (const [memberName, paramValue] of Object.entries(block.parameters)) {\n    if (paramValue.kind === 'bare') {\n      diagnostics?.push({\n        code: 'PSL_NATIVE_ENUM_BARE_MEMBER',\n        message: `native_enum \"${block.name}\" member \"${memberName}\" has no value; members must be authored as \"${memberName} = \\\\\"value\\\\\"\"`,\n        sourceId,\n        span: paramValue.span,\n      });\n      memberError = true;\n      continue;\n    }\n    if (paramValue.kind !== 'value') continue;\n\n    let jsonValue: unknown;\n    try {\n      jsonValue = JSON.parse(paramValue.raw);\n    } catch {\n      diagnostics?.push({\n        code: 'PSL_EXTENSION_INVALID_VALUE',\n        message: `native_enum \"${block.name}\" member \"${memberName}\" value \"${paramValue.raw}\" is not valid JSON`,\n        sourceId,\n        span: paramValue.span,\n      });\n      memberError = true;\n      continue;\n    }\n    if (typeof jsonValue !== 'string') {\n      diagnostics?.push({\n        code: 'PSL_EXTENSION_INVALID_VALUE',\n        message: `native_enum \"${block.name}\" member \"${memberName}\" value must be a string`,\n        sourceId,\n        span: paramValue.span,\n      });\n      memberError = true;\n      continue;\n    }\n    if (seenValues.has(jsonValue)) {\n      diagnostics?.push({\n        code: 'PSL_NATIVE_ENUM_DUPLICATE_MEMBER_VALUE',\n        message: `native_enum \"${block.name}\": duplicate member value \"${jsonValue}\"`,\n        sourceId,\n        span: paramValue.span,\n      });\n      memberError = true;\n      continue;\n    }\n    seenValues.add(jsonValue);\n    members.push(jsonValue);\n  }\n\n  if (memberError) return undefined;\n\n  if (members.length === 0) {\n    diagnostics?.push({\n      code: 'PSL_NATIVE_ENUM_MISSING_MEMBERS',\n      message: `native_enum \"${block.name}\" must have at least one member`,\n      sourceId,\n      span: block.span,\n    });\n    return undefined;\n  }\n\n  // `control` stays unset — the effective grade is resolved at read time via `effectiveControlPolicy`, like `StorageTable`/`StorageColumn`.\n  return new PostgresNativeEnum({ typeName, members });\n}\n\n/**\n * `native_enum`'s entity-type factory output, checked separately from the assembled\n * `postgresAuthoringEntityTypes` map below: `deriveValueSet` is SQL-family surface\n * ({@link SqlValueSetDerivingEntityTypeOutput}), not part of the framework\n * `AuthoringEntityTypeFactoryOutput` shape, so folding it directly into the map's single\n * `satisfies AuthoringEntityTypeNamespace` check would trip an excess-property error. Checking it\n * here against the intersection of both shapes keeps it structurally valid against each without\n * widening the map's own check.\n */\nconst nativeEnumEntityTypeOutput = {\n  factory: lowerNativeEnumFromBlock,\n  deriveValueSet: (entity: PostgresNativeEnum) => ({\n    kind: 'valueSet' as const,\n    values: [...entity.members],\n  }),\n} satisfies AuthoringEntityTypeFactoryOutput<PslExtensionBlock, PostgresNativeEnum | undefined> &\n  SqlValueSetDerivingEntityTypeOutput;\n\n/**\n * Lowers a `role <name> {}` block into a {@link PostgresRole}. Roles are\n * cluster-scoped in Postgres, so the block must be declared inside\n * `namespace unbound { … }` — any other lexical namespace (a named schema,\n * or the default bucket top-level declarations resolve to) is a load-time\n * diagnostic. The lowered entity carries the unbound coordinate.\n */\nfunction lowerRoleFromBlock(\n  block: RoleExtensionBlock,\n  ctx: AuthoringEntityContext,\n): PostgresRole | undefined {\n  if (block.namespaceId !== UNBOUND_NAMESPACE_ID) {\n    ctx.diagnostics?.push({\n      code: 'PSL_ROLE_BLOCK_OUTSIDE_UNBOUND_NAMESPACE',\n      message: `\\`role\\` block \"${block.name}\" must be declared inside \\`namespace unbound { }\\`, not in namespace \"${block.namespaceId}\"`,\n      sourceId: ctx.sourceId ?? 'unknown',\n      span: block.span,\n    });\n    return undefined;\n  }\n  return new PostgresRole({ name: block.name, namespaceId: UNBOUND_NAMESPACE_ID });\n}\n\nexport const postgresAuthoringEntityTypes = {\n  role: {\n    kind: 'entity',\n    discriminator: 'role',\n    validatorSchema: PostgresRoleSchema,\n    output: {\n      factory: lowerRoleFromBlock,\n    },\n  },\n  rls: {\n    kind: 'entity',\n    discriminator: 'rls',\n    validatorSchema: PostgresRlsEnablementSchema,\n    output: {\n      factory: (input: PostgresRlsEnablementInput): PostgresRlsEnablement =>\n        new PostgresRlsEnablement(input),\n    },\n  },\n  policy: {\n    kind: 'entity',\n    discriminator: 'policy',\n    validatorSchema: PostgresRlsPolicySchema,\n    output: {\n      factory: lowerRlsPolicyFromBlock,\n    },\n  },\n  native_enum: {\n    kind: 'entity',\n    discriminator: 'native_enum',\n    validatorSchema: PostgresNativeEnumSchema,\n    output: nativeEnumEntityTypeOutput,\n  },\n} as const satisfies AuthoringEntityTypeNamespace;\n\n/**\n * Field presets contributed by the Postgres target pack.\n *\n * These mirror the PSL scalar-to-codec mapping used by the Postgres adapter\n * (see `createPostgresPslScalarTypeDescriptors`), so that authoring a field\n * via the TS callback surface (e.g. `field.int()`) and via the PSL scalar\n * surface (e.g. `Int`) lowers to byte-identical contracts.\n *\n * The `uuidNative` / `id.uuidv4Native` / `id.uuidv7Native` presets use the\n * native Postgres `uuid` type (codecId `pg/uuid@1`). For cross-target\n * portability use `uuidString` / `id.uuidv4String` / `id.uuidv7String` from\n * the family pack instead.\n */\n/**\n * Shared parameter descriptors for the five `policy_<op>` PSL block\n * keywords. All five share the `policy` discriminator — the parser\n * dispatches by keyword (see the framework's PSL-block SPI), and every\n * keyword's factory lowers to `PostgresRlsPolicy` via `lowerRlsPolicyFromBlock`.\n *\n * The `roles` list uses `scope:'cross-space'` because same-namespace\n * role ref resolution requires PSL namespace entries keyed by `refKind`\n * (i.e. `'role'`), which in turn requires the role block discriminator to\n * equal `'role'`. Aligning discriminator with refKind is tracked for\n * slice 4 (cross-space roles). Until then cross-space passes validation\n * unconditionally and the authored role names flow through unchanged.\n */\nconst policyTargetParam = {\n  kind: 'ref',\n  refKind: 'model',\n  scope: 'same-namespace',\n  required: true,\n} as const;\nconst policyRolesParam = {\n  kind: 'list',\n  of: { kind: 'ref', refKind: 'role', scope: 'cross-space' },\n} as const;\nconst policyPredicateParam = { kind: 'value', codecId: 'pg/text@1', required: true } as const;\n// A policy may only target an RLS-controlled model: the model named by\n// `target` must declare `@@rls`, or the load fails with a diagnostic naming\n// the model and the policy prefix.\nconst policyRequiresRls = { parameter: 'target', attribute: 'rls' } as const;\n\nexport const postgresAuthoringPslBlockDescriptors = {\n  // The predicate param set per keyword mirrors Postgres: SELECT/DELETE take\n  // USING only; INSERT takes WITH CHECK only; UPDATE/ALL take both. The\n  // per-operation predicate matrix is enforced in `lowerRlsPolicyFromBlock`\n  // (a wrong predicate for the operation is a load-time diagnostic there),\n  // since the generic descriptor validator is not wired into the SQL-family\n  // interpreter.\n  policy_select: {\n    kind: 'pslBlock',\n    keyword: 'policy_select',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: { target: policyTargetParam, roles: policyRolesParam, using: policyPredicateParam },\n    requiresModelAttribute: policyRequiresRls,\n  },\n  policy_delete: {\n    kind: 'pslBlock',\n    keyword: 'policy_delete',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: { target: policyTargetParam, roles: policyRolesParam, using: policyPredicateParam },\n    requiresModelAttribute: policyRequiresRls,\n  },\n  policy_insert: {\n    kind: 'pslBlock',\n    keyword: 'policy_insert',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: {\n      target: policyTargetParam,\n      roles: policyRolesParam,\n      withCheck: policyPredicateParam,\n    },\n    requiresModelAttribute: policyRequiresRls,\n  },\n  policy_update: {\n    kind: 'pslBlock',\n    keyword: 'policy_update',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: {\n      target: policyTargetParam,\n      roles: policyRolesParam,\n      using: policyPredicateParam,\n      withCheck: policyPredicateParam,\n    },\n    requiresModelAttribute: policyRequiresRls,\n  },\n  policy_all: {\n    kind: 'pslBlock',\n    keyword: 'policy_all',\n    discriminator: 'policy',\n    name: { required: true },\n    parameters: {\n      target: policyTargetParam,\n      roles: policyRolesParam,\n      using: policyPredicateParam,\n      withCheck: policyPredicateParam,\n    },\n    requiresModelAttribute: policyRequiresRls,\n  },\n  /**\n   * PSL block descriptor for `native_enum`.\n   *\n   * Reuses the existing variadic-block mechanism (the same shape the SQL\n   * family's `enum` block ships): the body is an open `memberName = \"value\"`\n   * list. `variadicParameters: true` opens the block to arbitrary keys\n   * beyond the declared (empty) `parameters` set — the lowering factory\n   * (`lowerNativeEnumFromBlock`) turns the variadic entries into ordered\n   * members and rejects a bare (value-less) member.\n   */\n  native_enum: {\n    kind: 'pslBlock',\n    keyword: 'native_enum',\n    discriminator: 'native_enum',\n    name: { required: true },\n    parameters: {},\n    variadicParameters: true,\n  },\n  /**\n   * PSL block descriptor for `role` (e.g. `role anon {}`). Name-only, no\n   * parameters and no body content. Declared inside `namespace unbound { }`\n   * — see {@link lowerRoleFromBlock} for the placement check and the\n   * coordinate the lowered entity carries.\n   */\n  role: {\n    kind: 'pslBlock',\n    keyword: 'role',\n    discriminator: 'role',\n    name: { required: true },\n    parameters: {},\n  },\n} as const satisfies AuthoringPslBlockDescriptorNamespace;\n\n/**\n * `@@` model attributes contributed by the Postgres target pack.\n *\n * `@@rls` is argument-less: presence marks the model's table\n * RLS-controlled. It lowers to a {@link PostgresRlsEnablement} marker in\n * the namespace's `entries.rls`, keyed by the model's table name — the\n * marker (never the policy set) is what drives\n * `ENABLE`/`DISABLE ROW LEVEL SECURITY` planning.\n */\nexport const postgresAuthoringModelAttributes = {\n  rls: {\n    kind: 'modelAttribute',\n    attribute: 'rls',\n    spec: modelAttribute('rls', {}),\n    lower: (_parsed: Record<never, never>, ctx: AuthoringModelAttributeContext) => ({\n      key: ctx.storageName,\n      entity: new PostgresRlsEnablement({\n        tableName: ctx.storageName,\n        namespaceId: ctx.namespaceId,\n      }),\n    }),\n  },\n} as const satisfies AuthoringModelAttributeDescriptorNamespace;\n\nexport const postgresAuthoringFieldPresets = {\n  text: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/text@1',\n      nativeType: 'text',\n    },\n  },\n  int: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/int4@1',\n      nativeType: 'int4',\n    },\n  },\n  bigint: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/int8@1',\n      nativeType: 'int8',\n    },\n  },\n  float: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/float8@1',\n      nativeType: 'float8',\n    },\n  },\n  decimal: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/numeric@1',\n      nativeType: 'numeric',\n    },\n  },\n  boolean: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/bool@1',\n      nativeType: 'bool',\n    },\n  },\n  json: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/jsonb@1',\n      nativeType: 'jsonb',\n    },\n  },\n  bytes: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/bytea@1',\n      nativeType: 'bytea',\n    },\n  },\n  dateTime: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/timestamptz@1',\n      nativeType: 'timestamptz',\n    },\n  },\n  temporal: {\n    .../* @__PURE__ */ temporalAuthoringPresets({\n      codecId: 'pg/timestamptz@1',\n      nativeType: 'timestamptz',\n    }),\n    timestamp: /* @__PURE__ */ temporalCodecPresetWithPrecision({\n      codecId: 'pg/timestamp@1',\n      nativeType: 'timestamp',\n    }),\n    timestamptz: /* @__PURE__ */ temporalCodecPresetWithPrecision({\n      codecId: 'pg/timestamptz@1',\n      nativeType: 'timestamptz',\n    }),\n  },\n  uuidNative: {\n    kind: 'fieldPreset',\n    output: {\n      codecId: 'pg/uuid@1',\n      nativeType: 'uuid',\n    },\n  },\n  id: {\n    uuidv4Native: {\n      kind: 'fieldPreset',\n      output: {\n        codecId: 'pg/uuid@1',\n        nativeType: 'uuid',\n        executionDefaults: {\n          onCreate: {\n            kind: 'generator',\n            id: 'uuidv4',\n          },\n        },\n        id: true,\n      },\n    },\n    uuidv7Native: {\n      kind: 'fieldPreset',\n      output: {\n        codecId: 'pg/uuid@1',\n        nativeType: 'uuid',\n        executionDefaults: {\n          onCreate: {\n            kind: 'generator',\n            id: 'uuidv7',\n          },\n        },\n        id: true,\n      },\n    },\n  },\n} as const satisfies AuthoringFieldNamespace;\n\ninterface RlsRoleHandleShape {\n  readonly entityKind: 'role';\n  readonly name: string;\n}\n\ninterface RlsPolicyHandleShape {\n  readonly entityKind: 'policy';\n  readonly operation: RlsPolicyOperation;\n  readonly name: string;\n  readonly roles: readonly { readonly name: string }[];\n  readonly using?: string;\n  readonly withCheck?: string;\n}\n\ninterface RlsTargetCoordinate {\n  readonly namespaceId: string;\n  readonly tableName: string;\n}\n\n/**\n * Resolves an entity handle's `target` ref to a table coordinate of this\n * contract, or throws the load-time diagnostic naming the handle: a\n * cross-space target is rejected (you cannot CREATE POLICY on a table\n * another space owns) and an unresolved target names the model.\n */\nfunction requireLocalTarget(\n  refs: Readonly<Record<string, ResolvedEntityHandleRef>>,\n  subject: string,\n): RlsTargetCoordinate {\n  const target = refs['target'];\n  if (target !== undefined && target.kind === 'resolved') {\n    return { namespaceId: target.namespaceId, tableName: target.tableName };\n  }\n  if (target !== undefined && target.kind === 'cross-space') {\n    throw postgresError(\n      'CONTRACT.POLICY_INVALID',\n      `defineContract: ${subject} targets model \"${target.modelName ?? target.tableName}\", which lives in another contract space. Policies and rlsEnabled entries must target a model declared in this contract.`,\n      { meta: { model: target.modelName ?? target.tableName, reason: 'cross-space-target' } },\n    );\n  }\n  throw postgresError(\n    'CONTRACT.MODEL_UNKNOWN',\n    `defineContract: ${subject} targets model \"${target?.modelName ?? '<anonymous>'}\", which is not in the contract's models. Add the model to \\`models\\`.`,\n    { meta: { model: target?.modelName ?? '<anonymous>' } },\n  );\n}\n\n/**\n * The SQL-family entity-handle batch lowering hook for the Postgres pack\n * (`SqlEntityHandleLoweringContribution`). Receives every `entities` handle\n * whose kind this pack registered — batch, so the cross-entity diagnostics\n * (duplicate prefix, policy without rlsEnabled, duplicate role) can see\n * sibling handles — and lowers them with the same keying and hash assembly\n * as the PSL path: `policy` keyed by prefix (wire name via\n * {@link buildRlsPolicyEntity}), `rls` keyed by table name, `role` keyed by\n * name and filed under the default namespace (roles are declared\n * contract-wide; PSL has no role block to set a precedent).\n */\nexport function postgresLowerEntityHandles(\n  input: EntityHandleLoweringInput,\n): readonly LoweredPackEntity[] {\n  const enablements = new Map<\n    string,\n    { coordinate: RlsTargetCoordinate; entity: PostgresRlsEnablement }\n  >();\n  const roles = new Map<string, PostgresRole>();\n  const policies: {\n    readonly handle: RlsPolicyHandleShape;\n    readonly refs: Readonly<Record<string, ResolvedEntityHandleRef>>;\n  }[] = [];\n  const coordinateKey = (coordinate: RlsTargetCoordinate): string =>\n    `${coordinate.namespaceId} ${coordinate.tableName}`;\n\n  for (const { handle, refs } of input.handles) {\n    switch (handle.entityKind) {\n      case 'rls': {\n        const coordinate = requireLocalTarget(refs, 'an rlsEnabled entry');\n        const key = coordinateKey(coordinate);\n        if (!enablements.has(key)) {\n          enablements.set(key, {\n            coordinate,\n            entity: new PostgresRlsEnablement({\n              tableName: coordinate.tableName,\n              namespaceId: coordinate.namespaceId,\n            }),\n          });\n        }\n        break;\n      }\n      case 'role': {\n        const roleHandle = blindCast<\n          RlsRoleHandleShape,\n          'role handles are constructed only by the postgres contract-builder role() constructor, which enforces this shape'\n        >(handle);\n        if (roles.has(roleHandle.name)) {\n          throw postgresError(\n            'CONTRACT.ROLE_INVALID',\n            `defineContract: role \"${roleHandle.name}\" is declared more than once in the entities list.`,\n            { meta: { role: roleHandle.name, reason: 'duplicate' } },\n          );\n        }\n        // Roles are cluster-scoped in Postgres, so they always land in the\n        // `__unbound__` namespace — identical to a PSL `role` block\n        // (`lowerRoleFromBlock`) and matching the `PostgresRole` class's own\n        // contract. The declaring surface (TS entities vs PSL) does not move\n        // the slot.\n        roles.set(\n          roleHandle.name,\n          new PostgresRole({ name: roleHandle.name, namespaceId: UNBOUND_NAMESPACE_ID }),\n        );\n        break;\n      }\n      case 'policy': {\n        const policyHandle = blindCast<\n          RlsPolicyHandleShape,\n          'policy handles are constructed only by the postgres contract-builder policy*() constructors, which enforce this shape'\n        >(handle);\n        policies.push({ handle: policyHandle, refs });\n        break;\n      }\n      default:\n        throw postgresError(\n          'CONTRACT.ENTITY_KIND_INVALID',\n          `defineContract: the postgres pack does not lower \"${handle.entityKind}\" handles from the entities list.`,\n          { meta: { entityKind: handle.entityKind } },\n        );\n    }\n  }\n\n  const rows: LoweredPackEntity[] = [];\n  const seenPrefixes = new Set<string>();\n\n  for (const { handle: policy, refs } of policies) {\n    const prefix = policy.name;\n    assertWireNamePrefixLength(prefix, 'defineContract: policy prefix');\n    const coordinate = requireLocalTarget(refs, `policy \"${prefix}\"`);\n    if (!enablements.has(coordinateKey(coordinate))) {\n      const target = refs['target'];\n      throw postgresError(\n        'CONTRACT.POLICY_INVALID',\n        `defineContract: policy \"${prefix}\" targets model \"${target?.modelName ?? coordinate.tableName}\", whose table is not RLS-enabled. Add rlsEnabled(<model>) to the entities list.`,\n        {\n          meta: {\n            prefix,\n            model: target?.modelName ?? coordinate.tableName,\n            reason: 'target-not-rls-enabled',\n          },\n        },\n      );\n    }\n    const prefixKey = `${coordinate.namespaceId} ${prefix}`;\n    if (seenPrefixes.has(prefixKey)) {\n      throw postgresError(\n        'CONTRACT.POLICY_INVALID',\n        `defineContract: policy prefix \"${prefix}\" is declared more than once in namespace \"${coordinate.namespaceId}\". Policy prefixes must be unique per namespace.`,\n        { meta: { prefix, namespaceId: coordinate.namespaceId, reason: 'duplicate-prefix' } },\n      );\n    }\n    seenPrefixes.add(prefixKey);\n\n    const roleNames = [...new Set(policy.roles.map((roleHandle) => roleHandle.name))].sort();\n    rows.push({\n      namespaceId: coordinate.namespaceId,\n      entityKind: 'policy',\n      key: prefix,\n      entity: buildRlsPolicyEntity({\n        prefix,\n        tableName: coordinate.tableName,\n        namespaceId: coordinate.namespaceId,\n        operation: policy.operation,\n        roles: roleNames,\n        ...ifDefined('using', policy.using),\n        ...ifDefined('withCheck', policy.withCheck),\n      }),\n    });\n  }\n\n  for (const { coordinate, entity } of enablements.values()) {\n    rows.push({\n      namespaceId: coordinate.namespaceId,\n      entityKind: 'rls',\n      key: coordinate.tableName,\n      entity,\n    });\n  }\n  for (const [name, entity] of roles) {\n    rows.push({ namespaceId: UNBOUND_NAMESPACE_ID, entityKind: 'role', key: name, entity });\n  }\n  return rows;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsDA,MAAa,yBAAyB,EACpC,IAAI,EACF,MAAM;CACJ,MAAM;CACN,cAAc;EAAE,OAAO;EAAG,YAAY;CAAc;CACpD,QAAQ,EACN,SAAS,iBACX;AACF,EACF,EACF;;;;;;AAuBA,MAAM,2BAAyE;CAC7E,eAAe;CACf,eAAe;CACf,eAAe;CACf,eAAe;CACf,YAAY;AACd;AAEA,SAAS,eAAe,OAA0B,KAAiC;CACjF,MAAM,QAAQ,MAAM,WAAW;CAC/B,OAAO,OAAO,SAAS,UAAU,MAAM,MAAM,KAAA;AAC/C;AAEA,SAAS,kBAAkB,OAA0B,KAAuB;CAC1E,MAAM,QAAQ,MAAM,WAAW;CAC/B,IAAI,OAAO,SAAS,QAAQ,OAAO,CAAC;CACpC,OAAO,MAAM,MAAM,SAAS,SAAU,KAAK,SAAS,QAAQ,CAAC,KAAK,UAAU,IAAI,CAAC,CAAE;AACrF;;;;;;;AAQA,SAAS,mBAAmB,KAAqB;CAC/C,IAAI,EAAE,IAAI,WAAW,IAAG,KAAK,IAAI,SAAS,IAAG,KAAK,IAAI,UAAU,IAC9D,OAAO;CAET,MAAM,QAAQ,IAAI,MAAM,GAAG,EAAE;CAC7B,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,IAAI,MAAM,OAAO,QAAQ,IAAI,KAAK,MAAM,QAAQ;GAC9C,UAAU,MAAM;GAChB;EACF;EACA,MAAM,OAAO,MAAM,IAAI;EACvB,IAAI,SAAS,QAAQ,SAAS,MAC5B,UAAU;OACL,IAAI,SAAS,KAClB,UAAU;OACL,IAAI,SAAS,KAClB,UAAU;OACL;GACL,UAAU;GACV,UAAU;EACZ;EACA;CACF;CACA,OAAO;AACT;;;;;;;;AASA,SAAS,qBAAqB,OAQR;CACpB,MAAM,WAAW,mBAAmB;EAClC,GAAG,UAAU,SAAS,MAAM,UAAU,KAAA,IAAY,iBAAiB,MAAM,KAAK,IAAI,KAAA,CAAS;EAC3F,GAAG,UACD,aACA,MAAM,cAAc,KAAA,IAAY,iBAAiB,MAAM,SAAS,IAAI,KAAA,CACtE;EACA,OAAO,MAAM;EACb,WAAW,MAAM;EACjB,YAAY;CACd,CAAC;CAED,OAAO,IAAI,kBAAkB;EAC3B,MAAM,eAAe,MAAM,QAAQ,QAAQ;EAC3C,QAAQ,MAAM;EACd,WAAW,MAAM;EACjB,aAAa,MAAM;EACnB,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,GAAG,UAAU,SAAS,MAAM,KAAK;EACjC,GAAG,UAAU,aAAa,MAAM,SAAS;EACzC,YAAY;CACd,CAAC;AACH;AAEA,SAAS,wBACP,OACA,KAC+B;CAC/B,MAAM,SAAS,MAAM;CACrB,MAAM,YAAY,yBAAyB,MAAM,YAAY;CAK7D,MAAM,YAAY,MAAM,oBAAoB,SAAS,EAAE;CACvD,cACE,WACA,oCAAoC,MAAM,KAAK,8IACjD;CACA,MAAM,QAAQ,CAAC,GAAG,kBAAkB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK;CAE1D,MAAM,WAAW,eAAe,OAAO,OAAO;CAC9C,MAAM,eAAe,eAAe,OAAO,WAAW;CAOtD,MAAM,UAAU,4BAA4B;CAC5C,MAAM,mBAAmB,cAAgD;EACvE,IAAI,aAAa,KAAK;GACpB,MAAM;GACN,SAAS,KAAK,MAAM,QAAQ,aAAa,MAAM,KAAK,sBAAsB,UAAU,oBAAoB,UAAU,YAAY,EAAE,kBAAkB,QAAQ,QAAQ,YAAY,gBAAgB,QAAQ,SAAS,QAAQ,YAAY,qBAAqB,QAAQ;GAChQ,UAAU,IAAI,YAAY;GAC1B,MAAM,MAAM,WAAW,UAAU,EAAE,QAAQ,MAAM;EACnD,CAAC;CAEH;CACA,IAAI,aAAa,KAAA,KAAa,CAAC,QAAQ,OAAO,OAAO,gBAAgB,OAAO;CAC5E,IAAI,iBAAiB,KAAA,KAAa,CAAC,QAAQ,WAAW,OAAO,gBAAgB,WAAW;CAExF,MAAM,QAAQ,aAAa,KAAA,IAAY,mBAAmB,QAAQ,IAAI,KAAA;CACtE,MAAM,YAAY,iBAAiB,KAAA,IAAY,mBAAmB,YAAY,IAAI,KAAA;CAElF,OAAO,qBAAqB;EAC1B;EACA;EACA,aAAa,MAAM;EACnB;EACA;EACA,GAAG,UAAU,SAAS,KAAK;EAC3B,GAAG,UAAU,aAAa,SAAS;CACrC,CAAC;AACH;;;;;;;;;;;AAYA,SAAS,yBACP,OACA,KACgC;CAChC,MAAM,WAAW,IAAI,YAAY;CACjC,MAAM,cAAc,IAAI;CAExB,MAAM,UAAU,MAAM,gBAAgB,MAAM,MAAM,EAAE,SAAS,KAAK;CAClE,IAAI,WAAW,MAAM;CACrB,IAAI,SAAS;EACX,MAAM,SAAS,QAAQ,KAAK,EAAE,EAAE;EAChC,MAAM,SAAS,WAAW,KAAA,IAAY,mBAAmB,MAAM,IAAI,KAAA;EACnE,IAAI,WAAW,KAAA,GAAW;GACxB,aAAa,KAAK;IAChB,MAAM;IACN,SAAS,gBAAgB,MAAM,KAAK;IACpC;IACA,MAAM,QAAQ;GAChB,CAAC;GACD;EACF;EACA,WAAW;CACb;CAEA,IAAI,cAAc;CAClB,MAAM,6BAAa,IAAI,IAAY;CACnC,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,YAAY,eAAe,OAAO,QAAQ,MAAM,UAAU,GAAG;EACvE,IAAI,WAAW,SAAS,QAAQ;GAC9B,aAAa,KAAK;IAChB,MAAM;IACN,SAAS,gBAAgB,MAAM,KAAK,YAAY,WAAW,+CAA+C,WAAW;IACrH;IACA,MAAM,WAAW;GACnB,CAAC;GACD,cAAc;GACd;EACF;EACA,IAAI,WAAW,SAAS,SAAS;EAEjC,IAAI;EACJ,IAAI;GACF,YAAY,KAAK,MAAM,WAAW,GAAG;EACvC,QAAQ;GACN,aAAa,KAAK;IAChB,MAAM;IACN,SAAS,gBAAgB,MAAM,KAAK,YAAY,WAAW,WAAW,WAAW,IAAI;IACrF;IACA,MAAM,WAAW;GACnB,CAAC;GACD,cAAc;GACd;EACF;EACA,IAAI,OAAO,cAAc,UAAU;GACjC,aAAa,KAAK;IAChB,MAAM;IACN,SAAS,gBAAgB,MAAM,KAAK,YAAY,WAAW;IAC3D;IACA,MAAM,WAAW;GACnB,CAAC;GACD,cAAc;GACd;EACF;EACA,IAAI,WAAW,IAAI,SAAS,GAAG;GAC7B,aAAa,KAAK;IAChB,MAAM;IACN,SAAS,gBAAgB,MAAM,KAAK,6BAA6B,UAAU;IAC3E;IACA,MAAM,WAAW;GACnB,CAAC;GACD,cAAc;GACd;EACF;EACA,WAAW,IAAI,SAAS;EACxB,QAAQ,KAAK,SAAS;CACxB;CAEA,IAAI,aAAa,OAAO,KAAA;CAExB,IAAI,QAAQ,WAAW,GAAG;EACxB,aAAa,KAAK;GAChB,MAAM;GACN,SAAS,gBAAgB,MAAM,KAAK;GACpC;GACA,MAAM,MAAM;EACd,CAAC;EACD;CACF;CAGA,OAAO,IAAI,mBAAmB;EAAE;EAAU;CAAQ,CAAC;AACrD;;;;;;;;;;AAWA,MAAM,6BAA6B;CACjC,SAAS;CACT,iBAAiB,YAAgC;EAC/C,MAAM;EACN,QAAQ,CAAC,GAAG,OAAO,OAAO;CAC5B;AACF;;;;;;;;AAUA,SAAS,mBACP,OACA,KAC0B;CAC1B,IAAI,MAAM,gBAAgB,sBAAsB;EAC9C,IAAI,aAAa,KAAK;GACpB,MAAM;GACN,SAAS,mBAAmB,MAAM,KAAK,yEAAyE,MAAM,YAAY;GAClI,UAAU,IAAI,YAAY;GAC1B,MAAM,MAAM;EACd,CAAC;EACD;CACF;CACA,OAAO,IAAI,aAAa;EAAE,MAAM,MAAM;EAAM,aAAa;CAAqB,CAAC;AACjF;AAEA,MAAa,+BAA+B;CAC1C,MAAM;EACJ,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ,EACN,SAAS,mBACX;CACF;CACA,KAAK;EACH,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ,EACN,UAAU,UACR,IAAI,sBAAsB,KAAK,EACnC;CACF;CACA,QAAQ;EACN,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ,EACN,SAAS,wBACX;CACF;CACA,aAAa;EACX,MAAM;EACN,eAAe;EACf,iBAAiB;EACjB,QAAQ;CACV;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAM,oBAAoB;CACxB,MAAM;CACN,SAAS;CACT,OAAO;CACP,UAAU;AACZ;AACA,MAAM,mBAAmB;CACvB,MAAM;CACN,IAAI;EAAE,MAAM;EAAO,SAAS;EAAQ,OAAO;CAAc;AAC3D;AACA,MAAM,uBAAuB;CAAE,MAAM;CAAS,SAAS;CAAa,UAAU;AAAK;AAInF,MAAM,oBAAoB;CAAE,WAAW;CAAU,WAAW;AAAM;AAElE,MAAa,uCAAuC;CAOlD,eAAe;EACb,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY;GAAE,QAAQ;GAAmB,OAAO;GAAkB,OAAO;EAAqB;EAC9F,wBAAwB;CAC1B;CACA,eAAe;EACb,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY;GAAE,QAAQ;GAAmB,OAAO;GAAkB,OAAO;EAAqB;EAC9F,wBAAwB;CAC1B;CACA,eAAe;EACb,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY;GACV,QAAQ;GACR,OAAO;GACP,WAAW;EACb;EACA,wBAAwB;CAC1B;CACA,eAAe;EACb,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY;GACV,QAAQ;GACR,OAAO;GACP,OAAO;GACP,WAAW;EACb;EACA,wBAAwB;CAC1B;CACA,YAAY;EACV,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY;GACV,QAAQ;GACR,OAAO;GACP,OAAO;GACP,WAAW;EACb;EACA,wBAAwB;CAC1B;;;;;;;;;;;CAWA,aAAa;EACX,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY,CAAC;EACb,oBAAoB;CACtB;;;;;;;CAOA,MAAM;EACJ,MAAM;EACN,SAAS;EACT,eAAe;EACf,MAAM,EAAE,UAAU,KAAK;EACvB,YAAY,CAAC;CACf;AACF;;;;;;;;;;AAWA,MAAa,mCAAmC,EAC9C,KAAK;CACH,MAAM;CACN,WAAW;CACX,MAAM,eAAe,OAAO,CAAC,CAAC;CAC9B,QAAQ,SAA+B,SAAyC;EAC9E,KAAK,IAAI;EACT,QAAQ,IAAI,sBAAsB;GAChC,WAAW,IAAI;GACf,aAAa,IAAI;EACnB,CAAC;CACH;AACF,EACF;AAEA,MAAa,gCAAgC;CAC3C,MAAM;EACJ,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,KAAK;EACH,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,QAAQ;EACN,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,OAAO;EACL,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,SAAS;EACP,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,SAAS;EACP,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,MAAM;EACJ,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,OAAO;EACL,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,UAAU;EACR,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,UAAU;EACR,GAAmB,yCAAyB;GAC1C,SAAS;GACT,YAAY;EACd,CAAC;EACD,WAA2B,iDAAiC;GAC1D,SAAS;GACT,YAAY;EACd,CAAC;EACD,aAA6B,iDAAiC;GAC5D,SAAS;GACT,YAAY;EACd,CAAC;CACH;CACA,YAAY;EACV,MAAM;EACN,QAAQ;GACN,SAAS;GACT,YAAY;EACd;CACF;CACA,IAAI;EACF,cAAc;GACZ,MAAM;GACN,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,mBAAmB,EACjB,UAAU;KACR,MAAM;KACN,IAAI;IACN,EACF;IACA,IAAI;GACN;EACF;EACA,cAAc;GACZ,MAAM;GACN,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,mBAAmB,EACjB,UAAU;KACR,MAAM;KACN,IAAI;IACN,EACF;IACA,IAAI;GACN;EACF;CACF;AACF;;;;;;;AA2BA,SAAS,mBACP,MACA,SACqB;CACrB,MAAM,SAAS,KAAK;CACpB,IAAI,WAAW,KAAA,KAAa,OAAO,SAAS,YAC1C,OAAO;EAAE,aAAa,OAAO;EAAa,WAAW,OAAO;CAAU;CAExE,IAAI,WAAW,KAAA,KAAa,OAAO,SAAS,eAC1C,MAAM,cACJ,2BACA,mBAAmB,QAAQ,kBAAkB,OAAO,aAAa,OAAO,UAAU,2HAClF,EAAE,MAAM;EAAE,OAAO,OAAO,aAAa,OAAO;EAAW,QAAQ;CAAqB,EAAE,CACxF;CAEF,MAAM,cACJ,0BACA,mBAAmB,QAAQ,kBAAkB,QAAQ,aAAa,cAAc,yEAChF,EAAE,MAAM,EAAE,OAAO,QAAQ,aAAa,cAAc,EAAE,CACxD;AACF;;;;;;;;;;;;AAaA,SAAgB,2BACd,OAC8B;CAC9B,MAAM,8BAAc,IAAI,IAGtB;CACF,MAAM,wBAAQ,IAAI,IAA0B;CAC5C,MAAM,WAGA,CAAC;CACP,MAAM,iBAAiB,eACrB,GAAG,WAAW,YAAY,GAAG,WAAW;CAE1C,KAAK,MAAM,EAAE,QAAQ,UAAU,MAAM,SACnC,QAAQ,OAAO,YAAf;EACE,KAAK,OAAO;GACV,MAAM,aAAa,mBAAmB,MAAM,qBAAqB;GACjE,MAAM,MAAM,cAAc,UAAU;GACpC,IAAI,CAAC,YAAY,IAAI,GAAG,GACtB,YAAY,IAAI,KAAK;IACnB;IACA,QAAQ,IAAI,sBAAsB;KAChC,WAAW,WAAW;KACtB,aAAa,WAAW;IAC1B,CAAC;GACH,CAAC;GAEH;EACF;EACA,KAAK,QAAQ;GACX,MAAM,aAAa,UAGjB,MAAM;GACR,IAAI,MAAM,IAAI,WAAW,IAAI,GAC3B,MAAM,cACJ,yBACA,yBAAyB,WAAW,KAAK,qDACzC,EAAE,MAAM;IAAE,MAAM,WAAW;IAAM,QAAQ;GAAY,EAAE,CACzD;GAOF,MAAM,IACJ,WAAW,MACX,IAAI,aAAa;IAAE,MAAM,WAAW;IAAM,aAAa;GAAqB,CAAC,CAC/E;GACA;EACF;EACA,KAAK,UAAU;GACb,MAAM,eAAe,UAGnB,MAAM;GACR,SAAS,KAAK;IAAE,QAAQ;IAAc;GAAK,CAAC;GAC5C;EACF;EACA,SACE,MAAM,cACJ,gCACA,qDAAqD,OAAO,WAAW,oCACvE,EAAE,MAAM,EAAE,YAAY,OAAO,WAAW,EAAE,CAC5C;CACJ;CAGF,MAAM,OAA4B,CAAC;CACnC,MAAM,+BAAe,IAAI,IAAY;CAErC,KAAK,MAAM,EAAE,QAAQ,QAAQ,UAAU,UAAU;EAC/C,MAAM,SAAS,OAAO;EACtB,2BAA2B,QAAQ,+BAA+B;EAClE,MAAM,aAAa,mBAAmB,MAAM,WAAW,OAAO,EAAE;EAChE,IAAI,CAAC,YAAY,IAAI,cAAc,UAAU,CAAC,GAAG;GAC/C,MAAM,SAAS,KAAK;GACpB,MAAM,cACJ,2BACA,2BAA2B,OAAO,mBAAmB,QAAQ,aAAa,WAAW,UAAU,mFAC/F,EACE,MAAM;IACJ;IACA,OAAO,QAAQ,aAAa,WAAW;IACvC,QAAQ;GACV,EACF,CACF;EACF;EACA,MAAM,YAAY,GAAG,WAAW,YAAY,GAAG;EAC/C,IAAI,aAAa,IAAI,SAAS,GAC5B,MAAM,cACJ,2BACA,kCAAkC,OAAO,6CAA6C,WAAW,YAAY,mDAC7G,EAAE,MAAM;GAAE;GAAQ,aAAa,WAAW;GAAa,QAAQ;EAAmB,EAAE,CACtF;EAEF,aAAa,IAAI,SAAS;EAE1B,MAAM,YAAY,CAAC,GAAG,IAAI,IAAI,OAAO,MAAM,KAAK,eAAe,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;EACvF,KAAK,KAAK;GACR,aAAa,WAAW;GACxB,YAAY;GACZ,KAAK;GACL,QAAQ,qBAAqB;IAC3B;IACA,WAAW,WAAW;IACtB,aAAa,WAAW;IACxB,WAAW,OAAO;IAClB,OAAO;IACP,GAAG,UAAU,SAAS,OAAO,KAAK;IAClC,GAAG,UAAU,aAAa,OAAO,SAAS;GAC5C,CAAC;EACH,CAAC;CACH;CAEA,KAAK,MAAM,EAAE,YAAY,YAAY,YAAY,OAAO,GACtD,KAAK,KAAK;EACR,aAAa,WAAW;EACxB,YAAY;EACZ,KAAK,WAAW;EAChB;CACF,CAAC;CAEH,KAAK,MAAM,CAAC,MAAM,WAAW,OAC3B,KAAK,KAAK;EAAE,aAAa;EAAsB,YAAY;EAAQ,KAAK;EAAM;CAAO,CAAC;CAExF,OAAO;AACT"}

package/dist/canonicalize-C7zKHw8m.mjs

@@ -0,0 +1,59 @@
+import { normalizeSqlBody } from "@prisma-next/sql-schema-ir/naming";
+import { createHash } from "node:crypto";
+//#region src/core/rls/canonicalize.ts
+/**
+* Which predicate each RLS operation admits, mirroring Postgres: SELECT and
+* DELETE decide row visibility/eligibility with `USING` only; INSERT
+* validates the new row with `WITH CHECK` only; UPDATE and ALL take either
+* or both. Single-homed here so the PSL lowering and the TS handle
+* constructors enforce the same matrix.
+*/
+const POLICY_OPERATION_PREDICATES = {
+	select: {
+		using: true,
+		withCheck: false
+	},
+	insert: {
+		using: false,
+		withCheck: true
+	},
+	update: {
+		using: true,
+		withCheck: true
+	},
+	delete: {
+		using: true,
+		withCheck: false
+	},
+	all: {
+		using: true,
+		withCheck: true
+	}
+};
+/**
+* Returns the first 8 lowercase hex characters of the SHA-256 digest over the
+* canonical content tuple for an RLS policy:
+*
+*   [normalizeSqlBody(using), normalizeSqlBody(withCheck), sortedRoles, operation, permissive]
+*
+* Schema and table are excluded (they are orthogonal to policy equivalence).
+* Uses `JSON.stringify` for a deterministic encoding.
+*/
+function computeContentHash(parts) {
+	const using = normalizeSqlBody(parts.using ?? "");
+	const withCheck = normalizeSqlBody(parts.withCheck ?? "");
+	const roles = [...new Set(parts.roles)].sort();
+	const permissive = parts.permissive ? "permissive" : "restrictive";
+	const tuple = JSON.stringify([
+		using,
+		withCheck,
+		roles,
+		parts.operation,
+		permissive
+	]);
+	return createHash("sha256").update(tuple).digest("hex").slice(0, 8);
+}
+//#endregion
+export { computeContentHash as n, POLICY_OPERATION_PREDICATES as t };
+
+//# sourceMappingURL=canonicalize-C7zKHw8m.mjs.map

package/dist/canonicalize-C7zKHw8m.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize-C7zKHw8m.mjs","names":[],"sources":["../src/core/rls/canonicalize.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { normalizeSqlBody } from '@prisma-next/sql-schema-ir/naming';\n\nexport type RlsPolicyOperation = 'select' | 'insert' | 'update' | 'delete' | 'all';\n\n/**\n * Which predicate each RLS operation admits, mirroring Postgres: SELECT and\n * DELETE decide row visibility/eligibility with `USING` only; INSERT\n * validates the new row with `WITH CHECK` only; UPDATE and ALL take either\n * or both. Single-homed here so the PSL lowering and the TS handle\n * constructors enforce the same matrix.\n */\nexport const POLICY_OPERATION_PREDICATES: Readonly<\n  Record<RlsPolicyOperation, { readonly using: boolean; readonly withCheck: boolean }>\n> = {\n  select: { using: true, withCheck: false },\n  insert: { using: false, withCheck: true },\n  update: { using: true, withCheck: true },\n  delete: { using: true, withCheck: false },\n  all: { using: true, withCheck: true },\n};\n\nexport interface ContentHashParts {\n  readonly using?: string;\n  readonly withCheck?: string;\n  readonly roles: readonly string[];\n  readonly operation: RlsPolicyOperation;\n  readonly permissive: boolean;\n}\n\n/**\n * Returns the first 8 lowercase hex characters of the SHA-256 digest over the\n * canonical content tuple for an RLS policy:\n *\n *   [normalizeSqlBody(using), normalizeSqlBody(withCheck), sortedRoles, operation, permissive]\n *\n * Schema and table are excluded (they are orthogonal to policy equivalence).\n * Uses `JSON.stringify` for a deterministic encoding.\n */\nexport function computeContentHash(parts: ContentHashParts): string {\n  const using = normalizeSqlBody(parts.using ?? '');\n  const withCheck = normalizeSqlBody(parts.withCheck ?? '');\n  const roles = [...new Set(parts.roles)].sort();\n  const permissive = parts.permissive ? 'permissive' : 'restrictive';\n\n  const tuple = JSON.stringify([using, withCheck, roles, parts.operation, permissive]);\n  return createHash('sha256').update(tuple).digest('hex').slice(0, 8);\n}\n"],"mappings":";;;;;;;;;;AAYA,MAAa,8BAET;CACF,QAAQ;EAAE,OAAO;EAAM,WAAW;CAAM;CACxC,QAAQ;EAAE,OAAO;EAAO,WAAW;CAAK;CACxC,QAAQ;EAAE,OAAO;EAAM,WAAW;CAAK;CACvC,QAAQ;EAAE,OAAO;EAAM,WAAW;CAAM;CACxC,KAAK;EAAE,OAAO;EAAM,WAAW;CAAK;AACtC;;;;;;;;;;AAmBA,SAAgB,mBAAmB,OAAiC;CAClE,MAAM,QAAQ,iBAAiB,MAAM,SAAS,EAAE;CAChD,MAAM,YAAY,iBAAiB,MAAM,aAAa,EAAE;CACxD,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK;CAC7C,MAAM,aAAa,MAAM,aAAa,eAAe;CAErD,MAAM,QAAQ,KAAK,UAAU;EAAC;EAAO;EAAW;EAAO,MAAM;EAAW;CAAU,CAAC;CACnF,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;AACpE"}

package/dist/{canonicalize-D1F4vUnP.d.mts → canonicalize-CQlxSR4D.d.mts}

@@ -18,31 +18,16 @@ interface ContentHashParts {
   readonly operation: RlsPolicyOperation;
   readonly permissive: boolean;
 }
-/**
- * Stabilizes an authored predicate for hashing: trim, and collapse runs of
- * internal whitespace to a single space.
- *
- * This is deliberately minimal. The content hash is the equivalence relation
- * for a policy, and the wire name (prefix + hash) is the only thing ever
- * compared — we never recompute the hash from an introspected policy body, so
- * there is no need to match Postgres's reprinted form. Minimal normalization
- * also protects the no-collision property: aggressive rewriting (lowercasing,
- * paren-stripping, cast-alias folding) risks collapsing two distinct predicates
- * onto one hash. Out-of-band alteration of a hashed policy is unsupported.
- *
- * The normalizer is a stability commitment: any change re-suffixes all wire names.
- */
-declare function normalizePredicate(sql: string): string;
 /**
  * Returns the first 8 lowercase hex characters of the SHA-256 digest over the
  * canonical content tuple for an RLS policy:
  *
- *   [normalize(using), normalize(withCheck), sortedRoles, operation, permissive]
+ *   [normalizeSqlBody(using), normalizeSqlBody(withCheck), sortedRoles, operation, permissive]
  *
  * Schema and table are excluded (they are orthogonal to policy equivalence).
  * Uses `JSON.stringify` for a deterministic encoding.
  */
 declare function computeContentHash(parts: ContentHashParts): string;
 //#endregion
-export { normalizePredicate as a, computeContentHash as i, POLICY_OPERATION_PREDICATES as n, RlsPolicyOperation as r, ContentHashParts as t };
-//# sourceMappingURL=canonicalize-D1F4vUnP.d.mts.map
+export { computeContentHash as i, POLICY_OPERATION_PREDICATES as n, RlsPolicyOperation as r, ContentHashParts as t };
+//# sourceMappingURL=canonicalize-CQlxSR4D.d.mts.map

package/dist/canonicalize-CQlxSR4D.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize-CQlxSR4D.d.mts","names":[],"sources":["../src/core/rls/canonicalize.ts"],"mappings":";KAGY;;;;;;;;cASC,6BAA6B,SACxC,OAAO;WAA+B;WAAyB;;UAShD;WACN;WACA;WACA;WACA,WAAW;WACX;;;;;;;;;;;iBAYK,mBAAmB,OAAO"}

package/dist/{codec-types-CQ07nOz-.d.mts → codec-types-DdoPc2dy.d.mts}

@@ -1,4 +1,4 @@
-import { C as PgTimestamptzDescriptor, D as PgVarcharDescriptor, E as PgVarbitDescriptor, S as PgTimestampDescriptor, T as PgUuidDescriptor, _ as PgJsonDescriptor, b as PgTextDescriptor, c as PgFloat4Descriptor, d as PgInetDescriptor, f as PgInt2Descriptor, g as PgIntervalDescriptor, h as PgIntDescriptor, i as PgCharDescriptor, l as PgFloat8Descriptor, m as PgInt8Descriptor, n as PgBoolDescriptor, p as PgInt4Descriptor, r as PgByteaDescriptor, s as PgEnumDescriptor, t as PgBitDescriptor, u as PgFloatDescriptor, v as PgJsonbDescriptor, w as PgTimetzDescriptor, x as PgTimeDescriptor, y as PgNumericDescriptor } from "./codecs-G4DTY0F_.mjs";
+import { C as PgTimestampDescriptor, D as PgVarbitDescriptor, E as PgUuidDescriptor, O as PgVarcharDescriptor, S as PgTimeDescriptor, T as PgTimetzDescriptor, _ as PgIntervalDescriptor, a as PgDateDescriptor, b as PgNumericDescriptor, d as PgFloatDescriptor, f as PgInetDescriptor, g as PgIntDescriptor, h as PgInt8Descriptor, i as PgCharDescriptor, l as PgFloat4Descriptor, m as PgInt4Descriptor, n as PgBoolDescriptor, p as PgInt2Descriptor, r as PgByteaDescriptor, s as PgEnumDescriptor, t as PgBitDescriptor, u as PgFloat8Descriptor, v as PgJsonDescriptor, w as PgTimestamptzDescriptor, x as PgTextDescriptor, y as PgJsonbDescriptor } from "./codecs-CGE5dh94.mjs";
 import { ExtractCodecTypes } from "@prisma-next/sql-relational-core/ast";
 import { JsonValue as JsonValue$1 } from "@prisma-next/contract/types";
 //#region src/core/codec-type-map.d.ts
@@ -21,6 +21,7 @@ declare const codecDescriptorMap: {
   readonly float4: PgFloat4Descriptor;
   readonly float8: PgFloat8Descriptor;
   readonly numeric: PgNumericDescriptor;
+  readonly date: PgDateDescriptor;
   readonly timestamp: PgTimestampDescriptor;
   readonly timestamptz: PgTimestamptzDescriptor;
   readonly time: PgTimeDescriptor;
@@ -76,4 +77,4 @@ type Interval<P extends number | undefined = undefined> = BrandedString<{
 }>;
 //#endregion
 export { JsonValue$1 as a, Timestamp as c, VarBit as d, Varchar as f, Interval as i, Timestamptz as l, Char as n, Numeric as o, CodecTypes as r, Time as s, Bit as t, Timetz as u };
-//# sourceMappingURL=codec-types-CQ07nOz-.d.mts.map
+//# sourceMappingURL=codec-types-DdoPc2dy.d.mts.map

package/dist/codec-types-DdoPc2dy.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec-types-DdoPc2dy.d.mts","names":[],"sources":["../src/core/codec-type-map.ts","../src/exports/codec-types.ts"],"mappings":";;;;cA+Ca;;;;;;;iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmCD,QAAQ,iBAAiB,WAAW,gBAAgB,WAAW,EAAE,KAAK,EAAE,GAAG;KAE3E,4BAA4B;KAE5B,sBAAsB,kBAAkB;;;KC3ExC,aAAa,QAAQ;KAI5B,QAAQ,GAAG,cAAc,2BAA2B,gBAC7C,WAAW,QAAQ,MAAM;KAGhC,cAAc,cAAc,2BAA2B,gBAAgB;KAEhE,KAAK,oBAAoB;EAAgB,cAAc;;KACvD,QAAQ,oBAAoB;EAAgB,iBAAiB;;KAC7D,QAAQ,kBAAkB,4CAA4C;EAChF,oBAAoB;EACpB,gBAAgB;;KAEN,IAAI,oBAAoB;EAAgB,aAAa;;KACrD,OAAO,oBAAoB;EAAgB,gBAAgB;;KAC3D,UAAU,4CAA4C;EAChE,sBAAsB;;KAEZ,YAAY,4CAA4C;EAClE,wBAAwB;;KAEd,KAAK,4CAA4C;EAAgB,iBAAiB;;KAClF,OAAO,4CAA4C;EAC7D,mBAAmB;;KAET,SAAS,4CAA4C;EAC/D,qBAAqB"}

package/dist/codec-types.d.mts

@@ -1,2 +1,2 @@
-import { a as JsonValue, c as Timestamp, d as VarBit, f as Varchar, i as Interval, l as Timestamptz, n as Char, o as Numeric, r as CodecTypes, s as Time, t as Bit, u as Timetz } from "./codec-types-CQ07nOz-.mjs";
+import { a as JsonValue, c as Timestamp, d as VarBit, f as Varchar, i as Interval, l as Timestamptz, n as Char, o as Numeric, r as CodecTypes, s as Time, t as Bit, u as Timetz } from "./codec-types-DdoPc2dy.mjs";
 export { Bit, Char, CodecTypes, Interval, type JsonValue, Numeric, Time, Timestamp, Timestamptz, Timetz, VarBit, Varchar };

package/dist/{codecs-G4DTY0F_.d.mts → codecs-CGE5dh94.d.mts}

@@ -63,6 +63,11 @@ declare class PgEnumCodec extends CodecImpl<typeof PG_ENUM_CODEC_ID, readonly ['
 type PgEnumParams = {
   readonly typeName: string;
 };
+/**
+ * Narrows codec `typeParams` to {@link PgEnumParams} — the shape that binds a
+ * column to a named database type (a native enum's `CREATE TYPE` name).
+ */
+declare function isPgEnumParams(value: unknown): value is PgEnumParams;
 declare class PgEnumDescriptor extends CodecDescriptorImpl<PgEnumParams> {
   readonly codecId: "pg/enum@1";
   readonly traits: readonly ["equality", "order", "textual"];
@@ -713,5 +718,5 @@ declare class PgFloatDescriptor extends CodecDescriptorImpl<void> {
 }
 declare const pgFloatColumn: () => import("@prisma-next/framework-components/codec").ColumnSpec<SqlFloatCodec, undefined>;
 //#endregion
-export { postgresQualifyColumnType as $, pgCharColumn as A, pgIntColumn as B, PgTimestamptzDescriptor as C, PgVarcharDescriptor as D, PgVarbitDescriptor as E, pgFloatColumn as F, pgTextColumn as G, pgJsonColumn as H, pgInetColumn as I, pgTimestamptzColumn as J, pgTimeColumn as K, pgInt2Column as L, pgEnumDescriptor as M, pgFloat4Column as N, pgBitColumn as O, pgFloat8Column as P, pgVarcharColumn as Q, pgInt4Column as R, PgTimestampDescriptor as S, PgUuidDescriptor as T, pgJsonbColumn as U, pgIntervalColumn as V, pgNumericColumn as W, pgUuidColumn as X, pgTimetzColumn as Y, pgVarbitColumn as Z, PgJsonDescriptor as _, PgDateDescriptor as a, PgTextDescriptor as b, PgFloat4Descriptor as c, PgInetDescriptor as d, PgInt2Descriptor as f, PgIntervalDescriptor as g, PgIntDescriptor as h, PgCharDescriptor as i, pgDateColumn as j, pgBoolColumn as k, PgFloat8Descriptor as l, PgInt8Descriptor as m, PgBoolDescriptor as n, PgEnumCodec as o, PgInt4Descriptor as p, pgTimestampColumn as q, PgByteaDescriptor as r, PgEnumDescriptor as s, PgBitDescriptor as t, PgFloatDescriptor as u, PgJsonbDescriptor as v, PgTimetzDescriptor as w, PgTimeDescriptor as x, PgNumericDescriptor as y, pgInt8Column as z };
-//# sourceMappingURL=codecs-G4DTY0F_.d.mts.map
+export { pgVarbitColumn as $, pgBitColumn as A, pgInt4Column as B, PgTimestampDescriptor as C, PgVarbitDescriptor as D, PgUuidDescriptor as E, pgFloat4Column as F, pgJsonbColumn as G, pgIntColumn as H, pgFloat8Column as I, pgTimeColumn as J, pgNumericColumn as K, pgFloatColumn as L, pgCharColumn as M, pgDateColumn as N, PgVarcharDescriptor as O, pgEnumDescriptor as P, pgUuidColumn as Q, pgInetColumn as R, PgTimeDescriptor as S, PgTimetzDescriptor as T, pgIntervalColumn as U, pgInt8Column as V, pgJsonColumn as W, pgTimestamptzColumn as X, pgTimestampColumn as Y, pgTimetzColumn as Z, PgIntervalDescriptor as _, PgDateDescriptor as a, PgNumericDescriptor as b, PgEnumParams as c, PgFloatDescriptor as d, pgVarcharColumn as et, PgInetDescriptor as f, PgIntDescriptor as g, PgInt8Descriptor as h, PgCharDescriptor as i, pgBoolColumn as j, isPgEnumParams as k, PgFloat4Descriptor as l, PgInt4Descriptor as m, PgBoolDescriptor as n, PgEnumCodec as o, PgInt2Descriptor as p, pgTextColumn as q, PgByteaDescriptor as r, PgEnumDescriptor as s, PgBitDescriptor as t, postgresQualifyColumnType as tt, PgFloat8Descriptor as u, PgJsonDescriptor as v, PgTimestamptzDescriptor as w, PgTextDescriptor as x, PgJsonbDescriptor as y, pgInt2Column as z };
+//# sourceMappingURL=codecs-CGE5dh94.d.mts.map

package/dist/codecs-CGE5dh94.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs-CGE5dh94.d.mts","names":[],"sources":["../src/core/codecs.ts"],"mappings":";;;;;;KAkGK;WAA0B;;KAC1B;WAA6B;;KAC7B;WAA2B;WAA6B;;cAwChD,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;;;;;;;;;;;;;;;;;cAsBZ,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;KAQP;WAA0B;;;;;;iBAMtB,eAAe,iBAAiB,SAAS;cAc5C,yBAAyB,oBAAoB;WACtC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EACrB,mBAAmB,OAAO;EAG1B,QAAQ,YAAY,wBAAwB;EAK5C,QAAQ,SAAS,gBAAgB,KAAK,yBAAyB;;;;;;;;;;;;;;;;;EAoBxE,iBACE;aACY,YAAY;aAAuB;;;;;;;;;;;EAcjD,kBAAkB,kBAAkB;;cAOzB,kBAAgB;;;;;;;;;;;;;iBAcb,0BACd;WACW;WACA;WACA,aAAa;GAExB;WACY;WAA6B,aAAa;;cAiD3C,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,sBAAsB,iBAC1B;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,2BAA2B;WACpB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,wEAAc,WAAA;cAMd,sBAAsB,iBAC1B;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,2BAA2B;WACpB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,wEAAc,WAAA;cAMd,oBAAoB,iBACxB;EAKD,OAAO,gBAAgB,MAAM,mBAAmB;EAGhD,OAAO,eAAe,MAAM,mBAAmB;EAGrD,WAAW,iBAAiB;EAG5B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,uBAAuB,iBAC3B;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,uBAAuB,MAAM,mBAAmB;EAG7D,WAAW,gBAAgB;EAW3B,WAAW,MAAM;;cAYN,4BAA4B,oBAAoB;WACzC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;;EACrB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,iBAAiB,KAAK,yBAAyB;;cAO9D,kBAAmB,SAAQ,oEAAkB,WAAA,gBAAA;;;;;;;cAY7C,oBAAoB,iBACxB,kDAEP,eACA;EAEM,OAAO,OAAO,MAAM,MAAM,mBAAmB;EAG7C,OAAO,MAAM,MAAM,MAAM,mBAAmB,QAAQ;EAG1D,WAAW,OAAO,OAAO;EAGzB,WAAW,MAAM,YAAY;;cAKlB,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,yBAAyB,iBAC7B,uDAEP,MACA;EAEM,OAAO,OAAO,MAAM,MAAM,mBAAmB,QAAQ;EAGrD,OAAO,MAAM,MAAM,MAAM,mBAAmB,QAAQ;EAG1D,WAAW,OAAO,OAAO;EAGzB,WAAW,MAAM,YAAY;;cAKlB,8BAA8B,oBAAoB;WAC3C;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EAErB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,mBAAmB,KAAK,yBAAyB;;cAOhE,oBAAqB,SAAQ,sEAAoB,WAAA,kBAAA;cAMjD,2BAA2B,iBAC/B,yDAEP,MACA;EAEM,OAAO,OAAO,MAAM,MAAM,mBAAmB,QAAQ;EAGrD,OAAO,MAAM,MAAM,MAAM,mBAAmB,QAAQ;EAG1D,WAAW,OAAO,OAAO;EAGzB,WAAW,MAAM,YAAY;;cAKlB,gCAAgC,oBAAoB;WAC7C;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EAErB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,mBAAmB,KAAK,yBAAyB;;cAOhE,sBAAuB,SAAQ,sEAAoB,WAAA,oBAAA;cAWnD,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB,oBAAoB;WACtC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EAErB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,mBAAmB,KAAK,yBAAyB;;cAOhE,eAAgB,SAAQ,sEAAoB,WAAA,aAAA;cAM5C,sBAAsB,iBAC1B;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,2BAA2B,oBAAoB;WACxC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EAErB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,mBAAmB,KAAK,yBAAyB;;cAOhE,iBAAkB,SAAQ,sEAAoB,WAAA,eAAA;cAM9C,mBAAmB,iBACvB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,wBAAwB,oBAAoB;WACrC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EACrB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,gBAAgB,KAAK,yBAAyB;;cAO7D,cAAe,SAAQ,mEAAiB,WAAA,YAAA;cAMxC,sBAAsB,iBAC1B;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,2BAA2B,oBAAoB;WACxC;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EACrB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,gBAAgB,KAAK,yBAAyB;;cAO7D,iBAAkB,SAAQ,mEAAiB,WAAA,eAAA;cAM3C,qBAAqB,iBACzB,0CAEP,YACA;EAEM,OAAO,OAAO,YAAY,MAAM,mBAAmB,QAAQ;EAG3D,OAAO,MAAM,YAAY,MAAM,mBAAmB,QAAQ;EAMhE,WAAW,OAAO,aAAa;EAG/B,WAAW,MAAM,YAAY;;cAKlB,0BAA0B;WACnB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAexC,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAQZ,oBAAoB,iBACxB;EAKD,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,cAAc,MAAM,mBAAmB;EAGpD,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,wBAAwB,iBAC5B,+DAEE;EAGH,OAAO,eAAe,MAAM,mBAAmB;EAG/C,OAAO,eAAe,yBAAyB,MAAM,mBAAmB;EAG9E,WAAW,gBAAgB;EAG3B,WAAW,MAAM;;cAKN,6BAA6B,oBAAoB;WAC1C;WACA;WACA;WACA;;;;;;;;;WACA,4DAAY;;;EAErB,iBAAiB,QAAQ;EAGzB,QAAQ,SAAS,mBAAmB,KAAK,yBAAyB;;cAOhE,mBAAoB,SAAQ,sEAAoB,WAAA,iBAAA;cAMhD,oBAAoB,iBACxB,wCAEE,WACT;EAEM,OAAO,OAAO,WAAW,MAAM,mBAAmB;EAGlD,OAAO,eAAe,WAAW,MAAM,mBAAmB,QAAQ;EAGxE,WAAW,OAAO,YAAY;EAG9B,WAAW,MAAM,YAAY;;cAKlB,yBAAyB;WAClB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAOxC,sEAAY,WAAA;cAMZ,qBAAqB,iBACzB,mDAEE,WACT;EAEM,OAAO,OAAO,WAAW,MAAM,mBAAmB;EAGlD,OAAO,eAAe,WAAW,MAAM,mBAAmB,QAAQ;EAGxE,WAAW,OAAO,YAAY;EAG9B,WAAW,MAAM,YAAY;;cAKlB,0BAA0B;WACnB;WACA;WACA;WACA;;;;;;;;;WACA,cAAc;EACvB,YAAY,KAAK,yBAAyB;;cAOxC,uEAAa,WAAA;cAeb,yBAAyB,oBAAoB;WACtC;WACA;WACA;;;;;;;;;WACA;WACA,cAAY;;;;;EACrB,iBAAiB,QAAQ;EAGzB,mBAAmB,OAAO;EAG1B,QAAQ,SAAS,gBAAgB,KAAK,yBAAyB;;cAO7D,eAAgB,SAAQ,mEAAiB,WAAA,cAAA;cAKzC,4BAA4B,oBAAoB;WACzC;WACA;WACA;;;;;;;;;WACA;WACA,cAAY;;;;;EACrB,iBAAiB,QAAQ;EAGzB,mBAAmB,OAAO;EAG1B,QAAQ,SAAS,gBAAgB,KAAK,yBAAyB;;cAO7D,kBAAmB,SAAQ,mEAAiB,WAAA,iBAAA;cAU5C,wBAAwB;WACjB;WACA;WACA;;;;;;;;;WACA;WACA,cAAY;EACrB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,qEAAW,WAAA;cAKX,0BAA0B;WACnB;WACA;WACA;;;;;;;;;WACA;WACA,cAAY;EACrB,mBAAmB,OAAO;EAG1B,YAAY,KAAK,yBAAyB;;cAOxC,uEAAa,WAAA"}

package/dist/{codecs-TCsGgW-Y.mjs → codecs-Deand7sy.mjs}

@@ -1,4 +1,5 @@
 import { C as PG_TIMETZ_CODEC_ID, D as PG_VARCHAR_CODEC_ID, E as PG_VARBIT_CODEC_ID, S as PG_TIMESTAMP_CODEC_ID, T as PG_UUID_CODEC_ID, _ as PG_JSON_CODEC_ID, a as PG_DATE_CODEC_ID, b as PG_TEXT_CODEC_ID, c as PG_FLOAT8_CODEC_ID, d as PG_INT2_CODEC_ID, f as PG_INT4_CODEC_ID, g as PG_JSONB_CODEC_ID, h as PG_INT_CODEC_ID, i as PG_CHAR_CODEC_ID, l as PG_FLOAT_CODEC_ID, m as PG_INTERVAL_CODEC_ID, n as PG_BOOL_CODEC_ID, o as PG_ENUM_CODEC_ID, p as PG_INT8_CODEC_ID, r as PG_BYTEA_CODEC_ID, s as PG_FLOAT4_CODEC_ID, t as PG_BIT_CODEC_ID, u as PG_INET_CODEC_ID, v as PG_NUMERIC_CODEC_ID, w as PG_TIME_CODEC_ID, x as PG_TIMESTAMPTZ_CODEC_ID, y as PG_TEXT_ARRAY_CODEC_ID } from "./codec-ids-D3G8K0YM.mjs";
+import { n as postgresError } from "./errors-DBSNx7EJ.mjs";
 import "./namespace-ids-xtp_ZY86.mjs";
 import { t as PostgresNativeEnum } from "./postgres-native-enum-BwVNf0Ku.mjs";
 import { SqlCharCodec, SqlFloatCodec, SqlIntCodec, SqlVarcharCodec, sqlCharDescriptor, sqlFloatDescriptor, sqlIntDescriptor, sqlTextDescriptor, sqlTimestampDescriptor, sqlVarcharDescriptor } from "@prisma-next/sql-relational-core/ast";
@@ -10,13 +11,21 @@ import { type } from "arktype";
 function renderLength(typeName, typeParams) {
 	const length = typeParams["length"];
 	if (length === void 0) return;
-	if (typeof length !== "number" || !Number.isFinite(length) || !Number.isInteger(length)) throw new Error(`renderOutputType: expected integer "length" in typeParams for ${typeName}, got ${String(length)}`);
+	if (typeof length !== "number" || !Number.isFinite(length) || !Number.isInteger(length)) throw postgresError("RUNTIME.TYPE_PARAMS_INVALID", `renderOutputType: expected integer "length" in typeParams for ${typeName}, got ${String(length)}`, { meta: {
+		nativeType: typeName,
+		param: "length",
+		received: String(length)
+	} });
 	return `${typeName}<${length}>`;
 }
 function renderPrecision(typeName, typeParams) {
 	const precision = typeParams["precision"];
 	if (precision === void 0) return typeName;
-	if (typeof precision !== "number" || !Number.isFinite(precision) || !Number.isInteger(precision)) throw new Error(`renderOutputType: expected integer "precision" in typeParams for ${typeName}, got ${String(precision)}`);
+	if (typeof precision !== "number" || !Number.isFinite(precision) || !Number.isInteger(precision)) throw postgresError("RUNTIME.TYPE_PARAMS_INVALID", `renderOutputType: expected integer "precision" in typeParams for ${typeName}, got ${String(precision)}`, { meta: {
+		nativeType: typeName,
+		param: "precision",
+		received: String(precision)
+	} });
 	return `${typeName}<${precision}>`;
 }
 const pgNumericDecode = (wire) => {
@@ -26,28 +35,54 @@ const pgNumericDecode = (wire) => {
 const pgNumericRenderOutputType = (typeParams) => {
 	const precision = typeParams.precision;
 	if (precision === void 0) return void 0;
-	if (typeof precision !== "number" || !Number.isFinite(precision) || !Number.isInteger(precision)) throw new Error(`renderOutputType: expected integer "precision" in typeParams for Numeric, got ${String(precision)}`);
+	if (typeof precision !== "number" || !Number.isFinite(precision) || !Number.isInteger(precision)) throw postgresError("RUNTIME.TYPE_PARAMS_INVALID", `renderOutputType: expected integer "precision" in typeParams for Numeric, got ${String(precision)}`, { meta: {
+		nativeType: "Numeric",
+		param: "precision",
+		received: String(precision)
+	} });
 	const scale = typeParams.scale;
 	if (scale === void 0) return `Numeric<${precision}>`;
-	if (typeof scale !== "number" || !Number.isFinite(scale) || !Number.isInteger(scale)) throw new Error(`renderOutputType: expected integer "scale" in typeParams for Numeric, got ${String(scale)}`);
+	if (typeof scale !== "number" || !Number.isFinite(scale) || !Number.isInteger(scale)) throw postgresError("RUNTIME.TYPE_PARAMS_INVALID", `renderOutputType: expected integer "scale" in typeParams for Numeric, got ${String(scale)}`, { meta: {
+		nativeType: "Numeric",
+		param: "scale",
+		received: String(scale)
+	} });
 	return `Numeric<${precision}, ${scale}>`;
 };
 const ISO_8601_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?$/;
 const ISO_8601_TIMESTAMPTZ = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/;
 const pgTimestampEncodeJson = (value) => value.toISOString().slice(0, -1);
 const pgTimestampDecodeJson = (json) => {
-	if (typeof json !== "string") throw new Error(`Expected ISO date string for pg/timestamp@1, got ${typeof json}`);
-	if (!ISO_8601_TIMESTAMP.test(json)) throw new Error(`Invalid ISO date string for pg/timestamp@1: ${json}`);
+	if (typeof json !== "string") throw postgresError("RUNTIME.DECODE_FAILED", `Expected ISO date string for pg/timestamp@1, got ${typeof json}`, { meta: {
+		codecId: "pg/timestamp@1",
+		received: typeof json
+	} });
+	if (!ISO_8601_TIMESTAMP.test(json)) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid ISO date string for pg/timestamp@1: ${json}`, { meta: {
+		codecId: "pg/timestamp@1",
+		received: json
+	} });
 	const date = /* @__PURE__ */ new Date(`${json}Z`);
-	if (Number.isNaN(date.getTime())) throw new Error(`Invalid ISO date string for pg/timestamp@1: ${json}`);
+	if (Number.isNaN(date.getTime())) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid ISO date string for pg/timestamp@1: ${json}`, { meta: {
+		codecId: "pg/timestamp@1",
+		received: json
+	} });
 	return date;
 };
 const pgTimestamptzEncodeJson = (value) => value.toISOString().replace(/Z$/, "+00:00");
 const pgTimestamptzDecodeJson = (json) => {
-	if (typeof json !== "string") throw new Error(`Expected ISO date string for pg/timestamptz@1, got ${typeof json}`);
-	if (!ISO_8601_TIMESTAMPTZ.test(json)) throw new Error(`Invalid ISO date string for pg/timestamptz@1: ${json}`);
+	if (typeof json !== "string") throw postgresError("RUNTIME.DECODE_FAILED", `Expected ISO date string for pg/timestamptz@1, got ${typeof json}`, { meta: {
+		codecId: "pg/timestamptz@1",
+		received: typeof json
+	} });
+	if (!ISO_8601_TIMESTAMPTZ.test(json)) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid ISO date string for pg/timestamptz@1: ${json}`, { meta: {
+		codecId: "pg/timestamptz@1",
+		received: json
+	} });
 	const date = new Date(json);
-	if (Number.isNaN(date.getTime())) throw new Error(`Invalid ISO date string for pg/timestamptz@1: ${json}`);
+	if (Number.isNaN(date.getTime())) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid ISO date string for pg/timestamptz@1: ${json}`, { meta: {
+		codecId: "pg/timestamptz@1",
+		received: json
+	} });
 	return date;
 };
 const ISO_8601_DATE = /^(\d{4})-(\d{2})-(\d{2})$/;
@@ -77,15 +112,24 @@ const pgDateEncode = (value) => formatDateOnly(value.getUTCFullYear(), value.get
 const pgDateDecode = (wire) => new Date(Date.UTC(wire.getFullYear(), wire.getMonth(), wire.getDate()));
 const pgDateEncodeJson = (value) => pgDateEncode(value);
 const pgDateDecodeJson = (json) => {
-	if (typeof json !== "string") throw new Error(`Expected date string for pg/date@1, got ${typeof json}`);
+	if (typeof json !== "string") throw postgresError("RUNTIME.DECODE_FAILED", `Expected date string for pg/date@1, got ${typeof json}`, { meta: {
+		codecId: "pg/date@1",
+		received: typeof json
+	} });
 	const match = ISO_8601_DATE.exec(json);
-	if (!match) throw new Error(`Invalid date string for pg/date@1: ${json}`);
+	if (!match) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid date string for pg/date@1: ${json}`, { meta: {
+		codecId: "pg/date@1",
+		received: json
+	} });
 	const [, yearText, monthText, dayText] = match;
 	const year = Number(yearText);
 	const month = Number(monthText) - 1;
 	const day = Number(dayText);
 	const date = new Date(Date.UTC(year, month, day));
-	if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month || date.getUTCDate() !== day) throw new Error(`Invalid date string for pg/date@1: ${json}`);
+	if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month || date.getUTCDate() !== day) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid date string for pg/date@1: ${json}`, { meta: {
+		codecId: "pg/date@1",
+		received: json
+	} });
 	return date;
 };
 const pgIntervalDecode = (wire) => {
@@ -94,13 +138,19 @@ const pgIntervalDecode = (wire) => {
 };
 const pgByteaEncodeJson = (value) => `\\x${Buffer.from(value).toString("hex")}`;
 const pgByteaDecodeJson = (value) => {
-	if (typeof value !== "string" || !value.startsWith("\\x")) throw new Error(`Expected Postgres bytea hex text to start with "\\x"`);
+	if (typeof value !== "string" || !value.startsWith("\\x")) throw postgresError("RUNTIME.DECODE_FAILED", `Expected Postgres bytea hex text to start with "\\x"`, { meta: { codecId: "pg/bytea@1" } });
 	const hex = value.slice(2);
-	if (hex.length % 2 !== 0) throw new Error(`Invalid Postgres bytea hex text length: ${hex.length}`);
+	if (hex.length % 2 !== 0) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid Postgres bytea hex text length: ${hex.length}`, { meta: {
+		codecId: "pg/bytea@1",
+		received: hex.length
+	} });
 	const bytes = new Uint8Array(hex.length / 2);
 	for (let offset = 0; offset < hex.length; offset += 2) {
 		const pair = hex.slice(offset, offset + 2);
-		if (!/^[0-9a-fA-F]{2}$/.test(pair)) throw new Error(`Invalid Postgres bytea hex pair "${pair}" at offset ${offset}`);
+		if (!/^[0-9a-fA-F]{2}$/.test(pair)) throw postgresError("RUNTIME.DECODE_FAILED", `Invalid Postgres bytea hex pair "${pair}" at offset ${offset}`, { meta: {
+			codecId: "pg/bytea@1",
+			received: pair
+		} });
 		bytes[offset / 2] = Number.parseInt(pair, 16);
 	}
 	return bytes;
@@ -200,10 +250,14 @@ var PgEnumCodec = class extends CodecImpl {
 		return blindCast(json);
 	}
 };
-const pgEnumParamsSchema = type({ typeName: "string" });
-function isJsonObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
+/**
+* Narrows codec `typeParams` to {@link PgEnumParams} — the shape that binds a
+* column to a named database type (a native enum's `CREATE TYPE` name).
+*/
+function isPgEnumParams(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && "typeName" in value && typeof value.typeName === "string";
 }
+const pgEnumParamsSchema = type({ typeName: "string" });
 var PgEnumDescriptor = class extends CodecDescriptorImpl {
 	codecId = PG_ENUM_CODEC_ID;
 	traits = [
@@ -218,9 +272,7 @@ var PgEnumDescriptor = class extends CodecDescriptorImpl {
 		return renderTsLiteral(value);
 	}
 	metaFor(typeParams) {
-		if (!isJsonObject(typeParams)) return this.meta;
-		const typeName = typeParams["typeName"];
-		return typeof typeName === "string" ? { db: { sql: { postgres: { nativeType: typeName } } } } : this.meta;
+		return isPgEnumParams(typeParams) ? { db: { sql: { postgres: { nativeType: typeParams.typeName } } } } : this.meta;
 	}
 	factory(_params) {
 		return () => new PgEnumCodec(this);
@@ -523,11 +575,17 @@ var PgNumericCodec = class extends CodecImpl {
 	}
 	encodeJson(value) {
 		const number = Number(value);
-		if (!Number.isFinite(number)) throw new TypeError("pg/numeric@1 database JSON value must be a finite number");
+		if (!Number.isFinite(number)) throw postgresError("RUNTIME.ENCODE_FAILED", "pg/numeric@1 database JSON value must be a finite number", { meta: {
+			codecId: "pg/numeric@1",
+			received: value
+		} });
 		return number;
 	}
 	decodeJson(json) {
-		if (typeof json !== "number") throw new TypeError("pg/numeric@1 database JSON value must be a number");
+		if (typeof json !== "number") throw postgresError("RUNTIME.DECODE_FAILED", "pg/numeric@1 database JSON value must be a number", { meta: {
+			codecId: "pg/numeric@1",
+			received: typeof json
+		} });
 		return pgNumericDecode(json);
 	}
 };
@@ -1022,6 +1080,6 @@ const codecDescriptors = [
 	pgTextArrayDescriptor
 ];
 //#endregion
-export { pgTimetzColumn as C, postgresQualifyColumnType as D, pgVarcharColumn as E, pgTimestamptzColumn as S, pgVarbitColumn as T, pgJsonbColumn as _, pgDateColumn as a, pgTimeColumn as b, pgFloat8Column as c, pgInt2Column as d, pgInt4Column as f, pgJsonColumn as g, pgIntervalColumn as h, pgCharColumn as i, pgFloatColumn as l, pgIntColumn as m, pgBitColumn as n, pgEnumDescriptor as o, pgInt8Column as p, pgBoolColumn as r, pgFloat4Column as s, codecDescriptors as t, pgInetColumn as u, pgNumericColumn as v, pgUuidColumn as w, pgTimestampColumn as x, pgTextColumn as y };
+export { pgTimestamptzColumn as C, pgVarcharColumn as D, pgVarbitColumn as E, postgresQualifyColumnType as O, pgTimestampColumn as S, pgUuidColumn as T, pgJsonColumn as _, pgCharColumn as a, pgTextColumn as b, pgFloat4Column as c, pgInetColumn as d, pgInt2Column as f, pgIntervalColumn as g, pgIntColumn as h, pgBoolColumn as i, pgFloat8Column as l, pgInt8Column as m, isPgEnumParams as n, pgDateColumn as o, pgInt4Column as p, pgBitColumn as r, pgEnumDescriptor as s, codecDescriptors as t, pgFloatColumn as u, pgJsonbColumn as v, pgTimetzColumn as w, pgTimeColumn as x, pgNumericColumn as y };
 
-//# sourceMappingURL=codecs-TCsGgW-Y.mjs.map
+//# sourceMappingURL=codecs-Deand7sy.mjs.map