@prisma/orm-target-postgres 0.16.0-dev.36

package/dist/postgres-schema-KSzLDONj-CsXGoY8b.mjs

@@ -0,0 +1,421 @@
+import { b as PG_TEXT_CODEC_ID } from "./codec-ids-tX7Svtz--BuOfRaVU.mjs";
+import { t as PostgresNativeEnum } from "./postgres-native-enum-CdP3b_-R-Cgz9KEKx.mjs";
+import { t as escapeLiteral } from "./sql-utils-BnBlQxyh-DaX9Nb7Z.mjs";
+import { TableSource } from "@prisma/orm-family-sql/relational-core/ast";
+import { blindCast } from "@prisma/orm-framework/utils/casts";
+import { UNBOUND_NAMESPACE_ID, freezeNode, hydrateNamespaceEntities } from "@prisma/orm-framework/components/ir";
+import { SqlNamespaceBase, SqlNode } from "@prisma/orm-family-sql/contract/types";
+import { type } from "arktype";
+import { ifDefined } from "@prisma/orm-framework/utils/defined";
+import { nameOf, parseNaming } from "@prisma/orm-family-sql/schema-ir/naming";
+import { invariant } from "@prisma/orm-framework/utils/assertions";
+import { composeSqlEntityKinds } from "@prisma/orm-family-sql/contract/entity-kinds";
+import { cfExpr } from "@prisma/orm-family-sql/relational-core/contract-free";
+//#region ../../../3-targets/3-targets/postgres/dist/postgres-schema-KSzLDONj.mjs
+/**
+* Postgres contract-IR marker for `@@rls` on a model: the table named here is
+* RLS-controlled (`ENABLE ROW LEVEL SECURITY` is driven by this marker, never
+* by the policy set).
+*
+* This is an authored, serialized Contract-IR entity — it is registered as an
+* entity kind, extends `SqlNode`, and is stored in `contract.json` under
+* `entries.rls[tableName]`. Target-only concept — no SQL-family abstract.
+* Frozen at construction via `freezeNode(this)`. The `kind: 'rls'`
+* discriminant is enumerable so it survives JSON serialization; the literal
+* matches the entries key (one-string rule).
+*/
+var PostgresRlsEnablement = class extends SqlNode {
+	kind = "rls";
+	tableName;
+	namespaceId;
+	constructor(input) {
+		super();
+		this.tableName = input.tableName;
+		this.namespaceId = input.namespaceId;
+		freezeNode(this);
+	}
+};
+/**
+* Postgres contract-IR class for a row-level security policy (`CREATE POLICY … ON …`).
+*
+* This is an authored, serialized Contract-IR entity — it is registered as an entity
+* kind, extends `SqlNode`, and is stored in `contract.json`. It is NOT a DiffableNode;
+* the schema-diff tree uses `PostgresPolicySchemaNode` for that role.
+*
+* Target-only concept — no SQL-family abstract. Extends `SqlNode` directly.
+* Frozen at construction via `freezeNode(this)`. The `kind: 'policy'`
+* discriminant is enumerable (overrides SqlNode's non-enumerable `'sql'`) so it
+* survives JSON serialization and enables dispatch. The literal matches the
+* entries key (one-string rule: node.kind === entries key === entity kind).
+*/
+var PostgresRlsPolicy = class extends SqlNode {
+	kind = "policy";
+	name;
+	tableName;
+	namespaceId;
+	operation;
+	roles;
+	permissive;
+	constructor(input) {
+		super();
+		this.name = nameOf(input.naming);
+		if (input.naming.kind === "wire") this.prefix = input.naming.prefix;
+		this.tableName = input.tableName;
+		this.namespaceId = input.namespaceId;
+		this.operation = input.operation;
+		this.roles = Object.freeze([...input.roles]);
+		if (input.using !== void 0) this.using = input.using;
+		if (input.withCheck !== void 0) this.withCheck = input.withCheck;
+		this.permissive = input.permissive;
+		freezeNode(this);
+	}
+};
+/**
+* Postgres contract-IR class for a database role (`CREATE ROLE …`).
+*
+* This is an authored, serialized Contract-IR entity — it is registered as an entity
+* kind, extends `SqlNode`, and is stored in `contract.json`. It is NOT a DiffableNode;
+* the schema-diff tree uses `PostgresRoleSchemaNode` for that role.
+*
+* Roles are cluster-scoped, so their namespace coordinate is always
+* `UNBOUND_NAMESPACE_ID`. Target-only concept — no SQL-family abstract.
+* Extends `SqlNode` directly, frozen at construction via `freezeNode(this)`.
+* The `kind: 'role'` discriminant is enumerable so it survives JSON.
+* Matches the entries key (one-string rule).
+*
+* `control` always carries a value (never omitted): it defaults to
+* {@link ROLE_DEFAULT_CONTROL_POLICY} in the constructor, so both a
+* freshly-authored role and one hydrated from an older `contract.json`
+* lacking the field resolve the same way — the control-policy resolver
+* reads it directly off the entity instead of special-casing role issues.
+*/
+var PostgresRole = class extends SqlNode {
+	kind = "role";
+	name;
+	namespaceId;
+	control;
+	constructor(input) {
+		super();
+		this.name = input.name;
+		this.namespaceId = input.namespaceId;
+		this.control = input.control ?? "external";
+		freezeNode(this);
+	}
+};
+const PostgresRoleSchema = type({
+	kind: "'role'",
+	name: "string",
+	namespaceId: "string",
+	"control?": "'external'"
+});
+const PostgresRlsPolicySchema = type({
+	kind: "'policy'",
+	name: "string",
+	"prefix?": "string",
+	tableName: "string",
+	namespaceId: "string",
+	operation: "'select' | 'insert' | 'update' | 'delete' | 'all'",
+	roles: type.string.array().readonly(),
+	"using?": "string",
+	"withCheck?": "string",
+	permissive: "boolean"
+});
+const PostgresRlsEnablementSchema = type({
+	kind: "'rls'",
+	tableName: "string",
+	namespaceId: "string"
+});
+const PostgresNativeEnumSchema = type({
+	kind: "'postgres-enum'",
+	typeName: "string",
+	members: type.string.array().readonly(),
+	"control?": "'managed' | 'tolerated' | 'external' | 'observed'"
+});
+var PostgresTableSource = class extends TableSource {
+	schema;
+	constructor(options) {
+		super(options.name, options.alias);
+		this.schema = options.schema;
+		this.freeze();
+	}
+	rewrite(rewriter) {
+		return rewriter.tableSource ? rewriter.tableSource(this) : this;
+	}
+};
+/**
+* Hydrates one stored policy into constructor input. The name and the prefix
+* are separate fields in the file and can disagree there, so the pair is
+* checked on the way in.
+*/
+function policyInputFromSerialized(flat) {
+	return {
+		naming: parseNaming(flat.name, flat.prefix),
+		tableName: flat.tableName,
+		namespaceId: flat.namespaceId,
+		operation: flat.operation,
+		roles: flat.roles,
+		using: flat.using,
+		withCheck: flat.withCheck,
+		permissive: flat.permissive
+	};
+}
+const policyEntityKind = {
+	kind: "policy",
+	schema: PostgresRlsPolicySchema,
+	construct: (input) => new PostgresRlsPolicy(policyInputFromSerialized(input))
+};
+const roleEntityKind = {
+	kind: "role",
+	schema: PostgresRoleSchema,
+	construct: (input) => new PostgresRole(input)
+};
+const rlsEnablementEntityKind = {
+	kind: "rls",
+	schema: PostgresRlsEnablementSchema,
+	construct: (input) => new PostgresRlsEnablement(input)
+};
+const nativeEnumEntityKind = {
+	kind: "native_enum",
+	schema: PostgresNativeEnumSchema,
+	construct: (input) => new PostgresNativeEnum(input)
+};
+/**
+* Postgres target `Namespace` concretion — a Postgres schema (`CREATE
+* SCHEMA …`). Each Postgres `SqlStorage` carries a
+* `namespaces: Record<NamespaceId, PostgresSchema>` map populated by
+* the Postgres PSL interpreter from `namespace { … }` AST buckets.
+*
+* `entries` holds entity-kind maps (`table`, `valueSet`). Qualifier
+* emission is the rendering seam: DDL / SQL emission asks the namespace
+* for its qualifier (`"<schema>"`) or for a qualified table name
+* (`"<schema>"."<table>"`) and consumes the result polymorphically.
+* The unbound singleton below overrides these methods to elide the
+* prefix entirely — call sites stay polymorphic and never branch on
+* `id === UNBOUND_NAMESPACE_ID`.
+*/
+var PostgresSchema = class extends SqlNamespaceBase {
+	/**
+	* Stable singleton reference for the late-bound slot. Materialised
+	* lazily below the singleton subclass declaration so the static
+	* initialiser sees the subclass before assigning. Consumers always
+	* reach for `PostgresSchema.unbound` (or `PostgresUnboundSchema.instance`
+	* — same identity).
+	*/
+	static unbound;
+	id;
+	entries;
+	constructor(input) {
+		super();
+		this.id = input.id;
+		const dispatched = hydrateNamespaceEntities(input.entries, composeSqlEntityKinds([
+			policyEntityKind,
+			roleEntityKind,
+			rlsEnablementEntityKind,
+			nativeEnumEntityKind
+		]), "carry");
+		const nativeEnumSlot = dispatched["native_enum"];
+		if (nativeEnumSlot !== void 0) {
+			const rekeyed = {};
+			for (const [handle, entity] of Object.entries(nativeEnumSlot)) {
+				const physicalName = PostgresNativeEnum.is(entity) ? entity.typeName : handle;
+				invariant(!Object.hasOwn(rekeyed, physicalName), `PostgresSchema "${input.id}": two native_enum entities resolve to the same physical type name "${physicalName}". Give them distinct @@map type names.`);
+				rekeyed[physicalName] = entity;
+			}
+			dispatched["native_enum"] = Object.freeze(rekeyed);
+		}
+		const valueSetRaw = dispatched["valueSet"];
+		const entriesInput = { ...valueSetRaw !== void 0 && Object.keys(valueSetRaw).length === 0 ? {
+			...dispatched,
+			valueSet: void 0
+		} : dispatched };
+		this.entries = Object.freeze(blindCast(entriesInput));
+		Object.defineProperty(this, "kind", {
+			value: "schema",
+			writable: false,
+			enumerable: false,
+			configurable: true
+		});
+		freezeNode(this);
+	}
+	get table() {
+		return this.entries.table ?? Object.freeze({});
+	}
+	get valueSet() {
+		return this.entries.valueSet;
+	}
+	get policy() {
+		return this.entries.policy ?? Object.freeze({});
+	}
+	get role() {
+		return this.entries.role ?? Object.freeze({});
+	}
+	get rls() {
+		return this.entries.rls ?? Object.freeze({});
+	}
+	/**
+	* The bare schema qualifier as it would appear in a rendered SQL
+	* fragment (already quoted). The unbound-schema singleton overrides
+	* this to return `''`.
+	*/
+	qualifier() {
+		return `"${this.id}"`;
+	}
+	/**
+	* Qualify a table name with the schema prefix
+	* (`"<schema>"."<table>"`). The unbound-schema singleton overrides
+	* this to emit just `"<table>"` so the resolved DDL is unqualified
+	* and `search_path` decides where the object lands at runtime.
+	*/
+	qualifyTable(tableName) {
+		return `"${this.id}"."${tableName}"`;
+	}
+	/**
+	* Render a SQL string-literal containing the qualified-name form
+	* suitable for `to_regclass(...)` arguments (e.g. `'"public"."user"'`).
+	* The unbound singleton overrides this to elide the schema prefix
+	* (`'"user"'`) so `search_path` resolves the object at runtime.
+	*/
+	regclassLiteral(name) {
+		return `'${escapeLiteral(this.qualifyTable(name))}'`;
+	}
+	/**
+	* Render a SQL expression that evaluates to this namespace's schema
+	* name at runtime, ready to drop into a `WHERE table_schema = …` /
+	* `WHERE n.nspname = …` clause. Named schemas emit a quoted SQL
+	* literal (`'public'`); the unbound singleton overrides this to emit
+	* `current_schema()` so catalog queries match whichever schema the
+	* connection's `search_path` resolved at runtime.
+	*/
+	schemaSqlExpression() {
+		return `'${escapeLiteral(this.id)}'`;
+	}
+	/**
+	* Typed-AST counterpart of {@link schemaSqlExpression}: the expression a
+	* builder-built catalog check compares `n.nspname` / `table_schema`
+	* against. Named schemas bind the schema name as a text parameter; the
+	* unbound singleton overrides this to the opaque `current_schema()`
+	* expression so the live connection's `search_path` decides at runtime.
+	*/
+	schemaFilterExpression() {
+		return cfExpr.param(this.id, PG_TEXT_CODEC_ID);
+	}
+	/**
+	* Typed-AST counterpart of {@link qualifyTable}: the FROM source a
+	* builder-built check uses to address a user table in this namespace.
+	* Named schemas qualify (`"schema"."table"`); the unbound singleton
+	* overrides this to leave the table unqualified so `search_path`
+	* resolves it at runtime.
+	*/
+	tableSource(tableName, alias) {
+		return new PostgresTableSource({
+			name: tableName,
+			schema: this.id,
+			...ifDefined("alias", alias)
+		});
+	}
+	/**
+	* The bare schema name a DDL planner should target when emitting
+	* statements that need to identify this namespace in the live
+	* database (e.g. `CREATE TABLE "<ddlSchemaName>"."<table>" …`,
+	* catalog filters, planner conflict lookups). Named schemas resolve
+	* to their own id. The `PostgresUnboundSchema` singleton inherits
+	* this and returns `UNBOUND_NAMESPACE_ID` — callers that dispatch
+	* through `qualifyTableName` route through the polymorphic
+	* `PostgresUnboundSchema` overrides and produce unqualified
+	* (search-path-resolved) output automatically.
+	*/
+	ddlSchemaName(_storage) {
+		return this.id;
+	}
+};
+/**
+* Singleton subclass for the reserved sentinel namespace id
+* (`UNBOUND_NAMESPACE_ID`) — the late-bound Postgres slot whose binding
+* the connection's `search_path` resolves at runtime. Overrides
+* qualifier emission to elide the schema prefix; call sites that consume
+* `qualifier()` / `qualifyTable()` get unqualified output without
+* branching on the namespace id.
+*
+* This is the target-side materialization of "the framework provides
+* affordances; targets implement specifics": the framework names the
+* sentinel; Postgres decides what late-bound means here (the table
+* name, naked — the schema is supplied by the live connection's
+* `search_path`).
+*
+* `ddlSchemaName` is inherited from `PostgresSchema` and returns
+* `UNBOUND_NAMESPACE_ID`. Downstream helpers such as `qualifyTableName`
+* route through the polymorphic factory and produce unqualified output
+* automatically.
+*/
+var PostgresUnboundSchema = class PostgresUnboundSchema extends PostgresSchema {
+	static instance = new PostgresUnboundSchema();
+	constructor(input) {
+		super(input ?? {
+			id: UNBOUND_NAMESPACE_ID,
+			entries: { table: {} }
+		});
+	}
+	qualifier() {
+		return "";
+	}
+	qualifyTable(tableName) {
+		return `"${tableName}"`;
+	}
+	schemaSqlExpression() {
+		return "current_schema()";
+	}
+	schemaFilterExpression() {
+		return cfExpr.raw("current_schema()", {
+			codecId: PG_TEXT_CODEC_ID,
+			nullable: false
+		});
+	}
+	tableSource(tableName, alias) {
+		return new PostgresTableSource({
+			name: tableName,
+			...ifDefined("alias", alias)
+		});
+	}
+};
+PostgresSchema.unbound = PostgresUnboundSchema.instance;
+/**
+* Narrow an arbitrary namespace (or `undefined`) to `PostgresSchema`
+* so callers can dispatch to the polymorphic emission methods without
+* branching at the call site. Uses the structural `kind` discriminator
+* (`'schema'`) rather than `instanceof` so the check survives realm /
+* bundle / hot-reload boundaries — matching the rest of the IR's
+* narrowing convention. `PostgresUnboundSchema` passes through because
+* it inherits the same `kind: 'schema'` from `PostgresSchema`.
+*/
+function isPostgresSchema(ns) {
+	return ns?.kind === "schema";
+}
+/**
+* Target-supplied `Namespace` factory the Postgres target plumbs
+* through `defineContract({ createNamespace })` and the SQL PSL
+* interpreter. Returns the unbound singleton for the framework
+* sentinel and a fresh `PostgresSchema` for any other coordinate.
+*
+* The factory has no per-call state — every named id deterministically
+* maps to a distinct schema instance — so callers can pass it through
+* by reference and trust the resulting `SqlStorage.namespaces` map to
+* be value-stable for a given input set. Native-enum column type names are
+* schema-qualified earlier, at column construction, via the target's
+* `authoring.qualifyColumnType` hook (`postgresQualifyColumnType`), so this
+* factory just materialises the namespace from already-qualified entries.
+*/
+function postgresCreateNamespace(input) {
+	const schemaInput = {
+		id: input.id,
+		entries: {
+			...input.entries,
+			table: input.entries["table"] ?? {}
+		}
+	};
+	if (input.id === UNBOUND_NAMESPACE_ID) return new PostgresUnboundSchema(schemaInput);
+	return new PostgresSchema(schemaInput);
+}
+//#endregion
+export { roleEntityKind as _, PostgresRlsPolicySchema as a, PostgresSchema as c, isPostgresSchema as d, nativeEnumEntityKind as f, rlsEnablementEntityKind as g, postgresCreateNamespace as h, PostgresRlsPolicy as i, PostgresTableSource as l, policyInputFromSerialized as m, PostgresRlsEnablement as n, PostgresRole as o, policyEntityKind as p, PostgresRlsEnablementSchema as r, PostgresRoleSchema as s, PostgresNativeEnumSchema as t, PostgresUnboundSchema as u };
+
+//# sourceMappingURL=postgres-schema-KSzLDONj-CsXGoY8b.mjs.map

package/dist/postgres-schema-KSzLDONj-CsXGoY8b.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-schema-KSzLDONj-CsXGoY8b.mjs","names":[],"sources":["../../../../3-targets/3-targets/postgres/dist/postgres-schema-KSzLDONj.mjs"],"sourcesContent":["import { b as PG_TEXT_CODEC_ID } from \"./codec-ids-tX7Svtz-.mjs\";\nimport { t as PostgresNativeEnum } from \"./postgres-native-enum-CdP3b_-R.mjs\";\nimport { t as escapeLiteral } from \"./sql-utils-BnBlQxyh.mjs\";\nimport { TableSource } from \"@internal/sql-relational-core/ast\";\nimport { blindCast } from \"@internal/utils/casts\";\nimport { UNBOUND_NAMESPACE_ID, freezeNode, hydrateNamespaceEntities } from \"@internal/framework-components/ir\";\nimport { type } from \"arktype\";\nimport { SqlNamespaceBase, SqlNode } from \"@internal/sql-contract/types\";\nimport { ifDefined } from \"@internal/utils/defined\";\nimport { nameOf, parseNaming } from \"@internal/sql-schema-ir/naming\";\nimport { invariant } from \"@internal/utils/assertions\";\nimport { composeSqlEntityKinds } from \"@internal/sql-contract/entity-kinds\";\nimport { cfExpr } from \"@internal/sql-relational-core/contract-free\";\n//#region src/core/postgres-rls-enablement.ts\n/**\n* Postgres contract-IR marker for `@@rls` on a model: the table named here is\n* RLS-controlled (`ENABLE ROW LEVEL SECURITY` is driven by this marker, never\n* by the policy set).\n*\n* This is an authored, serialized Contract-IR entity — it is registered as an\n* entity kind, extends `SqlNode`, and is stored in `contract.json` under\n* `entries.rls[tableName]`. Target-only concept — no SQL-family abstract.\n* Frozen at construction via `freezeNode(this)`. The `kind: 'rls'`\n* discriminant is enumerable so it survives JSON serialization; the literal\n* matches the entries key (one-string rule).\n*/\nvar PostgresRlsEnablement = class extends SqlNode {\n\tkind = \"rls\";\n\ttableName;\n\tnamespaceId;\n\tconstructor(input) {\n\t\tsuper();\n\t\tthis.tableName = input.tableName;\n\t\tthis.namespaceId = input.namespaceId;\n\t\tfreezeNode(this);\n\t}\n};\n//#endregion\n//#region src/core/postgres-rls-policy.ts\n/**\n* Postgres contract-IR class for a row-level security policy (`CREATE POLICY … ON …`).\n*\n* This is an authored, serialized Contract-IR entity — it is registered as an entity\n* kind, extends `SqlNode`, and is stored in `contract.json`. It is NOT a DiffableNode;\n* the schema-diff tree uses `PostgresPolicySchemaNode` for that role.\n*\n* Target-only concept — no SQL-family abstract. Extends `SqlNode` directly.\n* Frozen at construction via `freezeNode(this)`. The `kind: 'policy'`\n* discriminant is enumerable (overrides SqlNode's non-enumerable `'sql'`) so it\n* survives JSON serialization and enables dispatch. The literal matches the\n* entries key (one-string rule: node.kind === entries key === entity kind).\n*/\nvar PostgresRlsPolicy = class extends SqlNode {\n\tkind = \"policy\";\n\tname;\n\ttableName;\n\tnamespaceId;\n\toperation;\n\troles;\n\tpermissive;\n\tconstructor(input) {\n\t\tsuper();\n\t\tthis.name = nameOf(input.naming);\n\t\tif (input.naming.kind === \"wire\") this.prefix = input.naming.prefix;\n\t\tthis.tableName = input.tableName;\n\t\tthis.namespaceId = input.namespaceId;\n\t\tthis.operation = input.operation;\n\t\tthis.roles = Object.freeze([...input.roles]);\n\t\tif (input.using !== void 0) this.using = input.using;\n\t\tif (input.withCheck !== void 0) this.withCheck = input.withCheck;\n\t\tthis.permissive = input.permissive;\n\t\tfreezeNode(this);\n\t}\n};\n//#endregion\n//#region src/core/postgres-role.ts\n/**\n* Roles are referenced by the contract but never owned — the framework\n* issues no `CREATE`/`DROP ROLE`, so a role's effective governance is always\n* `external`: a missing declared role fails verify, an extra live role is\n* tolerated, and the planner emits zero role DDL. `external` is the only\n* value a role's control can ever carry.\n*/\nconst ROLE_DEFAULT_CONTROL_POLICY = \"external\";\n/**\n* Postgres contract-IR class for a database role (`CREATE ROLE …`).\n*\n* This is an authored, serialized Contract-IR entity — it is registered as an entity\n* kind, extends `SqlNode`, and is stored in `contract.json`. It is NOT a DiffableNode;\n* the schema-diff tree uses `PostgresRoleSchemaNode` for that role.\n*\n* Roles are cluster-scoped, so their namespace coordinate is always\n* `UNBOUND_NAMESPACE_ID`. Target-only concept — no SQL-family abstract.\n* Extends `SqlNode` directly, frozen at construction via `freezeNode(this)`.\n* The `kind: 'role'` discriminant is enumerable so it survives JSON.\n* Matches the entries key (one-string rule).\n*\n* `control` always carries a value (never omitted): it defaults to\n* {@link ROLE_DEFAULT_CONTROL_POLICY} in the constructor, so both a\n* freshly-authored role and one hydrated from an older `contract.json`\n* lacking the field resolve the same way — the control-policy resolver\n* reads it directly off the entity instead of special-casing role issues.\n*/\nvar PostgresRole = class extends SqlNode {\n\tkind = \"role\";\n\tname;\n\tnamespaceId;\n\tcontrol;\n\tconstructor(input) {\n\t\tsuper();\n\t\tthis.name = input.name;\n\t\tthis.namespaceId = input.namespaceId;\n\t\tthis.control = input.control ?? \"external\";\n\t\tfreezeNode(this);\n\t}\n};\n//#endregion\n//#region src/core/postgres-validators.ts\nconst PostgresRoleSchema = type({\n\tkind: \"'role'\",\n\tname: \"string\",\n\tnamespaceId: \"string\",\n\t\"control?\": \"'external'\"\n});\nconst PostgresRlsPolicySchema = type({\n\tkind: \"'policy'\",\n\tname: \"string\",\n\t\"prefix?\": \"string\",\n\ttableName: \"string\",\n\tnamespaceId: \"string\",\n\toperation: \"'select' | 'insert' | 'update' | 'delete' | 'all'\",\n\troles: type.string.array().readonly(),\n\t\"using?\": \"string\",\n\t\"withCheck?\": \"string\",\n\tpermissive: \"boolean\"\n});\nconst PostgresRlsEnablementSchema = type({\n\tkind: \"'rls'\",\n\ttableName: \"string\",\n\tnamespaceId: \"string\"\n});\nconst PostgresNativeEnumSchema = type({\n\tkind: \"'postgres-enum'\",\n\ttypeName: \"string\",\n\tmembers: type.string.array().readonly(),\n\t\"control?\": \"'managed' | 'tolerated' | 'external' | 'observed'\"\n});\n//#endregion\n//#region src/core/ast/table-source.ts\nvar PostgresTableSource = class extends TableSource {\n\tschema;\n\tconstructor(options) {\n\t\tsuper(options.name, options.alias);\n\t\tthis.schema = options.schema;\n\t\tthis.freeze();\n\t}\n\trewrite(rewriter) {\n\t\treturn rewriter.tableSource ? rewriter.tableSource(this) : this;\n\t}\n};\n//#endregion\n//#region src/core/serialized-rls-policy.ts\n/**\n* Hydrates one stored policy into constructor input. The name and the prefix\n* are separate fields in the file and can disagree there, so the pair is\n* checked on the way in.\n*/\nfunction policyInputFromSerialized(flat) {\n\treturn {\n\t\tnaming: parseNaming(flat.name, flat.prefix),\n\t\ttableName: flat.tableName,\n\t\tnamespaceId: flat.namespaceId,\n\t\toperation: flat.operation,\n\t\troles: flat.roles,\n\t\tusing: flat.using,\n\t\twithCheck: flat.withCheck,\n\t\tpermissive: flat.permissive\n\t};\n}\n//#endregion\n//#region src/core/entity-kinds.ts\nconst policyEntityKind = {\n\tkind: \"policy\",\n\tschema: PostgresRlsPolicySchema,\n\tconstruct: (input) => new PostgresRlsPolicy(policyInputFromSerialized(input))\n};\nconst roleEntityKind = {\n\tkind: \"role\",\n\tschema: PostgresRoleSchema,\n\tconstruct: (input) => new PostgresRole(input)\n};\nconst rlsEnablementEntityKind = {\n\tkind: \"rls\",\n\tschema: PostgresRlsEnablementSchema,\n\tconstruct: (input) => new PostgresRlsEnablement(input)\n};\nconst nativeEnumEntityKind = {\n\tkind: \"native_enum\",\n\tschema: PostgresNativeEnumSchema,\n\tconstruct: (input) => new PostgresNativeEnum(input)\n};\n//#endregion\n//#region src/core/postgres-schema.ts\n/**\n* Postgres target `Namespace` concretion — a Postgres schema (`CREATE\n* SCHEMA …`). Each Postgres `SqlStorage` carries a\n* `namespaces: Record<NamespaceId, PostgresSchema>` map populated by\n* the Postgres PSL interpreter from `namespace { … }` AST buckets.\n*\n* `entries` holds entity-kind maps (`table`, `valueSet`). Qualifier\n* emission is the rendering seam: DDL / SQL emission asks the namespace\n* for its qualifier (`\"<schema>\"`) or for a qualified table name\n* (`\"<schema>\".\"<table>\"`) and consumes the result polymorphically.\n* The unbound singleton below overrides these methods to elide the\n* prefix entirely — call sites stay polymorphic and never branch on\n* `id === UNBOUND_NAMESPACE_ID`.\n*/\nvar PostgresSchema = class extends SqlNamespaceBase {\n\t/**\n\t* Stable singleton reference for the late-bound slot. Materialised\n\t* lazily below the singleton subclass declaration so the static\n\t* initialiser sees the subclass before assigning. Consumers always\n\t* reach for `PostgresSchema.unbound` (or `PostgresUnboundSchema.instance`\n\t* — same identity).\n\t*/\n\tstatic unbound;\n\tid;\n\tentries;\n\tconstructor(input) {\n\t\tsuper();\n\t\tthis.id = input.id;\n\t\tconst dispatched = hydrateNamespaceEntities(input.entries, composeSqlEntityKinds([\n\t\t\tpolicyEntityKind,\n\t\t\troleEntityKind,\n\t\t\trlsEnablementEntityKind,\n\t\t\tnativeEnumEntityKind\n\t\t]), \"carry\");\n\t\tconst nativeEnumSlot = dispatched[\"native_enum\"];\n\t\tif (nativeEnumSlot !== void 0) {\n\t\t\tconst rekeyed = {};\n\t\t\tfor (const [handle, entity] of Object.entries(nativeEnumSlot)) {\n\t\t\t\tconst physicalName = PostgresNativeEnum.is(entity) ? entity.typeName : handle;\n\t\t\t\tinvariant(!Object.hasOwn(rekeyed, physicalName), `PostgresSchema \"${input.id}\": two native_enum entities resolve to the same physical type name \"${physicalName}\". Give them distinct @@map type names.`);\n\t\t\t\trekeyed[physicalName] = entity;\n\t\t\t}\n\t\t\tdispatched[\"native_enum\"] = Object.freeze(rekeyed);\n\t\t}\n\t\tconst valueSetRaw = dispatched[\"valueSet\"];\n\t\tconst entriesInput = { ...valueSetRaw !== void 0 && Object.keys(valueSetRaw).length === 0 ? {\n\t\t\t...dispatched,\n\t\t\tvalueSet: void 0\n\t\t} : dispatched };\n\t\tthis.entries = Object.freeze(blindCast(entriesInput));\n\t\tObject.defineProperty(this, \"kind\", {\n\t\t\tvalue: \"schema\",\n\t\t\twritable: false,\n\t\t\tenumerable: false,\n\t\t\tconfigurable: true\n\t\t});\n\t\tfreezeNode(this);\n\t}\n\tget table() {\n\t\treturn this.entries.table ?? Object.freeze({});\n\t}\n\tget valueSet() {\n\t\treturn this.entries.valueSet;\n\t}\n\tget policy() {\n\t\treturn this.entries.policy ?? Object.freeze({});\n\t}\n\tget role() {\n\t\treturn this.entries.role ?? Object.freeze({});\n\t}\n\tget rls() {\n\t\treturn this.entries.rls ?? Object.freeze({});\n\t}\n\t/**\n\t* The bare schema qualifier as it would appear in a rendered SQL\n\t* fragment (already quoted). The unbound-schema singleton overrides\n\t* this to return `''`.\n\t*/\n\tqualifier() {\n\t\treturn `\"${this.id}\"`;\n\t}\n\t/**\n\t* Qualify a table name with the schema prefix\n\t* (`\"<schema>\".\"<table>\"`). The unbound-schema singleton overrides\n\t* this to emit just `\"<table>\"` so the resolved DDL is unqualified\n\t* and `search_path` decides where the object lands at runtime.\n\t*/\n\tqualifyTable(tableName) {\n\t\treturn `\"${this.id}\".\"${tableName}\"`;\n\t}\n\t/**\n\t* Render a SQL string-literal containing the qualified-name form\n\t* suitable for `to_regclass(...)` arguments (e.g. `'\"public\".\"user\"'`).\n\t* The unbound singleton overrides this to elide the schema prefix\n\t* (`'\"user\"'`) so `search_path` resolves the object at runtime.\n\t*/\n\tregclassLiteral(name) {\n\t\treturn `'${escapeLiteral(this.qualifyTable(name))}'`;\n\t}\n\t/**\n\t* Render a SQL expression that evaluates to this namespace's schema\n\t* name at runtime, ready to drop into a `WHERE table_schema = …` /\n\t* `WHERE n.nspname = …` clause. Named schemas emit a quoted SQL\n\t* literal (`'public'`); the unbound singleton overrides this to emit\n\t* `current_schema()` so catalog queries match whichever schema the\n\t* connection's `search_path` resolved at runtime.\n\t*/\n\tschemaSqlExpression() {\n\t\treturn `'${escapeLiteral(this.id)}'`;\n\t}\n\t/**\n\t* Typed-AST counterpart of {@link schemaSqlExpression}: the expression a\n\t* builder-built catalog check compares `n.nspname` / `table_schema`\n\t* against. Named schemas bind the schema name as a text parameter; the\n\t* unbound singleton overrides this to the opaque `current_schema()`\n\t* expression so the live connection's `search_path` decides at runtime.\n\t*/\n\tschemaFilterExpression() {\n\t\treturn cfExpr.param(this.id, PG_TEXT_CODEC_ID);\n\t}\n\t/**\n\t* Typed-AST counterpart of {@link qualifyTable}: the FROM source a\n\t* builder-built check uses to address a user table in this namespace.\n\t* Named schemas qualify (`\"schema\".\"table\"`); the unbound singleton\n\t* overrides this to leave the table unqualified so `search_path`\n\t* resolves it at runtime.\n\t*/\n\ttableSource(tableName, alias) {\n\t\treturn new PostgresTableSource({\n\t\t\tname: tableName,\n\t\t\tschema: this.id,\n\t\t\t...ifDefined(\"alias\", alias)\n\t\t});\n\t}\n\t/**\n\t* The bare schema name a DDL planner should target when emitting\n\t* statements that need to identify this namespace in the live\n\t* database (e.g. `CREATE TABLE \"<ddlSchemaName>\".\"<table>\" …`,\n\t* catalog filters, planner conflict lookups). Named schemas resolve\n\t* to their own id. The `PostgresUnboundSchema` singleton inherits\n\t* this and returns `UNBOUND_NAMESPACE_ID` — callers that dispatch\n\t* through `qualifyTableName` route through the polymorphic\n\t* `PostgresUnboundSchema` overrides and produce unqualified\n\t* (search-path-resolved) output automatically.\n\t*/\n\tddlSchemaName(_storage) {\n\t\treturn this.id;\n\t}\n};\n/**\n* Singleton subclass for the reserved sentinel namespace id\n* (`UNBOUND_NAMESPACE_ID`) — the late-bound Postgres slot whose binding\n* the connection's `search_path` resolves at runtime. Overrides\n* qualifier emission to elide the schema prefix; call sites that consume\n* `qualifier()` / `qualifyTable()` get unqualified output without\n* branching on the namespace id.\n*\n* This is the target-side materialization of \"the framework provides\n* affordances; targets implement specifics\": the framework names the\n* sentinel; Postgres decides what late-bound means here (the table\n* name, naked — the schema is supplied by the live connection's\n* `search_path`).\n*\n* `ddlSchemaName` is inherited from `PostgresSchema` and returns\n* `UNBOUND_NAMESPACE_ID`. Downstream helpers such as `qualifyTableName`\n* route through the polymorphic factory and produce unqualified output\n* automatically.\n*/\nvar PostgresUnboundSchema = class PostgresUnboundSchema extends PostgresSchema {\n\tstatic instance = new PostgresUnboundSchema();\n\tconstructor(input) {\n\t\tsuper(input ?? {\n\t\t\tid: UNBOUND_NAMESPACE_ID,\n\t\t\tentries: { table: {} }\n\t\t});\n\t}\n\tqualifier() {\n\t\treturn \"\";\n\t}\n\tqualifyTable(tableName) {\n\t\treturn `\"${tableName}\"`;\n\t}\n\tschemaSqlExpression() {\n\t\treturn \"current_schema()\";\n\t}\n\tschemaFilterExpression() {\n\t\treturn cfExpr.raw(\"current_schema()\", {\n\t\t\tcodecId: PG_TEXT_CODEC_ID,\n\t\t\tnullable: false\n\t\t});\n\t}\n\ttableSource(tableName, alias) {\n\t\treturn new PostgresTableSource({\n\t\t\tname: tableName,\n\t\t\t...ifDefined(\"alias\", alias)\n\t\t});\n\t}\n};\nPostgresSchema.unbound = PostgresUnboundSchema.instance;\n/**\n* Narrow an arbitrary namespace (or `undefined`) to `PostgresSchema`\n* so callers can dispatch to the polymorphic emission methods without\n* branching at the call site. Uses the structural `kind` discriminator\n* (`'schema'`) rather than `instanceof` so the check survives realm /\n* bundle / hot-reload boundaries — matching the rest of the IR's\n* narrowing convention. `PostgresUnboundSchema` passes through because\n* it inherits the same `kind: 'schema'` from `PostgresSchema`.\n*/\nfunction isPostgresSchema(ns) {\n\treturn ns?.kind === \"schema\";\n}\n/**\n* Target-supplied `Namespace` factory the Postgres target plumbs\n* through `defineContract({ createNamespace })` and the SQL PSL\n* interpreter. Returns the unbound singleton for the framework\n* sentinel and a fresh `PostgresSchema` for any other coordinate.\n*\n* The factory has no per-call state — every named id deterministically\n* maps to a distinct schema instance — so callers can pass it through\n* by reference and trust the resulting `SqlStorage.namespaces` map to\n* be value-stable for a given input set. Native-enum column type names are\n* schema-qualified earlier, at column construction, via the target's\n* `authoring.qualifyColumnType` hook (`postgresQualifyColumnType`), so this\n* factory just materialises the namespace from already-qualified entries.\n*/\nfunction postgresCreateNamespace(input) {\n\tconst schemaInput = {\n\t\tid: input.id,\n\t\tentries: {\n\t\t\t...input.entries,\n\t\t\ttable: input.entries[\"table\"] ?? {}\n\t\t}\n\t};\n\tif (input.id === UNBOUND_NAMESPACE_ID) return new PostgresUnboundSchema(schemaInput);\n\treturn new PostgresSchema(schemaInput);\n}\n//#endregion\nexport { PostgresRlsPolicy as _, nativeEnumEntityKind as a, roleEntityKind as c, PostgresNativeEnumSchema as d, PostgresRlsEnablementSchema as f, ROLE_DEFAULT_CONTROL_POLICY as g, PostgresRole as h, postgresCreateNamespace as i, policyInputFromSerialized as l, PostgresRoleSchema as m, PostgresUnboundSchema as n, policyEntityKind as o, PostgresRlsPolicySchema as p, isPostgresSchema as r, rlsEnablementEntityKind as s, PostgresSchema as t, PostgresTableSource as u, PostgresRlsEnablement as v };\n\n//# sourceMappingURL=postgres-schema-KSzLDONj.mjs.map"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,IAAI,wBAAwB,cAAc,QAAQ;CACjD,OAAO;CACP;CACA;CACA,YAAY,OAAO;EAClB,MAAM;EACN,KAAK,YAAY,MAAM;EACvB,KAAK,cAAc,MAAM;EACzB,WAAW,IAAI;CAChB;AACD;;;;;;;;;;;;;;AAgBA,IAAI,oBAAoB,cAAc,QAAQ;CAC7C,OAAO;CACP;CACA;CACA;CACA;CACA;CACA;CACA,YAAY,OAAO;EAClB,MAAM;EACN,KAAK,OAAO,OAAO,MAAM,MAAM;EAC/B,IAAI,MAAM,OAAO,SAAS,QAAQ,KAAK,SAAS,MAAM,OAAO;EAC7D,KAAK,YAAY,MAAM;EACvB,KAAK,cAAc,MAAM;EACzB,KAAK,YAAY,MAAM;EACvB,KAAK,QAAQ,OAAO,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC;EAC3C,IAAI,MAAM,UAAU,KAAK,GAAG,KAAK,QAAQ,MAAM;EAC/C,IAAI,MAAM,cAAc,KAAK,GAAG,KAAK,YAAY,MAAM;EACvD,KAAK,aAAa,MAAM;EACxB,WAAW,IAAI;CAChB;AACD;;;;;;;;;;;;;;;;;;;;AA8BA,IAAI,eAAe,cAAc,QAAQ;CACxC,OAAO;CACP;CACA;CACA;CACA,YAAY,OAAO;EAClB,MAAM;EACN,KAAK,OAAO,MAAM;EAClB,KAAK,cAAc,MAAM;EACzB,KAAK,UAAU,MAAM,WAAW;EAChC,WAAW,IAAI;CAChB;AACD;AAGA,MAAM,qBAAqB,KAAK;CAC/B,MAAM;CACN,MAAM;CACN,aAAa;CACb,YAAY;AACb,CAAC;AACD,MAAM,0BAA0B,KAAK;CACpC,MAAM;CACN,MAAM;CACN,WAAW;CACX,WAAW;CACX,aAAa;CACb,WAAW;CACX,OAAO,KAAK,OAAO,MAAM,CAAC,CAAC,SAAS;CACpC,UAAU;CACV,cAAc;CACd,YAAY;AACb,CAAC;AACD,MAAM,8BAA8B,KAAK;CACxC,MAAM;CACN,WAAW;CACX,aAAa;AACd,CAAC;AACD,MAAM,2BAA2B,KAAK;CACrC,MAAM;CACN,UAAU;CACV,SAAS,KAAK,OAAO,MAAM,CAAC,CAAC,SAAS;CACtC,YAAY;AACb,CAAC;AAGD,IAAI,sBAAsB,cAAc,YAAY;CACnD;CACA,YAAY,SAAS;EACpB,MAAM,QAAQ,MAAM,QAAQ,KAAK;EACjC,KAAK,SAAS,QAAQ;EACtB,KAAK,OAAO;CACb;CACA,QAAQ,UAAU;EACjB,OAAO,SAAS,cAAc,SAAS,YAAY,IAAI,IAAI;CAC5D;AACD;;;;;;AAQA,SAAS,0BAA0B,MAAM;CACxC,OAAO;EACN,QAAQ,YAAY,KAAK,MAAM,KAAK,MAAM;EAC1C,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,WAAW,KAAK;EAChB,OAAO,KAAK;EACZ,OAAO,KAAK;EACZ,WAAW,KAAK;EAChB,YAAY,KAAK;CAClB;AACD;AAGA,MAAM,mBAAmB;CACxB,MAAM;CACN,QAAQ;CACR,YAAY,UAAU,IAAI,kBAAkB,0BAA0B,KAAK,CAAC;AAC7E;AACA,MAAM,iBAAiB;CACtB,MAAM;CACN,QAAQ;CACR,YAAY,UAAU,IAAI,aAAa,KAAK;AAC7C;AACA,MAAM,0BAA0B;CAC/B,MAAM;CACN,QAAQ;CACR,YAAY,UAAU,IAAI,sBAAsB,KAAK;AACtD;AACA,MAAM,uBAAuB;CAC5B,MAAM;CACN,QAAQ;CACR,YAAY,UAAU,IAAI,mBAAmB,KAAK;AACnD;;;;;;;;;;;;;;;AAiBA,IAAI,iBAAiB,cAAc,iBAAiB;;;;;;;;CAQnD,OAAO;CACP;CACA;CACA,YAAY,OAAO;EAClB,MAAM;EACN,KAAK,KAAK,MAAM;EAChB,MAAM,aAAa,yBAAyB,MAAM,SAAS,sBAAsB;GAChF;GACA;GACA;GACA;EACD,CAAC,GAAG,OAAO;EACX,MAAM,iBAAiB,WAAW;EAClC,IAAI,mBAAmB,KAAK,GAAG;GAC9B,MAAM,UAAU,CAAC;GACjB,KAAK,MAAM,CAAC,QAAQ,WAAW,OAAO,QAAQ,cAAc,GAAG;IAC9D,MAAM,eAAe,mBAAmB,GAAG,MAAM,IAAI,OAAO,WAAW;IACvE,UAAU,CAAC,OAAO,OAAO,SAAS,YAAY,GAAG,mBAAmB,MAAM,GAAG,sEAAsE,aAAa,wCAAwC;IACxM,QAAQ,gBAAgB;GACzB;GACA,WAAW,iBAAiB,OAAO,OAAO,OAAO;EAClD;EACA,MAAM,cAAc,WAAW;EAC/B,MAAM,eAAe,EAAE,GAAG,gBAAgB,KAAK,KAAK,OAAO,KAAK,WAAW,CAAC,CAAC,WAAW,IAAI;GAC3F,GAAG;GACH,UAAU,KAAK;EAChB,IAAI,WAAW;EACf,KAAK,UAAU,OAAO,OAAO,UAAU,YAAY,CAAC;EACpD,OAAO,eAAe,MAAM,QAAQ;GACnC,OAAO;GACP,UAAU;GACV,YAAY;GACZ,cAAc;EACf,CAAC;EACD,WAAW,IAAI;CAChB;CACA,IAAI,QAAQ;EACX,OAAO,KAAK,QAAQ,SAAS,OAAO,OAAO,CAAC,CAAC;CAC9C;CACA,IAAI,WAAW;EACd,OAAO,KAAK,QAAQ;CACrB;CACA,IAAI,SAAS;EACZ,OAAO,KAAK,QAAQ,UAAU,OAAO,OAAO,CAAC,CAAC;CAC/C;CACA,IAAI,OAAO;EACV,OAAO,KAAK,QAAQ,QAAQ,OAAO,OAAO,CAAC,CAAC;CAC7C;CACA,IAAI,MAAM;EACT,OAAO,KAAK,QAAQ,OAAO,OAAO,OAAO,CAAC,CAAC;CAC5C;;;;;;CAMA,YAAY;EACX,OAAO,IAAI,KAAK,GAAG;CACpB;;;;;;;CAOA,aAAa,WAAW;EACvB,OAAO,IAAI,KAAK,GAAG,KAAK,UAAU;CACnC;;;;;;;CAOA,gBAAgB,MAAM;EACrB,OAAO,IAAI,cAAc,KAAK,aAAa,IAAI,CAAC,EAAE;CACnD;;;;;;;;;CASA,sBAAsB;EACrB,OAAO,IAAI,cAAc,KAAK,EAAE,EAAE;CACnC;;;;;;;;CAQA,yBAAyB;EACxB,OAAO,OAAO,MAAM,KAAK,IAAI,gBAAgB;CAC9C;;;;;;;;CAQA,YAAY,WAAW,OAAO;EAC7B,OAAO,IAAI,oBAAoB;GAC9B,MAAM;GACN,QAAQ,KAAK;GACb,GAAG,UAAU,SAAS,KAAK;EAC5B,CAAC;CACF;;;;;;;;;;;;CAYA,cAAc,UAAU;EACvB,OAAO,KAAK;CACb;AACD;;;;;;;;;;;;;;;;;;;;AAoBA,IAAI,wBAAwB,MAAM,8BAA8B,eAAe;CAC9E,OAAO,WAAW,IAAI,sBAAsB;CAC5C,YAAY,OAAO;EAClB,MAAM,SAAS;GACd,IAAI;GACJ,SAAS,EAAE,OAAO,CAAC,EAAE;EACtB,CAAC;CACF;CACA,YAAY;EACX,OAAO;CACR;CACA,aAAa,WAAW;EACvB,OAAO,IAAI,UAAU;CACtB;CACA,sBAAsB;EACrB,OAAO;CACR;CACA,yBAAyB;EACxB,OAAO,OAAO,IAAI,oBAAoB;GACrC,SAAS;GACT,UAAU;EACX,CAAC;CACF;CACA,YAAY,WAAW,OAAO;EAC7B,OAAO,IAAI,oBAAoB;GAC9B,MAAM;GACN,GAAG,UAAU,SAAS,KAAK;EAC5B,CAAC;CACF;AACD;AACA,eAAe,UAAU,sBAAsB;;;;;;;;;;AAU/C,SAAS,iBAAiB,IAAI;CAC7B,OAAO,IAAI,SAAS;AACrB;;;;;;;;;;;;;;;AAeA,SAAS,wBAAwB,OAAO;CACvC,MAAM,cAAc;EACnB,IAAI,MAAM;EACV,SAAS;GACR,GAAG,MAAM;GACT,OAAO,MAAM,QAAQ,YAAY,CAAC;EACnC;CACD;CACA,IAAI,MAAM,OAAO,sBAAsB,OAAO,IAAI,sBAAsB,WAAW;CACnF,OAAO,IAAI,eAAe,WAAW;AACtC"}