@sequenceholdings/orm 0.1.1 → 0.1.2

package/dist/index.d.cts

@@ -1,61 +1,12 @@
+export { ActionInput, ActionParamInput, AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, SCHEMA_DIR, SeqLink, SeqNamespaceConfig, SeqTable, SerializeNamespaceInput, SyncedTableConfig, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, deriveColumnName, endAuthoringContext, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, loadNamespaceFromDir, serializeNamespace, t, toMany, toOne, toPlatformUser } from './authoring.cjs';
+import { CanonicalDefinition } from './canonical.cjs';
+export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.cjs';
+import { CustomRolesBlock } from '@sequenceholdings/custom-roles-manifest';
+export { CustomRolesBlock, capabilityPinsSchema, customRolesBlockSchema, customRolesDeclared, parseCapabilityPin, validateCapabilityPins } from '@sequenceholdings/custom-roles-manifest';
 import { z } from 'zod';
 import { generateDrizzleJson } from 'drizzle-kit/api';
 import { PgTableWithColumns } from 'drizzle-orm/pg-core';
-
-/**
- * Custom Roles & Capabilities manifest grammar — the `capabilities.roles`
- * block and the `capabilities.uses` pin set. This is a VERBATIM mirror of the
- * platform's canonical grammar so an ORM namespace declares roles/capabilities
- * the exact same way an artifact or managed function does; apply feeds it to
- * the shared `reconcileHostRegistryOnActivation` reconciler untouched.
- *
- * Canonical sources — keep the grammar in sync by hand (schema shape, key
- * regexes, limits, and superRefine rules). The behavioral guards in
- * definitions.test.ts exercise this copy (inherit cycle, unknown grant,
- * pin-names-role, key collision) so a drifted rule fails there:
- *   atlas/src/server/services/custom-roles/manifest-block.ts        (server)
- *   shared/services/artifact-studio/src/manifest-custom-roles.ts    (CLI)
- */
-
-/**
- * Manifest-declared custom roles & capabilities. Roles and capabilities are
- * both `custom_role` FGA objects; deploy reconciliation turns this block into
- * the structural waterfall edges (role→capability / senior→junior `assignee`
- * userset tuples) — nothing else. The host floor is enforced app-layer at the
- * resolution points, never in the model. Runtime grants (user/group/org →
- * role) are NEVER declared here — they are written through host-admin-gated
- * endpoints.
- */
-declare const customRolesBlockSchema: z.ZodObject<{
-    definitions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        default: z.ZodDefault<z.ZodBoolean>;
-        inherits: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        grants: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>>;
-    capabilities: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>;
-type CustomRolesBlock = z.infer<typeof customRolesBlockSchema>;
-/** True when the block declares at least one role or capability. */
-declare function customRolesDeclared(block: CustomRolesBlock | null | undefined): boolean;
-declare const capabilityPinsSchema: z.ZodDefault<z.ZodArray<z.ZodString>>;
-interface ParsedCapabilityPin {
-    scope: 'org' | 'host';
-    key: string;
-}
-/** Split a pin into its scope and key. Assumes the pin grammar validated. */
-declare function parseCapabilityPin(pin: string): ParsedCapabilityPin;
-/**
- * Cross-field pin validation (the `uses` array and the roles block are
- * siblings under `capabilities`). Purely structural — registry existence
- * checks are server-side, at activation, where atomicity lives.
- */
-declare function validateCapabilityPins({ uses, roles, }: {
-    uses: readonly string[];
-    roles: CustomRolesBlock | null | undefined;
-}): string[];
+export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, PredIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.cjs';
 
 /**
  * The reserved `namespace.yaml` — namespace-level settings beside the table
@@ -649,6 +600,42 @@ declare function planMigration({ definition, previousSnapshot, }: {
 /** Full-create plan (empty previous snapshot) — what `plan` prints and first apply runs. */
 declare const compileNamespace: (definition: NamespaceDefinition) => Promise<PlannedMigration>;
 
+/**
+ * Canonical v2 → the in-memory schema bag drizzle-kit snapshots plus typed
+ * table handles — the same `DrizzleEntities` shape engine/snapshot.ts consumes.
+ */
+declare function buildDrizzleEntitiesV2(definition: CanonicalDefinition): DrizzleEntities;
+/** drizzle-kit snapshot for a canonical definition — the v2 twin of engine/snapshot.ts generateSnapshot. */
+declare function generateSnapshotV2(definition: CanonicalDefinition, previousId?: string): NamespaceSnapshot;
+/**
+ * Renames and casts are declared in the canonical definition, never inferred:
+ * we emit the statement ourselves and rewrite the previous snapshot to match,
+ * so drizzle-kit never faces a create+drop ambiguity (its API resolves those
+ * interactively — fatal in a service). Semantics mirror engine/snapshot.ts
+ * applyMigrationHints exactly, plus the v2-only table-level `renamedFrom`
+ * (applied FIRST, so column hints find the table under its new name).
+ *
+ * This is a sibling of the v1 function rather than a wrapper: the v1 one is
+ * keyed to `NamespaceDefinition`'s record-shaped columns and cannot express
+ * table renames or enum-typed cast targets.
+ */
+declare function applyMigrationHintsV2(previous: NamespaceSnapshot, definition: CanonicalDefinition): MigrationHints;
+/**
+ * Desired canonical definition + the previously applied snapshot → ordered
+ * statements. The v2 twin of engine/index.ts planMigration, reusing its
+ * exported internals (normalizeSnapshot/emptySnapshot/diffStatements — the
+ * assertUnambiguousDiff backstop rides along inside diffStatements).
+ *
+ * Deliberately absent relative to v1: policy drops, securityStatements, and
+ * action function statements. v2 enforces row policies inside compiled
+ * operations (no PG RLS policies) and executes actions on the data plane
+ * (no plpgsql functions), so a v2 plan is hints + kit DDL only.
+ */
+declare function planMigrationV2({ canonical, previousSnapshot, }: {
+    canonical: CanonicalDefinition;
+    previousSnapshot?: NamespaceSnapshot;
+}): Promise<PlannedMigration>;
+
 declare class OrmDefinitionError extends Error {
     readonly file?: string | undefined;
     readonly name = "OrmDefinitionError";
@@ -818,6 +805,80 @@ declare function writeMigration({ dir, workspace, plan, contentHash, destructive
     destructive: boolean;
 }): Promise<WrittenMigration>;
 
+/**
+ * v1 YAML `NamespaceDefinition` → canonical v2 (`orm migrate-from-yaml`).
+ * Lossless where the v2 contract can express it, loud where it can't:
+ *
+ *  - columns keep declaration order (order is meaningful for DDL); the v1
+ *    `default` splits into literal `default` vs allowlisted `defaultFn`
+ *    exactly along the isFunctionDefault line the v1 engine used;
+ *  - the single v1 `primary_key: true` column becomes `primaryKey: [name]`;
+ *  - policy expressions carry over as their verbatim DSL source strings
+ *    (re-parsed by the v2 predicate compiler, never the parsed v1 AST);
+ *  - actions carry over verbatim (multi-statement `executes` lists join on
+ *    ';\n' — the boundaries stay recoverable for the compiled-op executor);
+ *  - the capabilities block passes through untouched (verbatim custom-roles
+ *    grammar in both formats);
+ *  - qualified (cross-namespace) link targets have no v2 representation —
+ *    links are namespace-local in v2 (plan §5) — so they fail the conversion
+ *    rather than silently dropping.
+ *
+ * The result re-validates through canonicalDefinitionSchema and normalizes,
+ * so hashing and server-side re-validation see exactly what an authored v2
+ * definition would produce.
+ */
+declare function convertV1DefinitionToCanonical(definition: NamespaceDefinition): CanonicalDefinition;
+
+/** Statement kinds that disqualify a plan from being a rebase no-op. */
+interface RebaseNoopOptions {
+    /**
+     * v1 planned a drop-and-recreate of the RLS policies on every migration, so
+     * a plan produced by the V1 PIPELINE against an unchanged schema still
+     * carries `security` statements. v2 plans never emit them. Default false:
+     * a rebase verified through planMigrationV2 must be empty outright.
+     */
+    readonly allowSecurityReemission?: boolean;
+}
+/** The statements that stop a plan from qualifying as a rebase no-op. */
+declare function rebaseViolations(statements: readonly CompiledStatement[], options?: RebaseNoopOptions): CompiledStatement[];
+/**
+ * True when the plan changes nothing: no DDL, no hint (rename/cast) ALTERs,
+ * no action functions — and, unless explicitly allowed, no security
+ * re-emission either. Pure predicate over the plan's statements.
+ */
+declare const verifyRebaseIsNoop: (plan: Pick<PlannedMigration, "statements">, options?: RebaseNoopOptions) => boolean;
+interface RebaseEntryInput {
+    readonly namespace: string;
+    /** Content hash at the committed journal tip (the v1 hash being rebased from). */
+    readonly previousHash: string;
+    /** Content hash of the converted canonical v2 definition. */
+    readonly newHash: string;
+    /** Journal tip ordinal + 1. A rebase always sits on an existing tip. */
+    readonly ordinal: number;
+    /**
+     * The verified no-op plan's snapshot. Structurally identical to the tip
+     * snapshot but re-chained (fresh `id`, `prevId` = tip snapshot's id) so the
+     * `--check` snapshot-chain walk stays unbroken through the rebase.
+     */
+    readonly snapshot: NamespaceSnapshot;
+}
+interface RebaseEntry {
+    readonly name: string;
+    /** Journal entry matching workspace.ts's journalEntrySchema exactly. */
+    readonly entry: JournalEntry;
+    /** `migrations/<name>.sql` contents — header only, zero statements. */
+    readonly sql: string;
+    /** `migrations/meta/NNNN.snapshot.json` contents (writeMigration's serialization). */
+    readonly snapshotText: string;
+}
+/**
+ * Build the no-op journal entry (+ the exact file contents its checksums
+ * commit to) recording a v1 → v2 content-hash rebase. Everything is
+ * deterministic from the inputs, so `--check`-style gates can regenerate and
+ * byte-compare it just like ordinary migrations.
+ */
+declare function buildRebaseJournalEntry({ namespace, previousHash, newHash, ordinal, snapshot }: RebaseEntryInput): RebaseEntry;
+
 declare function parsePredicate(source: string): ParsedPredicate;
 
 declare const identifierSchema: z.ZodString;
@@ -836,4 +897,4 @@ declare function parseCanonicalDefinition(value: unknown): NamespaceDefinition;
 
 declare const parsedPredicateSchema: z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>;
 
-export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, type CustomRolesBlock, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, buildActionParamsSchema, buildDrizzleEntities, buildNamespaceDefinition, canonicalizeDefinition, capabilityExpression, capabilityPinsSchema, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, customRolesBlockSchema, customRolesDeclared, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseCapabilityPin, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, validateCapabilityPins, walkPredicate, writeMigration };
+export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, verifyRebaseIsNoop, walkPredicate, writeMigration };

package/dist/index.d.ts

@@ -1,61 +1,12 @@
+export { ActionInput, ActionParamInput, AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, SCHEMA_DIR, SeqLink, SeqNamespaceConfig, SeqTable, SerializeNamespaceInput, SyncedTableConfig, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, deriveColumnName, endAuthoringContext, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, loadNamespaceFromDir, serializeNamespace, t, toMany, toOne, toPlatformUser } from './authoring.js';
+import { CanonicalDefinition } from './canonical.js';
+export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.js';
+import { CustomRolesBlock } from '@sequenceholdings/custom-roles-manifest';
+export { CustomRolesBlock, capabilityPinsSchema, customRolesBlockSchema, customRolesDeclared, parseCapabilityPin, validateCapabilityPins } from '@sequenceholdings/custom-roles-manifest';
 import { z } from 'zod';
 import { generateDrizzleJson } from 'drizzle-kit/api';
 import { PgTableWithColumns } from 'drizzle-orm/pg-core';
-
-/**
- * Custom Roles & Capabilities manifest grammar — the `capabilities.roles`
- * block and the `capabilities.uses` pin set. This is a VERBATIM mirror of the
- * platform's canonical grammar so an ORM namespace declares roles/capabilities
- * the exact same way an artifact or managed function does; apply feeds it to
- * the shared `reconcileHostRegistryOnActivation` reconciler untouched.
- *
- * Canonical sources — keep the grammar in sync by hand (schema shape, key
- * regexes, limits, and superRefine rules). The behavioral guards in
- * definitions.test.ts exercise this copy (inherit cycle, unknown grant,
- * pin-names-role, key collision) so a drifted rule fails there:
- *   atlas/src/server/services/custom-roles/manifest-block.ts        (server)
- *   shared/services/artifact-studio/src/manifest-custom-roles.ts    (CLI)
- */
-
-/**
- * Manifest-declared custom roles & capabilities. Roles and capabilities are
- * both `custom_role` FGA objects; deploy reconciliation turns this block into
- * the structural waterfall edges (role→capability / senior→junior `assignee`
- * userset tuples) — nothing else. The host floor is enforced app-layer at the
- * resolution points, never in the model. Runtime grants (user/group/org →
- * role) are NEVER declared here — they are written through host-admin-gated
- * endpoints.
- */
-declare const customRolesBlockSchema: z.ZodObject<{
-    definitions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        default: z.ZodDefault<z.ZodBoolean>;
-        inherits: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        grants: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    }, z.core.$strip>>>;
-    capabilities: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>;
-type CustomRolesBlock = z.infer<typeof customRolesBlockSchema>;
-/** True when the block declares at least one role or capability. */
-declare function customRolesDeclared(block: CustomRolesBlock | null | undefined): boolean;
-declare const capabilityPinsSchema: z.ZodDefault<z.ZodArray<z.ZodString>>;
-interface ParsedCapabilityPin {
-    scope: 'org' | 'host';
-    key: string;
-}
-/** Split a pin into its scope and key. Assumes the pin grammar validated. */
-declare function parseCapabilityPin(pin: string): ParsedCapabilityPin;
-/**
- * Cross-field pin validation (the `uses` array and the roles block are
- * siblings under `capabilities`). Purely structural — registry existence
- * checks are server-side, at activation, where atomicity lives.
- */
-declare function validateCapabilityPins({ uses, roles, }: {
-    uses: readonly string[];
-    roles: CustomRolesBlock | null | undefined;
-}): string[];
+export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, PredIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.js';
 
 /**
  * The reserved `namespace.yaml` — namespace-level settings beside the table
@@ -649,6 +600,42 @@ declare function planMigration({ definition, previousSnapshot, }: {
 /** Full-create plan (empty previous snapshot) — what `plan` prints and first apply runs. */
 declare const compileNamespace: (definition: NamespaceDefinition) => Promise<PlannedMigration>;
 
+/**
+ * Canonical v2 → the in-memory schema bag drizzle-kit snapshots plus typed
+ * table handles — the same `DrizzleEntities` shape engine/snapshot.ts consumes.
+ */
+declare function buildDrizzleEntitiesV2(definition: CanonicalDefinition): DrizzleEntities;
+/** drizzle-kit snapshot for a canonical definition — the v2 twin of engine/snapshot.ts generateSnapshot. */
+declare function generateSnapshotV2(definition: CanonicalDefinition, previousId?: string): NamespaceSnapshot;
+/**
+ * Renames and casts are declared in the canonical definition, never inferred:
+ * we emit the statement ourselves and rewrite the previous snapshot to match,
+ * so drizzle-kit never faces a create+drop ambiguity (its API resolves those
+ * interactively — fatal in a service). Semantics mirror engine/snapshot.ts
+ * applyMigrationHints exactly, plus the v2-only table-level `renamedFrom`
+ * (applied FIRST, so column hints find the table under its new name).
+ *
+ * This is a sibling of the v1 function rather than a wrapper: the v1 one is
+ * keyed to `NamespaceDefinition`'s record-shaped columns and cannot express
+ * table renames or enum-typed cast targets.
+ */
+declare function applyMigrationHintsV2(previous: NamespaceSnapshot, definition: CanonicalDefinition): MigrationHints;
+/**
+ * Desired canonical definition + the previously applied snapshot → ordered
+ * statements. The v2 twin of engine/index.ts planMigration, reusing its
+ * exported internals (normalizeSnapshot/emptySnapshot/diffStatements — the
+ * assertUnambiguousDiff backstop rides along inside diffStatements).
+ *
+ * Deliberately absent relative to v1: policy drops, securityStatements, and
+ * action function statements. v2 enforces row policies inside compiled
+ * operations (no PG RLS policies) and executes actions on the data plane
+ * (no plpgsql functions), so a v2 plan is hints + kit DDL only.
+ */
+declare function planMigrationV2({ canonical, previousSnapshot, }: {
+    canonical: CanonicalDefinition;
+    previousSnapshot?: NamespaceSnapshot;
+}): Promise<PlannedMigration>;
+
 declare class OrmDefinitionError extends Error {
     readonly file?: string | undefined;
     readonly name = "OrmDefinitionError";
@@ -818,6 +805,80 @@ declare function writeMigration({ dir, workspace, plan, contentHash, destructive
     destructive: boolean;
 }): Promise<WrittenMigration>;
 
+/**
+ * v1 YAML `NamespaceDefinition` → canonical v2 (`orm migrate-from-yaml`).
+ * Lossless where the v2 contract can express it, loud where it can't:
+ *
+ *  - columns keep declaration order (order is meaningful for DDL); the v1
+ *    `default` splits into literal `default` vs allowlisted `defaultFn`
+ *    exactly along the isFunctionDefault line the v1 engine used;
+ *  - the single v1 `primary_key: true` column becomes `primaryKey: [name]`;
+ *  - policy expressions carry over as their verbatim DSL source strings
+ *    (re-parsed by the v2 predicate compiler, never the parsed v1 AST);
+ *  - actions carry over verbatim (multi-statement `executes` lists join on
+ *    ';\n' — the boundaries stay recoverable for the compiled-op executor);
+ *  - the capabilities block passes through untouched (verbatim custom-roles
+ *    grammar in both formats);
+ *  - qualified (cross-namespace) link targets have no v2 representation —
+ *    links are namespace-local in v2 (plan §5) — so they fail the conversion
+ *    rather than silently dropping.
+ *
+ * The result re-validates through canonicalDefinitionSchema and normalizes,
+ * so hashing and server-side re-validation see exactly what an authored v2
+ * definition would produce.
+ */
+declare function convertV1DefinitionToCanonical(definition: NamespaceDefinition): CanonicalDefinition;
+
+/** Statement kinds that disqualify a plan from being a rebase no-op. */
+interface RebaseNoopOptions {
+    /**
+     * v1 planned a drop-and-recreate of the RLS policies on every migration, so
+     * a plan produced by the V1 PIPELINE against an unchanged schema still
+     * carries `security` statements. v2 plans never emit them. Default false:
+     * a rebase verified through planMigrationV2 must be empty outright.
+     */
+    readonly allowSecurityReemission?: boolean;
+}
+/** The statements that stop a plan from qualifying as a rebase no-op. */
+declare function rebaseViolations(statements: readonly CompiledStatement[], options?: RebaseNoopOptions): CompiledStatement[];
+/**
+ * True when the plan changes nothing: no DDL, no hint (rename/cast) ALTERs,
+ * no action functions — and, unless explicitly allowed, no security
+ * re-emission either. Pure predicate over the plan's statements.
+ */
+declare const verifyRebaseIsNoop: (plan: Pick<PlannedMigration, "statements">, options?: RebaseNoopOptions) => boolean;
+interface RebaseEntryInput {
+    readonly namespace: string;
+    /** Content hash at the committed journal tip (the v1 hash being rebased from). */
+    readonly previousHash: string;
+    /** Content hash of the converted canonical v2 definition. */
+    readonly newHash: string;
+    /** Journal tip ordinal + 1. A rebase always sits on an existing tip. */
+    readonly ordinal: number;
+    /**
+     * The verified no-op plan's snapshot. Structurally identical to the tip
+     * snapshot but re-chained (fresh `id`, `prevId` = tip snapshot's id) so the
+     * `--check` snapshot-chain walk stays unbroken through the rebase.
+     */
+    readonly snapshot: NamespaceSnapshot;
+}
+interface RebaseEntry {
+    readonly name: string;
+    /** Journal entry matching workspace.ts's journalEntrySchema exactly. */
+    readonly entry: JournalEntry;
+    /** `migrations/<name>.sql` contents — header only, zero statements. */
+    readonly sql: string;
+    /** `migrations/meta/NNNN.snapshot.json` contents (writeMigration's serialization). */
+    readonly snapshotText: string;
+}
+/**
+ * Build the no-op journal entry (+ the exact file contents its checksums
+ * commit to) recording a v1 → v2 content-hash rebase. Everything is
+ * deterministic from the inputs, so `--check`-style gates can regenerate and
+ * byte-compare it just like ordinary migrations.
+ */
+declare function buildRebaseJournalEntry({ namespace, previousHash, newHash, ordinal, snapshot }: RebaseEntryInput): RebaseEntry;
+
 declare function parsePredicate(source: string): ParsedPredicate;
 
 declare const identifierSchema: z.ZodString;
@@ -836,4 +897,4 @@ declare function parseCanonicalDefinition(value: unknown): NamespaceDefinition;
 
 declare const parsedPredicateSchema: z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>;
 
-export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, type CustomRolesBlock, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, buildActionParamsSchema, buildDrizzleEntities, buildNamespaceDefinition, canonicalizeDefinition, capabilityExpression, capabilityPinsSchema, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, customRolesBlockSchema, customRolesDeclared, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseCapabilityPin, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, validateCapabilityPins, walkPredicate, writeMigration };
+export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, verifyRebaseIsNoop, walkPredicate, writeMigration };