@sequenceholdings/orm 0.1.2 → 0.1.3

package/dist/index.d.cts

@@ -1,12 +1,15 @@
-export { ActionInput, ActionParamInput, AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, SCHEMA_DIR, SeqLink, SeqNamespaceConfig, SeqTable, SerializeNamespaceInput, SyncedTableConfig, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, deriveColumnName, endAuthoringContext, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, loadNamespaceFromDir, serializeNamespace, t, toMany, toOne, toPlatformUser } from './authoring.cjs';
+export { AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, CowMutationInput, DrizzleRelation, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, ORM_TO_PIPELINE_TYPE, OrmContractColumnMap, OrmContractPipelineColumn, OrmSyncedTableContract, OrmToPipelineType, OverlayTableRef, OverlayWinsUnionInput, OverrideRowMutationInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, RelationRef, RevertOverlayMutationInput, SCHEMA_DIR, SYNCED_CONTRACT_HASH_DOMAIN, SeqLink, SeqNamespaceConfig, SeqTable, SeqView, SerializeNamespaceInput, SyncedTableConfig, SyncedTablePoliciesInput, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, TypedSyncedTableConfig, VIEW_BRAND, ViewConfig, ViewPoliciesInput, ViewQueryContext, ViewSelectQuery, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, computeSyncedContractHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, defineView, deriveColumnName, endAuthoringContext, extractOrmSyncedTableContract, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, isSeqView, loadNamespaceFromDir, overlayWinsUnion, overrideRowMutation, revertOverlayMutation, serializeNamespace, syncedContractSurface, t, toMany, toOne, toPlatformUser } from './authoring.cjs';
 import { CanonicalDefinition } from './canonical.cjs';
-export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.cjs';
+export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, CanonicalView, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalRelations, canonicalTableSchema, canonicalViewSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.cjs';
 import { CustomRolesBlock } from '@sequenceholdings/custom-roles-manifest';
 export { CustomRolesBlock, capabilityPinsSchema, customRolesBlockSchema, customRolesDeclared, parseCapabilityPin, validateCapabilityPins } from '@sequenceholdings/custom-roles-manifest';
 import { z } from 'zod';
+import { PredIr } from './ir.cjs';
+export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.cjs';
 import { generateDrizzleJson } from 'drizzle-kit/api';
 import { PgTableWithColumns } from 'drizzle-orm/pg-core';
-export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, PredIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.cjs';
+import 'drizzle-orm';
+import 'drizzle-orm/query-builders/query-builder';
 
 /**
  * The reserved `namespace.yaml` — namespace-level settings beside the table
@@ -99,8 +102,8 @@ declare const actionSchema: z.ZodObject<{
     }>>>;
     audit: z.ZodOptional<z.ZodObject<{
         action: z.ZodEnum<{
-            create: "create";
             update: "update";
+            create: "create";
             delete: "delete";
         }>;
         resource: z.ZodOptional<z.ZodString>;
@@ -246,6 +249,8 @@ declare const tableFileSchema: z.ZodObject<{
     policies: z.ZodOptional<z.ZodObject<{
         read: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
         write: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
+        insert: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
+        update: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
     }, z.core.$strict>>;
     actions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
@@ -282,8 +287,8 @@ declare const tableFileSchema: z.ZodObject<{
         }>>>;
         audit: z.ZodOptional<z.ZodObject<{
             action: z.ZodEnum<{
-                create: "create";
                 update: "update";
+                create: "create";
                 delete: "delete";
             }>;
             resource: z.ZodOptional<z.ZodString>;
@@ -347,6 +352,24 @@ declare function compileActionStatements(action: ActionDefinition, renderParam?:
 /** Compiled `requires` gate — a SQL boolean over the transaction claims, or null when unguarded. */
 declare function compileActionRequires(action: ActionDefinition): string | null;
 
+/** Canonical column types can be enums — v1 `PredicateColumnTypes` cannot carry them. */
+type SyncedColumnType = ColumnType | {
+    readonly enum: string;
+};
+type SyncedPredicateColumnTypes = Readonly<Record<string, SyncedColumnType>>;
+interface CompilePredIrToSqlOptions {
+    /** Column name → declared type, for claim casts in comparisons. */
+    readonly columnTypes?: SyncedPredicateColumnTypes;
+    /** Logical column name → physical column name for the synced backing. */
+    readonly columnNames?: Readonly<Record<string, string>>;
+}
+/**
+ * PredIr → a static SQL boolean for synced-view WHERE clauses. Capability and
+ * role leaves stay as runtime claim checks (mirroring table RLS), unlike the
+ * data-plane executor which pre-resolves them per caller.
+ */
+declare function compilePredIrToSql(pred: PredIr, options?: CompilePredIrToSqlOptions): string;
+
 declare const COMPARE_OPS: readonly ["=", "!=", "<", "<=", ">", ">="];
 type CompareOp = (typeof COMPARE_OPS)[number];
 type Operand = {
@@ -395,11 +418,15 @@ declare function compilePredicate(predicate: Predicate, columnTypes?: PredicateC
 declare const CLAIMS_SETTING = "request.jwt.claims";
 /** Claims JSON key holding the caller's granted capability pins (a string array). */
 declare const CAPABILITIES_CLAIM_KEY = "capabilities";
+/** Claims JSON key holding the caller's granted custom roles (a string array). */
+declare const ROLES_CLAIM_KEY = "roles";
 declare const quoteIdentifier: (name: string) => string;
 declare const quoteLiteral: (value: string) => string;
 declare const claimExpression: (key: string) => string;
 /** NULL claims (or a missing capabilities array) coalesce to false — capability checks fail closed. */
 declare const capabilityExpression: (key: string) => string;
+/** NULL claims (or a missing roles array) coalesce to false — role checks fail closed. */
+declare const roleExpression: (key: string) => string;
 
 /** Namespace names become Postgres identifiers (`orm_<ns>` schema, `orm_<ns>_consumer` role) — the tight grammar is a security control, not cosmetics. */
 declare const NAMESPACE_PATTERN: RegExp;
@@ -494,6 +521,7 @@ declare function applyMigrationHints(previous: NamespaceSnapshot, definition: Na
  * pending statement and lets a non-converged schema pass.
  */
 declare function isOwnedStatement(statement: string): boolean;
+declare function isOwnedStatementV2(statement: string): boolean;
 /**
  * The kit-owned statements a live database would still need to match the
  * definition — drizzle-kit's `pushSchema` introspection diffed against the
@@ -506,6 +534,12 @@ declare function pendingKitStatements({ definition, db, }: {
     /** A drizzle PgDatabase over the target — typed loose because pushSchema's own parameter is `PgDatabase<any>`. */
     db: unknown;
 }): Promise<string[]>;
+/** V2 convergence includes managed regular views in drizzle-kit's verdict. */
+declare function pendingKitStatementsV2({ canonical, db, }: {
+    canonical: CanonicalDefinition;
+    /** A drizzle PgDatabase over the target — typed loose because pushSchema's own parameter is `PgDatabase<any>`. */
+    db: unknown;
+}): Promise<string[]>;
 
 interface DrizzleEntities {
     /** The in-memory schema bag drizzle-kit snapshots (`generateDrizzleJson(imports)`). */
@@ -569,10 +603,68 @@ declare function actionPrepareChecks(definition: NamespaceDefinition): string[];
  * write-capable callers SELECT rows the read policy hides.
  */
 declare function securityStatements(definition: NamespaceDefinition): string[];
+declare const syncedTables: (definition: NamespaceDefinition) => TableFile[];
+/**
+ * A resolved synced-table backing: the physical Lakebase relation name
+ * (captured at provision, never derived) plus optional projection column
+ * types for claim-cast compilation.
+ */
+interface SyncedBacking {
+    readonly table: string;
+    /** Physical Lakebase relation (e.g. `synced_loans` or `df_retail_customers`). */
+    readonly physicalRelation: string;
+    /** Column name → ORM column type, for claim casts in the view's WHERE. */
+    readonly columnTypes?: PredicateColumnTypes;
+}
+/**
+ * Emit CREATE OR REPLACE VIEW + SELECT-only grants for synced tables that have
+ * a registered backing. Synced tables cannot use table-level RLS (they may be
+ * foreign tables), so claims filtering compiles into the view's WHERE clause.
+ *
+ * Each view lives in `orm_<ns>` alongside regular tables, named identically to
+ * the synced table definition so read routing is transparent.
+ */
+/**
+ * Atlas reassigns every relation in `orm_<ns>` to this role after apply.
+ * Synced views resolve backing access as their owner, so the emitter must
+ * grant this role narrow SELECT on each physical relation before CREATE VIEW.
+ */
+declare const SYNCED_VIEW_EXECUTION_OWNER_ROLE = "orm_exec";
+declare function syncedViewStatements({ definition, backings, readPolicyIrByTable, columnNamesByTable, columnTypesByTable, executionOwnerRole, }: {
+    definition: NamespaceDefinition;
+    backings: readonly SyncedBacking[];
+    /** v2 compiled read policies (preserves capability/role variants). */
+    readPolicyIrByTable?: ReadonlyMap<string, PredIr>;
+    /** Logical column name → physical backing column name per synced table. */
+    columnNamesByTable?: ReadonlyMap<string, Readonly<Record<string, string>>>;
+    /**
+     * Canonical declared types per synced table (keyed by logical AND physical
+     * name). Carries what the TableFile adapter cannot — enum types — so IN/NIN
+     * policies never silently downgrade an enum comparison to text[]-vs-enum.
+     */
+    columnTypesByTable?: ReadonlyMap<string, SyncedPredicateColumnTypes>;
+    /** Role that will own the view after ensureExecutionOwner (default orm_exec). */
+    executionOwnerRole?: string;
+}): string[];
+/**
+ * Drop synced views — idempotent cleanup for apply retries and removal.
+ */
+declare function syncedViewDropStatements({ schemaName, tables, }: {
+    schemaName: string;
+    tables: readonly string[];
+}): string[];
+/**
+ * Revoke orm_exec backing privileges for physical relations that are no longer
+ * active for this namespace (removed / renamed / rebound away).
+ */
+declare function syncedBackingRevokeStatements({ backings, executionOwnerRole, }: {
+    backings: readonly SyncedBacking[];
+    executionOwnerRole?: string;
+}): string[];
 
 declare const sqlTypeName: (type: ColumnType) => string;
 
-declare const STATEMENT_KINDS: readonly ["hint", "ddl", "security", "function"];
+declare const STATEMENT_KINDS: readonly ["hint", "ddl", "security", "function", "synced_view"];
 type StatementKind = (typeof STATEMENT_KINDS)[number];
 interface CompiledStatement {
     readonly kind: StatementKind;
@@ -605,6 +697,13 @@ declare const compileNamespace: (definition: NamespaceDefinition) => Promise<Pla
  * table handles — the same `DrizzleEntities` shape engine/snapshot.ts consumes.
  */
 declare function buildDrizzleEntitiesV2(definition: CanonicalDefinition): DrizzleEntities;
+declare function rewriteSyncedSourceRelationsInViewQuery({ query, canonical, schemaName, dependencies, }: {
+    query: string;
+    canonical: CanonicalDefinition;
+    schemaName: string;
+    /** The view's declared logical dependencies — disambiguates shared sources. */
+    dependencies?: readonly string[];
+}): string;
 /** drizzle-kit snapshot for a canonical definition — the v2 twin of engine/snapshot.ts generateSnapshot. */
 declare function generateSnapshotV2(definition: CanonicalDefinition, previousId?: string): NamespaceSnapshot;
 /**
@@ -635,6 +734,21 @@ declare function planMigrationV2({ canonical, previousSnapshot, }: {
     canonical: CanonicalDefinition;
     previousSnapshot?: NamespaceSnapshot;
 }): Promise<PlannedMigration>;
+/**
+ * Drizzle's manual-view snapshot stores declared columns, but PostgreSQL names
+ * and types the live view from the SELECT itself. Assert the live catalog in
+ * the same transaction so a stale alias/type or an incomplete dependency
+ * declaration can never be persisted as a successful schema version.
+ */
+/**
+ * Assert live view columns/types/dependencies match the canonical contract.
+ * Used by planMigrationV2 and by CASCADE recovery recreates (same transaction).
+ */
+declare function validateViewCatalogStatement({ canonical, view, schema, }: {
+    canonical: CanonicalDefinition;
+    view: NonNullable<CanonicalDefinition['views']>[number];
+    schema: string;
+}): string;
 
 declare class OrmDefinitionError extends Error {
     readonly file?: string | undefined;
@@ -815,8 +929,10 @@ declare function writeMigration({ dir, workspace, plan, contentHash, destructive
  *  - the single v1 `primary_key: true` column becomes `primaryKey: [name]`;
  *  - policy expressions carry over as their verbatim DSL source strings
  *    (re-parsed by the v2 predicate compiler, never the parsed v1 AST);
- *  - actions carry over verbatim (multi-statement `executes` lists join on
- *    ';\n' — the boundaries stay recoverable for the compiled-op executor);
+ *  - v1 actions are DROPPED, loudly: v2 has no action surface — writes are
+ *    persisted mutations — and the v1→v2 apply sweep removes the `action_*`
+ *    functions anyway. The emitter leaves a TODO listing each dropped action
+ *    so it gets re-authored as a mutation (or a CoW `overrideRowMutation`);
  *  - the capabilities block passes through untouched (verbatim custom-roles
  *    grammar in both formats);
  *  - qualified (cross-namespace) link targets have no v2 representation —
@@ -897,4 +1013,4 @@ declare function parseCanonicalDefinition(value: unknown): NamespaceDefinition;
 
 declare const parsedPredicateSchema: z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>;
 
-export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, verifyRebaseIsNoop, walkPredicate, writeMigration };
+export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompilePredIrToSqlOptions, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, PredIr, type Predicate, type PredicateColumnTypes, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, ROLES_CLAIM_KEY, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, SYNCED_VIEW_EXECUTION_OWNER_ROLE, type StatementKind, type SyncedBacking, type SyncedColumnType, type SyncedPredicateColumnTypes, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredIrToSql, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isOwnedStatementV2, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, pendingKitStatementsV2, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, rewriteSyncedSourceRelationsInViewQuery, roleExpression, securityStatements, sqlTypeName, stableJson, syncedBackingRevokeStatements, syncedTables, syncedViewDropStatements, syncedViewStatements, tableFileSchema, tableReferenceSchema, typesInterfaceName, validateViewCatalogStatement, verifyRebaseIsNoop, walkPredicate, writeMigration };

package/dist/index.d.ts

@@ -1,12 +1,15 @@
-export { ActionInput, ActionParamInput, AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, SCHEMA_DIR, SeqLink, SeqNamespaceConfig, SeqTable, SerializeNamespaceInput, SyncedTableConfig, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, deriveColumnName, endAuthoringContext, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, loadNamespaceFromDir, serializeNamespace, t, toMany, toOne, toPlatformUser } from './authoring.js';
+export { AuthoringContext, AuthoringRegistration, COLUMN_BRAND, COLUMN_DEFAULT_FNS, ColumnBuilder, ColumnDefaultFn, ColumnDefaultLiteral, ColumnTypeSpec, CowMutationInput, DrizzleRelation, ENUM_BRAND, EnumRef, IndexInput, LINK_BRAND, LinkKind, LoadNamespaceOptions, LoadedNamespaceV2, NAMESPACE_CONFIG_BRAND, NAMESPACE_CONFIG_FILE, NamespaceCapabilitiesInput, NamespaceConfigInput, ORM_TO_PIPELINE_TYPE, OrmContractColumnMap, OrmContractPipelineColumn, OrmSyncedTableContract, OrmToPipelineType, OverlayTableRef, OverlayWinsUnionInput, OverrideRowMutationInput, PolicyInput, PolicyVariantInput, PolicyWithVariantsInput, RelationRef, RevertOverlayMutationInput, SCHEMA_DIR, SYNCED_CONTRACT_HASH_DOMAIN, SeqLink, SeqNamespaceConfig, SeqTable, SeqView, SerializeNamespaceInput, SyncedTableConfig, SyncedTablePoliciesInput, TABLE_BRAND, TableConfig, TablePoliciesInput, TableRef, ToManyOptions, ToOneOptions, ToPlatformUserOptions, TypedSyncedTableConfig, VIEW_BRAND, ViewConfig, ViewPoliciesInput, ViewQueryContext, ViewSelectQuery, activeAuthoringContext, beginAuthoringContext, computeCanonicalHash, computeSyncedContractHash, defineEnum, defineNamespace, defineSyncedTable, defineTable, defineView, deriveColumnName, endAuthoringContext, extractOrmSyncedTableContract, isColumnBuilder, isEnumRef, isSeqLink, isSeqNamespaceConfig, isSeqTable, isSeqView, loadNamespaceFromDir, overlayWinsUnion, overrideRowMutation, revertOverlayMutation, serializeNamespace, syncedContractSurface, t, toMany, toOne, toPlatformUser } from './authoring.js';
 import { CanonicalDefinition } from './canonical.js';
-export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalTableSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.js';
+export { CANONICAL_FORMAT, CanonicalColumn, CanonicalEnum, CanonicalLink, CanonicalTable, CanonicalView, IDENTIFIER_RE, PolicyExpression, canonicalActionSchema, canonicalColumnSchema, canonicalDefinitionSchema, canonicalEnumSchema, canonicalIndexSchema, canonicalLinkSchema, canonicalPoliciesSchema, canonicalRelations, canonicalTableSchema, canonicalViewSchema, normalizeCanonical, policyExpressionSchema, policyVariantSchema } from './canonical.js';
 import { CustomRolesBlock } from '@sequenceholdings/custom-roles-manifest';
 export { CustomRolesBlock, capabilityPinsSchema, customRolesBlockSchema, customRolesDeclared, parseCapabilityPin, validateCapabilityPins } from '@sequenceholdings/custom-roles-manifest';
 import { z } from 'zod';
+import { PredIr } from './ir.js';
+export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.js';
 import { generateDrizzleJson } from 'drizzle-kit/api';
 import { PgTableWithColumns } from 'drizzle-orm/pg-core';
-export { CLAIMS_CONTRACT, CMP_OPS, ClaimKey, CmpOp, CompiledArtifact, CompiledOperation, INPUT_REF_KINDS, IR_VERSION, InputRefKind, IrVersionError, LimitIr, OrderIr, PredIr, RootIr, SelectionIr, TableMetaIr, ValueIr, VariableDefaultIr, VariableIr, compiledArtifactSchema, compiledOperationSchema, indexByHash, limitIrSchema, normalizeIr, orderIrSchema, predIrSchema, rootIrSchema, selectionIrSchema, tableMetaIrSchema, valueIrSchema, variableDefaultIrSchema, variableIrSchema } from './ir.js';
+import 'drizzle-orm';
+import 'drizzle-orm/query-builders/query-builder';
 
 /**
  * The reserved `namespace.yaml` — namespace-level settings beside the table
@@ -99,8 +102,8 @@ declare const actionSchema: z.ZodObject<{
     }>>>;
     audit: z.ZodOptional<z.ZodObject<{
         action: z.ZodEnum<{
-            create: "create";
             update: "update";
+            create: "create";
             delete: "delete";
         }>;
         resource: z.ZodOptional<z.ZodString>;
@@ -246,6 +249,8 @@ declare const tableFileSchema: z.ZodObject<{
     policies: z.ZodOptional<z.ZodObject<{
         read: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
         write: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
+        insert: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
+        update: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>>;
     }, z.core.$strict>>;
     actions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
@@ -282,8 +287,8 @@ declare const tableFileSchema: z.ZodObject<{
         }>>>;
         audit: z.ZodOptional<z.ZodObject<{
             action: z.ZodEnum<{
-                create: "create";
                 update: "update";
+                create: "create";
                 delete: "delete";
             }>;
             resource: z.ZodOptional<z.ZodString>;
@@ -347,6 +352,24 @@ declare function compileActionStatements(action: ActionDefinition, renderParam?:
 /** Compiled `requires` gate — a SQL boolean over the transaction claims, or null when unguarded. */
 declare function compileActionRequires(action: ActionDefinition): string | null;
 
+/** Canonical column types can be enums — v1 `PredicateColumnTypes` cannot carry them. */
+type SyncedColumnType = ColumnType | {
+    readonly enum: string;
+};
+type SyncedPredicateColumnTypes = Readonly<Record<string, SyncedColumnType>>;
+interface CompilePredIrToSqlOptions {
+    /** Column name → declared type, for claim casts in comparisons. */
+    readonly columnTypes?: SyncedPredicateColumnTypes;
+    /** Logical column name → physical column name for the synced backing. */
+    readonly columnNames?: Readonly<Record<string, string>>;
+}
+/**
+ * PredIr → a static SQL boolean for synced-view WHERE clauses. Capability and
+ * role leaves stay as runtime claim checks (mirroring table RLS), unlike the
+ * data-plane executor which pre-resolves them per caller.
+ */
+declare function compilePredIrToSql(pred: PredIr, options?: CompilePredIrToSqlOptions): string;
+
 declare const COMPARE_OPS: readonly ["=", "!=", "<", "<=", ">", ">="];
 type CompareOp = (typeof COMPARE_OPS)[number];
 type Operand = {
@@ -395,11 +418,15 @@ declare function compilePredicate(predicate: Predicate, columnTypes?: PredicateC
 declare const CLAIMS_SETTING = "request.jwt.claims";
 /** Claims JSON key holding the caller's granted capability pins (a string array). */
 declare const CAPABILITIES_CLAIM_KEY = "capabilities";
+/** Claims JSON key holding the caller's granted custom roles (a string array). */
+declare const ROLES_CLAIM_KEY = "roles";
 declare const quoteIdentifier: (name: string) => string;
 declare const quoteLiteral: (value: string) => string;
 declare const claimExpression: (key: string) => string;
 /** NULL claims (or a missing capabilities array) coalesce to false — capability checks fail closed. */
 declare const capabilityExpression: (key: string) => string;
+/** NULL claims (or a missing roles array) coalesce to false — role checks fail closed. */
+declare const roleExpression: (key: string) => string;
 
 /** Namespace names become Postgres identifiers (`orm_<ns>` schema, `orm_<ns>_consumer` role) — the tight grammar is a security control, not cosmetics. */
 declare const NAMESPACE_PATTERN: RegExp;
@@ -494,6 +521,7 @@ declare function applyMigrationHints(previous: NamespaceSnapshot, definition: Na
  * pending statement and lets a non-converged schema pass.
  */
 declare function isOwnedStatement(statement: string): boolean;
+declare function isOwnedStatementV2(statement: string): boolean;
 /**
  * The kit-owned statements a live database would still need to match the
  * definition — drizzle-kit's `pushSchema` introspection diffed against the
@@ -506,6 +534,12 @@ declare function pendingKitStatements({ definition, db, }: {
     /** A drizzle PgDatabase over the target — typed loose because pushSchema's own parameter is `PgDatabase<any>`. */
     db: unknown;
 }): Promise<string[]>;
+/** V2 convergence includes managed regular views in drizzle-kit's verdict. */
+declare function pendingKitStatementsV2({ canonical, db, }: {
+    canonical: CanonicalDefinition;
+    /** A drizzle PgDatabase over the target — typed loose because pushSchema's own parameter is `PgDatabase<any>`. */
+    db: unknown;
+}): Promise<string[]>;
 
 interface DrizzleEntities {
     /** The in-memory schema bag drizzle-kit snapshots (`generateDrizzleJson(imports)`). */
@@ -569,10 +603,68 @@ declare function actionPrepareChecks(definition: NamespaceDefinition): string[];
  * write-capable callers SELECT rows the read policy hides.
  */
 declare function securityStatements(definition: NamespaceDefinition): string[];
+declare const syncedTables: (definition: NamespaceDefinition) => TableFile[];
+/**
+ * A resolved synced-table backing: the physical Lakebase relation name
+ * (captured at provision, never derived) plus optional projection column
+ * types for claim-cast compilation.
+ */
+interface SyncedBacking {
+    readonly table: string;
+    /** Physical Lakebase relation (e.g. `synced_loans` or `df_retail_customers`). */
+    readonly physicalRelation: string;
+    /** Column name → ORM column type, for claim casts in the view's WHERE. */
+    readonly columnTypes?: PredicateColumnTypes;
+}
+/**
+ * Emit CREATE OR REPLACE VIEW + SELECT-only grants for synced tables that have
+ * a registered backing. Synced tables cannot use table-level RLS (they may be
+ * foreign tables), so claims filtering compiles into the view's WHERE clause.
+ *
+ * Each view lives in `orm_<ns>` alongside regular tables, named identically to
+ * the synced table definition so read routing is transparent.
+ */
+/**
+ * Atlas reassigns every relation in `orm_<ns>` to this role after apply.
+ * Synced views resolve backing access as their owner, so the emitter must
+ * grant this role narrow SELECT on each physical relation before CREATE VIEW.
+ */
+declare const SYNCED_VIEW_EXECUTION_OWNER_ROLE = "orm_exec";
+declare function syncedViewStatements({ definition, backings, readPolicyIrByTable, columnNamesByTable, columnTypesByTable, executionOwnerRole, }: {
+    definition: NamespaceDefinition;
+    backings: readonly SyncedBacking[];
+    /** v2 compiled read policies (preserves capability/role variants). */
+    readPolicyIrByTable?: ReadonlyMap<string, PredIr>;
+    /** Logical column name → physical backing column name per synced table. */
+    columnNamesByTable?: ReadonlyMap<string, Readonly<Record<string, string>>>;
+    /**
+     * Canonical declared types per synced table (keyed by logical AND physical
+     * name). Carries what the TableFile adapter cannot — enum types — so IN/NIN
+     * policies never silently downgrade an enum comparison to text[]-vs-enum.
+     */
+    columnTypesByTable?: ReadonlyMap<string, SyncedPredicateColumnTypes>;
+    /** Role that will own the view after ensureExecutionOwner (default orm_exec). */
+    executionOwnerRole?: string;
+}): string[];
+/**
+ * Drop synced views — idempotent cleanup for apply retries and removal.
+ */
+declare function syncedViewDropStatements({ schemaName, tables, }: {
+    schemaName: string;
+    tables: readonly string[];
+}): string[];
+/**
+ * Revoke orm_exec backing privileges for physical relations that are no longer
+ * active for this namespace (removed / renamed / rebound away).
+ */
+declare function syncedBackingRevokeStatements({ backings, executionOwnerRole, }: {
+    backings: readonly SyncedBacking[];
+    executionOwnerRole?: string;
+}): string[];
 
 declare const sqlTypeName: (type: ColumnType) => string;
 
-declare const STATEMENT_KINDS: readonly ["hint", "ddl", "security", "function"];
+declare const STATEMENT_KINDS: readonly ["hint", "ddl", "security", "function", "synced_view"];
 type StatementKind = (typeof STATEMENT_KINDS)[number];
 interface CompiledStatement {
     readonly kind: StatementKind;
@@ -605,6 +697,13 @@ declare const compileNamespace: (definition: NamespaceDefinition) => Promise<Pla
  * table handles — the same `DrizzleEntities` shape engine/snapshot.ts consumes.
  */
 declare function buildDrizzleEntitiesV2(definition: CanonicalDefinition): DrizzleEntities;
+declare function rewriteSyncedSourceRelationsInViewQuery({ query, canonical, schemaName, dependencies, }: {
+    query: string;
+    canonical: CanonicalDefinition;
+    schemaName: string;
+    /** The view's declared logical dependencies — disambiguates shared sources. */
+    dependencies?: readonly string[];
+}): string;
 /** drizzle-kit snapshot for a canonical definition — the v2 twin of engine/snapshot.ts generateSnapshot. */
 declare function generateSnapshotV2(definition: CanonicalDefinition, previousId?: string): NamespaceSnapshot;
 /**
@@ -635,6 +734,21 @@ declare function planMigrationV2({ canonical, previousSnapshot, }: {
     canonical: CanonicalDefinition;
     previousSnapshot?: NamespaceSnapshot;
 }): Promise<PlannedMigration>;
+/**
+ * Drizzle's manual-view snapshot stores declared columns, but PostgreSQL names
+ * and types the live view from the SELECT itself. Assert the live catalog in
+ * the same transaction so a stale alias/type or an incomplete dependency
+ * declaration can never be persisted as a successful schema version.
+ */
+/**
+ * Assert live view columns/types/dependencies match the canonical contract.
+ * Used by planMigrationV2 and by CASCADE recovery recreates (same transaction).
+ */
+declare function validateViewCatalogStatement({ canonical, view, schema, }: {
+    canonical: CanonicalDefinition;
+    view: NonNullable<CanonicalDefinition['views']>[number];
+    schema: string;
+}): string;
 
 declare class OrmDefinitionError extends Error {
     readonly file?: string | undefined;
@@ -815,8 +929,10 @@ declare function writeMigration({ dir, workspace, plan, contentHash, destructive
  *  - the single v1 `primary_key: true` column becomes `primaryKey: [name]`;
  *  - policy expressions carry over as their verbatim DSL source strings
  *    (re-parsed by the v2 predicate compiler, never the parsed v1 AST);
- *  - actions carry over verbatim (multi-statement `executes` lists join on
- *    ';\n' — the boundaries stay recoverable for the compiled-op executor);
+ *  - v1 actions are DROPPED, loudly: v2 has no action surface — writes are
+ *    persisted mutations — and the v1→v2 apply sweep removes the `action_*`
+ *    functions anyway. The emitter leaves a TODO listing each dropped action
+ *    so it gets re-authored as a mutation (or a CoW `overrideRowMutation`);
  *  - the capabilities block passes through untouched (verbatim custom-roles
  *    grammar in both formats);
  *  - qualified (cross-namespace) link targets have no v2 representation —
@@ -897,4 +1013,4 @@ declare function parseCanonicalDefinition(value: unknown): NamespaceDefinition;
 
 declare const parsedPredicateSchema: z.ZodPipe<z.ZodString, z.ZodTransform<ParsedPredicate, string>>;
 
-export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, type Predicate, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, type StatementKind, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, securityStatements, sqlTypeName, stableJson, tableFileSchema, tableReferenceSchema, typesInterfaceName, verifyRebaseIsNoop, walkPredicate, writeMigration };
+export { ACTION_REQUIRES_DENIED_SQLSTATE, ACTION_VALIDATES_FAILED_SQLSTATE, AUDIT_ACTIONS, type ActionDefinition, CAPABILITIES_CLAIM_KEY, CAPABILITY_KEY_PATTERN, CLAIMS_SETTING, CLAIM_KEY_PATTERN, COLUMN_TYPES, COMPARE_OPS, CONSUMER_ROLE_SUFFIX, CanonicalDefinition, type ColumnDefault, type ColumnDefinition, type ColumnType, type CommittedChainEntry, type CommittedMigration, type CompareOp, type CompilePredIrToSqlOptions, type CompiledStatement, DEFINITION_FILE_EXTENSIONS, type DefinitionFile, type DefinitionSource, type DestructiveStatement, type DiffOptions, type DrizzleEntities, HASH_DOMAIN, IDENTIFIER_PATTERN, type IndexDefinition, type JournalEntry, type LinkDefinition, type LoadedNamespace, MAX_DEFINITION_FILE_BYTES, MAX_IDENTIFIER_LENGTH, MIGRATIONS_DIRNAME, type MigrationJournal, type MigrationWorkspace, NAMESPACE_CONFIG_FILENAMES, NAMESPACE_PATTERN, type NamespaceCapabilities, type NamespaceConfig, type NamespaceDefinition, type NamespaceSnapshot, ORM_DATA_TOKEN_HEADER, ORM_SCHEMA_PREFIX, ORM_SERVICE_DATA_TOKEN_HEADER, type Operand, OrmDefinitionError, type ParsedPredicate, type PlannedMigration, PredIr, type Predicate, type PredicateColumnTypes, PredicateParseError, QUALIFIED_TABLE_PATTERN, RESERVED_COLUMN_NAMES, RESERVED_TABLE_NAMES, ROLES_CLAIM_KEY, type RebaseEntry, type RebaseEntryInput, type RebaseNoopOptions, STATEMENT_KINDS, SYNCED_SOURCE_PATTERN, SYNCED_VIEW_EXECUTION_OWNER_ROLE, type StatementKind, type SyncedBacking, type SyncedColumnType, type SyncedPredicateColumnTypes, type TableFile, type ValidatesEntry, type WrittenMigration, actionFunctionName, actionFunctionStatements, actionParamArg, actionParamOrder, actionParamSchema, actionPrepareChecks, actionSchema, actionWriteTargets, actionsInterfaceName, applyMigrationHints, applyMigrationHintsV2, buildActionParamsSchema, buildDrizzleEntities, buildDrizzleEntitiesV2, buildNamespaceDefinition, buildRebaseJournalEntry, canonicalizeDefinition, capabilityExpression, castParts, checksumOf, claimExpression, classifyDestructive, columnSchema, columnTypeSchema, compileActionRequires, compileActionStatements, compileNamespace, compilePredIrToSql, compilePredicate, computeDefinitionHash, consumerRoleName, convertV1DefinitionToCanonical, declaredCapabilityKeys, diffCommand, diffStatements, emptyJournal, emptySnapshot, extractNamedParams, generateNamespaceTypes, generateSnapshot, generateSnapshotV2, identifierSchema, isFunctionDefault, isOwnedStatement, isOwnedStatementV2, isQualifiedReference, loadCommittedMigrations, loadCommittedTipMigration, loadNamespaceDefinition, migrationName, namespaceConfigSchema, namespaceSchema, normalizeSnapshot, ormSchemaName, parseCanonicalDefinition, parseDefinitionSources, parsePredicate, parseTableFile, parsedPredicateSchema, pendingKitStatements, pendingKitStatementsV2, planMigration, planMigrationV2, predicateOperands, quoteIdentifier, quoteLiteral, readMigrationSql, readMigrationWorkspace, readSnapshot, rebaseViolations, referencedCapabilities, referencedColumns, renderMigrationSql, rewriteSyncedSourceRelationsInViewQuery, roleExpression, securityStatements, sqlTypeName, stableJson, syncedBackingRevokeStatements, syncedTables, syncedViewDropStatements, syncedViewStatements, tableFileSchema, tableReferenceSchema, typesInterfaceName, validateViewCatalogStatement, verifyRebaseIsNoop, walkPredicate, writeMigration };