@substrat-run/kernel 0.147.0 → 0.149.0

package/dist/migration-fence.js

@@ -0,0 +1,515 @@
+/**
+ * The data-loss fence: an authored migration may not lose data a scope holds unless it says so (#115).
+ *
+ * The planner (`@substrat-run/model-emit`) refuses every destructive diff when it writes a
+ * migration, but nothing judged what an AUTHORED migration does to the rows already there: a
+ * hand-written `DROP TABLE`, a `DROP COLUMN`, a `DELETE`, or a create-copy-rename rebuild that
+ * forgot a column ran unchecked against a scope full of data. This is the check, and it reads
+ * what the SQL DID rather than what its text says, so there is no SQL grammar to get wrong.
+ *
+ * **Measured, not parsed.** Parsing decides only whether to measure: a migration made only of
+ * provably additive statements (`CREATE …`, `ALTER TABLE … ADD …`) cannot lose anything and is not
+ * measured. Any other statement (any DML, `DROP`, `ALTER … RENAME`/`DROP COLUMN`, `PRAGMA`, `WITH`,
+ * a shape nobody listed) measures EVERY module table, not just the ones it names, so a trigger or a
+ * foreign-key cascade that reaches another table is seen too. Measured, per table: the rows, and
+ * per column the values in each storage class (`typeof`). Once before the first statement and
+ * once after the last, inside the migration's transaction, so the intermediate states of a rebuild
+ * do not matter and a refusal rolls the whole migration back. Every measuring query stays inside a
+ * Durable Object's own limits (`DO_SQL_LIMITS`), or the fence would close a scope for a reason of
+ * its own.
+ *
+ * **Production data is rows that exist.** A table with no rows may be dropped or rebuilt freely,
+ * whatever else is true of the scope; the same migration is refused in a scope where it would
+ * lose something. There is no phase flag to forget to flip.
+ *
+ * **What counts as a loss**, for a table that held rows: it is gone (under the name `ALTER TABLE …
+ * RENAME TO` last gave it, or under its original name, so a rebuild back into place keeps it —
+ * each table after the migration is claimed by one table before it, a rename first, and a `DROP
+ * TABLE` releases the name it removed); it has fewer
+ * rows; one of its columns that held values is gone (`RENAME COLUMN` is followed) or holds fewer
+ * of them in some storage class — which is how a retype shows, `'1.50'` turning into `1`. Counts
+ * cannot tell a faithful widening (`5` → `5.0`) from a rewrite (`5` → `0.05`), so any change of
+ * storage class is reported, and one made on purpose is declared with `discards`. `NOT NULL`
+ * without a default needs no rule: SQLite refuses it itself.
+ *
+ * **What it does not see**, because it counts — the residual classes, each named in the property
+ * test (`migration-fence.property.test.ts`) that holds the rest to ground truth:
+ * - in-place replacement: values rewritten at the same count and class (`UPDATE`), rows replaced
+ *   by as many other rows (`DELETE` + `INSERT`), or a column dropped, re-added and refilled;
+ * - a dropped table whose name is continued by a table the migration created, filled from
+ *   somewhere else, holding at least as many rows, even renamed away again (`DROP TABLE a; CREATE
+ *   TABLE a AS SELECT * FROM b`, or `…; CREATE TABLE n AS SELECT * FROM b; ALTER TABLE n RENAME TO
+ *   a; ALTER TABLE a RENAME TO d`): counts cannot tell it from the create-copy-drop-rename
+ *   rebuild, or a rename after it, which the fence must accept;
+ * - which source a move's target gained from: a target is credited with everything it gained.
+ * And one refusal by design: data copied under another table's name is refused until `moves`
+ * declares it.
+ *
+ * **Declared losses pass.** `SqlMigration.moves` names data that went elsewhere, and is verified:
+ * the target must GAIN at least what its sources held, per class — and for a table moved whole,
+ * every source column that held values must arrive in a target column of the same name, unless
+ * that column is moved or discarded by name itself. `SqlMigration.discards` names data
+ * deliberately given up, with the reason a reviewer reads. A declaration naming a table or column
+ * the scope does not hold before the migration (a move's target excepted, which the migration may
+ * create) is an authoring error and refuses the migration too.
+ *
+ * **TEMP objects are refused.** A Durable Object refuses them outright, so a migration making one
+ * could never run on the hosted adapter, and a TEMP table shadows the scope's own tables for every
+ * unqualified statement after it. An authored migration that makes one is refused before it runs,
+ * on both adapters, and every measuring read names `main` so nothing else can answer for a table.
+ *
+ * **ATTACH and DETACH are refused** for the same first reason (#2321): a Durable Object refuses
+ * them, so the migration could never run hosted. And an attached database is a FILE, which the
+ * fence does not measure and a replay outside a host (`substrat push`) would otherwise create on
+ * the machine running it. Refused before anything runs, on both adapters.
+ *
+ * Kernel-derived DDL is exempt: its tables are indexes, rebuilt from the data this protects.
+ */
+import { blankReason, namesSpineTable, substratError, tokenizeSql } from '@substrat-run/contracts';
+import { DO_SQL_LIMITS } from './sql-limits.js';
+import { executableSqlStatements } from './sql-statements.js';
+/** The storage classes a value can have; NULL is not a value. */
+const CLASSES = ['integer', 'real', 'text', 'blob'];
+/**
+ * Columns measured per query: each one is a result column per storage class, and a Durable
+ * Object refuses a result set wider than `DO_SQL_LIMITS.columns`.
+ */
+const COLUMNS_PER_SCAN = Math.floor(DO_SQL_LIMITS.columns / CLASSES.length);
+/** SQLite folds ASCII letters only: `"ä"` and `"Ä"` are two tables, and must stay two keys. */
+const lower = (s) => s.replace(/[A-Z]+/g, (m) => m.toLowerCase());
+const quote = (name) => `"${name.replace(/"/g, '""')}"`;
+const total = (c) => CLASSES.reduce((n, k) => n + c[k], 0);
+const NONE = { integer: 0, real: 0, text: 0, blob: 0 };
+/** The words of one statement, keywords lowercased; quoted names are kept apart from keywords. */
+function words(statement) {
+    return tokenizeSql(statement).map((t) => ({ text: t.quoted ? t.text : lower(t.text), quoted: t.quoted, parts: t.parts }));
+}
+/**
+ * The schema a name token names, and the name in it, as SQLite reads them: `main.n` and
+ * `"main"."n"` are `main` and `n`; `"main.n"` is ONE identifier, a name with a dot in it and no
+ * schema. The one reading of a qualifier, for the `temp` check and for following `main` names.
+ */
+function schemaAndName(w) {
+    const parts = w.parts ?? [w.text];
+    return parts.length === 2 ? { schema: lower(parts[0]), name: parts[1] } : { name: parts.join('.') };
+}
+/** A table name as the main schema holds it, or a name no main table has if another schema is named. */
+function mainName(w) {
+    const { schema, name } = schemaAndName(w);
+    return schema === undefined || schema === 'main' ? lower(name) : `\u0000${schema}.${lower(name)}`;
+}
+/** A statement that can only define something: it fires nothing and removes nothing. */
+function additive(statement) {
+    const w = words(statement);
+    const kw = (i) => (w[i] && !w[i].quoted ? w[i].text : undefined);
+    if (kw(0) === 'create')
+        return true;
+    // `ALTER TABLE <name> ADD [COLUMN] …` — the name is one token, dotted or not.
+    return kw(0) === 'alter' && kw(1) === 'table' && kw(3) === 'add';
+}
+/**
+ * The tables a virtual-table module keeps behind each virtual table, by suffix. Only these exact
+ * names are left out: a real table that merely starts with a virtual table's name is measured. A
+ * module not listed here has its shadow tables measured too, which can refuse a migration that
+ * only reshaped an index — the conservative answer.
+ */
+const SHADOW_SUFFIXES = {
+    fts5: ['data', 'idx', 'content', 'docsize', 'config'],
+    fts4: ['content', 'segments', 'segdir', 'docsize', 'stat'],
+    fts3: ['content', 'segments', 'segdir', 'docsize', 'stat'],
+    rtree: ['node', 'parent', 'rowid'],
+};
+/**
+ * The tables the fence measures, as SQLite names them: the scope's own, without the spine,
+ * SQLite's and workerd's internals, virtual tables (an index over data held elsewhere, or a
+ * module's own store the fence cannot count without its content table) and their shadow tables.
+ * Exported so a replay outside a host (`lint:migration-fence`) populates exactly what is measured.
+ */
+export function fencedTables(sql) {
+    const rows = sql.query("SELECT name, sql FROM main.sqlite_master WHERE type = 'table'");
+    const own = rows.filter((r) => {
+        const n = lower(r.name);
+        return !namesSpineTable(n) && !n.startsWith('sqlite_') && !n.startsWith('_cf_');
+    });
+    const skip = new Set();
+    for (const r of own) {
+        const m = /^\s*create\s+virtual\s+table\s+.*?\busing\s+(\w+)/is.exec(r.sql ?? '');
+        if (!m)
+            continue;
+        const name = lower(r.name);
+        skip.add(name);
+        for (const suffix of SHADOW_SUFFIXES[lower(m[1])] ?? [])
+            skip.add(`${name}_${suffix}`);
+    }
+    return own.map((r) => r.name).filter((name) => !skip.has(lower(name)));
+}
+function measure(sql) {
+    const out = new Map();
+    for (const table of fencedTables(sql)) {
+        // Qualified: a TEMP object of the same name would otherwise answer for the scope's table.
+        const names = sql.query("SELECT name FROM pragma_table_info(?, 'main')", [table]).map((c) => c.name);
+        const rows = Number(sql.query(`SELECT COUNT(*) AS n FROM main.${quote(table)}`)[0].n);
+        const columns = new Map();
+        for (let at = 0; at < names.length && rows > 0; at += COLUMNS_PER_SCAN) {
+            const chunk = names.slice(at, at + COLUMNS_PER_SCAN);
+            const select = chunk.flatMap((c, i) => CLASSES.map((k) => `COALESCE(SUM(typeof(${quote(c)}) = '${k}'), 0) AS c${i}_${k}`));
+            const r = sql.query(`SELECT ${select.join(', ')} FROM main.${quote(table)}`)[0];
+            chunk.forEach((c, i) => {
+                columns.set(lower(c), Object.fromEntries(CLASSES.map((k) => [k, Number(r[`c${i}_${k}`])])));
+            });
+        }
+        if (rows === 0)
+            for (const c of names)
+                columns.set(lower(c), NONE);
+        out.set(lower(table), { rows, columns });
+    }
+    return out;
+}
+function targetOf(spec) {
+    const parts = spec.trim().split('.');
+    if (parts.length > 2 || parts.some((p) => p === ''))
+        return undefined;
+    return parts.length === 1 ? { table: lower(parts[0]) } : { table: lower(parts[0]), column: lower(parts[1]) };
+}
+const show = (t) => (t.column ? `${t.table}.${t.column}` : t.table);
+/** What a column a `DROP COLUMN` removed maps to: a name no column after the migration has. */
+const DROPPED = '\u0000dropped';
+/**
+ * Statement by statement, which original table holds each name right now. A name is held by at
+ * most one table — SQLite refuses a rename onto a name that exists — so a `DROP TABLE` releases it
+ * and a later rename onto it is that table's alone, whatever order the scope created them in.
+ *
+ * A table this migration made, renamed onto a dropped table's ORIGINAL name, continues the dropped
+ * one: that is the create-copy-drop-rename rebuild, which the counts then judge, and its later
+ * renames, of the table or its columns, are followed. A bare `CREATE TABLE` at that name is not a
+ * continuation: renames after it are not followed, which can only refuse.
+ */
+function followRenames(statements, before) {
+    const tables = new Map([...before.keys()].map((t) => [t, [t]]));
+    const columns = new Map([...before].map(([t, c]) => [t, new Map([...c.columns.keys()].map((k) => [k, k]))]));
+    const holder = new Map([...before.keys()].map((t) => [t, t]));
+    const dropped = new Set();
+    const rebuilt = new Set();
+    const rebuiltAt = (name) => {
+        if (!dropped.has(name) || holder.has(name))
+            return;
+        dropped.delete(name);
+        rebuilt.add(name);
+        holder.set(name, name);
+        tables.get(name).push(name);
+    };
+    for (const statement of statements) {
+        const w = words(statement);
+        const kw = (i) => (w[i] && !w[i].quoted ? w[i].text : undefined);
+        if (kw(0) === 'drop' && kw(1) === 'table') {
+            const at = kw(2) === 'if' && kw(3) === 'exists' ? 4 : 2;
+            if (!w[at])
+                continue;
+            const name = mainName(w[at]);
+            const original = holder.get(name);
+            if (original === undefined)
+                continue;
+            holder.delete(name);
+            dropped.add(original);
+            continue;
+        }
+        if (kw(0) !== 'alter' || kw(1) !== 'table' || !w[2])
+            continue;
+        const table = mainName(w[2]);
+        const original = holder.get(table);
+        if (!original) {
+            // A table this migration made, renamed onto a dropped table's original name: the rebuild.
+            if (kw(3) === 'rename' && kw(4) === 'to' && w[5])
+                rebuiltAt(mainName(w[5]));
+            continue;
+        }
+        const renamed = columns.get(original);
+        if (kw(3) === 'drop') {
+            // DROP [COLUMN] c: the column is gone, and its name is free for a later rename.
+            const k = kw(4) === 'column' ? 5 : 4;
+            if (!w[k])
+                continue;
+            const name = lower(w[k].text);
+            for (const [orig, current] of renamed)
+                if (current === name)
+                    renamed.set(orig, DROPPED);
+            continue;
+        }
+        if (kw(3) !== 'rename')
+            continue;
+        if (kw(4) === 'to' && w[5]) {
+            holder.delete(table);
+            holder.set(mainName(w[5]), original);
+            tables.get(original).push(mainName(w[5]));
+        }
+        else {
+            // RENAME [COLUMN] a TO b
+            const k = kw(4) === 'column' ? 5 : 4;
+            if (!w[k] || kw(k + 1) !== 'to' || !w[k + 2])
+                continue;
+            const from = lower(w[k].text);
+            const to = lower(w[k + 2].text);
+            for (const [orig, current] of renamed)
+                if (current === from)
+                    renamed.set(orig, to);
+        }
+    }
+    return { tables, columns, dropped, rebuilt };
+}
+/**
+ * Which table after the migration each table before it became, one to one. A table renamed onto a
+ * name that exists afterwards, and not dropped since, claims it first; every other table falls
+ * back to its original name, then (unless it was dropped) to an earlier name it carried — never
+ * to a name another table already claimed. So
+ * `DROP TABLE b; ALTER TABLE a RENAME TO b` leaves `b` to `a`, and the `b` that was dropped is
+ * gone. Undefined: the table is gone.
+ */
+function endsOf(before, after, renames) {
+    const ends = new Map();
+    const claimed = new Set();
+    for (const [table, names] of renames.tables) {
+        const last = names[names.length - 1];
+        // `holder` gave each name to one table at a time, so two undropped tables cannot end on one.
+        if (names.length > 1 && !renames.dropped.has(table) && after.has(last)) {
+            // A rebuilt table may carry a column under its original name, so it is not followed strictly.
+            ends.set(table, { end: last, followed: !renames.rebuilt.has(table) });
+            claimed.add(last);
+        }
+    }
+    for (const [table, names] of renames.tables) {
+        if (ends.has(table) || !before.has(table))
+            continue;
+        // A dropped table may come back only under its original name — a rebuild back into place. A
+        // name it carried before the drop now belongs to whatever was created there afterwards.
+        const candidates = renames.dropped.has(table) ? [table] : [table, ...[...names].reverse()];
+        const end = candidates.find((n) => after.has(n) && !claimed.has(n));
+        if (end !== undefined)
+            claimed.add(end);
+        // Followed strictly only when the table never moved: a table rebuilt back into place (moved
+        // aside, or dropped and recreated) may carry a column under its original name.
+        const followed = names.length === 1 && !renames.dropped.has(table);
+        ends.set(table, end === undefined ? undefined : { end, followed });
+    }
+    return ends;
+}
+/**
+ * Compare the two measures: every table that held rows, and every column that held values, must
+ * still hold at least as much — following renames — unless it is moved or discarded.
+ */
+function lossesOf(before, after, renames) {
+    const losses = [];
+    const ends = endsOf(before, after, renames);
+    for (const [table, b] of before) {
+        if (b.rows === 0)
+            continue;
+        const resolved = ends.get(table);
+        if (resolved === undefined) {
+            losses.push({ target: { table }, what: `table ${table} held ${b.rows} row(s) and is gone` });
+            continue;
+        }
+        const a = after.get(resolved.end);
+        if (a.rows < b.rows)
+            losses.push({ target: { table }, what: `table ${table} held ${b.rows} row(s), now ${a.rows}` });
+        const renamed = renames.columns.get(table);
+        for (const [column, held] of b.columns) {
+            if (total(held) === 0)
+                continue;
+            // Followed through its renames; on a table rebuilt back into place, the rename the old table
+            // took before it moved aside still names the column, and its original name is the fallback.
+            const mapped = renamed.get(column);
+            // A column a `DROP COLUMN` removed is gone, whatever later takes its name.
+            const kept = mapped === DROPPED ? undefined : (a.columns.get(mapped) ?? (resolved.followed ? undefined : a.columns.get(column)));
+            // A kernel-derived column (`_substrat_archived_at`, …) leaving is the kernel's own check's to
+            // refuse, right after this one in the same transaction (#2090), with the remedy that fits:
+            // no declaration can excuse it. Its VALUES are still held here.
+            if (kept === undefined && namesSpineTable(column))
+                continue;
+            const target = { table, column };
+            if (kept === undefined) {
+                losses.push({ target, what: `column ${table}.${column} held ${total(held)} value(s) and is gone` });
+                continue;
+            }
+            const short = CLASSES.filter((k) => kept[k] < held[k]);
+            if (short.length > 0) {
+                losses.push({
+                    target,
+                    what: `column ${table}.${column} held ${total(held)} value(s), now ${total(kept)}` +
+                        (total(kept) >= total(held) ? ` (${short.map((k) => `${k} ${held[k]} → ${kept[k]}`).join(', ')}: retyped)` : ''),
+                });
+            }
+        }
+    }
+    return losses;
+}
+const declarationError = (key, message, reason = 'migration_declaration') => substratError('validation_failed', `migration ${key}: ${message} (#115)`, { reason });
+/**
+ * A statement that makes a TEMP object: `CREATE TEMP|TEMPORARY …`, or one named into the `temp`
+ * schema (`CREATE TABLE temp.x`, `"temp"."x"`), however the name is spelled.
+ */
+function createsTemp(statement) {
+    const w = words(statement);
+    const kw = (i) => (w[i] && !w[i].quoted ? w[i].text : undefined);
+    if (kw(0) !== 'create')
+        return false;
+    if (kw(1) === 'temp' || kw(1) === 'temporary')
+        return true;
+    let at = 1;
+    if (kw(at) === 'unique' || kw(at) === 'virtual')
+        at += 1;
+    if (!['table', 'view', 'index', 'trigger'].includes(kw(at) ?? ''))
+        return false;
+    at += 1;
+    if (kw(at) === 'if' && kw(at + 1) === 'not' && kw(at + 2) === 'exists')
+        at += 3;
+    // `"temp.x"` is one identifier, a main table whose name holds a dot; `temp.x` is the schema.
+    return w[at] !== undefined && schemaAndName(w[at]).schema === 'temp';
+}
+/** A statement that attaches or detaches a database: `ATTACH [DATABASE] …`, `DETACH [DATABASE] …`. */
+function attaches(statement) {
+    const w = words(statement);
+    return w[0] !== undefined && !w[0].quoted && (w[0].text === 'attach' || w[0].text === 'detach');
+}
+/**
+ * What a declaration counts: a column's values per class, or a table's rows — carried in one
+ * class slot so a move compares tables and columns with the same loop.
+ */
+function countOf(m, t) {
+    const table = m.get(t.table);
+    if (!table)
+        return undefined;
+    if (!t.column)
+        return { ...NONE, integer: table.rows };
+    return table.columns.get(t.column);
+}
+const covers = (declared, lost) => declared.table === lost.table && (declared.column === undefined || declared.column === lost.column);
+/** Each class `got` falls short of `need`, as `<class> <need> → <got>`. */
+const shortfall = (need, got) => CLASSES.filter((k) => got[k] < need[k]).map((k) => `${k} ${need[k]} → ${got[k]}`);
+const plus = (a, b) => Object.fromEntries(CLASSES.map((k) => [k, a[k] + b[k]]));
+const gain = (before, after) => Object.fromEntries(CLASSES.map((k) => [k, (after?.[k] ?? 0) - (before?.[k] ?? 0)]));
+/**
+ * Verify the declared moves: each target gained, per class, what its sources held; and a table
+ * moved whole brought every column that held values into a target column of the same name, unless
+ * that column is declared by name itself.
+ */
+function moveFailures(before, after, moves, discards) {
+    const failures = [];
+    const byTarget = new Map();
+    for (const m of moves) {
+        const entry = byTarget.get(show(m.target)) ?? { target: m.target, sources: [] };
+        entry.sources.push(m.source);
+        byTarget.set(show(m.target), entry);
+    }
+    for (const { target, sources } of byTarget.values()) {
+        if (!countOf(after, target)) {
+            failures.push(`moves names ${show(target)} as a target, which does not exist after the migration`);
+            continue;
+        }
+        const need = sources.reduce((n, s) => plus(n, countOf(before, s)), NONE);
+        const gained = gain(countOf(before, target), countOf(after, target));
+        const short = shortfall(need, gained);
+        if (short.length > 0) {
+            const from = `moves into ${show(target)} from ${sources.map(show).join(', ')}`;
+            failures.push(target.column
+                ? `${from}: the sources' values did not all arrive (${short.join(', ')})`
+                : `${from}: the sources held ${need.integer} row(s), the target gained ${gained.integer}`);
+        }
+        if (target.column)
+            continue;
+        // A table moved whole: its columns arrive by name, unless declared by name.
+        const byColumn = new Map();
+        for (const source of sources) {
+            for (const [column, held] of before.get(source.table).columns) {
+                const named = { table: source.table, column };
+                if (total(held) === 0 || namesSpineTable(column))
+                    continue;
+                if (moves.some((m) => m.source.column === column && m.source.table === source.table))
+                    continue;
+                if (discards.some((d) => covers(d, named)))
+                    continue;
+                const entry = byColumn.get(column) ?? { need: NONE, from: [] };
+                byColumn.set(column, { need: plus(entry.need, held), from: [...entry.from, show(named)] });
+            }
+        }
+        for (const [column, { need: held, from }] of byColumn) {
+            const into = { table: target.table, column };
+            const now = countOf(after, into);
+            const missing = now === undefined ? [] : shortfall(held, gain(countOf(before, into), now));
+            if (now === undefined || missing.length > 0) {
+                failures.push(`moves ${from.join(', ')} into ${target.table}, but ${now === undefined ? `${show(into)} does not exist` : `${show(into)} did not gain them (${missing.join(', ')})`} — ` +
+                    `move the column by name (moves: { '${from[0]}': '<table.column>' }) or discard it`);
+            }
+        }
+    }
+    return failures;
+}
+/**
+ * Wrap one authored migration's execution in the fence. `run` executes every statement of it; it
+ * runs inside the caller's transaction, so a throw from here rolls all of it back.
+ */
+export function fenceMigration(sql, migration, key, run) {
+    const statements = executableSqlStatements(migration.sql);
+    const temp = statements.find(createsTemp);
+    if (temp !== undefined) {
+        throw declarationError(key, `it creates a TEMP object (\`${temp.slice(0, 80)}\`). A Durable Object refuses TEMP objects, so this migration ` +
+            'cannot run on the hosted adapter, and a TEMP table shadows the scope\'s own tables for every unqualified statement ' +
+            'after it. Use a regular table and DROP it before the migration ends', 'migration_temp');
+    }
+    const attach = statements.find(attaches);
+    if (attach !== undefined) {
+        throw declarationError(key, `it attaches or detaches a database (\`${attach.slice(0, 80)}\`). A Durable Object refuses ATTACH and DETACH, so this ` +
+            'migration cannot run on the hosted adapter, and an attached database is a file outside the scope the fence protects. ' +
+            "Keep the migration inside the scope's own database", 'migration_attach');
+    }
+    const moves = Object.entries(migration.moves ?? {});
+    const discards = Object.entries(migration.discards ?? {});
+    // The push boundary refuses a `__proto__` declaration key, which a record parsed from JSON would
+    // silently drop (#2322); refusing it here too means the author hears it at lint time, not when
+    // the push leaves the migrations off.
+    for (const [what, record] of [['moves', migration.moves], ['discards', migration.discards]]) {
+        if (record && Object.hasOwn(record, '__proto__'))
+            throw declarationError(key, `${what} names __proto__, which a declaration cannot carry`);
+    }
+    if (moves.length === 0 && discards.length === 0 && statements.every(additive)) {
+        run();
+        return;
+    }
+    const before = measure(sql);
+    // Every declaration is read before anything runs, so a malformed one changes nothing.
+    const parsedMoves = moves.map(([from, to]) => {
+        const source = targetOf(from);
+        const target = targetOf(to);
+        if (!source || !target)
+            throw declarationError(key, `moves: { '${from}': '${to}' } is not 'table' → 'table' or 'table.column' → 'table.column'`);
+        if (!source.column !== !target.column)
+            throw declarationError(key, `moves: { '${from}': '${to}' } moves a table to a column or a column to a table`);
+        if (!countOf(before, source))
+            throw declarationError(key, `moves names ${show(source)}, which this scope does not hold before the migration`);
+        return { source, target };
+    });
+    const parsedDiscards = discards.map(([spec, why]) => {
+        const target = targetOf(spec);
+        if (!target)
+            throw declarationError(key, `discards: { '${spec}': … } is not 'table' or 'table.column'`);
+        // The push boundary's own rule (`blankReason`): a reason of only whitespace or invisible
+        // characters says nothing a reviewer can read, so neither side accepts it (#2322).
+        if (typeof why !== 'string' || blankReason(why))
+            throw declarationError(key, `discards: { '${spec}': … } gives no reason; the reason is what a reviewer reads`);
+        if (!countOf(before, target))
+            throw declarationError(key, `discards names ${show(target)}, which this scope does not hold before the migration`);
+        return target;
+    });
+    run();
+    const after = measure(sql);
+    const failures = moveFailures(before, after, parsedMoves, parsedDiscards);
+    const unexcused = lossesOf(before, after, followRenames(statements, before)).filter((l) => !parsedDiscards.some((d) => covers(d, l.target)) && !parsedMoves.some((m) => covers(m.source, l.target)));
+    if (failures.length === 0 && unexcused.length === 0)
+        return;
+    const lines = [...failures, ...unexcused.map((l) => l.what)];
+    const remedy = unexcused.length === 0
+        ? ''
+        : ` If this is intended, declare it on the migration — discards: { ${unexcused
+            .map((l) => `'${show(l.target)}': '<why this data may go>'`)
+            .join(', ')} } — or, where the data moved, moves: { '<source>': '<where it went>' }.`;
+    throw substratError('forbidden', `migration ${key} would lose data this scope holds, so it was not applied (#115): ${lines.join('; ')}.${remedy}`, { reason: 'data_loss' });
+}
+//# sourceMappingURL=migration-fence.js.map

package/dist/migration-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-fence.js","sourceRoot":"","sources":["../src/migration-fence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAU7D;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE5E,+FAA+F;AAC/F,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAClF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5E,MAAM,IAAI,GAAY,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAQhE,kGAAkG;AAClG,SAAS,KAAK,CAAC,SAAiB;IAC9B,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,CAAO;IAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,wGAAwG;AACxG,SAAS,QAAQ,CAAC,CAAO;IACvB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,wFAAwF;AACxF,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpC,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAgD;IACnE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;IACrD,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;IAC1D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAc;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAuC,+DAA+D,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,GAAc;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,0FAA0F;QAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAmB,+CAA+C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAgB,kCAAkC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACtG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC3C,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,gBAAgB,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,gBAAgB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3H,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAyB,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;YACzG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;AAClH,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAcpF,+FAA+F;AAC/F,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,UAA6B,EAAE,MAAe;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAQ,EAAE;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QACnD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,0FAA0F;YAC1F,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACrB,gFAAgF;YAChF,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO;gBAAE,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,SAAS;QACjC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,yBAAyB;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO;gBAAE,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,MAAe,EAAE,KAAc,EAAE,OAAgB;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0D,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACtC,6FAA6F;QAC7F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,8FAA8F;YAC9F,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACpD,4FAA4F;QAC5F,wFAAwF;QACxF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,4FAA4F;QAC5F,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;GAGG;AACH,SAAS,QAAQ,CAAC,MAAe,EAAE,KAAc,EAAE,OAAgB;IACjE,MAAM,MAAM,GAAW,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChC,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;YACpC,2EAA2E;YAC3E,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjI,8FAA8F;YAC9F,2FAA2F;YAC3F,gEAAgE;YAChE,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC5D,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,IAAI,MAAM,SAAS,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;gBACpG,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM;oBACN,IAAI,EACF,UAAU,KAAK,IAAI,MAAM,SAAS,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,EAAE;wBAC5E,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,MAAM,GAAG,uBAAuB,EAAE,EAAE,CAC1F,aAAa,CAAC,mBAAmB,EAAE,aAAa,GAAG,KAAK,OAAO,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAExF;;;GAGG;AACH,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,SAAS;QAAE,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,EAAE,IAAI,CAAC,CAAC;IACR,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,QAAQ;QAAE,EAAE,IAAI,CAAC,CAAC;IAChF,6FAA6F;IAC7F,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,sGAAsG;AACtG,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,CAAU,EAAE,CAAS;IACpC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE,CAChD,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;AAEtG,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,IAAa,EAAE,GAAY,EAAY,EAAE,CAC1D,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC;AACtH,MAAM,IAAI,GAAG,CAAC,MAA2B,EAAE,KAA0B,EAAW,EAAE,CAChF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC;AAEjG;;;;GAIG;AACH,SAAS,YAAY,CACnB,MAAe,EACf,KAAc,EACd,KAAoD,EACpD,QAA2B;IAE3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiD,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;YACnG,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM;gBACX,CAAC,CAAC,GAAG,IAAI,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACzE,CAAC,CAAC,GAAG,IAAI,sBAAsB,IAAI,CAAC,OAAO,8BAA8B,MAAM,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM;YAAE,SAAS;QAC5B,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;QACtE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,OAAO,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC3D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC/F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAAE,SAAS;gBACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC/D,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3F,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,KAAK,SAAS,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK;oBACvK,sCAAsC,IAAI,CAAC,CAAC,CAAC,sCAAsC,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAc,EAAE,SAAuB,EAAE,GAAW,EAAE,GAAe;IAClG,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,gBAAgB,CACpB,GAAG,EACH,+BAA+B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gEAAgE;YAC9G,qHAAqH;YACrH,qEAAqE,EACvE,gBAAgB,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,gBAAgB,CACpB,GAAG,EACH,yCAAyC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,2DAA2D;YACrH,uHAAuH;YACvH,oDAAoD,EACtD,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1D,iGAAiG;IACjG,+FAA+F;IAC/F,sCAAsC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAU,EAAE,CAAC;QACrG,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,IAAI,oDAAoD,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,GAAG,EAAE,CAAC;QACN,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5B,sFAAsF;IACtF,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,IAAI,OAAO,EAAE,iEAAiE,CAAC,CAAC;QACjJ,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,IAAI,OAAO,EAAE,sDAAsD,CAAC,CAAC;QACrJ,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC;QAC9I,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,IAAI,yCAAyC,CAAC,CAAC;QACxG,yFAAyF;QACzF,mFAAmF;QACnF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,IAAI,6DAA6D,CAAC,CAAC;QAChK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC;QACjJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,EAAE,CAAC;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CACjF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAChH,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE5D,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mEAAmE,SAAS;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,0EAA0E,CAAC;IAC9F,MAAM,aAAa,CACjB,WAAW,EACX,aAAa,GAAG,oEAAoE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,EAChH,EAAE,MAAM,EAAE,WAAW,EAAE,CACxB,CAAC;AACJ,CAAC"}

package/dist/migration-replay.d.ts

@@ -0,0 +1,52 @@
+import { moduleMigrations } from './module-migrations.js';
+import type { SqlValue } from './scope-host.js';
+/**
+ * The shape of {@link replayMigrations} and its outcome. A caller reaching a kernel it did not
+ * build against (`substrat push`, through the vertical's own) checks this before calling, and
+ * treats any other value as "this kernel's replay is not one I know how to call".
+ */
+export declare const MIGRATION_REPLAY_API = 1;
+/** An empty database the replay may do anything to. SQLite: the fence measures with its SQL. */
+export interface ReplayDatabase {
+    /** Run SQL text holding any number of statements, with no parameters. */
+    exec(sql: string): void;
+    query<T = Record<string, SqlValue>>(sql: string, params?: readonly SqlValue[]): T[];
+    run(sql: string, params?: readonly SqlValue[]): {
+        changes: number;
+    };
+}
+/** Structural, as `moduleMigrations` takes it: a `ModuleRegistration` fits, and so does one read as data. */
+export type ReplayModule = Parameters<typeof moduleMigrations>[0];
+export interface ReplayOutcome {
+    /** Authored migrations across the modules — the ones the fence judges. */
+    readonly authored: number;
+    /** Authored migrations that ran against a populated scope and passed the fence. */
+    readonly passed: number;
+    /** The fence refused this migration: it would lose data a scope holds. The replay stopped here. */
+    readonly refused?: {
+        readonly key: string;
+        readonly reason: string;
+        readonly message: string;
+    };
+    /** This migration could not be run on synthetic data at all. The replay stopped here. */
+    readonly failed?: {
+        readonly key: string;
+        readonly message: string;
+    };
+    /** Every declared move and discard that passed, with its reason — what a reviewer reads beside the SQL. */
+    readonly declared: readonly string[];
+}
+/**
+ * Replay `modules`, in order, against a populated scope in `db`. `spineDdl` builds the platform's
+ * `_substrat_*` tables first, for an authored migration that reads them (adapter-sqlite's
+ * `SCOPE_SPINE_DDL`); without it such a migration is {@link ReplayOutcome.failed}, not refused.
+ *
+ * Stops at the first refusal or failure: the migrations after it would replay against a schema
+ * no scope ever had.
+ */
+export declare function replayMigrations(db: ReplayDatabase, modules: readonly ReplayModule[], opts?: {
+    readonly spineDdl?: string;
+    /** Called before each migration runs — a caller bounding the replay's time reads progress here. */
+    readonly onMigration?: (key: string, authored: boolean) => void;
+}): ReplayOutcome;
+//# sourceMappingURL=migration-replay.d.ts.map

package/dist/migration-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-replay.d.ts","sourceRoot":"","sources":["../src/migration-replay.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAA2B,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIzE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;IACpF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAED,6GAA6G;AAC7G,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mGAAmG;IACnG,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,yFAAyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,2GAA2G;IAC3G,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AA6CD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,IAAI,GAAE;IACJ,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,mGAAmG;IACnG,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;CAC5D,GACL,aAAa,CA2Cf"}