verdict

const (
	// CauseNone is the zero cause for verdicts whose reason has no narrower
	// discriminator.
	CauseNone Cause = ""
	// CauseLockBudget: the lock was not granted within lock_timeout; nothing
	// was executed.
	CauseLockBudget Cause = "lock-budget"
	// CauseStatementBudget: the statement ran past statement_timeout and was
	// cancelled; the change needs a rewrite.
	CauseStatementBudget Cause = "statement-budget"
	// CauseParentBlockingIndexBuild identifies a blocking index build on a
	// partitioned parent.
	CauseParentBlockingIndexBuild Cause = "parent-blocking-index-build"
	// CauseParentConcurrentIndexBuild identifies a concurrent index build on
	// a partitioned parent.
	CauseParentConcurrentIndexBuild Cause = "parent-concurrent-index-build"
	// CauseParentIndexAdoption identifies index adoption on a partitioned parent.
	CauseParentIndexAdoption Cause = "parent-index-adoption"
	// CauseParentNotValidForeignKey identifies a NOT VALID foreign key on a
	// partitioned parent.
	CauseParentNotValidForeignKey Cause = "parent-not-valid-foreign-key"
)

const (
	// ClassCapabilityBoundary means the engine has no implemented safe route.
	ClassCapabilityBoundary Class = "capability-boundary"
	// ClassNoOnlineSafetyProblem means another owner should run the work.
	ClassNoOnlineSafetyProblem Class = "no-online-safety-problem"
	// ClassByDesign means pg-sprite permanently refuses the form.
	ClassByDesign Class = "by-design"
	// ClassEnvironmental means the current run environment blocked the work.
	ClassEnvironmental Class = "environmental"
	// ClassInvariantViolation reports incoherent engine state.
	ClassInvariantViolation Class = "invariant-violation"
)

const (
	// OutcomeExecuted means the change ran and committed natively within
	// its budgets.
	OutcomeExecuted Outcome = "executed-natively"
	// OutcomeExecutedWithoutOnlineSafety means the operator accepted a typed
	// blocking refusal and the statement committed under explicit budgets.
	OutcomeExecutedWithoutOnlineSafety Outcome = "executed-without-online-safety"
	// OutcomeRefused means the change was not executed; Reason says why.
	OutcomeRefused Outcome = "refused"
	// OutcomeFailed means execution was attempted and failed: an
	// operational error, not a refusal — the process still exits 1. Code
	// carries the executor's stable outcome code, and for a mid-sequence
	// failure FailedStep and ExecutedSQL disclose the failed step and the
	// committed prefix whose state remains, so automation can distinguish
	// "nothing happened" from "partial state left behind".
	OutcomeFailed Outcome = "failed"
)

const (
	// OwnerDataChangeRunner owns DML and backfills.
	OwnerDataChangeRunner Owner = "data-change-runner"
	// OwnerDeclarativeFrontDoor owns desired catalog convergence.
	OwnerDeclarativeFrontDoor Owner = "declarative-front-door"
	// OwnerDirectOperator means the operator runs the work directly.
	OwnerDirectOperator Owner = "direct-operator"
	// OwnerProvisioning owns access-control and replication provisioning.
	OwnerProvisioning Owner = "provisioning"
)

const (
	// ReasonNone is the zero reason carried by an executed verdict.
	ReasonNone Reason = ""
	// ReasonUnsupportedStatement: only ALTER TABLE is supported.
	ReasonUnsupportedStatement Reason = "unsupported-statement"
	// ReasonIndexStatement: index maintenance has a native safe idiom
	// (CONCURRENTLY) and is never attempted here.
	ReasonIndexStatement Reason = "index-statement"
	// ReasonTableTooLarge: the size guard skipped the optimistic attempt.
	ReasonTableTooLarge Reason = "not-native-safe-table-too-large"
	// ReasonInsufficientPrivileges: the connected role lacks the access
	// the change needs; Detail names the exact missing GRANT (see
	// docs/engine-role.md).
	ReasonInsufficientPrivileges Reason = "insufficient-privileges"
	// ReasonUnsupportedPartitionedParent: the routed plan builds an index
	// on a partitioned parent, for which the required partition-aware
	// online sequence is not implemented.
	ReasonUnsupportedPartitionedParent Reason = "unsupported-partitioned-parent"
	// ReasonBudgetExceeded: the optimistic attempt exceeded its lock or
	// statement budget and was cancelled.
	ReasonBudgetExceeded Reason = "not-native-safe-budget-exceeded"
	// ReasonRewriteRequired: the submitted form blocks and must run as a
	// safer native sequence, but the planner could not construct one (a
	// multi-operation statement, or a pattern it cannot build). Running
	// the submitted form would falsify the plan's own reason, so the
	// engine refuses instead.
	ReasonRewriteRequired Reason = "not-native-safe-rewrite-required"
	// ReasonBackendUnavailable: the change routes to an execution strategy
	// this build does not implement (copy-and-swap).
	ReasonBackendUnavailable Reason = "backend-unavailable"
	// ReasonDestructiveChange: the desired-state plan discards live
	// structure — a dropped column, constraint, index, or NOT NULL — and
	// desired-state execution runs no destructive statement without an
	// explicit path for it. The imperative front door remains the way to
	// run a reviewed destructive statement deliberately.
	ReasonDestructiveChange Reason = "destructive-change"
	// ReasonPlanFingerprintMismatch: the plan recomputed at execution time
	// does not carry the fingerprint the caller pinned, so the plan a
	// reviewer approved is not the plan that would execute; nothing runs.
	ReasonPlanFingerprintMismatch Reason = "plan-fingerprint-mismatch"
	// ReasonCreateCollision: the create plan's target name is already
	// occupied — a relation or standalone type took it after the plan was
	// derived — so the greenfield create cannot run; the caller re-derives
	// the plan against the live catalog rather than assuming the
	// occupant's shape.
	ReasonCreateCollision Reason = "create-collision"
)

const (
	// RefusalSiteIndexSingleRelation is the plain one-relation DROP INDEX,
	// REINDEX INDEX, or REINDEX TABLE gate site.
	RefusalSiteIndexSingleRelation RefusalSite = "index-statement-single-relation"
	// RefusalSiteIndexOther is a multi-relation DROP INDEX or a REINDEX scope
	// that does not identify one relation.
	RefusalSiteIndexOther RefusalSite = "index-statement-other"
)