idmigrate

type Archive struct {
	Path   string
	SHA256 string
	// Skipped is true when the store did not exist at P1's own check, so no
	// archive was made (archive_path is empty and no pre-cutover content is
	// recoverable through this run's artifacts).
	Skipped bool
	Marker  ArchiveMarker
}

type ArchiveMarker struct {
	Present bool
}

type CatchUpOptions struct {
	// StorePath is the store the pipeline converts.
	StorePath string
	// BackupDir overrides where P1 writes the consistent archive. Empty uses the
	// store's own directory.
	BackupDir string
	// Now is the timestamp source for the archive name. Nil means the wall clock.
	Now func() time.Time
	// TimeoutProfile, when non-zero, is applied to the audit catch-up trail. The
	// offline command leaves it zero (the audit subsystem's own default); the
	// first-open auto cutover passes the resolved store profile.
	TimeoutProfile timeouts.Profile
	// Logger owns warnings from the returned trail. Nil retains the process default.
	Logger *slog.Logger
}

type CatchUpResult struct {
	// Archive is the P1 result (its Path is empty when P1 skipped a store that
	// did not exist).
	Archive Archive
	// AppliedCatchUpSteps is how many audit steps P2 applied this run.
	AppliedCatchUpSteps int
	// Trail is the catch-up audit trail, left OPEN and current: the first-open
	// auto cutover reuses it as the tracker's trail, and the offline command
	// closes it immediately after the catch-up.
	Trail *audit.SqliteAuditTrail
}

type ConversionMirrors struct {
	ProvenanceOwned        []IdentityColumn
	ProvenancePreserved    []IdentityColumn
	ProvenanceOwnedContext []IdentityColumn
	PastureOwned           []IdentityColumn
	PastureOwnedArray      []IdentityColumn
	PasturePreserved       []IdentityColumn
	PastureSpecial         []IdentityColumn
}

type ConvertOptions struct {
	// StorePath is the resolved database path. It labels errors and names the
	// store in refusals.
	StorePath string
	// Archive is the P1 result this run recorded. P3's scoped refusals name it.
	Archive Archive
	// AppliedCatchUpSteps is the number of audit steps this run's P2 catch-up
	// applied (zero when the store was already current). P3's scoped refusals
	// name it.
	AppliedCatchUpSteps int
	// Now is the timestamp source for the receipt and the ceiling. Nil means
	// the wall clock.
	Now func() time.Time
	// contains filtered or unexported fields
}

type CutoverState struct {
	StorePath string
	// FileExists is the observation that gates P1's archive skip.
	FileExists bool
	// Format is the dependency's inspected identity format.
	Format provenance.IDFormat
	// MarkerPresent is true when the store carries any identity-format marker.
	MarkerPresent bool
	// ReceiptPresent and ReceiptMatches describe the pasture receipt.
	ReceiptPresent bool
	ReceiptMatches bool
	Receipt        Receipt
	// RecordedVersion is the audit schema version (1 when no meta table exists).
	RecordedVersion int
	// Populated is the dependency's EXISTS probe over Provenance identity tables.
	// It is a P0 ROUTING input only; P3a must not re-dispose on it.
	Populated bool
	Outcome   Outcome
}

type EvidenceVerdict int

type IdentityColumn struct{ Table, Column string }

type InjectPoint string

type Inspection struct {
	StorePath string
	Format    provenance.IDFormat
	Populated bool
}

type InspectionReader = provenance.IDFormatReader

type Outcome int

type Preview struct {
	Inspection
	// Columns counts, per "table.column", the distinct values that would convert.
	Columns map[string]int
	// EpochProjectionRows and AuditPayloadRows count structured documents that
	// declare identity fields that would convert.
	EpochProjectionRows int
	AuditPayloadRows    int
	// RecordedVersion is the audit schema version this run read.
	RecordedVersion int
	// PendingCatchUpSteps is how many audit steps the deferred catch-up phase
	// (P2) would apply before the conversion transaction runs.
	PendingCatchUpSteps int
	// EpochIDLowerBound is a LOWER-BOUND count of work the catch-up exposes: the
	// retired-shaped audit_events.epoch_id values a pre-v4 store still carries.
	// It is informational only — never a verdict — because the catch-up moves
	// them into context_edges where the conversion then translates them.
	EpochIDLowerBound int
	// Blockers names runtime-state tables that hold rows and would refuse the
	// conversion.
	Blockers []string
	// Preserved names "table.column" pairs the conversion deliberately preserves
	// byte-exact: opaque, equality-only labels that are outside the dependency's
	// owned identity set (see preservedDependencyColumns). Reporting them keeps
	// the dry run's plan and the real conversion in agreement — a column
	// excluded from conversion is named as preserved, not silently dropped.
	Preserved []string
}

type Receipt struct {
	MarkerFormat  string
	FloorVersion  int
	ArchivePath   string
	ArchiveSHA256 string
	CutoverAt     int64
}

type ReceiptReader interface {
	QueryContext(context.Context, string, ...any) (*sql.Rows, error)
	QueryRowContext(context.Context, string, ...any) *sql.Row
}

type Report struct {
	StorePath          string
	ArchivePath        string
	ArchiveSHA256      string
	AlreadyCurrent     bool
	ReceiptWritten     bool
	FloorVersion       int
	ChangedFields      int
	ChangedMutations   int
	ChangedAllocations int
	PastureRows        int
	Reclaimed          int
}