Protected_Field-security run context (catalog snapshot + protected-role set), set once per run by the orchestrator before entity generation begins. Null when the platform emits no DB-tier field security (PostgreSQL, per decision D2) or on runs that could not read the catalog — emitters must degrade to grants-only emission in that case.
Returns the batch separator for the database platform. SQL Server: 'GO' PostgreSQL: '' (empty string, uses semicolons)
The SQL dialect instance for this provider.
PostgreSQL has no sp_refreshview. Generated views are re-issued with
CREATE OR REPLACE (or the 42P16 capture/DROP CASCADE path) every run, so
they do not need a separate refresh step. Layered outer views are rebound
via generateLayeredOuterRebindSQL, not this flag.
PostgreSQL requires a nullability fix for virtual (computed) fields in views.
View columns derived from expressions may report incorrect nullability in
information_schema.columns, so CodeGen must correct these after view creation.
The database platform key (e.g., 'sqlserver', 'postgresql').
Returns the native timestamp-with-timezone type name for this platform.
SQL Server: DATETIMEOFFSET
PostgreSQL: TIMESTAMPTZ
Generates ALTER TABLE ... ADD COLUMN SQL.
SQL Server: ALTER TABLE [schema].[table] ADD colName TYPE [NOT] NULL [DEFAULT expr]
PostgreSQL: ALTER TABLE schema."table" ADD COLUMN "colName" TYPE [NOT] NULL [DEFAULT expr]
OptionaldefaultExpression: stringGenerates SQL to add a default constraint/value to a column.
SQL Server: ALTER TABLE ... ADD CONSTRAINT DF_name DEFAULT expr FOR [col]
PostgreSQL: ALTER TABLE ... ALTER COLUMN "col" SET DEFAULT expr
Generates ALTER TABLE ... ALTER COLUMN to change type and nullability.
SQL Server: ALTER TABLE ... ALTER COLUMN col TYPE NULL|NOT NULL
PostgreSQL: ALTER TABLE ... ALTER COLUMN "col" TYPE type, ALTER COLUMN "col" SET|DROP NOT NULL
ProtectedbuildBuilds the EXEC parameter fragment(s) for a single field when calling a
tolerant update SP. Returns an array of @ParamName = value strings.
For most fields this is just ['@FieldName = @variable']. But when
clearValue is true and the field has a _Clear companion (see
needsClearCompanion), an additional @FieldName_Clear = 1 is
prepended so the tolerant SP actually sets the column to NULL instead
of treating the NULL parameter as "leave unchanged".
This is the single source of truth for the calling convention of tolerant update SPs. All codepaths that generate EXEC calls to spUpdate — cascade-update cursors, future SP-to-SP calls, etc. — should use this method to stay in sync with the SP declaration logic in generateCRUDParamString.
The entity field being passed
The SQL expression for the value (e.g. @prefixed_var)
Whether this field is being explicitly set to NULL
Builds a set of PL/pgSQL components for working with an entity's primary key(s) in cascade operations: variable declarations, SELECT field list, FETCH INTO variable list, and named routine parameter assignments. Used by cascade delete and update-to-NULL generators to construct cursor-based loops.
Optionalprefix: stringGenerates SQL to invoke a stored procedure or function.
SQL Server: EXEC [schema].[spName] @Param1='val1', @Param2='val2'
PostgreSQL: SELECT * FROM schema."spName"('val1', 'val2')
The schema containing the routine.
The routine name (e.g., spUpdateExistingEntitiesFromSchema).
Ordered array of parameter values as pre-formatted SQL strings.
For SQL Server these become @ParamName='value' pairs;
for PostgreSQL they become positional arguments.
OptionalparamNames: string[]Optional parameter names for SQL Server's @Name=value syntax.
Ignored on PostgreSQL.
OptionaldiscardResult: booleanSet for routines whose rows the caller never reads. PostgreSQL needs to
know: its default SELECT * FROM routine(...) form is rejected outright for
a function returning SETOF record ("a column definition list is required
for functions returning record"), and a routine that only performs work has
no column list to give. SQL Server's EXEC is unaffected and ignores this.
NOT supported. PG's strict CREATE OR REPLACE VIEW parser
resolves view names against the existing catalog state at parse time, so
a body that LEFT-JOINs the view-being-created to itself (e.g. for a
self-FK's virtual NameField) raises 42P01 undefined_table on first
creation. A CREATE OR REPLACE retry against a NULL-typed stub then
fails with cannot change data type of view column ... from text to character varying(N) because PG enforces strict column-type compat in
CREATE OR REPLACE.
Returning false tells sql_codegen.ts to skip the self-join entirely
for self-FK + virtual-NameField cases. The trade-off: the corresponding
virtual column (e.g. RestoredFrom on vwRecordChanges) is not emitted.
Matches the baseline-shipped vwRecordChanges shape, which never had this
column either.
ProtectedcolumnThe column portion of an automatic FK index name, in this dialect's spelling.
Compares two PostgreSQL data type strings for equivalence, accounting for common
aliases. For example, 'timestamptz' and 'timestamp with time zone' are
considered equal. Returns true if the types match directly or via alias lookup.
Generates a conditional INSERT statement (insert only if not exists).
SQL Server: IF NOT EXISTS (checkQuery) BEGIN insertSQL END
PostgreSQL: DO $$ BEGIN IF NOT EXISTS (checkQuery) THEN insertSQL; END IF; END $$
Both arguments must already be identifier-quoted by the caller (qi()/qs()).
On PostgreSQL the result is a DO $$ ... $$ block, and the identifier auto-quoter
(quoteSQLForExecution, applied later by runQuery/LogSQLAndExecute) skips dollar-quoted
blocks wholesale — it cannot know whether their contents are SQL or literal text. So this is
the one SQL-building path where the usual "write it bare, the quoter handles it" convention
does not hold: a bare ID survives to PG folded as id and the statement fails every run.
The SELECT query to check for existence. Identifiers must be pre-quoted.
The INSERT statement to execute if the check returns no rows. Identifiers must be pre-quoted.
Generates a PL/pgSQL DO $$ block that drops both a named CHECK constraint (if one
exists on the column, found via pg_catalog.pg_constraint) and the column's default
value. Uses dynamic SQL (EXECUTE format(...)) to drop the constraint by name,
then unconditionally runs ALTER COLUMN ... DROP DEFAULT.
Generates a DROP statement for a database object (view/procedure/function).
SQL Server: IF OBJECT_ID('...', 'P') IS NOT NULL DROP PROCEDURE ...
PostgreSQL: DROP FUNCTION IF EXISTS ... CASCADE
Note: This differs from generateDropGuard() which is used for CREATE OR REPLACE
patterns. This method is used for cleanup operations.
Phased per-entity execution for PG. Runs view → CRUD functions → view
permissions against the target DB, guaranteeing phase 2 is skipped if
phase 1 failed (so we never leave fn_create_* functions pointing at
a missing or stale view's rowtype).
Phase 1 routes through executeWithFallback so a 42P16 triggers the
capture/drop/recreate/restore flow rather than blowing up. Phase 2 runs
each CRUD function's CREATE individually — we do NOT concatenate them
because node-pg's simple query protocol would then abort the whole
batch on the first failure; running them separately gives a per-routine
error signal. Phase 3 applies view-level GRANTs.
Executes a SQL file against the PostgreSQL database using an in-process pg client.
Mirrors the SQL Server provider's in-process approach so CodeGen does not depend on
the psql CLI being installed on the host. Reads connection parameters from
environment variables (PG_HOST, PG_PORT, PG_DATABASE, PG_USERNAME,
PG_PASSWORD) with fallback to configInfo values.
ProtectedforeignComposes the automatic foreign-key index name and enforces the dialect's identifier
length limit. Dialect-independent in shape — {prefix}{table}_{column} — while the
casing of the prefix, the table/column token spelling, and the length cap come from
the dialect hooks.
NOTE: the resulting names are deliberately NOT unified across dialects. SQL Server
names from BaseTableCodeName/CodeName, PostgreSQL from snake-cased
BaseTable/Name. Changing either would orphan every existing index in deployed
databases (CodeGen would create new ones alongside the old), so the token hooks
preserve each dialect's historical spelling exactly.
ProtectedformatRenders one complete composite index statement for the dialect — quoting, column order, and the "create only if absent" idempotency form. The index NAME arrives pre-composed and pre-truncated; implementations must use it verbatim.
SQL Server built-in functions (e.g., NEWID() to gen_random_uuid(),
GETUTCDATE() to NOW() AT TIME ZONE 'UTC'), strips outer parentheses and
surrounding single quotes, and re-applies quoting based on the needsQuotes
flag. Returns 'NULL' for empty or whitespace-only input.
ProtectedformatRenders one complete index statement for the dialect — quoting, and the
"create only if absent" idempotency form (SQL Server wraps a sys.indexes check
around a bare CREATE INDEX; PostgreSQL uses CREATE INDEX IF NOT EXISTS).
The index NAME is supplied pre-composed and pre-truncated; implementations must use it verbatim. The indexed COLUMN, by contrast, is referenced from the field's real column name — which is not necessarily the token used to build the name.
ProtectedformatPostgreSQL override of the INSERT default-value renderer to handle
the BIT→BOOLEAN type-strictness gap. The base implementation passes
the SQL Server-style default through unchanged, but PG's strict
typing means COALESCE(boolean_param, 0) fails with "operator does
not exist: boolean = integer". This override remaps BIT defaults
(0/1) to BOOLEAN literals (FALSE/TRUE) when the field's
underlying type is bit/boolean.
Generates a comment header for the combined all-entities SQL file.
Generates a PostgreSQL table-valued function returning all ancestors of a node walking upward.
Generates a PostgreSQL view-regeneration block for an entity's base view.
Includes all base table columns, parent/related field joins, and root field lateral
joins. Applies a soft-delete WHERE filter when the entity uses soft deletes.
Two-path emission (try-then-fallback). The output wraps CREATE OR REPLACE VIEW
in a DO $$ ... EXCEPTION WHEN invalid_table_definition THEN DROP VIEW ... CASCADE; EXECUTE vsql; END $$ block. Why:
Happy path: CREATE OR REPLACE VIEW succeeds (new column list is a prefix of
the existing one plus optional trailing additions). Zero destruction. No
dependent views, functions, triggers, or grants are touched.
Sad path: PG raises SQLSTATE 42P16 invalid_table_definition for any column
rename / reorder / type change / removal. The exception handler runs
DROP VIEW ... CASCADE and re-executes the CREATE. Dependent codegen-managed
functions (spCreate/spUpdate/spDelete returning SETOF vwFoo) and dependent
views are CASCADE-dropped — they are regenerated later in the same codegen
output stream, so by the end of the run all dependents are restored to the new
shape. GRANTs on the view itself are also lost on the CASCADE; codegen always
re-emits permissions immediately after the view, so they come back too.
The runtime-apply path also calls this, so the live DB applies the same DO block.
executeWithFallback (the runtime helper) becomes a no-op for these statements
because the DO block handles 42P16 internally — but it still runs as a safety net
for any other failure modes.
What this DOES NOT preserve on the sad path: non-codegen-managed dependent objects (e.g. a hand-written sproc against this view that codegen doesn't know about). Those would be CASCADE-dropped and not restored. MJ codegen-generated sprocs cover all standard CRUD pathways; bespoke sprocs against base views are extremely rare in practice. If a project does have them, they need to be re-applied after a 42P16 fallback fires.
This pattern matches the v5.30.x fix migration V202604282300 — which used the
same DO/EXCEPTION construct to recreate vwEntityPermissions after the unquoted
RoleName alias bug — proving the pattern is production-tested.
Permissions are handled separately by sql_codegen.ts via generateViewPermissions().
Generates a PostgreSQL CREATE OR REPLACE FUNCTION for inserting a new record.
The function accepts typed parameters for each writable field, performs an INSERT
into the base table, and returns the newly created row from the base view via
RETURN QUERY SELECT. Handles auto-increment PKs (using RETURNING ... INTO),
UUID PKs (with COALESCE to gen_random_uuid()), and composite PKs. Also emits
GRANT EXECUTE permissions for authorized roles.
Prepends a DROP-all-overloads block (see generateDropAllOverloadsBlock) so
adding/removing a column doesn't trigger PG's overload-ambiguity error.
Wide entities (where useJsonArgShape returns true) emit a JSON-arg variant
via generateCRUDCreateJsonArg — single p_data JSONB parameter, dynamic
INSERT built from keys present in the payload. Same semantics; different
wire shape needed because of PostgreSQL's 100-arg function ceiling.
Generates a PostgreSQL CREATE OR REPLACE FUNCTION for deleting a record.
Supports both hard deletes (DELETE FROM) and soft deletes (UPDATE ... SET __mj_DeletedAt). Prepends any cascade SQL for dependent records, uses
#variable_conflict use_column to avoid PL/pgSQL naming conflicts, and returns
the affected primary key(s) or NULLs if no row was found. Emits GRANT EXECUTE
permissions for authorized roles.
PostgreSQL override: same tolerant-SP shape as the base class, but
with PG's "all params after the first DEFAULT must also have DEFAULTs"
rule enforced. Once any parameter becomes optional (or a _Clear
companion is emitted), every subsequent parameter is forced to
DEFAULT NULL even if it would otherwise be required, because PG
function signatures don't allow gaps between defaulted params.
All decision logic and dialect-syntax bits route through the same base-class helpers / dialect methods used by SQL Server — the only thing that differs is the sticky-defaults walk.
Generates GRANT EXECUTE ON FUNCTION statements for the given CRUD function,
granting access to each role that has the corresponding permission (Create, Update,
or Delete) on the entity.
Generates a PostgreSQL CREATE OR REPLACE FUNCTION for updating an existing record.
The function accepts typed parameters for all updatable fields plus primary key(s),
performs an UPDATE ... SET ... WHERE PK = param, checks ROW_COUNT to detect
missing rows, and returns the updated record from the base view via RETURN QUERY SELECT. Also generates the __mj_UpdatedAt timestamp trigger for the entity
and emits GRANT EXECUTE permissions.
Generates a PostgreSQL table-valued function returning all descendant records of a root node.
Generates a PostgreSQL DROP ... IF EXISTS ... CASCADE statement as a guard before
creating or replacing a database object. For triggers, PostgreSQL relies on
CREATE OR REPLACE on the trigger function, so a comment is emitted instead.
Generates CREATE INDEX statements for all foreign key columns on an entity. Returns an array of individual index DDL strings.
This is a template method: every dialect-INDEPENDENT decision (which fields qualify as indexable foreign keys, and how the index name is composed and truncated) lives here so it cannot drift between providers. Dialects supply only the genuinely different pieces via formatIndexStatement, tableToken, columnToken, indexPrefix, and maxIdentifierLength.
Previously this was abstract, so each provider reimplemented the whole thing and
they drifted in a way that was not dialect-specific — SQL Server omitted the
primary-key/virtual-field exclusions that PostgreSQL had. See
isIndexableForeignKey.
Generates a complete PostgreSQL full-text search infrastructure for an entity. This includes:
tsvector column (__mj_fts_vector) added via conditional ALTER TABLEtsvectorBEFORE INSERT OR UPDATE trigger to keep the vector column in synctsvector column for fast lookupsSTABLE search function that joins the base view with a plainto_tsquery matchUPDATE to populate existing rows where the vector is NULLA FullTextSearchResult with the generated SQL and the search function name.
Generates GRANT EXECUTE permission for a full-text search function.
Generates a LEFT JOIN LATERAL clause that invokes the hierarchy metadata function
for a self-referencing field.
Generates the SELECT expressions for hierarchy fields in a base view.
Projects: Root
Generates a PostgreSQL function returning a table of hierarchy metadata (RootID, Depth, Path, IsLeaf, ChildCount) for a self-referencing foreign key.
Wraps innerSQL so it runs only when the named view already exists.
Used for objects CodeGen refreshes or grants on but does NOT create — specifically the
application-owned outer view of a layered entity. On the first CodeGen pass after layering is
enabled, that view legitimately does not exist yet: it selects from the inner view that this
very pass is creating, so it cannot have been created earlier. Emitting an unguarded
sp_refreshview/GRANT against it fails the run and blocks the only path to setting layering
up. Every later pass finds the view present and behaves identically to the unguarded form.
Schema of the view whose existence gates innerSQL
View whose existence gates innerSQL
Statements to run when the view exists. Must be a complete statement batch.
Generates the column-list or value-list portion of an INSERT
statement, depending on whether prefix is empty (column names)
or non-empty (parameter values).
Empty prefix — produces dialect-quoted column names suitable
for the INSERT INTO ... (col1, col2) clause.
Non-empty prefix — produces the parameter-value list suitable
for the VALUES (...) clause, with tolerant-SP behavior:
CurrentTimestampUTC() (created/updated) or NullLiteral
(deleted-at).CASE that detects
the empty-GUID sentinel and falls back to the database default;
otherwise wraps with IsNull.IsNull(@Param, default)._Clear
companion CASE so callers can distinguish "leave default"
from "explicitly NULL."Skips auto-increment, virtual, and non-updatable fields. The PK
column can be optionally excluded (used by the two-branch GUID-PK
insert pattern in generateCRUDCreate).
Dialect-specific syntax is fully delegated to:
Dialect.QuoteIdentifier, Dialect.ParameterRef,Dialect.IsNull, Dialect.NullLiteral,Dialect.CurrentTimestampUTC, Dialect.EmptyUUIDLiteral,formatInsertDefaultValue(ef) render hook (for type-strict
dialects that need to massage default values).Restar g.* on the application-owned outer view. Invokes the catalog
function shipped by the PG layered-views migration; no-op if the function
is not installed yet (bootstrap before that migration).
PostgreSQL materialized-table DDL. The create is conditional (CREATE TABLE IF NOT EXISTS) so a migration-provided materialized_<name> table with bespoke indexing is
detected and reused rather than clobbered (plan §12). Emits the single-column surrogate
PRIMARY KEY, which is itself the required unique index.
PG dialect vs. SQL Server: double-quoted identifiers, CREATE TABLE IF NOT EXISTS in
place of the IF OBJECT_ID(...) IS NULL guard, and the surrogate column carries PG's
GENERATED ALWAYS AS IDENTITY clause (see getMaterializedSurrogateColumnType).
PostgreSQL wrapper-view DDL — the stable read contract over the materialized table.
Uses CREATE OR REPLACE VIEW so the same statement both creates the view and atomically
repoints it at a freshly-built table during refresh (plan §11.2). The body is always
SELECT * FROM <table> and the shadow table shares the column shape, so PG's
CREATE OR REPLACE column-compatibility rule is satisfied on the swap.
Generates a LEFT JOIN LATERAL clause that invokes the root ID function for a
self-referencing field. PostgreSQL uses LATERAL joins (rather than SQL Server's
OUTER APPLY) to call scalar functions inline within a view definition.
Generates the SELECT expression for a root ID field in a base view.
SQL Server: rootFn.RootID AS [FieldRoot...]
PostgreSQL: root_fn.root_id AS "FieldRoot..."
Generates a PostgreSQL function that recursively calculates the root record ID for a self-referencing foreign key.
Generates the cascade delete/update SQL for a single related entity. Called by the orchestrator for each FK relationship when CascadeDeletes is true.
Generates the composite index covering an entity's SOFT primary key, or an empty array
when the entity has no soft PK (which is every ordinary entity — this is a no-op for
anything with a real PRIMARY KEY constraint).
WHY THIS EXISTS. A soft primary key lives only in metadata: IsPrimaryKey and
IsSoftPrimaryKey are both set, and the table carries no PRIMARY KEY and no unique
index. Integration tables are built that way on purpose — their keys are inferred, so
enforcing one would reject valid rows whenever an inference is wrong.
The consequence is a heap that MJ's own write path scans on every record. A create calls
InnerLoad on the key to check for an existing row; a genuinely new record matches
nothing; and a not-found lookup cannot short-circuit, so it reads the whole table before
concluding the row is absent. The scan grows with the table, so a sync gets slower the
longer it runs — measured live at 345 → 574 → 864 ms per record across consecutive
batches of one connector, with nothing saturated (DB CPU 57%, log write 13%, sessions 0,
app CPU 5.7%, memory flat).
Note that isIndexableForeignKey excludes primary keys with the comment "a primary key is already covered by its own index". That is true for a real PK and false, by definition, for a soft one — which is precisely how these tables fell through every existing mechanism.
ONE COMPOSITE INDEX, not one per column: the lookup is always an equality match on the whole key, so a single index in ordinal order serves it. Non-unique, because uniqueness is exactly what the soft-PK design refuses to assert.
IDEMPOTENT BY NAME, like the FK indexes. An index someone created by hand over the same columns under a different name will not be recognised, and this will add a second one — drop the hand-made one rather than disabling this.
Generates a comment header for a generated SQL file.
Generates a PL/pgSQL DO $$ block that conditionally adds __mj_CreatedAt and
__mj_UpdatedAt columns to a table using TIMESTAMPTZ type with a UTC default.
Uses information_schema checks to skip columns that already exist.
Generates a PL/pgSQL trigger function and a BEFORE UPDATE trigger that
automatically sets the __mj_UpdatedAt column to the current UTC time on every
row update. Uses CREATE OR REPLACE FUNCTION for the trigger function and
DROP TRIGGER IF EXISTS + CREATE TRIGGER for idempotent trigger creation.
Returns an empty string if the entity has no __mj_UpdatedAt field.
Generates the SET clause body for an UPDATE statement with tolerant
merge semantics. Each non-PK column wraps the parameter with the
dialect's null-coalescing call against the column's existing value
(SET [Col] = ISNULL(@Param, [Col]) on SQL Server,
SET "col" = COALESCE(p_col, "col") on PostgreSQL) so omitting a
parameter preserves the existing row value. Nullable columns whose
database default is non-NULL also emit a _Clear companion branch
that lets callers distinguish "leave unchanged" from "explicitly NULL."
The full structural logic lives here in the base class; only the
per-line render is dialect-specific and that's resolved through the
Dialect accessor's helpers (QuoteIdentifier, ParameterRef,
IsNull, NullLiteral). Subclasses can override to customize line
formatting if a future dialect needs something different.
Generates SQL to refresh/recompile a view.
SQL Server: EXEC sp_refreshview 'schema.viewName';
PostgreSQL: returns empty string (no-op).
Generates a simple test query to validate a view is functional.
SQL Server: SELECT TOP 1 * FROM [schema].[viewName]
PostgreSQL: SELECT * FROM "schema"."viewName" LIMIT 1
Produces the canonical database function name for the ancestors traversal helper function.
Returns an additional WHERE clause fragment for the check-constraints query.
SQL Server: WHERE SchemaName NOT IN (...) when excludeSchemas is provided.
PostgreSQL: empty string (the PG view already handles schema filtering).
Generates a query against pg_index, pg_class, pg_namespace, and pg_attribute
to check whether a column participates in a multi-column unique constraint. Returns
rows only when the unique index contains more than one column and includes the
specified column.
Returns the name of the CRUD routine for an entity.
SQL Server: spCreateEntityName
PostgreSQL: fn_create_entity_name
Produces the canonical database function name for the descendants traversal helper function.
Returns an additional WHERE clause fragment for the missing-base-tables query.
SQL Server: WHERE VirtualEntity=0
PostgreSQL: empty string (PG query doesn't need this filter).
Generates SQL to fix virtual field nullability after metadata sync. PostgreSQL: Updates AllowsNull for virtual fields based on the FK column's nullability. SQL Server: returns empty string (no fix needed).
The MJ core schema name.
Returns a SQL query string to check if a foreign key index already exists.
Used by the orchestrator to conditionally create FK indexes.
SQL Server: queries sys.indexes with OBJECT_ID
PostgreSQL: queries pg_indexes
The result set should return rows if the index exists (length > 0 means exists).
Produces the canonical database function name for the hierarchy metadata helper function.
PostgreSQL KEYED surrogate key type: the combined-key SHA-256 hash the refresh writes comes from
encode(digest(…), 'hex'), whose type is text, and the full rebuild's CREATE TABLE AS infers
exactly that. Typing the minted entity's PK column text MATCHES the post-refresh physical column,
avoiding the int-vs-hash divergence between CodeGen metadata and the rebuilt table.
PostgreSQL synthetic surrogate key: a SQL-standard auto-assigned identity column
(GENERATED ALWAYS AS IDENTITY), bigint for headroom on large materialized sets.
v1 full-rebuild only; the deterministic combined-key hashing in §5 replaces this in Phase 3.
Returns DDL that creates/replaces the platform's metadata-management
support objects (introspection views and the routines manage-metadata
invokes via callRoutineSQL), or null when the platform ships
them through migrations instead.
These objects are CodeGen's own machinery — only CodeGen calls them — so platforms that return DDL here get it executed (idempotently) at the start of every manageMetadata run. That guarantees the objects can never be missing or version-skewed relative to the CodeGenLib code that calls them.
SQL Server: returns null (objects ship in the baseline migrations).
PostgreSQL: returns the full support-object DDL.
Generates the SQL to retrieve pending entity fields that exist in the database but not yet in the MJ metadata. This is a large, platform-specific query.
The MJ core schema name (e.g., __mj).
OptionalentityIDs: string[]Optional list of entity UUIDs to scope the query to. When provided,
the query filters to fields belonging to those entities only — used by Pass 2 to
avoid re-scanning the entire schema for entities that haven't changed. undefined
or empty preserves the prior unscoped behavior.
OptionalexcludeSchemas: string[]Generates a query against pg_index, pg_class, and pg_namespace to retrieve
the index name for a table's primary key constraint. Used by CodeGen to reference
the PK index in full-text search and other operations.
Produces the canonical name for the recursive root-finder helper function
generated for self-referencing fields. The function definition and the
view's LATERAL-JOIN reference must agree on this name (caller side calls
via generateRootFieldJoin, definition via generateRootIDFunction).
Note: this intentionally does NOT match the baseline-shipped PascalCase
fn{Table}{Field}_GetRootID form, because the baseline returns
TABLE("RootID" type) and the view callers expect a scalar — using the
baseline name would clash with cannot change return type of existing function. The snake_case scalar form is codegen's own naming space and
is consistent with how downstream views are emitted.
Returns a SQL query that lists every stored procedure / function name in the given schemas. Used by the post-run CRUD validator to diff expected vs actual routine presence in one round trip.
The result set must contain exactly two columns:
schema_name — the schema the routine lives in
routine_name — the proc/function name as stored in the catalog
SQL Server: queries sys.objects for procedures and functions.
PostgreSQL: queries pg_proc joined to pg_namespace.
Default: returns empty string. Providers that don't implement this opt out of the post-run CRUD validator (the validator returns no missing when this returns empty), preserving backwards compatibility for downstream subclasses that haven't been updated.
Returns an array of system schema names that should be excluded from
metadata synchronization. Empty array if the platform has no system
schemas that need excluding.
SQL Server: [] (no system schemas need excluding)
PostgreSQL: ['information_schema', 'pg_catalog', 'pg_toast', ...]
ProtectedgetDialect SQL returning every view column in the given schemas as
{ schema_name, view_name, column_name }.
information_schema.columns restricted to views is standard in both dialects,
so the base implementation serves both; override only if a dialect needs a
catalog-specific path.
Returns SQL to get column metadata for a view or table. Result columns: FieldName, Type, Length, Precision, Scale, AllowsNull.
Returns a SQL query string to retrieve the current view definition from the database.
SQL Server: SELECT OBJECT_DEFINITION(OBJECT_ID('[schema].[viewName]')) AS ViewDefinition
PostgreSQL: SELECT pg_get_viewdef('"schema"."viewName"'::regclass, true) AS "ViewDefinition"
The result set must include a column named ViewDefinition.
Returns SQL to check if a view exists.
The query uses @ViewName and @SchemaName as named parameters.
Returns 1 row if the view exists.
ProtectedindexGenerates CREATE INDEX IF NOT EXISTS statements for each foreign key column
on the entity's base table. Index names follow the idx_auto_mj_fkey_<table>_<column>
convention and are truncated to 63 characters (PostgreSQL's maximum identifier length).
Skips primary key columns and virtual fields.
ProtectedisDecides whether a field should get an automatic foreign-key index. Dialect-independent.
A field qualifies when it points at another entity and is a real, materialized column:
RelatedEntityID — the field is a foreign key. This is the base-table column that
actually stores the relationship. (The sibling RelatedEntity field is a view join
on that ID, not a base column; the two never disagree in practice — verified 0/793
divergence across the FK fields in the reference database — so keying off the ID is
both equivalent and more direct.)!IsPrimaryKey — a primary key is already covered by its own index. In 1:1
extension-table patterns the child's PK is also an FK to the parent, and indexing it
again would be pure overhead.!IsVirtual — virtual fields have no underlying column, so CREATE INDEX on one
would reference a column that does not exist.The PK/virtual exclusions previously existed only on the PostgreSQL side; hoisting them here applies them to every dialect by construction. Current real-world exposure is zero (no FK field in the reference database is also a primary key or virtual), so this is a guard against a future case rather than a change in today's generated output.
ProtectedisPostgreSQL will happily accept an unbounded text column in a btree key and then fail at
INSERT time if a value exceeds roughly an eighth of a page — an error that surfaces long
after the index was created, on whichever row happens to be too long. Treating unbounded
columns as unindexable keeps the failure at generation time, where it names the column.
ProtectedisTolerant-SP semantics: returns true when this parameter must be provided by every caller (no default, no fallback). Pure decision logic — Pillar 1 of the cross-app migration architecture.
ProtectedmaxPostgreSQL's maximum identifier length.
ProtectedneedsReturns true when codegen should emit a <Param>_Clear companion
parameter for the given field. The companion lets callers
disambiguate "leave unchanged / apply DB default" (omit the
parameter) from "explicitly set this column to NULL"
(<Param>_Clear = 1). Required only for nullable columns whose
database default is itself non-NULL — without the companion, a
caller could not preserve a literal NULL because the dialect's
IsNull wrap would always substitute the default.
Routes the NULL-literal check through the dialect so future dialects can override what "this value is NULL" looks like in their generated SQL. Pure decision logic — no rendering.
Parses a PostgreSQL column default value by stripping PG-specific type cast syntax
(e.g., '2024-01-01'::timestamp becomes '2024-01-01'). Returns null for
auto-increment sequences (nextval(...)) and for null/undefined input, indicating
no meaningful default.
Quotes mixed-case identifiers in a raw SQL string for execution. SQL Server: returns the SQL unchanged (case-insensitive identifiers). PostgreSQL: double-quotes PascalCase identifiers to preserve case.
PG-specific base-view regeneration with 42P16 recovery.
Runs the provided CREATE OR REPLACE VIEW SQL through executeWithFallback
on a dedicated connection: happy path issues the CREATE OR REPLACE directly,
and only on SQLSTATE 42P16 does the capture/drop/recreate/restore dance fire
inside a transaction that preserves every dependent view, function, grant,
comment, and owner. See viewFallback.ts for the contract.
willRegenerate is passed through so dependents CodeGen is about to rebuild
in the same run are skipped at restore time (avoids restoring a stale
captured definition against a newly-regenerated target).
OptionalwillRegenerate: Set<string>ProtectedrenderPostgreSQL parameter types are mapped from the entity field's
T-SQL SQLFullType (the metadata is canonically T-SQL) into the
equivalent PostgreSQL type. SQL Server's base-class default would
pass the type through unchanged, which would emit invalid PG
function signatures.
ProtectedresolveResolves which of the parent's primary-key columns a cascading FK references, so the
cascade's WHERE <fk> = @<param> binds to the matching spDelete parameter (one is
declared per parent PK column). An FK always targets exactly one column:
fkField.RelatedEntityFieldName.
When it names a parent PK column that column is returned; when it names nothing
(metadata not yet synced) or a non-key unique column, null is returned because
no spDelete parameter carries that value — the caller must skip the cascade
rather than silently bind the FK to the wrong key column.PostgreSQL implementation of CodeGenDatabaseProvider.SetupDataSource.
Acquires the module-cached pg.Pool via PGConnection (so repeated
CodeGen operations reuse the same pool — matching SQL Server's behavior),
wires up PostgreSQLDataProvider, registers it as the active provider,
and loads the audit user.
Env var resolution — PG_HOST / PG_PORT / PG_DATABASE / PG_USERNAME /
PG_PASSWORD now flow through configInfo.{dbHost,dbPort,dbDatabase,codeGenLogin,codeGenPassword}
via DEFAULT_CODEGEN_CONFIG (see Config/config.ts). The provider just
reads configInfo.
ProtectedshouldDelegates to EntityFieldInfo.IsSPParameter — the single source
of truth for whether a field appears as a parameter in spCreate /
spUpdate. Runtime data providers consume the same predicate so the
SP signature emitted here and the EXEC argument list built at save
time always agree.
ProtectedsoftThe entity's soft-PK fields in ordinal order, or an empty array if its PK is not soft.
Requires EVERY primary-key field to be soft. A mixed key would mean the table has a real constraint on part of its key, which is not a shape the integration schema builder produces, and guessing at the right index for it is worse than leaving it alone.
ProtectedsoftComposes the soft-PK index name in this dialect's spelling, truncated to its limit.
ProtectedsoftPrefix for the automatic soft-PK index name. Dialects override to match their casing.
ProtectedtableThe table portion of an automatic FK index name, in this dialect's spelling.
ProtectedunresolvedSQL comment emitted (and warning logged) when a cascade cannot be generated because the FK on a composite-key parent does not resolve to one of the parent's key columns.
Cross-check every entity's declared fields against the columns its base view actually produces.
A field the metadata promises but the view cannot emit is not a cosmetic
inconsistency: the runtime selects fields by name, so the first read of that
entity fails with column "X" does not exist. Grids surface that as an empty
result rather than an error, so the entity simply appears to hold no data — a
failure mode that can persist for months without anyone seeing a stack trace.
This drift is created whenever a migration adds a column to a base TABLE and
registers an EntityField for it without also rebuilding the base VIEW. CodeGen
would normally repair that on its next run, but excludeSchemas skips SQL
generation entirely for excluded schemas (permissions only) — and __mj is in
that list by convention on essentially every install. So for the core schema
there is no regeneration pass to lean on, and the drift is permanent.
Deliberately NOT filtered by excludeSchemas: excluded schemas are precisely
where nothing else is watching.
Read-only — this reports, it does not repair.
Cross-checks the entity-level AllowAPI/spGenerated/sp* configuration against the routines actually present in the database after CodeGen finishes. Returns one entry per missing routine.
Why this exists: silent generation gaps (e.g. an entity dropped because an upstream batch errored, or stale entity-field metadata causing the PK check to fail) historically reported success at the pipeline level while leaving runtime CRUD broken. This validator turns that into a loud, actionable failure list before the install pipeline exits.
What's expected per entity:
Allow{Type}API flag is false.getCRUDRoutineName (which honors
entity.spCreate/spUpdate/spDelete overrides; otherwise returns
the dialect-generated default).Schema-level case sensitivity: SQL Server is case-insensitive, PostgreSQL is case-preserving. Both lookups normalize via lowercase to keep the validator dialect-agnostic.
Default implementation works for both dialects via the
getRoutineNamesBySchemaSQL helper. Providers may override to add
platform-specific shortcuts (e.g. checking only sys.procedures on
SQL Server) but the default is fine for all current dialects.
Wraps an INSERT statement with a conditional existence check at the statement level.
SQL Server: Adds IF NOT EXISTS (...) BEGIN prefix and END suffix.
PostgreSQL: Adds ON CONFLICT DO NOTHING suffix (no prefix needed).
The SQL Server existence check query. Ignored on PostgreSQL.
An object with prefix and suffix strings to wrap around the INSERT.
PostgreSQL implementation of the CodeGen database provider. Generates PostgreSQL-native DDL for views, CRUD functions, triggers, indexes, full-text search, permissions, and other database objects.
Registered with
MJGlobal.ClassFactoryagainst the canonical'postgresql'platform key —SQLCodeGenBaseresolves this provider viaClassFactory.CreateInstance(CodeGenDatabaseProvider, configInfo.dbPlatform).