pylon-db-core 0.2.0

//
// This source file is part of the Pylon open source project.
//
// Copyright (c) 2026 Jaldis B.V.
//
// Licensed under the MIT OR Apache-2.0 license (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://opensource.org/licenses/MIT
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//

use super::{FnDescriptor, FnVolatility, ImplStrategy, Param, PylonFnDef, PylonType, SqlLanguage};

// ── PostgreSQL type mapping ───────────────────────────────────────────────────

fn pg_type(ty: &PylonType) -> String {
    use PylonType::*;
    match ty {
        Str => "text".into(),
        Bool => "bool".into(),
        Int16 => "int2".into(),
        Int32 => "int4".into(),
        Int64 => "int8".into(),
        Float32 => "float4".into(),
        Float64 => "float8".into(),
        Decimal | BigInt => "numeric".into(),
        Uuid => "uuid".into(),
        Json => "jsonb".into(),
        Bytes => "bytea".into(),
        Datetime => "timestamptz".into(),
        Duration | RelativeDuration | DateDuration => "interval".into(),
        LocalDatetime => "timestamp".into(),
        LocalDate => "date".into(),
        LocalTime => "time".into(),
        Vector => "vector".into(),
        Geometry => "geometry".into(),
        Geography => "geography".into(),
        Box2D => "box2d".into(),
        Box3D => "box3d".into(),
        Any | AnyOrderable | AnyPoint => "anyelement".into(),
        Array(inner) => match inner.as_ref() {
            Any | AnyOrderable | AnyPoint => "anyarray".into(),
            other => format!("{}[]", pg_type(other)),
        },
        // Set in parameter position: transpiler converts the set to an array before the call.
        Set(inner) => match inner.as_ref() {
            Any | AnyOrderable | AnyPoint => "anyarray".into(),
            other => format!("{}[]", pg_type(other)),
        },
        Optional(inner) => pg_type(inner),
        Range(inner) => match inner.as_ref() {
            Any | AnyOrderable | AnyPoint => "anyrange".into(),
            other => format!("{}range", pg_type(other)),
        },
        Multirange(inner) => match inner.as_ref() {
            Any | AnyOrderable | AnyPoint => "anymultirange".into(),
            other => format!("{}multirange", pg_type(other)),
        },
        Tuple(_) => panic!("Tuple cannot appear as a PG function parameter type"),
    }
}

/// Derive the PostgreSQL RETURNS clause from a `PylonType`.
/// Call sites may override this via `PylonFnDef::returns_override`.
fn pg_returns(ty: &PylonType) -> String {
    use PylonType::*;
    match ty {
        Set(inner) => match inner.as_ref() {
            Tuple(_) => panic!("TABLE returns must use PylonFnDef::returns_override"),
            other => format!("SETOF {}", pg_type(other)),
        },
        Optional(inner) => pg_type(inner),
        other => pg_type(other),
    }
}

/// Render the parameter list for a `CREATE FUNCTION` statement.
///
/// A variadic param that is last becomes `VARIADIC type[]`; one in a non-last
/// position is emitted as a plain `type[]` (the transpiler collects args into
/// the array before the call).
fn pg_params(params: &[Param]) -> String {
    if params.is_empty() {
        return String::new();
    }
    let last = params.len() - 1;
    params
        .iter()
        .enumerate()
        .map(|(i, p)| {
            let arr_ty = match &p.ty {
                PylonType::Any | PylonType::AnyOrderable | PylonType::AnyPoint => "anyarray".into(),
                other => format!("{}[]", pg_type(other)),
            };
            if p.variadic && i == last {
                // PG syntax: VARIADIC name type[]
                format!("VARIADIC {} {}", p.name, arr_ty)
            } else if p.variadic {
                // Non-last variadic: transpiler collects into array; no VARIADIC keyword
                format!("{} {}", p.name, arr_ty)
            } else {
                format!("{} {}", p.name, pg_type(&p.ty))
            }
        })
        .collect::<Vec<_>>()
        .join(", ")
}

// ── DDL generator ─────────────────────────────────────────────────────────────

fn render_function(desc: &FnDescriptor, def: &PylonFnDef) -> String {
    let params = pg_params(&desc.params);
    let returns = def
        .returns_override
        .map(|s| s.to_owned())
        .unwrap_or_else(|| pg_returns(&desc.return_type));
    let lang = match def.language {
        SqlLanguage::Sql => "sql",
        SqlLanguage::PlPgSql => "plpgsql",
    };
    let volatility = match def.volatility {
        FnVolatility::Immutable => "IMMUTABLE",
        FnVolatility::Stable => "STABLE",
        FnVolatility::Volatile | FnVolatility::Modifying => "VOLATILE",
    };
    // A function that writes (sequence advance/reset) can't run in a parallel
    // worker — PostgreSQL rejects the plan rather than degrading gracefully.
    let parallel = match def.volatility {
        FnVolatility::Modifying => "PARALLEL UNSAFE",
        _ => "PARALLEL SAFE",
    };
    let strict = if def.strict { " STRICT" } else { "" };

    format!(
        "CREATE OR REPLACE FUNCTION _pylon.{name}({params})\n\
         \tRETURNS {returns}\n\
         \tLANGUAGE {lang} {volatility} {parallel}{strict}\n\
         AS $$\n\
         {body}\n\
         $$;\n",
        name = def.name,
        body = def.body,
    )
}

/// DDL for the `_pylon."IndexOutbox"` table and its supporting types.
///
/// Emitted once, at schema-bootstrap time, before any user-schema DDL.
/// `index_name IS NULL` represents the default (unnamed) index on a type;
/// `NULLS NOT DISTINCT` on the unique constraint collapses multiple writes
/// to the same object/index into a single outstanding job.
pub const INDEX_OUTBOX_DDL: &str = concat!(
    "DO $$ BEGIN\n",
    "    CREATE TYPE _pylon.\"IndexKind\" AS ENUM ('Vector', 'OpenSearch', 'Meilisearch');\n",
    "EXCEPTION WHEN duplicate_object THEN NULL; END $$;\n",
    "ALTER TYPE _pylon.\"IndexKind\" ADD VALUE IF NOT EXISTS 'Meilisearch';\n",
    "DO $$ BEGIN\n",
    "    CREATE TYPE _pylon.\"IndexOutboxStatus\" AS ENUM ('Pending', 'Processing', 'Failed');\n",
    "EXCEPTION WHEN duplicate_object THEN NULL; END $$;\n\n",
    "CREATE TABLE IF NOT EXISTS _pylon.\"IndexOutbox\" (\n",
    "    id            uuid        NOT NULL DEFAULT uuidv7(),\n",
    "    object_id     uuid        NOT NULL,\n",
    "    type_name     text        NOT NULL,\n",
    "    index_kind    _pylon.\"IndexKind\"         NOT NULL,\n",
    "    index_name    text,\n",
    "    operation     text        NOT NULL DEFAULT 'index',\n",
    "    status        _pylon.\"IndexOutboxStatus\" NOT NULL DEFAULT 'Pending',\n",
    "    attempts      int         NOT NULL DEFAULT 0,\n",
    "    enqueued_at   timestamptz NOT NULL DEFAULT now(),\n",
    "    next_attempt  timestamptz,\n",
    // When the current worker claimed this row. Lets a later drain tell an
    // in-flight batch from one abandoned by a worker that died holding it.
    "    claimed_at    timestamptz,\n",
    "    PRIMARY KEY (id),\n",
    "    UNIQUE NULLS NOT DISTINCT (object_id, index_kind, index_name)\n",
    ");\n",
    "ALTER TABLE _pylon.\"IndexOutbox\" ADD COLUMN IF NOT EXISTS\n",
    "    operation text NOT NULL DEFAULT 'index';\n",
    "ALTER TABLE _pylon.\"IndexOutbox\" ADD COLUMN IF NOT EXISTS\n",
    "    claimed_at timestamptz;\n\n",
    "CREATE INDEX IF NOT EXISTS \"IndexOutbox_status_next_attempt\" ON _pylon.\"IndexOutbox\" (status, next_attempt)\n",
    "    WHERE status IN ('Pending', 'Failed');\n\n",
    "CREATE OR REPLACE FUNCTION _pylon.notify_index_queue()\n",
    "    RETURNS trigger LANGUAGE plpgsql AS $$\n",
    "BEGIN\n",
    "    PERFORM pg_notify('pylon_index_queue', NEW.object_id::text);\n",
    "    RETURN NEW;\n",
    "END\n",
    "$$;\n\n",
    "CREATE OR REPLACE TRIGGER notify_index_queue\n",
    "    AFTER INSERT OR UPDATE ON _pylon.\"IndexOutbox\"\n",
    "    FOR EACH ROW EXECUTE FUNCTION _pylon.notify_index_queue();\n",
);

/// DDL for the `_pylon."SignalOutbox"` table and its supporting types.
///
/// Emitted once, at schema-bootstrap time, before any user-schema DDL —
/// same shape as `INDEX_OUTBOX_DDL`, but every mutation is a distinct
/// event to deliver rather than a coalescible rebuild job, so there's no
/// `UNIQUE`/`ON CONFLICT` target here. `old_row`/`new_row` are populated by
/// a per-type capture trigger (see `export::signal_trigger_infos`) —
/// `to_jsonb(OLD)`/`to_jsonb(NEW)` of the mutated row, which is exactly the
/// type's own stored properties and single-link FK columns (neither a
/// computed pointer nor a multilink has a backing column to capture).
pub const SIGNAL_OUTBOX_DDL: &str = concat!(
    "DO $$ BEGIN\n",
    "    CREATE TYPE _pylon.\"SignalOutboxStatus\" AS ENUM ('Pending', 'Processing', 'Failed');\n",
    "EXCEPTION WHEN duplicate_object THEN NULL; END $$;\n\n",
    "CREATE TABLE IF NOT EXISTS _pylon.\"SignalOutbox\" (\n",
    "    id            uuid        NOT NULL DEFAULT uuidv7(),\n",
    "    type_name     text        NOT NULL,\n",
    "    operation     text        NOT NULL,\n",
    "    old_row       jsonb,\n",
    "    new_row       jsonb,\n",
    "    status        _pylon.\"SignalOutboxStatus\" NOT NULL DEFAULT 'Pending',\n",
    "    attempts      int         NOT NULL DEFAULT 0,\n",
    "    enqueued_at   timestamptz NOT NULL DEFAULT now(),\n",
    "    next_attempt  timestamptz,\n",
    "    PRIMARY KEY (id)\n",
    ");\n\n",
    "CREATE INDEX IF NOT EXISTS \"SignalOutbox_status_next_attempt\" ON _pylon.\"SignalOutbox\" (status, next_attempt)\n",
    "    WHERE status IN ('Pending', 'Failed');\n\n",
    "CREATE OR REPLACE FUNCTION _pylon.notify_signal_queue()\n",
    "    RETURNS trigger LANGUAGE plpgsql AS $$\n",
    "BEGIN\n",
    "    PERFORM pg_notify('pylon_signal_queue', NEW.id::text);\n",
    "    RETURN NEW;\n",
    "END\n",
    "$$;\n\n",
    "CREATE OR REPLACE TRIGGER notify_signal_queue\n",
    "    AFTER INSERT ON _pylon.\"SignalOutbox\"\n",
    "    FOR EACH ROW EXECUTE FUNCTION _pylon.notify_signal_queue();\n",
);

/// DDL for the cache-invalidation notify function.
///
/// One statement-level trigger per user table (attached in the diff/export
/// DDL generators, alongside `CREATE TABLE`) calls this on every write,
/// notifying with the schema-qualified table name — matching exactly the
/// tag format `ir::tags::collect_tags` produces, so the Python-side listener
/// can evict cache entries by tag with no further lookup.
pub const CACHE_INVALIDATE_DDL: &str = concat!(
    "CREATE OR REPLACE FUNCTION _pylon.notify_cache_invalidate()\n",
    "    RETURNS trigger LANGUAGE plpgsql AS $$\n",
    "BEGIN\n",
    "    PERFORM pg_notify('pylon_cache_invalidate', TG_TABLE_SCHEMA || '.' || TG_TABLE_NAME);\n",
    "    RETURN NULL;\n",
    "END\n",
    "$$;\n",
);

/// DDL for the migration tracking tables (§7): `_pylon."Migrations"`,
/// `_pylon."Progress"`, and `_pylon."Schema"`.
///
/// **The single definition of these tables.** `migrate::ensure_internal_schema`
/// runs this same constant rather than carrying its own copy — an earlier
/// second copy there had already drifted (it grew `schema_state`, this one
/// never did), so a database bootstrapped through one path was missing a
/// column the other path's queries select.
pub const MIGRATION_TRACKING_DDL: &str = concat!(
    "CREATE TABLE IF NOT EXISTS _pylon.\"Migrations\" (\n",
    "    id          text        PRIMARY KEY,\n",
    "    onto        text        NOT NULL,\n",
    "    filename    text        NOT NULL,\n",
    "    db_state    jsonb       NULL,\n",
    "    applied_at  timestamptz NULL\n",
    ");\n",
    // Added after the table above already shipped, so existing databases
    // need the column bolted on rather than created fresh — ADD COLUMN IF
    // NOT EXISTS makes this safe to run again on a table that was CREATE'd
    // (not ALTER'd) before this column existed.
    "ALTER TABLE _pylon.\"Migrations\" ADD COLUMN IF NOT EXISTS schema_state jsonb NULL;\n\n",
    "CREATE TABLE IF NOT EXISTS _pylon.\"Progress\" (\n",
    "    id          text        PRIMARY KEY,\n",
    "    step_index  integer     NOT NULL,\n",
    "    updated_at  timestamptz NOT NULL DEFAULT now()\n",
    ");\n\n",
    "CREATE TABLE IF NOT EXISTS _pylon.\"Schema\" (\n",
    "    singleton   boolean     PRIMARY KEY DEFAULT true CHECK (singleton),\n",
    "    snapshot    jsonb       NOT NULL,\n",
    "    updated_at  timestamptz NOT NULL DEFAULT now()\n",
    ");\n\n",
    // See `INTERNAL_SCHEMA_VERSION`.
    "CREATE TABLE IF NOT EXISTS _pylon.\"Internal\" (\n",
    "    singleton   boolean     PRIMARY KEY DEFAULT true CHECK (singleton),\n",
    "    version     integer     NOT NULL,\n",
    "    updated_at  timestamptz NOT NULL DEFAULT now()\n",
    ");\n",
    "INSERT INTO _pylon.\"Internal\" (singleton, version) VALUES (true, ",
    internal_schema_version_literal!(),
    ")\n",
    "    ON CONFLICT (singleton) DO UPDATE SET version = ",
    internal_schema_version_literal!(),
    ", updated_at = now();\n",
);

/// What revision of the internal `_pylon` structures this build writes.
///
/// Every internal change so far has been expressible as idempotent DDL
/// (`ADD COLUMN IF NOT EXISTS`, `CREATE OR REPLACE`), which
/// `ensure_internal_schema` simply replays — so nothing has yet *needed* to
/// branch on this. It exists because it cannot be added retroactively: the
/// moment a change isn't expressible that way — a column rename, a data
/// backfill, a destructive fixup — a repair has to know which databases
/// already ran it, and a database deployed without a marker offers nothing
/// to read.
///
/// Bump this when the internal structures change in a way a future reader
/// would need to distinguish. Leaving it alone is correct for a purely
/// idempotent change.
pub const INTERNAL_SCHEMA_VERSION: i32 = 1;

/// The oldest internal layout this build can still operate against.
///
/// Paired with `INTERNAL_SCHEMA_VERSION` because one number cannot answer
/// the question that actually matters at startup — *is this mismatch
/// fatal?* A database one version behind is usually fine (the change was
/// additive, and this build's SQL never mentions the new parts); a database
/// behind a change that renamed or removed something is not. Which of those
/// happened is known when the change is written, not guessable at runtime,
/// so it is recorded here rather than inferred.
///
/// Leave this alone when bumping `INTERNAL_SCHEMA_VERSION` for an additive
/// change. Raise it to the new version only when this build genuinely
/// cannot work against the older layout — that turns every older database
/// into a startup failure until `pylon migration apply` runs, which is
/// correct for a breaking change and needlessly disruptive for anything
/// else.
///
/// See "The internal `_pylon` schema" in CONTRIBUTING.md.
pub const MIN_SUPPORTED_INTERNAL_VERSION: i32 = 1;

/// `INTERNAL_SCHEMA_VERSION` as a literal, for splicing into the `concat!`
/// above — `concat!` takes literals only, so the constant cannot be
/// interpolated directly. Kept adjacent so the two cannot drift; the test
/// `internal_schema_version_literal_matches_the_constant` enforces it.
macro_rules! internal_schema_version_literal {
    () => {
        "1"
    };
}
use internal_schema_version_literal;

/// Generate the complete `_pylon` schema DDL from the stdlib registry.
///
/// Every `ImplStrategy::PylonFunction` entry contributes one
/// `CREATE OR REPLACE FUNCTION` statement — overloads generate separate
/// statements and PostgreSQL resolves them by argument types.
/// `TranspilerIntrinsic` entries (range, multirange) are skipped.
pub fn export_stdlib() -> String {
    let mut out = String::from("CREATE SCHEMA IF NOT EXISTS _pylon;\n\n");

    out.push_str(INDEX_OUTBOX_DDL);
    out.push('\n');
    out.push_str(SIGNAL_OUTBOX_DDL);
    out.push('\n');
    out.push_str(MIGRATION_TRACKING_DDL);
    out.push('\n');
    out.push_str(CACHE_INVALIDATE_DDL);
    out.push('\n');

    // Internal runtime helpers (not user-callable from PyQL).
    out.push_str(concat!(
        "CREATE OR REPLACE FUNCTION _pylon.array_subscript(arr anyarray, idx bigint)\n",
        "\tRETURNS anyelement\n",
        "\tLANGUAGE plpgsql STABLE PARALLEL SAFE\n",
        "AS $$\n",
        "DECLARE\n",
        "    element_index bigint := CASE WHEN idx < 0 THEN idx + cardinality(arr) ELSE idx END;\n",
        "BEGIN\n",
        "    IF element_index < 0 OR element_index >= cardinality(arr) THEN\n",
        "        RAISE EXCEPTION 'array index % is out of bounds', idx\n",
        "            USING ERRCODE = 'array_subscript_error';\n",
        "    END IF;\n",
        "    RETURN arr[element_index + 1];\n",
        "END\n",
        "$$;\n\n",
        // PostgreSQL has no expression-level RAISE, so an overload whose
        // `optional<str>` format argument has to be rejected inline needs a
        // function whose only job is to raise.
        "CREATE OR REPLACE FUNCTION _pylon.raise_invalid_parameter(msg text)\n",
        "\tRETURNS text\n",
        "\tLANGUAGE plpgsql IMMUTABLE PARALLEL SAFE STRICT\n",
        "AS $$\n",
        "BEGIN\n",
        "    RAISE EXCEPTION '%', msg USING ERRCODE = 'invalid_parameter_value';\n",
        "END\n",
        "$$;\n\n",
        // `<duration>` and `<cal::date_duration>` of a string. Both are
        // `interval`, so neither can be a stdlib overload keyed on its type,
        // and neither is reachable as a function — only as a cast.
        "CREATE OR REPLACE FUNCTION _pylon.duration_in(val text)\n",
        "\tRETURNS interval\n",
        "\tLANGUAGE plpgsql IMMUTABLE PARALLEL SAFE STRICT\n",
        "AS $$\n",
        "DECLARE\n",
        "    parsed interval := val::interval;\n",
        "BEGIN\n",
        "    IF date_part('year', parsed) != 0 OR date_part('month', parsed) != 0\n",
        "        OR date_part('day', parsed) != 0 THEN\n",
        "        RAISE EXCEPTION 'invalid input syntax for type duration: %', quote_literal(val)\n",
        "            USING ERRCODE = 'invalid_datetime_format',\n",
        "                  HINT = 'Day, month and year units cannot be used for duration.';\n",
        "    END IF;\n",
        "    RETURN parsed;\n",
        "END\n",
        "$$;\n\n",
        "CREATE OR REPLACE FUNCTION _pylon.date_duration_in(val text)\n",
        "\tRETURNS interval\n",
        "\tLANGUAGE plpgsql IMMUTABLE PARALLEL SAFE STRICT\n",
        "AS $$\n",
        "DECLARE\n",
        "    parsed interval := val::interval;\n",
        "BEGIN\n",
        "    IF date_part('epoch', parsed - date_trunc('day', parsed)) != 0 THEN\n",
        "        RAISE EXCEPTION 'invalid input syntax for type cal::date_duration: %', quote_literal(val)\n",
        "            USING ERRCODE = 'invalid_datetime_format',\n",
        "                  HINT = 'Units smaller than days cannot be used for cal::date_duration.';\n",
        "    END IF;\n",
        "    RETURN parsed;\n",
        "END\n",
        "$$;\n\n",
        "CREATE OR REPLACE FUNCTION _pylon.str_subscript(s text, idx bigint)\n",
        "\tRETURNS text\n",
        "\tLANGUAGE plpgsql STABLE PARALLEL SAFE\n",
        "AS $$\n",
        "DECLARE\n",
        "    element_index bigint := CASE WHEN idx < 0 THEN idx + char_length(s) ELSE idx END;\n",
        "BEGIN\n",
        "    IF element_index < 0 OR element_index >= char_length(s) THEN\n",
        "        RAISE EXCEPTION 'string index % is out of bounds', idx\n",
        "            USING ERRCODE = 'array_subscript_error';\n",
        "    END IF;\n",
        "    RETURN substr(s, (element_index + 1)::int, 1);\n",
        "END\n",
        "$$;\n\n",
        "CREATE OR REPLACE FUNCTION _pylon.str_subscript(s bytea, idx bigint)\n",
        "\tRETURNS bytea\n",
        "\tLANGUAGE plpgsql STABLE PARALLEL SAFE\n",
        "AS $$\n",
        "DECLARE\n",
        "    element_index bigint := CASE WHEN idx < 0 THEN idx + length(s) ELSE idx END;\n",
        "BEGIN\n",
        "    IF element_index < 0 OR element_index >= length(s) THEN\n",
        "        RAISE EXCEPTION 'byte string index % is out of bounds', idx\n",
        "            USING ERRCODE = 'array_subscript_error';\n",
        "    END IF;\n",
        "    RETURN substr(s, (element_index + 1)::int, 1);\n",
        "END\n",
        "$$;\n\n",
    ));

    for desc in super::registry() {
        if let ImplStrategy::PylonFunction(def) = &desc.impl_strategy {
            out.push_str(&render_function(desc, def));
            out.push('\n');
        }
    }
    out
}

#[cfg(test)]
mod tests {
    use super::{INTERNAL_SCHEMA_VERSION, export_stdlib};

    #[test]
    fn ddl_smoke() {
        let ddl = export_stdlib();
        let fn_count = ddl.matches("CREATE OR REPLACE FUNCTION").count();
        assert!(ddl.starts_with("CREATE SCHEMA IF NOT EXISTS _pylon;"));
        assert!(fn_count > 0, "no functions generated");
        assert!(ddl.contains("_pylon.to_bool"), "to_bool missing");
        assert!(ddl.contains("_pylon.enumerate"), "enumerate missing");
        assert!(ddl.contains("_pylon.datetime_get"), "datetime_get missing");
        assert!(
            !ddl.contains("_pylon.range("),
            "range must not be installed (TranspilerIntrinsic)"
        );
        assert!(!ddl.contains("_pylon.multirange("), "multirange must not be installed");
        eprintln!("export_stdlib: {} PylonFunction overloads installed", fn_count);
    }

    #[test]
    fn ddl_to_bool_has_three_overloads() {
        let ddl = export_stdlib();
        let count = ddl.matches("_pylon.to_bool(").count();
        assert_eq!(count, 3, "expected int2/int4/int8 overloads; got {count}");
    }

    #[test]
    fn ddl_enumerate_returns_table() {
        let ddl = export_stdlib();
        assert!(ddl.contains("RETURNS TABLE(index bigint, value anyelement)"));
    }

    #[test]
    fn ddl_json_get_uses_variadic() {
        let ddl = export_stdlib();
        assert!(ddl.contains("VARIADIC path text[]"), "json_get must use VARIADIC");
    }

    #[test]
    fn ddl_installs_cache_invalidate_notify_function() {
        let ddl = export_stdlib();
        assert!(ddl.contains("CREATE OR REPLACE FUNCTION _pylon.notify_cache_invalidate()"));
        assert!(ddl.contains("pg_notify('pylon_cache_invalidate', TG_TABLE_SCHEMA || '.' || TG_TABLE_NAME)"));
    }

    #[test]
    fn internal_schema_version_literal_matches_the_constant() {
        // `concat!` accepts literals only, so the version is spelled twice:
        // once as `INTERNAL_SCHEMA_VERSION` for code to read, once as a
        // literal for the DDL. They must not drift — a database would then
        // record a version no reader recognises.
        assert_eq!(internal_schema_version_literal!(), INTERNAL_SCHEMA_VERSION.to_string(),);
    }

    #[test]
    fn the_internal_version_marker_is_created_and_upserted() {
        let ddl = export_stdlib();
        assert!(ddl.contains("CREATE TABLE IF NOT EXISTS _pylon.\"Internal\""));
        // Upsert, not plain insert: an existing database has to have its
        // recorded version moved forward, not left at whatever it was.
        assert!(
            ddl.contains("ON CONFLICT (singleton) DO UPDATE SET version = 1"),
            "got:\n{ddl}"
        );
    }
}