zirql 0.1.0

use std::cmp::Ordering;
use std::collections::BTreeMap;
use std::mem::size_of;

pub(crate) mod execution;
pub(crate) mod pattern;
pub use pattern::{Pattern, PatternKind, copy_pattern, dispose_pattern, pattern_names};
pub(crate) mod prepared;
use prepared::{
    Frame, Preparation, PreparedArgument, PreparedGenerator, PreparedKind, PreparedValue,
    RuntimeValue,
};

use crate::runtime_types::{annotate, check_known_type, compatible_declarations, copy_declaration};
use crate::{Bindings, Budget, DeclaredType, Located, Location, QueryError, QueryErrorCategory};

/// Host-supplied enum identity, scoped to one immutable host context per request.
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub struct NominalTypeId(pub u64);

/// Host-supplied member identity within its nominal type.
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub struct NominalMemberId(pub u64);

/// A resolved member. Names and declaration order are retained host facts;
/// semantic equality uses only type/member IDs. Budgeted entry points reject
/// contradictory metadata wherever members are compared.
#[derive(Debug)]
pub struct NominalMember {
    pub type_id: NominalTypeId,
    pub member_id: NominalMemberId,
    pub declaration_order: usize,
    pub type_name: String,
    pub member_name: String,
}

impl PartialEq for NominalMember {
    fn eq(&self, other: &Self) -> bool {
        self.type_id == other.type_id && self.member_id == other.member_id
    }
}
impl Eq for NominalMember {}

/// A single integer or resolved nominal dimension key.
#[derive(Debug, PartialEq, Eq)]
pub enum ValueKey {
    Integer(i64),
    Member(NominalMember),
}

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueKeyType {
    Integer,
    Member(NominalTypeId),
}

/// An established dimension, including typed empty axes. Supplied key order is
/// observable and need not be numeric or declaration order.
#[derive(Debug, PartialEq, Eq)]
pub struct KeyAxis {
    pub key_type: ValueKeyType,
    pub keys: Vec<ValueKey>,
}

/// One sparse cell. Native entries must be unique and in row-major axis order.
#[derive(Debug, PartialEq)]
pub struct KeyedEntry {
    pub key: Vec<ValueKey>,
    pub value: ConstructedValue,
}

/// Keyed facts retain rank/dimension identity and possible element types.
/// `None` axes are deferred expression facts only; concrete data always has
/// `Some` established, nonzero-rank axes.
#[derive(Debug, PartialEq, Eq)]
pub struct KeyedArrayType {
    pub axes: Option<Vec<ValueKeyType>>,
    pub elements: Vec<ValueType>,
}

/// Supported homogeneous set identities. Float identities use numeric equality,
/// so positive and negative zero denote the same element.
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum SetElementType {
    Boolean,
    Integer,
    Float,
    Member(NominalTypeId),
}

/// Owned constructed data. Arrays have positive one-based positions. Tuples and
/// records retain field order; sets retain each first inserted element.
/// Keyed arrays retain nonzero typed axes and sparse row-major entries; supplied
/// axes need not be contiguous or cover a full Cartesian product.
/// Public construction is checked by the budgeted entry points before use.
/// Derived Rust equality compares stored representations. Language set and
/// dictionary equality compares membership and associations respectively.
/// There is deliberately no deep `Clone`; use [`copy_constructed_value`].
#[derive(Debug, PartialEq)]
pub enum ConstructedValue {
    Absent,
    /// An admitted immutable value with an explicit constructed declaration.
    Declared {
        value: Box<Self>,
        declaration: DeclaredType<()>,
    },
    Boolean(bool),
    Integer(i64),
    Float(f64),
    String(String),
    Member(NominalMember),
    KeyedArray {
        axes: Vec<KeyAxis>,
        entries: Vec<KeyedEntry>,
    },
    Array(Vec<Self>),
    Tuple(Vec<Self>),
    Record(Vec<(String, Self)>),
    Set {
        element_type: Option<SetElementType>,
        elements: Vec<Self>,
    },
}

/// Release owned payloads even when admission rejected their depth.
pub(crate) fn dispose_constructed_value(value: ConstructedValue) {
    let mut pending = vec![value];
    while let Some(value) = pending.pop() {
        match value {
            ConstructedValue::Declared { value, declaration } => {
                crate::functions::dispose_declaration(declaration);
                pending.push(*value);
            }
            ConstructedValue::Array(values) | ConstructedValue::Tuple(values) => {
                pending.extend(values);
            }
            ConstructedValue::Record(fields) => {
                pending.extend(fields.into_iter().map(|(_, value)| value));
            }
            ConstructedValue::KeyedArray { entries, .. } => {
                pending.extend(entries.into_iter().map(|entry| entry.value));
            }
            ConstructedValue::Set { elements, .. } => pending.extend(elements),
            ConstructedValue::Absent
            | ConstructedValue::Boolean(_)
            | ConstructedValue::Integer(_)
            | ConstructedValue::Float(_)
            | ConstructedValue::String(_)
            | ConstructedValue::Member(_) => {}
        }
    }
}

/// Concrete positional facts, including heterogeneous arrays. `Elements`
/// describes possible element types, without claiming a length or positions.
#[derive(Debug, PartialEq, Eq)]
pub enum ArrayType {
    Positions(Vec<ValueType>),
    Elements(Vec<ValueType>),
}

/// Validation facts supplied by projections or discovered from actual data.
/// `Unestablished` admits deferred checking, such as absent access or an empty
/// source's element type. It is never a runtime value or Boolean truth.
#[derive(Debug, PartialEq, Eq)]
pub enum ValueType {
    Absent,
    /// Keep declaration constraints separate from the observed value facts.
    Declared {
        actual: Box<Self>,
        declaration: DeclaredType<()>,
    },
    /// A present Boolean, integer, float or string whose primitive kind is unknown.
    /// Preparation metadata only; actual values retain their precise primitive facts.
    ScalarKind,
    Boolean,
    Integer,
    Float,
    String,
    Member(NominalTypeId),
    KeyedArray(KeyedArrayType),
    Array(ArrayType),
    /// Possible array elements with storage, positions and axes unestablished.
    ArrayKind(Vec<Self>),
    Tuple(Vec<Self>),
    /// A tuple whose positions have not been inspected; no arity is known.
    TupleKind,
    Record(Vec<(String, Self)>),
    /// A record whose stored fields have not been inspected; no schema is known.
    RecordKind,
    Set(Option<SetElementType>),
    Unestablished,
}

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueUnaryOperator {
    Positive,
    Negative,
    Not,
}

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueBinaryOperator {
    Add,
    Subtract,
    Multiply,
    Divide,
    IntegerDivide,
    Modulo,
    Less,
    LessEqual,
    Greater,
    GreaterEqual,
    Equal,
    NotEqual,
    In,
    And,
    Or,
    Concatenate,
    /// Exact case-sensitive substring matching. Empty search strings match.
    Contains,
    /// Exact case-sensitive prefix matching. Empty prefixes match.
    StartsWith,
    /// Exact case-sensitive suffix matching. Empty suffixes match.
    EndsWith,
}

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueConstructor {
    Array,
    Set,
}

/// Closed summaries over fully evaluated positional or keyed arrays.
/// Length counts present values; sum accepts integers and the quantifiers
/// accept fixed Booleans. Empty identities are 0, 0, true and false.
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueReducer {
    Length,
    Sum,
    Forall,
    Exists,
}

/// Select the first input value with the smallest or largest ordering key.
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum ValueExtremum {
    Min,
    Max,
}

/// Closed selectors for stable collection sorting.
#[derive(Debug, PartialEq, Eq)]
pub enum SortSelector {
    /// Sort dictionary values directly.
    Value,
    /// Sort array rows or dictionary values by a static field.
    Field(String),
}

pub type ValueExpression<Q = ()> = Located<ValueExpressionKind<Q>>;

// This slot cannot be written as an ordinary language identifier.
pub(crate) const PREDICATE_SUBJECT: &str = "\0predicate";

/// One scoped body with an optional pattern for the current predicate subject.
/// Predicates require a Boolean; existing domain leaf arguments retain their
/// own scalar contract through `bind_value`. `_` reads the nearest subject frame,
/// including inside ordinary guards.
#[derive(Debug, PartialEq)]
pub struct PredicateArgument<Q = ()> {
    /// Match the subject once and install all successful names together.
    /// `None` keeps only the implicit whole-subject `_` argument.
    pub argument: Option<Pattern>,
    pub body: Box<ValueExpression<Q>>,
}
impl<Q> PredicateArgument<Q> {
    /// Bind one existing domain leaf's value argument to its predicate subject.
    /// The leaf retains its own argument type check; the surrounding predicate
    /// retains Boolean/Truth admission. This uses the same subject frame.
    pub fn bind_value(self, subject: ValueExpression<Q>) -> ValueExpression<Q> {
        let range = self.body.range.clone();
        Located::new(
            ValueExpressionKind::SubjectScope {
                subject: Box::new(subject),
                argument: self,
            },
            range,
        )
    }
    /// Bind this body to one actual subject. Native adapters supply their
    /// existing input expression; scalar hosts may supply a literal or name.
    /// The resulting expression uses ordinary preflight and value execution.
    pub fn bind(self, subject: ValueExpression<Q>) -> ValueExpression<Q> {
        let range = self.body.range.clone();
        Located::new(
            ValueExpressionKind::PredicateScope {
                subject: Box::new(subject),
                predicate: self,
            },
            range,
        )
    }
}

/// A host-lowered pure expression. Every node retains its query byte range.
/// Hosts reject unlisted surface forms and decimal spellings that round a
/// nonzero literal to zero before creating this representation.
#[derive(Debug, PartialEq)]
pub enum ValueExpressionKind<Q = ()> {
    Literal(ConstructedValue),
    /// The immutable constructed input supplied for this evaluation invocation.
    CurrentInput,
    /// Computational FIFO. An explicit type supports empty native input.
    Queue {
        items: Box<ValueExpression<Q>>,
        element: Option<Located<crate::SignatureType>>,
    },
    /// Optional native tuple `(item, remaining_queue)`; an empty queue is absent.
    PopFront(Box<ValueExpression<Q>>),
    PushBackAll {
        queue: Box<ValueExpression<Q>>,
        items: Box<ValueExpression<Q>>,
    },
    /// Empty computational set of one explicitly named native kind.
    IdentitySet {
        element: Located<crate::SignatureType>,
    },
    Insert {
        set: Box<ValueExpression<Q>>,
        item: Box<ValueExpression<Q>>,
    },
    /// A normalized native operand; it runs only when this node is selected.
    NativeQuery(Box<Q>),
    /// A pure native result, retained without scalar projection. Available in a
    /// function request; ordinary value entry points reject this operand.
    NativeValue(Box<Q>),
    /// A named pure function, resolved before any body executes.
    Call {
        function: Located<String>,
        arguments: Vec<ValueExpression<Q>>,
    },
    /// Apply a named pure step to an eager positional sequence in input order.
    ///
    /// ```
    /// use zirql::{Bindings, Budget, ConstructedValue as V, DeclaredType as D,
    ///     FunctionDeclaration, FunctionParameter, FunctionLimits, Located,
    ///     ProgramLimits, ValueExpression as E, ValueExpressionKind as K,
    ///     ValueBinaryOperator as B, evaluate_functions};
    /// fn e(value: K) -> E { Located::new(value, 0..1) }
    /// let step = FunctionDeclaration {
    ///     name: Located::new("add".into(), 0..1),
    ///     parameters: ["state", "item"].into_iter().map(|name| Located::new(
    ///         FunctionParameter { name: Located::new(name.into(), 0..1),
    ///                             declaration: D::Integer }, 0..1)).collect(),
    ///     result: Located::new(D::Integer, 0..1), bindings: vec![],
    ///     value: e(K::Binary { operator: B::Add,
    ///         left: Box::new(e(K::Name("state".into()))),
    ///         right: Box::new(e(K::Name("item".into()))) }),
    /// };
    /// let entry = e(K::Fold {
    ///     items: Box::new(e(K::Literal(V::Array(vec![V::Integer(2), V::Integer(3)])))),
    ///     initial: Box::new(e(K::Literal(V::Integer(0)))),
    ///     step: Located::new("add".into(), 0..1),
    /// });
    /// let mut budget = Budget::for_program(ProgramLimits {
    ///     work: 100_000, results: 10_000, nesting: 64, stream_items: 100,
    /// });
    /// let result = evaluate_functions(&[step], &entry, &Bindings::default(),
    ///     &mut budget, FunctionLimits { active_depth: 1 }).unwrap();
    /// assert_eq!(result.data(), &V::Integer(5));
    /// ```
    Fold {
        items: Box<ValueExpression<Q>>,
        initial: Box<ValueExpression<Q>>,
        step: Located<String>,
    },
    /// Retain every post-step state, excluding the initial state.
    Scan {
        items: Box<ValueExpression<Q>>,
        initial: Box<ValueExpression<Q>>,
        step: Located<String>,
    },
    /// Extract exactly one positional child without copying it.
    One(Box<ValueExpression<Q>>),
    Name(String),
    /// Read the nearest predicate subject. Ordinary bindings cannot supply it.
    PredicateSubject,
    /// Scope an existing native predicate leaf's non-Boolean value argument.
    SubjectScope {
        subject: Box<ValueExpression<Q>>,
        argument: PredicateArgument<Q>,
    },
    /// Evaluate one Boolean body with a fresh unnamed subject and optional alias.
    PredicateScope {
        subject: Box<ValueExpression<Q>>,
        predicate: PredicateArgument<Q>,
    },
    Occurs(Box<ValueExpression<Q>>),
    Absent(Box<ValueExpression<Q>>),
    Lookup {
        value: Box<ValueExpression<Q>>,
        key: Box<ValueExpression<Q>>,
    },
    HasKey {
        value: Box<ValueExpression<Q>>,
        key: Box<ValueExpression<Q>>,
    },
    Default {
        value: Box<ValueExpression<Q>>,
        fallback: Box<ValueExpression<Q>>,
    },
    Array(Vec<ValueExpression<Q>>),
    Tuple(Vec<ValueExpression<Q>>),
    Record(Vec<(Located<String>, ValueExpression<Q>)>),
    /// Computed string keys run before their values and retain insertion order.
    Dictionary(Vec<(ValueExpression<Q>, ValueExpression<Q>)>),
    DictionaryComprehension {
        clauses: Vec<Located<ValueGenerator<Q>>>,
        key: Box<ValueExpression<Q>>,
        head: Box<ValueExpression<Q>>,
    },
    Set(Vec<ValueExpression<Q>>),
    /// Literal pairs run in written order and normalize to row-major order.
    /// Empty literals require explicit typed axes; generic sparse data is valid.
    KeyedArray {
        axes: Option<Vec<KeyAxis>>,
        /// Eager ordered sources in surrounding scope, exclusive with `axes`.
        declared_axis_sources: Option<Vec<ValueExpression<Q>>>,
        entries: Vec<(ValueExpression<Q>, ValueExpression<Q>)>,
    },
    /// Declared sources run before generators in the surrounding scope.
    KeyedComprehension {
        clauses: Vec<Located<ValueGenerator<Q>>>,
        key: Box<ValueExpression<Q>>,
        head: Box<ValueExpression<Q>>,
        declared_axis_sources: Option<Vec<ValueExpression<Q>>>,
        /// Lazy zero-cell fallback, exclusive with `declared_axis_sources`.
        empty_axis_sources: Option<Vec<ValueExpression<Q>>>,
    },
    Unary {
        operator: ValueUnaryOperator,
        operand: Box<ValueExpression<Q>>,
    },
    Binary {
        operator: ValueBinaryOperator,
        left: Box<ValueExpression<Q>>,
        right: Box<ValueExpression<Q>>,
    },
    Field {
        value: Box<ValueExpression<Q>>,
        field: Located<String>,
    },
    TupleAccess {
        value: Box<ValueExpression<Q>>,
        position: Located<usize>,
    },
    ArrayAccess {
        array: Box<ValueExpression<Q>>,
        index: Box<ValueExpression<Q>>,
    },
    IndexSet(Box<ValueExpression<Q>>),
    /// Expose present keyed cells as positional `key`/`value` records. Rank-one
    /// keys are scalars; higher-rank keys are tuples in dimension order.
    Entries(Box<ValueExpression<Q>>),
    /// Pair keyed arrays with identical ordered axes and present full keys.
    /// Retain left axes/keys and move each pair into a two-element tuple cell.
    ZipExact {
        left: Box<ValueExpression<Q>>,
        right: Box<ValueExpression<Q>>,
    },
    /// Evaluate the entire array before scanning its values in stored order.
    Reduce {
        operator: ValueReducer,
        array: Box<ValueExpression<Q>>,
    },
    /// Retain positional elements whose scoped predicate is true, in input order.
    Filter {
        array: Box<ValueExpression<Q>>,
        predicate: PredicateArgument<Q>,
    },
    /// Stably sort an array, set or string dictionary, retaining its kind.
    /// Without a selector, arrays/sets use values and dictionaries use keys.
    /// Descending reverses comparisons, preserving current order for ties.
    /// Array and dictionary selector keys are present homogeneous integers,
    /// finite floats, strings or nominal members. Selector failures use its range.
    Sort {
        array: Box<ValueExpression<Q>>,
        selector: Option<Located<SortSelector>>,
        descending: bool,
    },
    /// Retain each first occurrence in a homogeneous positional scalar array.
    /// Supports Booleans, integers, finite floats, strings and one nominal type.
    Unique(Box<ValueExpression<Q>>),
    /// Count strings into a record whose labels follow their first occurrence.
    Tally(Box<ValueExpression<Q>>),
    /// Select one original array scalar or record, or absence for empty input.
    /// Ties retain the first input value. Keys follow `Sort`'s array contract.
    Extremum {
        operator: ValueExtremum,
        array: Box<ValueExpression<Q>>,
        field: Option<Located<String>>,
    },
    /// Group positional records by one static field, preserving first-seen keys
    /// and all rows in input order. Keys are homogeneous integers, strings or
    /// members of one nominal type. Results use existing `key`/`items` records.
    /// Missing fields are deferred until execution; known incompatible types
    /// fail preflight. Selector/key errors use `field`'s range.
    GroupBy {
        rows: Box<ValueExpression<Q>>,
        field: Located<String>,
    },
    /// Preflight both operands; run value only after a true fixed Boolean.
    /// A false condition fails at this node with the literal message.
    Require {
        condition: Box<ValueExpression<Q>>,
        value: Box<ValueExpression<Q>>,
        message: Located<String>,
    },
    Range {
        lower: Box<ValueExpression<Q>>,
        upper: Box<ValueExpression<Q>>,
    },
    /// Conditions are checked in order. The final else is mandatory.
    Conditional {
        branches: Vec<(ValueExpression<Q>, ValueExpression<Q>)>,
        otherwise: Box<ValueExpression<Q>>,
    },
    /// Initialize fresh state names in the outer scope, then repeat the body.
    /// Every body path ends in `Break` or `Continue`. State contracts stay fixed;
    /// each complete next state is evaluated against the old state and admitted
    /// before any slot changes. Textual host syntax is a separate frontend step.
    ///
    /// This callable accumulator runs 10,000 transitions at active depth one:
    ///
    /// ```
    /// use zirql::{Bindings, Budget, ConstructedValue as V, DeclaredType as D,
    ///     FunctionDeclaration, FunctionLimits, Located, ProgramLimits,
    ///     ValueBinaryOperator as B, ValueExpression as E, ValueExpressionKind as K};
    /// fn node(kind: K) -> E { Located::new(kind, 0..1) }
    /// fn int(value: i64) -> E { node(K::Literal(V::Integer(value))) }
    /// fn name(value: &str) -> E { node(K::Name(value.into())) }
    /// fn binary(operator: B, left: E, right: E) -> E {
    ///     node(K::Binary { operator, left: Box::new(left), right: Box::new(right) })
    /// }
    /// let body = node(K::Loop {
    ///     states: vec![(Located::new("n".into(), 0..1), int(10_000)),
    ///                  (Located::new("total".into(), 0..1), int(0))],
    ///     body: Box::new(node(K::Conditional {
    ///         branches: vec![(binary(B::Equal, name("n"), int(0)),
    ///                         node(K::Break(Box::new(name("total")))))],
    ///         otherwise: Box::new(node(K::Continue(vec![
    ///             binary(B::Subtract, name("n"), int(1)),
    ///             binary(B::Add, name("total"), name("n")),
    ///         ]))),
    ///     })),
    /// });
    /// let functions = [FunctionDeclaration {
    ///     name: Located::new("accumulate".into(), 0..1), parameters: vec![],
    ///     result: Located::new(D::Integer, 0..1), bindings: vec![], value: body,
    /// }];
    /// let entry = node(K::Call { function: Located::new("accumulate".into(), 0..1), arguments: vec![] });
    /// let mut budget = Budget::for_program(ProgramLimits {
    ///     work: 20_000_000, results: 2_000_000, nesting: 64, stream_items: 100,
    /// });
    /// let result = zirql::evaluate_functions(&functions, &entry, &Bindings::default(),
    ///     &mut budget, FunctionLimits { active_depth: 1 })?;
    /// assert_eq!(result.data(), &V::Integer(50_005_000));
    /// # Ok::<(), zirql::FunctionError<zirql::QueryError>>(())
    /// ```
    Loop {
        states: Vec<(Located<String>, ValueExpression<Q>)>,
        body: Box<ValueExpression<Q>>,
    },
    /// Return a value from the innermost loop in this function.
    Break(Box<ValueExpression<Q>>),
    /// Replace every state slot of the innermost loop simultaneously.
    Continue(Vec<ValueExpression<Q>>),
    /// Ordered lexical bindings and a final pure expression.
    Block {
        bindings: Vec<(Pattern, ValueExpression<Q>)>,
        value: Box<ValueExpression<Q>>,
    },
    /// First successful pattern/guard, with one final unguarded wildcard.
    ValueMatch {
        subject: Box<ValueExpression<Q>>,
        arms: Vec<ValueMatchArm<Q>>,
    },
    Comprehension {
        constructor: ValueConstructor,
        clauses: Vec<Located<ValueGenerator<Q>>>,
        head: Box<ValueExpression<Q>>,
    },
}

/// One ordered value-match arm; bindings are local to its guard and result.
#[derive(Debug, PartialEq)]
pub struct ValueMatchArm<Q = ()> {
    pub pattern: Pattern,
    pub guard: Option<ValueExpression<Q>>,
    pub value: ValueExpression<Q>,
}

/// Ordered generator clauses with atomic pattern bindings.
/// Grouped `In` evaluates its source once and varies the last binder fastest.
#[derive(Debug, PartialEq)]
pub enum ValueGenerator<Q = ()> {
    In {
        binders: Vec<Pattern>,
        source: ValueExpression<Q>,
        filter: Option<ValueExpression<Q>>,
    },
    Bind {
        binder: Pattern,
        value: ValueExpression<Q>,
        filter: Option<ValueExpression<Q>>,
    },
}

/// A selected argument keeps its immutable owner until the adapter consumes it.
/// Inspecting the value does not copy it; materialization uses the same budget.
#[derive(Debug)]
pub struct ConstructedRead {
    value: RuntimeValue,
    location: Location,
    declaration: Option<DeclaredType<()>>,
}
impl ConstructedRead {
    pub(crate) fn from_runtime(
        value: RuntimeValue,
        location: Location,
        declaration: Option<DeclaredType<()>>,
    ) -> Self {
        Self {
            value,
            location,
            declaration,
        }
    }
    pub fn value(&self) -> &ConstructedValue {
        self.value.as_ref()
    }
    /// The selected function result's established contract, when available.
    /// Borrowing data with `value` retains this metadata separately; materializing
    /// with `into_owned` installs its transparent constructed annotation.
    pub fn declared_type(&self) -> Option<&DeclaredType<()>> {
        self.declaration
            .as_ref()
            .or_else(|| declaration(self.value.as_ref()))
    }
    /// Materialize an owned argument for a native payload that needs ownership.
    ///
    /// # Errors
    /// Copy/result/nesting refusals retain this argument's source location.
    pub fn into_owned(self, budget: &mut Budget) -> Result<ConstructedValue, QueryError> {
        budget.within_evaluation(1, self.location.clone(), |budget| {
            let value = self.value.materialize(budget, &self.location)?;
            if let Some(declaration) = self.declaration {
                annotate(value, declaration, budget, &self.location)
            } else {
                Ok(value)
            }
        })
    }
}

/// Borrowed execution of argument bodies declared by a native query host.
/// Implementations remain inside the current scalar evaluation invocation.
pub trait ValueArguments<Q, E: From<QueryError>> {
    fn evaluate(
        &mut self,
        expression: &ValueExpression<Q>,
        queries: &mut dyn ValueQueryHost<Q, Error = E>,
        budget: &mut Budget,
    ) -> Result<ConstructedRead, E>;
}

/// Native leaves share scalar validation and runtime branch selection. Hosts
/// supply only normalized-query facts/execution and explicit scalar binding reads.
/// Generator locals are visible to the native operand under the same budget.
pub trait ValueQueryHost<Q> {
    type Error: From<QueryError>;

    /// Facts for the immutable constructed input. Native input is separate.
    /// Hosts without constructed input keep the located default refusal.
    fn current_input_types(
        &mut self,
        range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        Err(QueryError::query(
            range.clone(),
            "constructed current input is unavailable",
        ))
    }
    /// Supply the constructed input once per invocation. Charge host scans and
    /// copies to this budget; the evaluator admits and retains the result.
    fn read_current_input(
        &mut self,
        range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<ConstructedValue, Self::Error> {
        Err(QueryError::query(range.clone(), "constructed current input is unavailable").into())
    }

    /// Facts for an explicit host predicate frame. Ordinary value evaluations
    /// have no unnamed argument, even if their bindings contain `_`.
    fn predicate_subject_types(
        &mut self,
        range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        Err(QueryError::query(
            range.clone(),
            "unnamed argument is only available in a predicate",
        ))
    }
    fn read_predicate_subject(
        &mut self,
        range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<ConstructedValue, Self::Error> {
        Err(QueryError::query(
            range.clone(),
            "unnamed argument is only available in a predicate",
        )
        .into())
    }

    /// Prepare contextual contracts before visiting an expression's operands.
    /// Ordinary value hosts need no native computation metadata.
    fn prepare_computation(
        &mut self,
        _expression: &ValueExpression<Q>,
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    /// Retain one resolved constructor contract in its prepared owner.
    fn worklist_id(
        &mut self,
        expression: &ValueExpression<Q>,
        _budget: &mut Budget,
    ) -> Result<usize, QueryError> {
        Err(QueryError::query(
            expression.range.clone(),
            "computational values require a native function host",
        ))
    }
    /// Resolve selected computational constructors after their operands have
    /// been checked. Constructed-only runners reject them during preflight.
    fn worklist_types(
        &mut self,
        expression: &ValueExpression<Q>,
        _budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        Err(QueryError::query(
            expression.range.clone(),
            "computational values require a native function host",
        ))
    }

    /// Function requests resolve names to stable entries. Ordinary value hosts
    /// retain their existing behavior and reject calls.
    fn function(
        &mut self,
        name: &Located<String>,
        _budget: &mut Budget,
    ) -> Result<(usize, usize), QueryError> {
        Err(QueryError::query(
            name.range.clone(),
            "named functions require a function request",
        ))
    }
    fn function_types(
        &mut self,
        name: &Located<String>,
        budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        self.function(name, budget)?;
        Ok(vec![ValueType::Unestablished])
    }
    /// Resolve a closed named accumulator step and validate its signature.
    /// Ordinary value requests reject function-dependent collection operations.
    fn accumulator_function(
        &mut self,
        step: &Located<String>,
        _budget: &mut Budget,
    ) -> Result<(usize, Vec<ValueType>), QueryError> {
        Err(QueryError::query(
            step.range.clone(),
            "named accumulators require a function request",
        ))
    }
    fn native_value_types(
        &mut self,
        _query: &Q,
        _locals: &[(&str, Vec<ValueType>)],
        _budget: &mut Budget,
        range: &std::ops::Range<usize>,
    ) -> Result<Vec<ValueType>, QueryError> {
        Err(QueryError::query(
            range.clone(),
            "native values require a function request",
        ))
    }
    /// Save/restore host kind facts alongside lexical value scopes.
    fn enter_scope(
        &mut self,
        _budget: &mut Budget,
        _range: &std::ops::Range<usize>,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    fn leave_scope(&mut self) {}
    /// Retain explicitly exposed native child kinds for pattern names.
    fn prepare_pattern(
        &mut self,
        _pattern: &Pattern,
        _source: &ValueExpression<Q>,
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    fn prepare_local(
        &mut self,
        _name: &Located<String>,
        _value: &ValueExpression<Q>,
        _types: &[ValueType],
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    /// Preserve a native sequence's declared singleton kind in lexical binders,
    /// including when runtime enumeration is empty. Ordinary value hosts need
    /// no extra metadata beyond constructed element facts. `element` selects an
    /// `In` source element; `false` binds the whole `Bind` initializer.
    fn prepare_generator(
        &mut self,
        _binder: &Pattern,
        _source: &ValueExpression<Q>,
        _types: &[ValueType],
        _element: bool,
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    /// Retain the subject's native kind while a predicate body is prepared.
    /// `element` selects a source collection element for constructed filtering.
    fn prepare_predicate(
        &mut self,
        _argument: Option<&Pattern>,
        _source: &ValueExpression<Q>,
        _types: &[ValueType],
        _element: bool,
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
    fn query_types(
        &mut self,
        query: &Q,
        locals: &[(&str, Vec<ValueType>)],
        budget: &mut Budget,
        range: &std::ops::Range<usize>,
    ) -> Result<Vec<ValueType>, QueryError>;
    fn evaluate_query(
        &mut self,
        query: &Q,
        locals: &[(&str, ConstructedValue)],
        budget: &mut Budget,
    ) -> Result<ConstructedValue, Self::Error>;
    fn read_binding(
        &mut self,
        name: &str,
        range: &std::ops::Range<usize>,
        budget: &mut Budget,
    ) -> Result<ConstructedValue, Self::Error>;
    /// Execute a native operand with immutable argument owners. Existing hosts
    /// receive admitted owned copies; hosts retaining shared values can override.
    fn evaluate_query_with_shared_locals(
        &mut self,
        query: &Q,
        locals: &[(&str, std::sync::Arc<ConstructedValue>)],
        budget: &mut Budget,
        range: &std::ops::Range<usize>,
    ) -> Result<ConstructedValue, Self::Error> {
        let location = Location::Query(range.clone());
        let mut owned = metadata_vec(locals.len(), budget, &location)?;
        for (name, value) in locals {
            owned.push((
                *name,
                copy_constructed_value(value, budget, location.clone())?,
            ));
        }
        self.evaluate_query(query, &owned, budget)
    }
    /// Expose embedded argument bodies for preparation, without executing them.
    fn query_arguments<'q>(
        &self,
        _query: &'q Q,
        _budget: &mut Budget,
        _range: &std::ops::Range<usize>,
    ) -> Result<Vec<&'q ValueExpression<Q>>, QueryError> {
        Ok(Vec::new())
    }
    /// Execute a native operand with its borrowed, invocation-local argument runner.
    fn evaluate_query_with_arguments(
        &mut self,
        query: &Q,
        locals: &[(&str, std::sync::Arc<ConstructedValue>)],
        _arguments: &mut dyn ValueArguments<Q, Self::Error>,
        budget: &mut Budget,
        range: &std::ops::Range<usize>,
    ) -> Result<ConstructedValue, Self::Error> {
        self.evaluate_query_with_shared_locals(query, locals, budget, range)
    }
    /// Share an immutable constructed binding when the host retains an owner.
    /// The default keeps existing hosts' owned reads; selected shared data still
    /// receives full runtime admission in this invocation.
    fn read_shared_binding(
        &mut self,
        _name: &str,
        _range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<Option<std::sync::Arc<ConstructedValue>>, Self::Error> {
        Ok(None)
    }
    fn validate_name(
        &mut self,
        _name: &str,
        _range: &std::ops::Range<usize>,
        _budget: &mut Budget,
    ) -> Result<(), QueryError> {
        Ok(())
    }
}

struct NoQueries<'a> {
    bindings: Option<&'a Bindings<ConstructedValue>>,
}
impl ValueQueryHost<()> for NoQueries<'_> {
    type Error = QueryError;
    fn query_types(
        &mut self,
        _: &(),
        _: &[(&str, Vec<ValueType>)],
        _: &mut Budget,
        range: &std::ops::Range<usize>,
    ) -> Result<Vec<ValueType>, QueryError> {
        Err(QueryError::query(
            range.clone(),
            "native queries are unavailable in this value expression",
        ))
    }
    fn evaluate_query(
        &mut self,
        _: &(),
        _: &[(&str, ConstructedValue)],
        _: &mut Budget,
    ) -> Result<ConstructedValue, QueryError> {
        Err(QueryError::query(
            0..0,
            "native queries are unavailable in this value expression",
        ))
    }
    fn read_shared_binding(
        &mut self,
        name: &str,
        range: &std::ops::Range<usize>,
        budget: &mut Budget,
    ) -> Result<Option<std::sync::Arc<ConstructedValue>>, QueryError> {
        budget.charge(1, Location::Query(range.clone()))?;
        Ok(Some(
            self.bindings
                .expect("runtime value bindings")
                .shared(name, range.clone())?,
        ))
    }

    fn read_binding(
        &mut self,
        name: &str,
        range: &std::ops::Range<usize>,
        budget: &mut Budget,
    ) -> Result<ConstructedValue, QueryError> {
        copy_constructed_value(
            self.bindings
                .expect("runtime value bindings")
                .get(name, range.clone())?,
            budget,
            Location::Query(range.clone()),
        )
    }
}

/// Infer every possible result type, including schemas with no runtime rows.
///
/// # Errors
/// Scope, type and budget refusals retain their expression locations.
pub fn value_expression_types(
    expression: &ValueExpression,
    binding_types: &BTreeMap<String, ValueType>,
    budget: &mut Budget,
) -> Result<Vec<ValueType>, QueryError> {
    Analysis::new(
        Globals::Types(binding_types),
        &mut NoQueries { bindings: None },
    )
    .walk(expression, budget)
}

/// Infer shared value facts with registered native query leaves.
///
/// # Errors
/// All branches and local scopes are preflighted before native execution.
pub fn query_value_types<Q, H: ValueQueryHost<Q>>(
    expression: &ValueExpression<Q>,
    binding_types: &BTreeMap<String, Vec<ValueType>>,
    queries: &mut H,
    budget: &mut Budget,
) -> Result<Vec<ValueType>, QueryError> {
    Analysis::new(Globals::Facts(binding_types), queries).walk(expression, budget)
}

/// Collect first-use value names while validating native leaves and local scopes.
///
/// # Errors
/// Returns located scope/type or resource refusals before execution.
pub fn free_query_value_names<Q, H: ValueQueryHost<Q>>(
    expression: &ValueExpression<Q>,
    binding_types: &BTreeMap<String, Vec<ValueType>>,
    queries: &mut H,
    budget: &mut Budget,
) -> Result<Vec<Located<String>>, QueryError> {
    let mut analysis = Analysis::new(Globals::Facts(binding_types), queries);
    analysis.walk(expression, budget)?;
    Ok(analysis.free)
}

/// Preflight and evaluate with native leaves through the ordinary scalar runner.
///
/// # Errors
/// Concrete native failures and located shared refusals retain their owner.
pub fn evaluate_query_value<Q, H: ValueQueryHost<Q>>(
    expression: &ValueExpression<Q>,
    binding_types: &BTreeMap<String, Vec<ValueType>>,
    queries: &mut H,
    budget: &mut Budget,
) -> Result<ConstructedValue, H::Error> {
    let prepared = prepare_query_value(expression, binding_types, queries, budget)?;
    let mut frame = Frame::new(
        prepared.names,
        budget,
        &Location::Query(expression.range.clone()),
    )?;
    run(
        &prepared.expression,
        queries,
        &mut frame,
        budget,
        &mut |_, _, _| Ok(()),
    )
}

pub(crate) struct PreparedQueryValue<'a, Q> {
    expression: PreparedValue<'a, Q>,
    names: Vec<&'a str>,
    pub types: Vec<ValueType>,
}
pub(crate) fn prepare_query_value<'a, Q, H: ValueQueryHost<Q>>(
    expression: &'a ValueExpression<Q>,
    binding_types: &BTreeMap<String, Vec<ValueType>>,
    queries: &mut H,
    budget: &mut Budget,
) -> Result<PreparedQueryValue<'a, Q>, QueryError> {
    let types = query_value_types(expression, binding_types, queries, budget)?;
    let mut preparation = Preparation::new();
    let expression = preparation.resolve(expression, queries, budget)?;
    Ok(PreparedQueryValue {
        expression,
        names: preparation.names,
        types,
    })
}
impl<'a, Q> PreparedQueryValue<'a, Q> {
    pub fn frame(&self, budget: &mut Budget) -> Result<Frame<'a>, QueryError> {
        let mut names = metadata_vec(
            self.names.len(),
            budget,
            &Location::Query(self.expression.range.clone()),
        )?;
        names.extend_from_slice(&self.names);
        Frame::new(
            names,
            budget,
            &Location::Query(self.expression.range.clone()),
        )
    }
    pub fn evaluate<H: ValueQueryHost<Q>>(
        &'a self,
        queries: &mut H,
        frame: &mut Frame<'a>,
        budget: &mut Budget,
    ) -> Result<ConstructedValue, H::Error> {
        run(&self.expression, queries, frame, budget, &mut |_, _, _| {
            Ok(())
        })
    }
}

/// Extract one admitted child without copying it.
///
/// # Errors
/// Zero or multiple children fail at the supplied extraction range.
pub fn take_one<T>(mut values: Vec<T>, range: std::ops::Range<usize>) -> Result<T, QueryError> {
    if values.len() != 1 {
        return Err(QueryError::query(range, "one requires exactly one value"));
    }
    Ok(values.pop().expect("one child"))
}

/// Convert a native count at the explicit constructed-value boundary.
///
/// # Errors
/// Counts beyond i64 or exhausted allowances fail before allocating a value.
pub fn count_value(
    count: usize,
    budget: &mut Budget,
    location: Location,
) -> Result<ConstructedValue, QueryError> {
    let count =
        i64::try_from(count).map_err(|_| error(&location, "count exceeds signed 64-bit range"))?;
    scalar(ConstructedValue::Integer(count), budget, &location)
}

/// Check scopes and all supported type facts, including unchosen branches.
/// Missing access remains a runtime failure if that access is executed.
///
/// # Errors
/// Returns a located scope, type, malformed-value or active-budget refusal.
pub fn validate_value_expression(
    expression: &ValueExpression,
    binding_types: &BTreeMap<String, ValueType>,
    budget: &mut Budget,
) -> Result<(), QueryError> {
    Analysis::new(
        Globals::Types(binding_types),
        &mut NoQueries { bindings: None },
    )
    .walk(expression, budget)?;
    Ok(())
}

/// Preflight scopes/types and collect distinct global names at their first-use
/// ranges. Local generator names and discarded binders are omitted.
///
/// # Errors
/// Returns the same refusals as [`validate_value_expression`]. Metadata and
/// copied name bytes spend the supplied budget before allocation.
pub fn free_value_names(
    expression: &ValueExpression,
    binding_types: &BTreeMap<String, ValueType>,
    budget: &mut Budget,
) -> Result<Vec<Located<String>>, QueryError> {
    let mut queries = NoQueries { bindings: None };
    let mut analysis = Analysis::new(Globals::Types(binding_types), &mut queries);
    analysis.walk(expression, budget)?;
    Ok(analysis.free)
}

/// Discover exact concrete type facts while checking externally built values.
/// This includes finite floats, labels, nominal metadata, sets and keyed axes/order.
///
/// # Errors
/// Malformed values and budget exhaustion use the supplied location. Recursive
/// facts, metadata slots and copied labels charge work, even with legacy budgets.
pub fn constructed_value_type(
    value: &ConstructedValue,
    budget: &mut Budget,
    location: Location,
) -> Result<ValueType, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        match value {
            ConstructedValue::Absent => Ok(ValueType::Absent),
            ConstructedValue::Declared { value, declaration } => {
                crate::admit_constructed(value, declaration, budget, location.clone())?;
                Ok(ValueType::Declared {
                    actual: Box::new(constructed_value_type(value, budget, location.clone())?),
                    declaration: copy_declaration(declaration, budget, &location)?,
                })
            }
            ConstructedValue::Boolean(_) => Ok(ValueType::Boolean),
            ConstructedValue::Integer(_) => Ok(ValueType::Integer),
            ConstructedValue::Float(value) => {
                finite(*value, &location)?;
                Ok(ValueType::Float)
            }
            ConstructedValue::String(_) => Ok(ValueType::String),
            ConstructedValue::Member(member) => {
                member_bytes(member, budget, &location)?;
                Ok(ValueType::Member(member.type_id))
            }
            ConstructedValue::KeyedArray { axes, entries } => {
                check_keyed(axes, entries, budget, &location)?;
                let axes = axis_types(axes, budget, &location)?;
                let mut elements = metadata_vec(entries.len(), budget, &location)?;
                for entry in entries {
                    elements.push(constructed_value_type(
                        &entry.value,
                        budget,
                        location.clone(),
                    )?);
                }
                Ok(ValueType::KeyedArray(KeyedArrayType {
                    axes: Some(axes),
                    elements,
                }))
            }
            ConstructedValue::Array(values) | ConstructedValue::Tuple(values) => {
                let mut types = metadata_vec(values.len(), budget, &location)?;
                for value in values {
                    types.push(constructed_value_type(value, budget, location.clone())?);
                }
                Ok(if matches!(value, ConstructedValue::Array(_)) {
                    ValueType::Array(ArrayType::Positions(types))
                } else {
                    ValueType::Tuple(types)
                })
            }
            ConstructedValue::Record(fields) => {
                check_value_labels(fields, budget, &location)?;
                let mut types = metadata_vec(fields.len(), budget, &location)?;
                for (label, value) in fields {
                    budget.charge(label.len(), location.clone())?;
                    let ty = constructed_value_type(value, budget, location.clone())?;
                    types.push((label.to_owned(), ty));
                }
                Ok(ValueType::Record(types))
            }
            ConstructedValue::Set {
                element_type,
                elements,
            } => {
                check_set(*element_type, elements, budget, &location)?;
                Ok(ValueType::Set(*element_type))
            }
        }
    })
}

/// Validate referenced binding types, then evaluate a pure expression. Default
/// fallbacks use available metadata until selected, without scanning their data.
/// All branches are validated before runtime choice. Execution evaluates only
/// needed Boolean operands and selected conditional branches. The host owns
/// source projections and subsequent rendering with this same budget.
///
/// # Errors
/// Returns located scope/type/access/arithmetic or budget refusals and no partial
/// value. Errors restore active nesting/call state without refunding spending.
pub fn evaluate_value(
    expression: &ValueExpression,
    bindings: &Bindings<ConstructedValue>,
    budget: &mut Budget,
) -> Result<ConstructedValue, QueryError> {
    evaluate_value_with_host_validation(expression, bindings, budget, |_, _, _| Ok(()))
}

/// Evaluate with a trusted host's value policy before runtime parent consumption.
/// The check runs on each successful runtime value inside the active evaluation
/// guard, including source and binding copies. It can inspect nested native
/// values and must charge its work to the supplied budget. Runtime-skipped
/// branches do not run the check; all branches still receive static validation.
/// No check is retained after this evaluation, and generic value policy remains
/// unchanged when callers use [`evaluate_value`].
///
/// # Errors
/// Returns ordinary evaluation or host-check refusals with their locations and
/// no partial value. Nesting and local scopes restore without refunding spending.
pub fn evaluate_value_with_host_validation(
    expression: &ValueExpression,
    bindings: &Bindings<ConstructedValue>,
    budget: &mut Budget,
    mut check_value: impl FnMut(&ConstructedValue, &mut Budget, &Location) -> Result<(), QueryError>,
) -> Result<ConstructedValue, QueryError> {
    let mut queries = NoQueries {
        bindings: Some(bindings),
    };
    let mut analysis = Analysis::new(Globals::Available(bindings), &mut queries);
    analysis.walk(expression, budget)?;
    let mut types = BTreeMap::new();
    for name in analysis.free {
        let location = Location::Query(name.range.clone());
        let mut fallback_only = false;
        for candidate in &analysis.fallback_names {
            budget.charge(
                1 + candidate.value.len().min(name.value.len()),
                location.clone(),
            )?;
            if candidate.value == name.value {
                fallback_only = true;
                break;
            }
        }
        budget.charge(1, location.clone())?;
        admit_diagnostic("undefined binding: ", &name.value, budget, &location)?;
        let value = bindings.get(&name.value, name.range)?;
        let ty = if !fallback_only {
            constructed_value_type(value, budget, location)?
        } else {
            shallow_type(value, budget, &location)?
        };
        types.insert(name.value, ty);
    }
    validate_value_expression(expression, &types, budget)?;
    let mut preparation = Preparation::new();
    let prepared = preparation.resolve(expression, &mut queries, budget)?;
    let mut frame = Frame::new(
        preparation.names,
        budget,
        &Location::Query(expression.range.clone()),
    )?;
    run(
        &prepared,
        &mut NoQueries {
            bindings: Some(bindings),
        },
        &mut frame,
        budget,
        &mut check_value,
    )
}

/// Copy a constructed binding or emission snapshot under the active allowance.
/// A recursive invariant/size scan admits all result units and copied bytes
/// before the allocation walk. Repeated snapshots spend again.
///
/// # Errors
/// Malformed values or budget exhaustion fail at `location`; there is no deep
/// uncharged copy and no refund of completed scan/admission work.
pub fn copy_constructed_value(
    value: &ConstructedValue,
    budget: &mut Budget,
    location: Location,
) -> Result<ConstructedValue, QueryError> {
    let (units, bytes) = copy_size(value, budget, &location)?;
    budget.charge(bytes, location.clone())?;
    budget.charge_results(units, location.clone())?;
    copy_admitted(value, budget, &location)
}

impl ConstructedValue {
    /// Borrow data through its transparent declaration annotation.
    pub fn data(&self) -> &Self {
        let mut value = self;
        while let Self::Declared { value: inner, .. } = value {
            value = inner;
        }
        value
    }

    /// Whether this value is present, including false, zero and empty data.
    pub fn occurs(&self) -> bool {
        !matches!(self.data(), Self::Absent)
    }

    /// Consume transparent annotations when crossing an explicit data boundary.
    pub fn into_data(self) -> Self {
        let mut value = self;
        while let Self::Declared { value: inner, .. } = value {
            value = *inner;
        }
        value
    }
}

fn declaration(value: &ConstructedValue) -> Option<&DeclaredType<()>> {
    match value {
        ConstructedValue::Declared { declaration, .. } => Some(declaration),
        _ => None,
    }
}

fn underlying(mut declaration: &DeclaredType<()>) -> &DeclaredType<()> {
    while let DeclaredType::Optional(child) = declaration {
        declaration = child;
    }
    declaration
}

fn declared_facts(
    declaration: &DeclaredType<()>,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        Ok(match declaration {
            DeclaredType::Optional(child) => declared_facts(child, budget, location)?,
            DeclaredType::Boolean => ValueType::Boolean,
            DeclaredType::Integer => ValueType::Integer,
            DeclaredType::Float => ValueType::Float,
            DeclaredType::String => ValueType::String,
            DeclaredType::Member(id) => ValueType::Member(*id),
            DeclaredType::Set(element) => ValueType::Set(Some(*element)),
            DeclaredType::Array(child) => ValueType::ArrayKind(one_type(
                declared_fact(child, ValueType::Unestablished, budget, location)?,
                budget,
                location,
            )?),
            DeclaredType::Sequence(child) => ValueType::Array(ArrayType::Elements(one_type(
                declared_fact(child, ValueType::Unestablished, budget, location)?,
                budget,
                location,
            )?)),
            DeclaredType::Keyed(child) => ValueType::KeyedArray(KeyedArrayType {
                axes: None,
                elements: one_type(
                    declared_fact(child, ValueType::Unestablished, budget, location)?,
                    budget,
                    location,
                )?,
            }),
            DeclaredType::Tuple(children) => {
                let mut fields = metadata_vec(children.len(), budget, location)?;
                for child in children {
                    fields.push(declared_fact(
                        child,
                        ValueType::Unestablished,
                        budget,
                        location,
                    )?);
                }
                ValueType::Tuple(fields)
            }
            DeclaredType::Record(children) => {
                let mut fields = metadata_vec(children.len(), budget, location)?;
                for (label, child) in children {
                    budget.charge(label.len(), location.clone())?;
                    fields.push((
                        label.clone(),
                        declared_fact(child, ValueType::Unestablished, budget, location)?,
                    ));
                }
                ValueType::Record(fields)
            }
            DeclaredType::Native(()) | DeclaredType::Queue(_) | DeclaredType::IdentitySet(()) => {
                return Err(error(location, "native declaration requires a host"));
            }
        })
    })
}

fn declared_fact(
    declaration: &DeclaredType<()>,
    actual: ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    budget.charge(1, location.clone())?;
    Ok(ValueType::Declared {
        actual: Box::new(actual),
        declaration: copy_declaration(declaration, budget, location)?,
    })
}

// Spread a container's declaration onto selected values, without inventing a
// schema for unannotated structural data.
fn shape_type(
    ty: ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    let ValueType::Declared {
        actual,
        declaration,
    } = ty
    else {
        return Ok(ty);
    };
    let actual = match *actual {
        ValueType::Unestablished => return declared_facts(&declaration, budget, location),
        ValueType::ScalarKind
            if matches!(
                underlying(&declaration),
                DeclaredType::Boolean
                    | DeclaredType::Integer
                    | DeclaredType::Float
                    | DeclaredType::String
            ) =>
        {
            return declared_facts(&declaration, budget, location);
        }
        actual => shape_type(actual, budget, location)?,
    };
    Ok(match (actual, underlying(&declaration)) {
        (ValueType::Array(array), DeclaredType::Array(child) | DeclaredType::Sequence(child)) => {
            let positional = matches!(array, ArrayType::Positions(_));
            let (ArrayType::Positions(entries) | ArrayType::Elements(entries)) = array;
            let mut fields = metadata_vec(entries.len(), budget, location)?;
            for entry in entries {
                fields.push(declared_fact(child, entry, budget, location)?);
            }
            if fields.is_empty() {
                push_metadata(
                    &mut fields,
                    declared_fact(child, ValueType::Unestablished, budget, location)?,
                    budget,
                    location,
                )?;
                return Ok(ValueType::Array(ArrayType::Elements(fields)));
            }
            ValueType::Array(if positional {
                ArrayType::Positions(fields)
            } else {
                ArrayType::Elements(fields)
            })
        }
        (
            ValueType::KeyedArray(mut keyed),
            DeclaredType::Array(child) | DeclaredType::Keyed(child),
        ) => {
            let mut fields = metadata_vec(keyed.elements.len(), budget, location)?;
            for entry in keyed.elements {
                fields.push(declared_fact(child, entry, budget, location)?);
            }
            if fields.is_empty() {
                push_metadata(
                    &mut fields,
                    declared_fact(child, ValueType::Unestablished, budget, location)?,
                    budget,
                    location,
                )?;
            }
            keyed.elements = fields;
            ValueType::KeyedArray(keyed)
        }
        (ValueType::Tuple(entries), DeclaredType::Tuple(children)) => {
            let mut fields = metadata_vec(entries.len(), budget, location)?;
            for (entry, child) in entries.into_iter().zip(children) {
                fields.push(declared_fact(child, entry, budget, location)?);
            }
            ValueType::Tuple(fields)
        }
        (ValueType::Record(entries), DeclaredType::Record(children)) => {
            let mut fields = metadata_vec(entries.len(), budget, location)?;
            for (label, entry) in entries {
                let child = record_declaration(children, &label, budget, location)?;
                fields.push((label, declared_fact(child, entry, budget, location)?));
            }
            ValueType::Record(fields)
        }
        (actual, _) => actual,
    })
}

fn record_declaration<'a, K>(
    fields: &'a [(String, DeclaredType<K>)],
    label: &str,
    budget: &mut Budget,
    location: &Location,
) -> Result<&'a DeclaredType<K>, QueryError> {
    for (candidate, declaration) in fields {
        budget.charge(1 + label.len().min(candidate.len()), location.clone())?;
        if label == candidate {
            return Ok(declaration);
        }
    }
    Err(error(location, "record label outside declared schema"))
}

fn expose(
    value: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let ConstructedValue::Declared { value, declaration } = value else {
        return Ok(value);
    };
    let mut value = expose(*value, budget, location)?;
    match (&mut value, underlying(&declaration)) {
        (
            ConstructedValue::Array(values),
            DeclaredType::Array(child) | DeclaredType::Sequence(child),
        ) => {
            for value in values {
                annotate_child(value, child, budget, location)?;
            }
        }
        (ConstructedValue::Tuple(values), DeclaredType::Tuple(children)) => {
            for (value, child) in values.iter_mut().zip(children) {
                annotate_child(value, child, budget, location)?;
            }
        }
        (ConstructedValue::Record(values), DeclaredType::Record(children)) => {
            for (label, value) in values {
                annotate_child(
                    value,
                    record_declaration(children, label, budget, location)?,
                    budget,
                    location,
                )?;
            }
        }
        (
            ConstructedValue::KeyedArray { entries, .. },
            DeclaredType::Array(child) | DeclaredType::Keyed(child),
        ) => {
            for entry in entries {
                annotate_child(&mut entry.value, child, budget, location)?;
            }
        }
        _ => {}
    }
    Ok(value)
}

fn annotate_child(
    value: &mut ConstructedValue,
    declaration: &DeclaredType<()>,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    let declaration = copy_declaration(declaration, budget, location)?;
    let child = std::mem::replace(value, ConstructedValue::Absent);
    *value = annotate(child, declaration, budget, location)?;
    Ok(())
}

fn shallow_type(
    value: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    Ok(match value {
        ConstructedValue::Declared { declaration, .. } => {
            declared_fact(declaration, ValueType::Unestablished, budget, location)?
        }
        ConstructedValue::Absent => ValueType::Absent,
        ConstructedValue::Boolean(_) => ValueType::Boolean,
        ConstructedValue::Integer(_) => ValueType::Integer,
        ConstructedValue::Float(value) => {
            finite(*value, location)?;
            ValueType::Float
        }
        ConstructedValue::String(_) => ValueType::String,
        ConstructedValue::Member(member) => ValueType::Member(member.type_id),
        ConstructedValue::Array(_) => ValueType::Array(ArrayType::Elements(Vec::new())),
        ConstructedValue::Tuple(_) => ValueType::TupleKind,
        ConstructedValue::Record(_) => ValueType::RecordKind,
        ConstructedValue::Set { .. } => ValueType::Set(None),
        ConstructedValue::KeyedArray { .. } => ValueType::KeyedArray(KeyedArrayType {
            axes: None,
            elements: Vec::new(),
        }),
    })
}

fn access_type(
    ty: ValueType,
    keys: &[ValueType],
    label: Option<&str>,
    optional: bool,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    let mut child = None;
    if let ValueType::Declared { declaration, .. } = &ty {
        child = match underlying(declaration) {
            DeclaredType::Record(fields) => match label {
                Some(label) => Some(copy_declaration(
                    record_declaration(fields, label, budget, location)?,
                    budget,
                    location,
                )?),
                None => None,
            },
            DeclaredType::Array(element)
            | DeclaredType::Sequence(element)
            | DeclaredType::Keyed(element) => Some(copy_declaration(element, budget, location)?),
            _ => None,
        };
    }
    let mut result = Vec::new();
    match shape_type(ty, budget, location)? {
        record @ (ValueType::RecordKind | ValueType::Record(_)) => {
            for key in keys {
                let key = shape_type(copy_type(key, budget, location)?, budget, location)?;
                if !matches!(
                    key,
                    ValueType::String | ValueType::ScalarKind | ValueType::Unestablished
                ) {
                    return Err(error(location, "record lookup needs a string label"));
                }
            }
            if let ValueType::Record(fields) = record {
                for (candidate, ty) in fields {
                    budget.charge(
                        1 + label.map_or(0, |label| label.len().min(candidate.len())),
                        location.clone(),
                    )?;
                    if label.is_none_or(|label| label == candidate) {
                        push_metadata(&mut result, ty, budget, location)?;
                    }
                }
            } else {
                push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
            }
        }
        ValueType::Array(ArrayType::Positions(elements) | ArrayType::Elements(elements)) => {
            for key in keys {
                require_type(key, ScalarRequirement::Integer, location)?;
            }
            result = elements;
        }
        ValueType::ArrayKind(elements) => {
            let mut facts = None;
            merge_key_facts(&mut facts, keys, budget, location)?;
            result = elements;
        }
        ValueType::KeyedArray(keyed) => {
            let mut facts = None;
            merge_key_facts(&mut facts, keys, budget, location)?;
            if let Some(axes) = &keyed.axes {
                check_key_facts(&facts, axes, budget, location)?;
            }
            result = keyed.elements;
        }
        ValueType::Unestablished => {
            push_metadata(&mut result, ValueType::Unestablished, budget, location)?
        }
        _ => return Err(error(location, "lookup needs a record or array")),
    }
    if let Some(child) = child {
        return one_type(
            declared_fact(
                &if optional {
                    DeclaredType::Optional(Box::new(child))
                } else {
                    child
                },
                ValueType::Unestablished,
                budget,
                location,
            )?,
            budget,
            location,
        );
    }
    if optional {
        push_metadata(&mut result, ValueType::Absent, budget, location)?;
    }
    Ok(result)
}

fn optional_access(
    value: ConstructedValue,
    key: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<(bool, ConstructedValue), QueryError> {
    let mut child = None;
    if let Some(declaration) = declaration(&value) {
        child = match underlying(declaration) {
            DeclaredType::Record(fields) => {
                let ConstructedValue::String(label) = key.data() else {
                    return Err(error(location, "record lookup needs a string label"));
                };
                Some(copy_declaration(
                    record_declaration(fields, label, budget, location)?,
                    budget,
                    location,
                )?)
            }
            DeclaredType::Array(element)
            | DeclaredType::Sequence(element)
            | DeclaredType::Keyed(element) => Some(copy_declaration(element, budget, location)?),
            _ => None,
        };
    }
    let mut selected = None;
    match expose(value, budget, location)? {
        ConstructedValue::Record(fields) => {
            let ConstructedValue::String(label) = key.into_data() else {
                return Err(error(location, "record lookup needs a string label"));
            };
            for (candidate, value) in fields {
                budget.charge(1 + label.len().min(candidate.len()), location.clone())?;
                if label == candidate {
                    selected = Some(value);
                    break;
                }
            }
        }
        ConstructedValue::Array(values) => {
            let position = integer(key, location)?;
            if let Some(index) = usize::try_from(position)
                .ok()
                .and_then(|position| position.checked_sub(1))
            {
                budget.charge(values.len().min(index.saturating_add(1)), location.clone())?;
                selected = values.into_iter().nth(index);
            }
        }
        ConstructedValue::KeyedArray { axes, entries } => {
            let key = value_keys(key.into_data(), budget, location)?;
            if key.len() != axes.len() {
                return Err(error(location, "key rank mismatch"));
            }
            for (component, axis) in key.iter().zip(&axes) {
                budget.charge(1, location.clone())?;
                if key_type(component) != axis.key_type {
                    return Err(error(location, "incompatible key type"));
                }
                // Validate nominal metadata even for a key outside the axis.
                for candidate in &axis.keys {
                    compare_keys(component, candidate, budget, location)?;
                }
            }
            for entry in entries {
                budget.charge(1, location.clone())?;
                if equal_keys(&key, &entry.key, budget, location)? {
                    selected = Some(entry.value);
                    break;
                }
            }
        }
        _ => return Err(error(location, "lookup needs a record or array")),
    }
    let present = selected.is_some();
    let value = match selected {
        Some(value) => value,
        None => scalar(ConstructedValue::Absent, budget, location)?,
    };
    let value = match child {
        Some(child) => annotate(
            value,
            DeclaredType::Optional(Box::new(child)),
            budget,
            location,
        )?,
        None => value,
    };
    Ok((present, value))
}

fn error(location: &Location, message: impl Into<String>) -> QueryError {
    QueryError {
        location: location.clone(),
        message: message.into(),
        category: QueryErrorCategory::Other,
    }
}

// Availability checks can discard a Bindings::get error. Admit its potential
// diagnostic before lookup as well as messages that are actually returned.
fn admit_diagnostic(
    prefix: &str,
    value: &str,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    let len = sum(prefix.len(), value.len(), location)?;
    allocation::<u8>(len, location)?;
    budget.charge(len, location.clone())
}

fn sum(a: usize, b: usize, location: &Location) -> Result<usize, QueryError> {
    a.checked_add(b)
        .ok_or_else(|| error(location, "allocation size overflow"))
}

pub(crate) fn allocation<T>(len: usize, location: &Location) -> Result<(), QueryError> {
    if len
        .checked_mul(size_of::<T>())
        .is_none_or(|size| size > isize::MAX as usize)
    {
        return Err(error(location, "allocation size overflow"));
    }
    Ok(())
}

fn metadata_vec<T>(
    len: usize,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<T>, QueryError> {
    allocation::<T>(len, location)?;
    budget.charge(len, location.clone())?;
    Ok(Vec::with_capacity(len))
}

fn push_metadata<T>(
    values: &mut Vec<T>,
    value: T,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    allocation::<T>(sum(values.len(), 1, location)?, location)?;
    budget.charge(1, location.clone())?;
    values.push(value);
    Ok(())
}

fn admit_container<T>(
    len: usize,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<T>, QueryError> {
    allocation::<T>(len, location)?;
    budget.charge(sum(len, 1, location)?, location.clone())?;
    budget.charge_results(sum(len, 1, location)?, location.clone())?;
    Ok(Vec::with_capacity(len))
}

fn finite(value: f64, location: &Location) -> Result<(), QueryError> {
    if !value.is_finite() {
        return Err(error(location, "nonfinite float"));
    }
    Ok(())
}

fn member_bytes(
    member: &NominalMember,
    budget: &mut Budget,
    location: &Location,
) -> Result<usize, QueryError> {
    allocation::<u8>(member.type_name.len(), location)?;
    allocation::<u8>(member.member_name.len(), location)?;
    let bytes = sum(member.type_name.len(), member.member_name.len(), location)?;
    budget.charge(sum(1, bytes, location)?, location.clone())?;
    Ok(bytes)
}

pub(crate) fn check_member_pair(
    left: &NominalMember,
    right: &NominalMember,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    budget.charge(1, location.clone())?;
    if left.type_id != right.type_id {
        return Ok(());
    }
    budget.charge(
        left.type_name.len().min(right.type_name.len()),
        location.clone(),
    )?;
    if left.type_name != right.type_name {
        return Err(error(location, "inconsistent nominal type name"));
    }
    if left.member_id == right.member_id {
        budget.charge(
            left.member_name.len().min(right.member_name.len()),
            location.clone(),
        )?;
        if left.declaration_order != right.declaration_order
            || left.member_name != right.member_name
        {
            return Err(error(location, "inconsistent nominal member metadata"));
        }
    } else if left.declaration_order == right.declaration_order {
        return Err(error(
            location,
            "distinct nominal members share declaration order",
        ));
    }
    Ok(())
}

fn copy_member_admitted(member: &NominalMember) -> NominalMember {
    NominalMember {
        type_id: member.type_id,
        member_id: member.member_id,
        declaration_order: member.declaration_order,
        type_name: member.type_name.to_owned(),
        member_name: member.member_name.to_owned(),
    }
}

fn key_value(key: ValueKey) -> ConstructedValue {
    match key {
        ValueKey::Integer(value) => ConstructedValue::Integer(value),
        ValueKey::Member(member) => ConstructedValue::Member(member),
    }
}

fn key_type(key: &ValueKey) -> ValueKeyType {
    match key {
        ValueKey::Integer(_) => ValueKeyType::Integer,
        ValueKey::Member(member) => ValueKeyType::Member(member.type_id),
    }
}

fn key_set_type(ty: ValueKeyType) -> SetElementType {
    match ty {
        ValueKeyType::Integer => SetElementType::Integer,
        ValueKeyType::Member(id) => SetElementType::Member(id),
    }
}

fn compare_keys(
    left: &ValueKey,
    right: &ValueKey,
    budget: &mut Budget,
    location: &Location,
) -> Result<Ordering, QueryError> {
    budget.charge(1, location.clone())?;
    match (left, right) {
        (ValueKey::Integer(a), ValueKey::Integer(b)) => Ok(a.cmp(b)),
        (ValueKey::Member(a), ValueKey::Member(b)) if a.type_id == b.type_id => {
            check_member_pair(a, b, budget, location)?;
            Ok(if a.member_id == b.member_id {
                Ordering::Equal
            } else {
                a.declaration_order.cmp(&b.declaration_order)
            })
        }
        _ => Err(error(location, "incompatible keyed dimension type")),
    }
}

fn keys_size(
    keys: &[ValueKey],
    budget: &mut Budget,
    location: &Location,
) -> Result<(usize, usize), QueryError> {
    allocation::<ValueKey>(keys.len(), location)?;
    let units = keys
        .len()
        .checked_mul(2)
        .ok_or_else(|| error(location, "key size overflow"))?;
    let mut bytes = 0;
    for key in keys {
        budget.charge(1, location.clone())?;
        if let ValueKey::Member(member) = key {
            bytes = sum(bytes, member_bytes(member, budget, location)?, location)?;
        }
    }
    Ok((units, bytes))
}

fn copy_keys_admitted(
    keys: &[ValueKey],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueKey>, QueryError> {
    let mut copied = Vec::with_capacity(keys.len());
    for key in keys {
        budget.charge(1, location.clone())?;
        copied.push(match key {
            ValueKey::Integer(value) => ValueKey::Integer(*value),
            ValueKey::Member(member) => ValueKey::Member(copy_member_admitted(member)),
        });
    }
    Ok(copied)
}

fn copy_key(
    key: &ValueKey,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueKey, QueryError> {
    budget.charge(1, location.clone())?;
    budget.charge_results(1, location.clone())?;
    Ok(match key {
        ValueKey::Integer(value) => ValueKey::Integer(*value),
        ValueKey::Member(member) => {
            let bytes = member_bytes(member, budget, location)?;
            budget.charge(bytes, location.clone())?;
            ValueKey::Member(copy_member_admitted(member))
        }
    })
}

fn check_axes(
    axes: &[KeyAxis],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    if axes.is_empty() {
        return Err(error(
            location,
            "keyed arrays need nonzero rank and established axes",
        ));
    }
    for axis in axes {
        budget.charge(1, location.clone())?;
        for (index, key) in axis.keys.iter().enumerate() {
            budget.charge(1, location.clone())?;
            if key_type(key) != axis.key_type {
                return Err(error(location, "axis key type mismatch"));
            }
            if let ValueKey::Member(member) = key {
                member_bytes(member, budget, location)?;
            }
            for previous in &axis.keys[..index] {
                if compare_keys(previous, key, budget, location)? == Ordering::Equal {
                    return Err(error(location, "duplicate axis key"));
                }
            }
        }
    }
    let members = axes
        .iter()
        .flat_map(|axis| &axis.keys)
        .filter_map(|key| match key {
            ValueKey::Member(member) => Some(member),
            ValueKey::Integer(_) => None,
        });
    for (index, member) in members.clone().enumerate() {
        for previous in members.clone().take(index) {
            check_member_pair(previous, member, budget, location)?;
        }
    }
    Ok(())
}

fn copy_axes(
    axes: &[KeyAxis],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<KeyAxis>, QueryError> {
    check_axes(axes, budget, location)?;
    allocation::<KeyAxis>(axes.len(), location)?;
    budget.charge(axes.len(), location.clone())?;
    budget.charge_results(axes.len(), location.clone())?;
    let mut copied = Vec::with_capacity(axes.len());
    for axis in axes {
        let (units, bytes) = keys_size(&axis.keys, budget, location)?;
        budget.charge(bytes, location.clone())?;
        budget.charge_results(units, location.clone())?;
        copied.push(KeyAxis {
            key_type: axis.key_type,
            keys: copy_keys_admitted(&axis.keys, budget, location)?,
        });
    }
    Ok(copied)
}

fn copy_axis_types(
    types: &[ValueKeyType],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueKeyType>, QueryError> {
    if types.is_empty() {
        return Err(error(location, "keyed arrays need nonzero rank"));
    }
    let mut copied = metadata_vec(types.len(), budget, location)?;
    for ty in types {
        budget.charge(1, location.clone())?;
        copied.push(*ty);
    }
    Ok(copied)
}

fn axis_types(
    axes: &[KeyAxis],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueKeyType>, QueryError> {
    let mut types = metadata_vec(axes.len(), budget, location)?;
    for axis in axes {
        budget.charge(1, location.clone())?;
        types.push(axis.key_type);
    }
    Ok(types)
}

fn same_axis_types(
    left: &[ValueKeyType],
    right: &[ValueKeyType],
    budget: &mut Budget,
    location: &Location,
) -> Result<bool, QueryError> {
    budget.charge(1, location.clone())?;
    if left.len() != right.len() {
        return Ok(false);
    }
    for (a, b) in left.iter().zip(right) {
        budget.charge(1, location.clone())?;
        if a != b {
            return Ok(false);
        }
    }
    Ok(true)
}

fn key_positions(
    key: &[ValueKey],
    axes: &[KeyAxis],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<usize>, QueryError> {
    if key.len() != axes.len() {
        return Err(error(location, "key rank mismatch"));
    }
    let mut positions = metadata_vec(key.len(), budget, location)?;
    for (key, axis) in key.iter().zip(axes) {
        budget.charge(1, location.clone())?;
        if key_type(key) != axis.key_type {
            return Err(error(location, "incompatible keyed dimension type"));
        }
        let mut position = None;
        // Visit every key so contradictory copies cannot hide beyond a match.
        for (index, existing) in axis.keys.iter().enumerate() {
            if compare_keys(key, existing, budget, location)? == Ordering::Equal {
                position = Some(index);
            }
        }
        positions
            .push(position.ok_or_else(|| error(location, "key is absent from established axis"))?);
    }
    Ok(positions)
}

fn compare_positions(
    left: &[usize],
    right: &[usize],
    budget: &mut Budget,
    location: &Location,
) -> Result<Ordering, QueryError> {
    for (a, b) in left.iter().zip(right) {
        budget.charge(1, location.clone())?;
        let order = a.cmp(b);
        if order != Ordering::Equal {
            return Ok(order);
        }
    }
    Ok(Ordering::Equal)
}

fn equal_keys(
    left: &[ValueKey],
    right: &[ValueKey],
    budget: &mut Budget,
    location: &Location,
) -> Result<bool, QueryError> {
    budget.charge(1, location.clone())?;
    if left.len() != right.len() {
        return Ok(false);
    }
    for (a, b) in left.iter().zip(right) {
        if compare_keys(a, b, budget, location)? != Ordering::Equal {
            return Ok(false);
        }
    }
    Ok(true)
}

fn check_keyed(
    axes: &[KeyAxis],
    entries: &[KeyedEntry],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    check_axes(axes, budget, location)?;
    let mut previous: Option<Vec<usize>> = None;
    for entry in entries {
        budget.charge(1, location.clone())?;
        let positions = key_positions(&entry.key, axes, budget, location)?;
        if let Some(previous) = previous
            && compare_positions(&previous, &positions, budget, location)? != Ordering::Less
        {
            return Err(error(
                location,
                "keyed entries must be unique and in row-major order",
            ));
        }
        previous = Some(positions);
    }
    let members = axes
        .iter()
        .flat_map(|axis| &axis.keys)
        .chain(entries.iter().flat_map(|entry| &entry.key))
        .filter_map(|key| match key {
            ValueKey::Member(member) => Some(member),
            ValueKey::Integer(_) => None,
        });
    for (index, member) in members.clone().enumerate() {
        for previous in members.clone().take(index) {
            check_member_pair(previous, member, budget, location)?;
        }
    }
    Ok(())
}

fn value_keys(
    value: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueKey>, QueryError> {
    let value = expose(value, budget, location)?;
    let values = match value {
        ConstructedValue::Tuple(values) if !values.is_empty() => values,
        value @ (ConstructedValue::Integer(_) | ConstructedValue::Member(_)) => {
            let mut values = metadata_vec(1, budget, location)?;
            values.push(value);
            values
        }
        _ => {
            return Err(error(
                location,
                "key needs an integer, member or nonempty flat tuple",
            ));
        }
    };
    allocation::<ValueKey>(values.len(), location)?;
    budget.charge(values.len(), location.clone())?;
    budget.charge_results(values.len(), location.clone())?;
    let mut keys = Vec::with_capacity(values.len());
    for value in values {
        budget.charge(1, location.clone())?;
        keys.push(match value.into_data() {
            ConstructedValue::Integer(value) => ValueKey::Integer(value),
            ConstructedValue::Member(member) => ValueKey::Member(member),
            _ => return Err(error(location, "key components need integers or members")),
        });
    }
    Ok(keys)
}

fn infer_axes(
    entries: &[Located<KeyedEntry>],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<KeyAxis>, QueryError> {
    let Some(first) = entries.first() else {
        return Err(error(location, "unestablished empty keyed axes"));
    };
    if first.value.key.is_empty() {
        return Err(error(location, "keyed arrays need nonzero rank"));
    }
    allocation::<KeyAxis>(first.value.key.len(), location)?;
    budget.charge(first.value.key.len(), location.clone())?;
    budget.charge_results(first.value.key.len(), location.clone())?;
    let mut axes = Vec::with_capacity(first.value.key.len());
    for key in &first.value.key {
        axes.push(KeyAxis {
            key_type: key_type(key),
            keys: Vec::new(),
        });
    }
    for entry in entries {
        let key_location = Location::Query(entry.range.clone());
        if entry.value.key.len() != axes.len() {
            return Err(error(&key_location, "key rank mismatch"));
        }
        for (key, axis) in entry.value.key.iter().zip(&mut axes) {
            if key_type(key) != axis.key_type {
                return Err(error(&key_location, "incompatible keyed dimension type"));
            }
            let mut position = axis.keys.len();
            let mut found = false;
            for (index, existing) in axis.keys.iter().enumerate() {
                match compare_keys(key, existing, budget, &key_location)? {
                    Ordering::Equal => found = true,
                    Ordering::Less if position == axis.keys.len() => position = index,
                    _ => {}
                }
            }
            if !found {
                let key = copy_key(key, budget, &key_location)?;
                allocation::<ValueKey>(sum(axis.keys.len(), 1, &key_location)?, &key_location)?;
                budget.charge(
                    sum(1, axis.keys.len() - position, &key_location)?,
                    key_location.clone(),
                )?;
                budget.charge_results(1, key_location.clone())?;
                axis.keys.insert(position, key);
            }
        }
    }
    Ok(axes)
}

fn finish_keyed(
    axes: Option<Vec<KeyAxis>>,
    mut entries: Vec<Located<KeyedEntry>>,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let axes = match axes {
        Some(axes) => {
            check_axes(&axes, budget, location)?;
            axes
        }
        None => infer_axes(&entries, budget, location)?,
    };
    let mut positions = metadata_vec(entries.len(), budget, location)?;
    for entry in &entries {
        positions.push(key_positions(
            &entry.value.key,
            &axes,
            budget,
            &Location::Query(entry.range.clone()),
        )?);
    }
    // Insertion sorting admits every comparison and movement; sparse values need
    // no Cartesian cardinality or flattened index arithmetic.
    for index in 1..entries.len() {
        let mut cursor = index;
        while cursor > 0 {
            let key_location = Location::Query(entries[cursor].range.clone());
            match compare_positions(
                &positions[cursor - 1],
                &positions[cursor],
                budget,
                &key_location,
            )? {
                Ordering::Equal => return Err(error(&key_location, "duplicate full key")),
                Ordering::Less => break,
                Ordering::Greater => {
                    budget.charge(2, key_location)?;
                    entries.swap(cursor - 1, cursor);
                    positions.swap(cursor - 1, cursor);
                    cursor -= 1;
                }
            }
        }
    }
    let mut values = metadata_vec(entries.len(), budget, location)?;
    for entry in entries {
        values.push(entry.value);
    }
    check_keyed(&axes, &values, budget, location)?;
    Ok(ConstructedValue::KeyedArray {
        axes,
        entries: values,
    })
}

fn source_axis(
    value: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<KeyAxis, QueryError> {
    let empty = match value.data() {
        ConstructedValue::Array(values)
        | ConstructedValue::Set {
            elements: values, ..
        } => values.is_empty(),
        ConstructedValue::KeyedArray { entries, .. } => entries.is_empty(),
        _ => false,
    };
    let declared = if empty && let Some(declaration) = declaration(&value) {
        let facts = declared_facts(declaration, budget, location)?;
        source_key_type(std::slice::from_ref(&facts), budget, location)?
    } else {
        None
    };
    let value = expose(value, budget, location)?;
    let (declared, values) = match value {
        ConstructedValue::Array(values) => (declared, values),
        ConstructedValue::KeyedArray { entries, .. } => {
            let mut values = metadata_vec(entries.len(), budget, location)?;
            for entry in entries {
                budget.charge(1, location.clone())?;
                values.push(entry.value);
            }
            (declared, values)
        }
        ConstructedValue::Set {
            element_type,
            elements,
        } => {
            let ty = match element_type {
                Some(SetElementType::Integer) => Some(ValueKeyType::Integer),
                Some(SetElementType::Member(id)) => Some(ValueKeyType::Member(id)),
                _ => None,
            };
            (ty.or(declared), elements)
        }
        _ => {
            return Err(error(
                location,
                "axis source needs an integer or member array/set",
            ));
        }
    };
    // The source list admits its axis slots before allocating the axis vector.
    // This conversion admits only the new key slots; values move by ownership.
    allocation::<ValueKey>(values.len(), location)?;
    budget.charge(values.len(), location.clone())?;
    budget.charge_results(values.len(), location.clone())?;
    let mut keys = Vec::with_capacity(values.len());
    let mut ty = declared;
    for value in values {
        budget.charge(1, location.clone())?;
        let key = match value.into_data() {
            ConstructedValue::Integer(value) => ValueKey::Integer(value),
            ConstructedValue::Member(member) => ValueKey::Member(member),
            _ => {
                return Err(error(
                    location,
                    "axis source needs integer or member elements",
                ));
            }
        };
        if ty.is_some_and(|ty| ty != key_type(&key)) {
            return Err(error(location, "incompatible axis source type"));
        }
        ty = Some(key_type(&key));
        keys.push(key);
    }
    let axis = KeyAxis {
        key_type: ty.ok_or_else(|| error(location, "unestablished empty keyed axis"))?,
        keys,
    };
    check_axes(std::slice::from_ref(&axis), budget, location)?;
    Ok(axis)
}

fn scalar_set_type(value: &ConstructedValue) -> Option<SetElementType> {
    match value.data() {
        ConstructedValue::Boolean(_) => Some(SetElementType::Boolean),
        ConstructedValue::Integer(_) => Some(SetElementType::Integer),
        ConstructedValue::Float(_) => Some(SetElementType::Float),
        ConstructedValue::Member(member) => Some(SetElementType::Member(member.type_id)),
        _ => None,
    }
}

fn compare_set_values(
    left: &ConstructedValue,
    right: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<Ordering, QueryError> {
    budget.charge(1, location.clone())?;
    match (left.data(), right.data()) {
        (ConstructedValue::Boolean(a), ConstructedValue::Boolean(b)) => Ok(a.cmp(b)),
        (ConstructedValue::Integer(a), ConstructedValue::Integer(b)) => Ok(a.cmp(b)),
        (ConstructedValue::Float(a), ConstructedValue::Float(b)) => {
            finite(*a, location)?;
            finite(*b, location)?;
            Ok(a.partial_cmp(b).expect("finite floats are ordered"))
        }
        (ConstructedValue::Member(a), ConstructedValue::Member(b)) => {
            check_member_pair(a, b, budget, location)?;
            if a.type_id != b.type_id {
                return Err(error(location, "incompatible nominal types"));
            }
            Ok(if a.member_id == b.member_id {
                Ordering::Equal
            } else {
                a.declaration_order.cmp(&b.declaration_order)
            })
        }
        _ => Err(error(
            location,
            "set elements must have one supported scalar type",
        )),
    }
}

fn check_set(
    element_type: Option<SetElementType>,
    elements: &[ConstructedValue],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    if element_type.is_none() && !elements.is_empty() {
        return Err(error(location, "a nonempty set needs its element type"));
    }
    for (index, value) in elements.iter().enumerate() {
        budget.charge(1, location.clone())?;
        if scalar_set_type(value) != element_type {
            return Err(error(location, "set element type mismatch"));
        }
        match value.data() {
            ConstructedValue::Float(value) => finite(*value, location)?,
            ConstructedValue::Member(member) => {
                member_bytes(member, budget, location)?;
            }
            _ => {}
        }
        for previous in &elements[..index] {
            if compare_set_values(previous, value, budget, location)? == Ordering::Equal {
                return Err(error(location, "set elements must be unique"));
            }
        }
    }
    Ok(())
}

fn check_value_labels<T>(
    fields: &[(String, T)],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    for (index, (label, _)) in fields.iter().enumerate() {
        for (previous, _) in &fields[..index] {
            budget.charge(
                sum(1, label.len().min(previous.len()), location)?,
                location.clone(),
            )?;
            if label == previous {
                return Err(error(location, "duplicate record label"));
            }
        }
    }
    Ok(())
}

fn copy_size(
    value: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<(usize, usize), QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        let mut units = 1;
        let mut bytes = 0;
        match value {
            ConstructedValue::Absent
            | ConstructedValue::Boolean(_)
            | ConstructedValue::Integer(_) => {}
            ConstructedValue::Declared { value, declaration } => {
                crate::admit_constructed(value, declaration, budget, location.clone())?;
                let (child_units, child_bytes) = copy_size(value, budget, location)?;
                units = sum(units, child_units, location)?;
                bytes = child_bytes;
                // Declarations are copied with their own metadata charges below.
            }
            ConstructedValue::Float(value) => finite(*value, location)?,
            ConstructedValue::Member(member) => {
                bytes = member_bytes(member, budget, location)?;
            }
            ConstructedValue::KeyedArray { axes, entries } => {
                check_keyed(axes, entries, budget, location)?;
                allocation::<KeyAxis>(axes.len(), location)?;
                allocation::<KeyedEntry>(entries.len(), location)?;
                units = sum(units, sum(axes.len(), entries.len(), location)?, location)?;
                for axis in axes {
                    let (key_units, key_bytes) = keys_size(&axis.keys, budget, location)?;
                    units = sum(units, key_units, location)?;
                    bytes = sum(bytes, key_bytes, location)?;
                }
                for entry in entries {
                    let (key_units, key_bytes) = keys_size(&entry.key, budget, location)?;
                    let (child_units, child_bytes) = copy_size(&entry.value, budget, location)?;
                    units = sum(units, sum(key_units, child_units, location)?, location)?;
                    bytes = sum(bytes, sum(key_bytes, child_bytes, location)?, location)?;
                }
            }
            ConstructedValue::String(value) => {
                allocation::<u8>(value.len(), location)?;
                bytes = value.len();
            }
            ConstructedValue::Array(values)
            | ConstructedValue::Tuple(values)
            | ConstructedValue::Set {
                elements: values, ..
            } => {
                allocation::<ConstructedValue>(values.len(), location)?;
                if let ConstructedValue::Set { element_type, .. } = value {
                    check_set(*element_type, values, budget, location)?;
                }
                units = sum(units, values.len(), location)?;
                for value in values {
                    let (child_units, child_bytes) = copy_size(value, budget, location)?;
                    units = sum(units, child_units, location)?;
                    bytes = sum(bytes, child_bytes, location)?;
                }
            }
            ConstructedValue::Record(fields) => {
                allocation::<(String, ConstructedValue)>(fields.len(), location)?;
                check_value_labels(fields, budget, location)?;
                units = sum(units, fields.len(), location)?;
                for (label, value) in fields {
                    allocation::<u8>(label.len(), location)?;
                    let (child_units, child_bytes) = copy_size(value, budget, location)?;
                    units = sum(units, child_units, location)?;
                    bytes = sum(bytes, sum(label.len(), child_bytes, location)?, location)?;
                }
            }
        }
        Ok((units, bytes))
    })
}

fn copy_admitted(
    value: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        Ok(match value {
            ConstructedValue::Absent => ConstructedValue::Absent,
            ConstructedValue::Declared { value, declaration } => ConstructedValue::Declared {
                value: Box::new(copy_admitted(value, budget, location)?),
                declaration: copy_declaration(declaration, budget, location)?,
            },
            ConstructedValue::Boolean(value) => ConstructedValue::Boolean(*value),
            ConstructedValue::Integer(value) => ConstructedValue::Integer(*value),
            ConstructedValue::Float(value) => ConstructedValue::Float(*value),
            ConstructedValue::String(value) => ConstructedValue::String(value.to_owned()),
            ConstructedValue::Member(member) => {
                ConstructedValue::Member(copy_member_admitted(member))
            }
            ConstructedValue::KeyedArray { axes, entries } => {
                let mut copied_axes = Vec::with_capacity(axes.len());
                for axis in axes {
                    budget.charge(1, location.clone())?;
                    copied_axes.push(KeyAxis {
                        key_type: axis.key_type,
                        keys: copy_keys_admitted(&axis.keys, budget, location)?,
                    });
                }
                let mut copied_entries = Vec::with_capacity(entries.len());
                for entry in entries {
                    budget.charge(1, location.clone())?;
                    copied_entries.push(KeyedEntry {
                        key: copy_keys_admitted(&entry.key, budget, location)?,
                        value: copy_admitted(&entry.value, budget, location)?,
                    });
                }
                ConstructedValue::KeyedArray {
                    axes: copied_axes,
                    entries: copied_entries,
                }
            }
            ConstructedValue::Array(values)
            | ConstructedValue::Tuple(values)
            | ConstructedValue::Set {
                elements: values, ..
            } => {
                let mut copied = Vec::with_capacity(values.len());
                for value in values {
                    copied.push(copy_admitted(value, budget, location)?);
                }
                match value {
                    ConstructedValue::Array(_) => ConstructedValue::Array(copied),
                    ConstructedValue::Tuple(_) => ConstructedValue::Tuple(copied),
                    ConstructedValue::Set { element_type, .. } => ConstructedValue::Set {
                        element_type: *element_type,
                        elements: copied,
                    },
                    _ => unreachable!("matched collection"),
                }
            }
            ConstructedValue::Record(fields) => {
                let mut copied = Vec::with_capacity(fields.len());
                for (label, value) in fields {
                    copied.push((label.to_owned(), copy_admitted(value, budget, location)?));
                }
                ConstructedValue::Record(copied)
            }
        })
    })
}

fn copy_type(
    ty: &ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        Ok(match ty {
            ValueType::Absent => ValueType::Absent,
            ValueType::Declared {
                actual,
                declaration,
            } => ValueType::Declared {
                actual: Box::new(copy_type(actual, budget, location)?),
                declaration: copy_declaration(declaration, budget, location)?,
            },
            ValueType::ScalarKind => ValueType::ScalarKind,
            ValueType::Boolean => ValueType::Boolean,
            ValueType::Integer => ValueType::Integer,
            ValueType::Float => ValueType::Float,
            ValueType::String => ValueType::String,
            ValueType::Member(id) => ValueType::Member(*id),
            ValueType::KeyedArray(keyed) => {
                let axes = match &keyed.axes {
                    Some(axes) => Some(copy_axis_types(axes, budget, location)?),
                    None => None,
                };
                ValueType::KeyedArray(KeyedArrayType {
                    axes,
                    elements: copy_types(&keyed.elements, budget, location)?,
                })
            }
            ValueType::Unestablished => ValueType::Unestablished,
            ValueType::TupleKind => ValueType::TupleKind,
            ValueType::RecordKind => ValueType::RecordKind,
            ValueType::Set(element_type) => ValueType::Set(*element_type),
            ValueType::Array(array) => {
                let (ArrayType::Positions(entries) | ArrayType::Elements(entries)) = array;
                let entries = copy_types(entries, budget, location)?;
                ValueType::Array(match array {
                    ArrayType::Positions(_) => ArrayType::Positions(entries),
                    ArrayType::Elements(_) => ArrayType::Elements(entries),
                })
            }
            ValueType::ArrayKind(elements) => {
                ValueType::ArrayKind(copy_types(elements, budget, location)?)
            }
            ValueType::Tuple(entries) => ValueType::Tuple(copy_types(entries, budget, location)?),
            ValueType::Record(fields) => {
                check_value_labels(fields, budget, location)?;
                let mut copied = metadata_vec(fields.len(), budget, location)?;
                for (label, ty) in fields {
                    budget.charge(label.len(), location.clone())?;
                    copied.push((label.to_owned(), copy_type(ty, budget, location)?));
                }
                ValueType::Record(copied)
            }
        })
    })
}

fn copy_types(
    types: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    let mut copied = metadata_vec(types.len(), budget, location)?;
    for ty in types {
        copied.push(copy_type(ty, budget, location)?);
    }
    Ok(copied)
}

fn one_type(
    ty: ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    let mut types = metadata_vec(1, budget, location)?;
    types.push(ty);
    Ok(types)
}

fn append_types(
    target: &mut Vec<ValueType>,
    types: Vec<ValueType>,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    allocation::<ValueType>(sum(target.len(), types.len(), location)?, location)?;
    budget.charge(types.len(), location.clone())?;
    target.extend(types);
    Ok(())
}

enum Globals<'a> {
    Types(&'a BTreeMap<String, ValueType>),
    Facts(&'a BTreeMap<String, Vec<ValueType>>),
    Available(&'a Bindings<ConstructedValue>),
}

/// Only selected terminal control positions may transfer to their loop.
fn check_loop_terminal<Q>(
    kind: &ValueExpressionKind<Q>,
    transfer: Option<usize>,
    location: &Location,
) -> Result<(), QueryError> {
    match (kind, transfer) {
        (ValueExpressionKind::Break(_), Some(_)) => Ok(()),
        (ValueExpressionKind::Continue(values), Some(arity)) if values.len() == arity => Ok(()),
        (ValueExpressionKind::Continue(_), Some(_)) => {
            Err(error(location, "loop state argument count mismatch"))
        }
        (ValueExpressionKind::Break(_) | ValueExpressionKind::Continue(_), None) => Err(error(
            location,
            "loop transfer requires a terminal loop body position",
        )),
        (
            ValueExpressionKind::Block { .. }
            | ValueExpressionKind::Conditional { .. }
            | ValueExpressionKind::ValueMatch { .. },
            Some(_),
        )
        | (_, None) => Ok(()),
        (_, Some(_)) => Err(error(
            location,
            "loop body path must end in break or continue",
        )),
    }
}

struct Analysis<'a, 'h, Q, H> {
    queries: &'h mut H,
    query: std::marker::PhantomData<Q>,
    globals: Globals<'a>,
    locals: Vec<(&'a str, Vec<ValueType>)>,
    free: Vec<Located<String>>,
    fallback_names: Vec<Located<String>>,
    fallback: bool,
}

impl<'a, 'h, Q: 'a, H: ValueQueryHost<Q>> Analysis<'a, 'h, Q, H> {
    fn new(globals: Globals<'a>, queries: &'h mut H) -> Self {
        Self {
            globals,
            queries,
            query: std::marker::PhantomData,
            locals: Vec::new(),
            free: Vec::new(),
            fallback_names: Vec::new(),
            fallback: false,
        }
    }

    fn global_exists(
        &self,
        name: &str,
        range: std::ops::Range<usize>,
        budget: &mut Budget,
    ) -> Result<bool, QueryError> {
        admit_diagnostic(
            "undefined binding: ",
            name,
            budget,
            &Location::Query(range.clone()),
        )?;
        Ok(match self.globals {
            Globals::Types(types) => types.contains_key(name),
            Globals::Facts(types) => types.contains_key(name),
            Globals::Available(bindings) => bindings.get(name, range).is_ok(),
        })
    }

    fn name(
        &mut self,
        name: &str,
        expression: &ValueExpression<Q>,
        budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        let location = Location::Query(expression.range.clone());
        if name == "_" {
            return Err(error(&location, "discard binder cannot be read"));
        }
        for (local, types) in self.locals.iter().rev() {
            budget.charge(
                sum(1, name.len().min(local.len()), &location)?,
                location.clone(),
            )?;
            if name == *local {
                return copy_types(types, budget, &location);
            }
        }
        self.queries
            .validate_name(name, &expression.range, budget)?;
        admit_diagnostic("undefined binding: ", name, budget, &location)?;
        let types = match self.globals {
            Globals::Types(types) => one_type(
                copy_type(
                    types
                        .get(name)
                        .ok_or_else(|| error(&location, format!("undefined binding: {name}")))?,
                    budget,
                    &location,
                )?,
                budget,
                &location,
            )?,
            Globals::Facts(types) => copy_types(
                types
                    .get(name)
                    .ok_or_else(|| error(&location, format!("undefined binding: {name}")))?,
                budget,
                &location,
            )?,
            Globals::Available(bindings) => {
                let value = bindings.get(name, expression.range.clone())?;
                let ty = if !self.fallback
                    && matches!(
                        value,
                        ConstructedValue::Array(_)
                            | ConstructedValue::Tuple(_)
                            | ConstructedValue::Record(_)
                            | ConstructedValue::Set { .. }
                            | ConstructedValue::KeyedArray { .. }
                    ) {
                    ValueType::Unestablished
                } else {
                    shallow_type(value, budget, &location)?
                };
                one_type(ty, budget, &location)?
            }
        };
        let mut found = false;
        for previous in &self.free {
            budget.charge(
                sum(1, name.len().min(previous.value.len()), &location)?,
                location.clone(),
            )?;
            if previous.value == name {
                found = true;
                break;
            }
        }
        if self.fallback && !found {
            budget.charge(name.len(), location.clone())?;
            push_metadata(
                &mut self.fallback_names,
                Located::new(name.to_owned(), expression.range.clone()),
                budget,
                &location,
            )?;
        } else if !self.fallback {
            let mut selected = None;
            for (index, previous) in self.fallback_names.iter().enumerate() {
                budget.charge(1 + name.len().min(previous.value.len()), location.clone())?;
                if previous.value == name {
                    selected = Some(index);
                    break;
                }
            }
            if let Some(index) = selected {
                self.fallback_names.remove(index);
            }
        }
        if !found {
            budget.charge(name.len(), location.clone())?;
            push_metadata(
                &mut self.free,
                Located::new(name.to_owned(), expression.range.clone()),
                budget,
                &location,
            )?;
        }
        Ok(types)
    }

    fn walk(
        &mut self,
        expression: &'a ValueExpression<Q>,
        budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        self.walk_control(expression, budget, None)
    }

    fn walk_control(
        &mut self,
        expression: &'a ValueExpression<Q>,
        budget: &mut Budget,
        transfer: Option<usize>,
    ) -> Result<Vec<ValueType>, QueryError> {
        let location = Location::Query(expression.range.clone());
        budget.within_evaluation(1, location.clone(), |budget| {
            budget.charge(1, location.clone())?;
            check_loop_terminal(&expression.value, transfer, &location)?;
            self.node(expression, budget, &location, transfer)
        })
    }

    fn node(
        &mut self,
        expression: &'a ValueExpression<Q>,
        budget: &mut Budget,
        location: &Location,
        transfer: Option<usize>,
    ) -> Result<Vec<ValueType>, QueryError> {
        self.queries.prepare_computation(expression, budget)?;
        match &expression.value {
            ValueExpressionKind::Queue { items, .. } => {
                self.walk(items, budget)?;
                self.queries.worklist_types(expression, budget)
            }
            ValueExpressionKind::IdentitySet { .. } => {
                self.queries.worklist_types(expression, budget)
            }
            ValueExpressionKind::PopFront(queue) => {
                self.walk(queue, budget)?;
                self.queries.worklist_types(expression, budget)
            }
            ValueExpressionKind::PushBackAll { queue, items } => {
                self.walk(queue, budget)?;
                self.walk(items, budget)?;
                self.queries.worklist_types(expression, budget)
            }
            ValueExpressionKind::Insert { set, item } => {
                self.walk(set, budget)?;
                self.walk(item, budget)?;
                self.queries.worklist_types(expression, budget)
            }
            ValueExpressionKind::Call {
                function,
                arguments,
            } => {
                let (_, arity) = self.queries.function(function, budget)?;
                if arguments.len() != arity {
                    return Err(error(location, "function argument count mismatch"));
                }
                for argument in arguments {
                    self.walk(argument, budget)?;
                }
                self.queries.function_types(function, budget)
            }
            ValueExpressionKind::Fold {
                items,
                initial,
                step,
            }
            | ValueExpressionKind::Scan {
                items,
                initial,
                step,
            } => {
                let (_, state) = self.queries.accumulator_function(step, budget)?;
                let types = self.walk(items, budget)?;
                for ty in types {
                    if !matches!(
                        shape_type(ty, budget, location)?,
                        ValueType::Array(_) | ValueType::ArrayKind(_) | ValueType::Unestablished
                    ) {
                        return Err(error(
                            &Location::Query(items.range.clone()),
                            "named accumulator needs a positional sequence",
                        ));
                    }
                }
                self.walk(initial, budget)?;
                if matches!(expression.value, ValueExpressionKind::Scan { .. }) {
                    one_type(
                        ValueType::Array(ArrayType::Elements(state)),
                        budget,
                        location,
                    )
                } else {
                    Ok(state)
                }
            }
            ValueExpressionKind::NativeValue(query) => {
                self.queries
                    .native_value_types(query, &self.locals, budget, &expression.range)
            }
            ValueExpressionKind::Literal(value) => {
                let ty = if self.fallback {
                    shallow_type(value, budget, location)?
                } else {
                    constructed_value_type(value, budget, location.clone())?
                };
                one_type(ty, budget, location)
            }
            ValueExpressionKind::Occurs(value) | ValueExpressionKind::Absent(value) => {
                self.walk(value, budget)?;
                one_type(ValueType::Boolean, budget, location)
            }
            ValueExpressionKind::Lookup { value, key }
            | ValueExpressionKind::HasKey { value, key } => {
                let values = self.walk(value, budget)?;
                let keys = self.walk(key, budget)?;
                let label = match &key.value {
                    ValueExpressionKind::Literal(ConstructedValue::String(label)) => {
                        Some(label.as_str())
                    }
                    _ => None,
                };
                let mut result = Vec::new();
                for value in values {
                    append_types(
                        &mut result,
                        access_type(value, &keys, label, true, budget, location)?,
                        budget,
                        location,
                    )?;
                }
                if matches!(expression.value, ValueExpressionKind::HasKey { .. }) {
                    one_type(ValueType::Boolean, budget, location)
                } else {
                    Ok(result)
                }
            }
            ValueExpressionKind::Default { value, fallback } => {
                let left = self.walk(value, budget)?;
                let saved = self.fallback;
                self.fallback = true;
                let right = self.walk(fallback, budget);
                self.fallback = saved;
                let right = right?;
                for a in &left {
                    for b in &right {
                        if !compatible_types(a, b, budget, location)? {
                            return Err(error(
                                location,
                                "default needs compatible underlying types",
                            ));
                        }
                    }
                }
                let mut result = Vec::new();
                for ty in left.into_iter().chain(right) {
                    let ty = match ty {
                        ValueType::Absent => continue,
                        ValueType::Declared {
                            actual,
                            declaration,
                        } => {
                            let declaration =
                                copy_declaration(underlying(&declaration), budget, location)?;
                            ValueType::Declared {
                                actual: Box::new(if matches!(*actual, ValueType::Absent) {
                                    ValueType::Unestablished
                                } else {
                                    *actual
                                }),
                                declaration,
                            }
                        }
                        ty => ty,
                    };
                    push_metadata(&mut result, ty, budget, location)?;
                }
                if result.is_empty() {
                    one_type(ValueType::Absent, budget, location)
                } else {
                    Ok(result)
                }
            }
            ValueExpressionKind::CurrentInput => {
                self.queries.current_input_types(&expression.range, budget)
            }
            ValueExpressionKind::Name(name) => self.name(name, expression, budget),
            ValueExpressionKind::PredicateSubject => {
                if !self
                    .locals
                    .iter()
                    .any(|(name, _)| *name == PREDICATE_SUBJECT)
                {
                    return self
                        .queries
                        .predicate_subject_types(&expression.range, budget);
                }
                self.name(PREDICATE_SUBJECT, expression, budget)
            }
            ValueExpressionKind::SubjectScope { subject, argument } => {
                let types = self.walk(subject, budget)?;
                self.scoped_types(argument, subject, &types, false, budget)
            }
            ValueExpressionKind::PredicateScope { subject, predicate } => {
                let types = self.walk(subject, budget)?;
                let result = self.scoped_types(predicate, subject, &types, false, budget)?;
                predicate_types(&result, budget, &predicate.body.range)?;
                one_type(ValueType::Boolean, budget, location)
            }
            ValueExpressionKind::NativeQuery(query) => {
                self.queries
                    .query_types(query, &self.locals, budget, &expression.range)
            }
            ValueExpressionKind::One(array) => {
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    match shape_type(ty, budget, location)? {
                        ValueType::Array(
                            ArrayType::Positions(types) | ArrayType::Elements(types),
                        )
                        | ValueType::ArrayKind(types) => {
                            append_types(&mut result, types, budget, location)?
                        }
                        ValueType::Unestablished => {
                            push_metadata(&mut result, ValueType::Unestablished, budget, location)?
                        }
                        _ => return Err(error(location, "one needs a positional array")),
                    }
                }
                if result.is_empty() {
                    push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::Array(children) => {
                let mut entries = metadata_vec(children.len(), budget, location)?;
                let mut exact = true;
                for child in children {
                    let types = self.walk(child, budget)?;
                    exact &= types.len() == 1;
                    entries.push(types);
                }
                let mut types = Vec::new();
                for entries in entries {
                    append_types(&mut types, entries, budget, location)?;
                }
                one_type(
                    ValueType::Array(if exact {
                        ArrayType::Positions(types)
                    } else {
                        ArrayType::Elements(types)
                    }),
                    budget,
                    location,
                )
            }
            ValueExpressionKind::Tuple(children) => {
                let positions = self.positions(children.iter(), budget, location)?;
                let mut types = metadata_vec(positions.len(), budget, location)?;
                for position in positions {
                    types.push(ValueType::Tuple(position));
                }
                Ok(types)
            }
            ValueExpressionKind::Record(fields) => {
                for (index, (label, _)) in fields.iter().enumerate() {
                    for (previous, _) in &fields[..index] {
                        budget.charge(
                            sum(1, label.value.len().min(previous.value.len()), location)?,
                            location.clone(),
                        )?;
                        if label.value == previous.value {
                            return Err(QueryError::query(
                                label.range.clone(),
                                "duplicate record label",
                            ));
                        }
                    }
                }
                let positions =
                    self.positions(fields.iter().map(|(_, value)| value), budget, location)?;
                let mut types = metadata_vec(positions.len(), budget, location)?;
                for position in positions {
                    let mut result = metadata_vec(fields.len(), budget, location)?;
                    for ((label, _), ty) in fields.iter().zip(position) {
                        budget.charge(label.value.len(), Location::Query(label.range.clone()))?;
                        result.push((label.value.to_owned(), ty));
                    }
                    types.push(ValueType::Record(result));
                }
                Ok(types)
            }
            ValueExpressionKind::Dictionary(entries) => {
                for (key, value) in entries {
                    for ty in self.walk(key, budget)? {
                        require_type(
                            &ty,
                            ScalarRequirement::String,
                            &Location::Query(key.range.clone()),
                        )?;
                    }
                    self.walk(value, budget)?;
                }
                one_type(ValueType::RecordKind, budget, location)
            }
            ValueExpressionKind::DictionaryComprehension { clauses, key, head } => {
                let saved = self.locals.len();
                let result = (|| {
                    self.clauses(clauses, budget)?;
                    for ty in self.walk(key, budget)? {
                        require_type(
                            &ty,
                            ScalarRequirement::String,
                            &Location::Query(key.range.clone()),
                        )?;
                    }
                    self.walk(head, budget)?;
                    one_type(ValueType::RecordKind, budget, location)
                })();
                self.locals.truncate(saved);
                result
            }
            ValueExpressionKind::Set(children) => {
                let mut element_type = None;
                for child in children {
                    merge_set_types(
                        &mut element_type,
                        &self.walk(child, budget)?,
                        budget,
                        location,
                    )?;
                }
                one_type(ValueType::Set(element_type), budget, location)
            }
            ValueExpressionKind::KeyedArray {
                axes,
                declared_axis_sources,
                entries,
            } => {
                if axes.is_some() && declared_axis_sources.is_some() {
                    return Err(error(
                        location,
                        "conflicting concrete axes and declared axis sources",
                    ));
                }
                let source_facts = declared_axis_sources
                    .as_ref()
                    .map(|sources| self.axis_sources(sources, budget, location))
                    .transpose()?;
                let mut facts = None;
                let established = match axes {
                    Some(axes) => {
                        check_axes(axes, budget, location)?;
                        Some(axis_types(axes, budget, location)?)
                    }
                    None => None,
                };
                let mut elements = Vec::new();
                for (key, value) in entries {
                    let key_location = Location::Query(key.range.clone());
                    merge_key_facts(&mut facts, &self.walk(key, budget)?, budget, &key_location)?;
                    if let Some(axes) = &established {
                        check_key_facts(&facts, axes, budget, &key_location)?;
                    }
                    if let Some(sources) = &source_facts {
                        check_source_facts(&facts, sources, budget, &key_location)?;
                    }
                    append_types(&mut elements, self.walk(value, budget)?, budget, location)?;
                }
                let axes = match established {
                    Some(axes) => Some(axes),
                    None => established_facts(source_facts.or(facts), budget, location)?,
                };
                if entries.is_empty() && axes.is_none() && declared_axis_sources.is_none() {
                    return Err(error(location, "unestablished empty keyed axes"));
                }
                one_type(
                    ValueType::KeyedArray(KeyedArrayType { axes, elements }),
                    budget,
                    location,
                )
            }
            ValueExpressionKind::KeyedComprehension {
                clauses,
                key,
                head,
                declared_axis_sources,
                empty_axis_sources,
            } => {
                if declared_axis_sources.is_some() && empty_axis_sources.is_some() {
                    return Err(error(
                        location,
                        "conflicting declared and fallback axis sources",
                    ));
                }
                // Both source lists belong to the scope before our binders.
                let sources = declared_axis_sources
                    .as_ref()
                    .or(empty_axis_sources.as_ref());
                let source_facts = sources
                    .map(|sources| self.axis_sources(sources, budget, location))
                    .transpose()?;
                let saved = self.locals.len();
                let result = (|| {
                    self.clauses(clauses, budget)?;
                    let mut facts = None;
                    merge_key_facts(
                        &mut facts,
                        &self.walk(key, budget)?,
                        budget,
                        &Location::Query(key.range.clone()),
                    )?;
                    let elements = self.walk(head, budget)?;
                    if let Some(source_facts) = &source_facts {
                        check_source_facts(
                            &facts,
                            source_facts,
                            budget,
                            &Location::Query(key.range.clone()),
                        )?;
                    }
                    let axes = if declared_axis_sources.is_some() {
                        established_facts(source_facts, budget, location)?
                    } else {
                        established_facts(facts, budget, location)?
                    };
                    one_type(
                        ValueType::KeyedArray(KeyedArrayType { axes, elements }),
                        budget,
                        location,
                    )
                })();
                self.locals.truncate(saved);
                result
            }
            ValueExpressionKind::Unary { operator, operand } => {
                let types = self.walk(operand, budget)?;
                let mut result = metadata_vec(types.len(), budget, location)?;
                for ty in types {
                    budget.charge(1, location.clone())?;
                    match operator {
                        ValueUnaryOperator::Not => {
                            require_type(&ty, ScalarRequirement::Boolean, location)?;
                            result.push(ValueType::Boolean);
                        }
                        ValueUnaryOperator::Positive | ValueUnaryOperator::Negative => {
                            require_type(&ty, ScalarRequirement::Numeric, location)?;
                            result.push(ty);
                        }
                    }
                }
                Ok(result)
            }
            ValueExpressionKind::Binary {
                operator,
                left,
                right,
            } => {
                let left = self.walk(left, budget)?;
                let right = self.walk(right, budget)?;
                let mut result = Vec::new();
                for a in &left {
                    for b in &right {
                        budget.charge(1, location.clone())?;
                        let ty = binary_type(*operator, a, b, budget, location)?;
                        push_metadata(&mut result, ty, budget, location)?;
                    }
                }
                Ok(result)
            }
            ValueExpressionKind::Field { value, field } => {
                let types = self.walk(value, budget)?;
                let mut result = Vec::new();
                for ty in types {
                    if let ValueType::Declared { declaration, .. } = &ty
                        && let DeclaredType::Record(fields) = underlying(declaration)
                    {
                        let selected = record_declaration(fields, &field.value, budget, location)?;
                        push_metadata(
                            &mut result,
                            declared_fact(selected, ValueType::Unestablished, budget, location)?,
                            budget,
                            location,
                        )?;
                        continue;
                    }
                    let selected = match shape_type(ty, budget, location)? {
                        ValueType::Record(fields) => {
                            let mut selected = None;
                            for (label, ty) in fields {
                                budget.charge(
                                    sum(1, label.len().min(field.value.len()), location)?,
                                    location.clone(),
                                )?;
                                if label == field.value {
                                    selected = Some(ty);
                                }
                            }
                            selected.unwrap_or(ValueType::Unestablished)
                        }
                        ValueType::Unestablished | ValueType::RecordKind => {
                            ValueType::Unestablished
                        }
                        _ => return Err(error(location, "field access needs a record")),
                    };
                    push_metadata(&mut result, selected, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::TupleAccess { value, position } => {
                let types = self.walk(value, budget)?;
                let mut result = Vec::new();
                for ty in types {
                    budget.charge(1, location.clone())?;
                    let selected = match shape_type(ty, budget, location)? {
                        ValueType::Tuple(entries) => {
                            budget.charge(entries.len().min(position.value), location.clone())?;
                            position
                                .value
                                .checked_sub(1)
                                .and_then(|index| entries.into_iter().nth(index))
                                .unwrap_or(ValueType::Unestablished)
                        }
                        ValueType::Unestablished | ValueType::TupleKind => ValueType::Unestablished,
                        _ => return Err(error(location, "tuple access needs a tuple")),
                    };
                    push_metadata(&mut result, selected, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::ArrayAccess { array, index } => {
                let arrays = self.walk(array, budget)?;
                let indices = self.walk(index, budget)?;
                let constant = match index.value {
                    ValueExpressionKind::Literal(ConstructedValue::Integer(value)) => Some(value),
                    _ => None,
                };
                let mut result = Vec::new();
                for array in arrays {
                    if matches!(&array, ValueType::Record(_) | ValueType::RecordKind)
                        || matches!(&array, ValueType::Declared { declaration, .. }
                            if matches!(underlying(declaration), DeclaredType::Record(_)))
                    {
                        let label = match &index.value {
                            ValueExpressionKind::Literal(ConstructedValue::String(label)) => {
                                Some(label.as_str())
                            }
                            _ => None,
                        };
                        append_types(
                            &mut result,
                            access_type(array, &indices, label, false, budget, location)?,
                            budget,
                            location,
                        )?;
                        continue;
                    }
                    match shape_type(array, budget, location)? {
                        ValueType::ArrayKind(elements) => {
                            let mut facts = None;
                            merge_key_facts(&mut facts, &indices, budget, location)?;
                            append_types(&mut result, elements, budget, location)?;
                        }
                        ValueType::KeyedArray(keyed) => {
                            let mut facts = None;
                            merge_key_facts(&mut facts, &indices, budget, location)?;
                            if let Some(axes) = &keyed.axes {
                                check_key_facts(&facts, axes, budget, location)?;
                            }
                            append_types(&mut result, keyed.elements, budget, location)?;
                        }
                        ValueType::Array(array) => {
                            for ty in &indices {
                                require_type(ty, ScalarRequirement::Integer, location)?;
                            }
                            match array {
                                _ if constant.is_some_and(|position| position <= 0) => {
                                    push_metadata(
                                        &mut result,
                                        ValueType::Unestablished,
                                        budget,
                                        location,
                                    )?;
                                }
                                ArrayType::Positions(entries) if constant.is_some() => {
                                    let position =
                                        usize::try_from(constant.expect("constant checked")).ok();
                                    budget.charge(
                                        entries.len().min(position.unwrap_or(0)),
                                        location.clone(),
                                    )?;
                                    let ty = position
                                        .and_then(|position| position.checked_sub(1))
                                        .and_then(|index| entries.into_iter().nth(index))
                                        .unwrap_or(ValueType::Unestablished);
                                    push_metadata(&mut result, ty, budget, location)?;
                                }
                                ArrayType::Positions(entries) | ArrayType::Elements(entries) => {
                                    append_types(&mut result, entries, budget, location)?
                                }
                            }
                        }
                        ValueType::Unestablished => {
                            for ty in &indices {
                                if matches!(ty, ValueType::String) {
                                    continue;
                                }
                                let mut facts = None;
                                merge_key_facts(
                                    &mut facts,
                                    std::slice::from_ref(ty),
                                    budget,
                                    location,
                                )?;
                            }
                            push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
                        }
                        _ => return Err(error(location, "array access needs an array or record")),
                    }
                }
                if result.is_empty() {
                    push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::IndexSet(array) => {
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    budget.charge(1, location.clone())?;
                    let element_type = match shape_type(ty, budget, location)? {
                        ValueType::Array(_) => Some(SetElementType::Integer),
                        ValueType::KeyedArray(keyed) => match keyed.axes {
                            Some(axes) if axes.len() == 1 => Some(key_set_type(axes[0])),
                            Some(_) => return Err(error(location, "index_set needs rank one")),
                            None => None,
                        },
                        ValueType::ArrayKind(_) | ValueType::Unestablished => None,
                        _ => return Err(error(location, "index_set needs an array")),
                    };
                    push_metadata(&mut result, ValueType::Set(element_type), budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::Entries(array) => {
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    budget.charge(1, location.clone())?;
                    let keyed = match shape_type(ty, budget, location)? {
                        ValueType::KeyedArray(keyed) => keyed,
                        ValueType::ArrayKind(elements) => KeyedArrayType {
                            axes: None,
                            elements,
                        },
                        ValueType::Unestablished => {
                            push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
                            continue;
                        }
                        _ => return Err(error(location, "entries needs a keyed array")),
                    };
                    let key = match keyed.axes {
                        Some(axes) => {
                            let mut components = metadata_vec(axes.len(), budget, location)?;
                            for axis in axes {
                                budget.charge(1, location.clone())?;
                                components.push(match axis {
                                    ValueKeyType::Integer => ValueType::Integer,
                                    ValueKeyType::Member(id) => ValueType::Member(id),
                                });
                            }
                            if components.len() == 1 {
                                components.pop().expect("rank one")
                            } else {
                                ValueType::Tuple(components)
                            }
                        }
                        None => ValueType::Unestablished,
                    };
                    let mut records = metadata_vec(keyed.elements.len(), budget, location)?;
                    for value in keyed.elements {
                        let mut fields = metadata_vec(2, budget, location)?;
                        budget.charge("key".len() + "value".len(), location.clone())?;
                        fields.push(("key".into(), copy_type(&key, budget, location)?));
                        fields.push(("value".into(), value));
                        records.push(ValueType::Record(fields));
                    }
                    push_metadata(
                        &mut result,
                        ValueType::Array(ArrayType::Elements(records)),
                        budget,
                        location,
                    )?;
                }
                Ok(result)
            }
            ValueExpressionKind::ZipExact { left, right } => {
                let left = self.walk(left, budget)?;
                let right = self.walk(right, budget)?;
                let mut result = Vec::new();
                for a in &left {
                    for b in &right {
                        let ty = zip_exact_type(a, b, budget, location)?;
                        push_metadata(&mut result, ty, budget, location)?;
                    }
                }
                Ok(result)
            }
            ValueExpressionKind::Reduce { operator, array } => {
                for ty in self.walk(array, budget)? {
                    budget.charge(1, location.clone())?;
                    let elements = match shape_type(ty, budget, location)? {
                        ValueType::Array(
                            ArrayType::Positions(elements) | ArrayType::Elements(elements),
                        )
                        | ValueType::ArrayKind(elements) => elements,
                        ValueType::KeyedArray(keyed) => keyed.elements,
                        ValueType::Unestablished => continue,
                        _ => return Err(error(location, "reducer needs an array")),
                    };
                    if let Some(requirement) = match operator {
                        ValueReducer::Length => None,
                        ValueReducer::Sum => Some(ScalarRequirement::Integer),
                        ValueReducer::Forall | ValueReducer::Exists => {
                            Some(ScalarRequirement::Boolean)
                        }
                    } {
                        for element in elements {
                            budget.charge(1, location.clone())?;
                            require_type(&element, requirement, location)?;
                        }
                    }
                }
                one_type(
                    match operator {
                        ValueReducer::Length | ValueReducer::Sum => ValueType::Integer,
                        ValueReducer::Forall | ValueReducer::Exists => ValueType::Boolean,
                    },
                    budget,
                    location,
                )
            }
            ValueExpressionKind::Filter { array, predicate } => {
                let mut elements = Vec::new();
                for ty in self.walk(array, budget)? {
                    append_types(
                        &mut elements,
                        filter_elements(ty, budget, location)?,
                        budget,
                        location,
                    )?;
                }
                if elements.is_empty() {
                    push_metadata(&mut elements, ValueType::Unestablished, budget, location)?;
                }
                let result = self.scoped_types(predicate, array, &elements, true, budget)?;
                predicate_types(&result, budget, &predicate.body.range)?;
                one_type(
                    ValueType::Array(ArrayType::Elements(elements)),
                    budget,
                    location,
                )
            }
            ValueExpressionKind::Sort {
                array, selector, ..
            } => {
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    let ty = sort_type(ty, selector.as_ref(), budget, location)?;
                    push_metadata(&mut result, ty, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::Extremum { array, field, .. } => {
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    let elements = ordering_elements(
                        ty,
                        field
                            .as_ref()
                            .map(|field| Located::new(field.value.as_str(), field.range.clone())),
                        budget,
                        location,
                    )?;
                    append_types(&mut result, elements, budget, location)?;
                }
                push_metadata(&mut result, ValueType::Absent, budget, location)?;
                Ok(result)
            }
            ValueExpressionKind::Unique(array) | ValueExpressionKind::Tally(array) => {
                let tally = matches!(expression.value, ValueExpressionKind::Tally(_));
                let mut result = Vec::new();
                for ty in self.walk(array, budget)? {
                    let retained = if !tally {
                        match &ty {
                            ValueType::Declared { declaration, .. } => {
                                Some(copy_declaration(declaration, budget, location)?)
                            }
                            _ => None,
                        }
                    } else {
                        None
                    };
                    let elements = scalar_pipeline_elements(ty, tally, budget, location)?;
                    let mut ty = if tally {
                        if elements.is_empty() {
                            ValueType::Record(Vec::new())
                        } else {
                            ValueType::RecordKind
                        }
                    } else {
                        ValueType::Array(ArrayType::Elements(elements))
                    };
                    if let Some(declaration) = retained {
                        ty = ValueType::Declared {
                            actual: Box::new(ty),
                            declaration,
                        };
                    }
                    push_metadata(&mut result, ty, budget, location)?;
                }
                Ok(result)
            }
            ValueExpressionKind::GroupBy { rows, field } => {
                let selector = Location::Query(field.range.clone());
                let mut result = Vec::new();
                for ty in self.walk(rows, budget)? {
                    budget.charge(1, location.clone())?;
                    let elements = match shape_type(ty, budget, location)? {
                        ValueType::Array(
                            ArrayType::Positions(elements) | ArrayType::Elements(elements),
                        )
                        | ValueType::ArrayKind(elements) => elements,
                        ValueType::Unestablished => {
                            push_metadata(&mut result, ValueType::Unestablished, budget, location)?;
                            continue;
                        }
                        _ => return Err(error(location, "group_by needs a positional array")),
                    };
                    let mut key_type = None;
                    for row in &elements {
                        budget.charge(1, location.clone())?;
                        let normalized = if matches!(row, ValueType::Declared { .. }) {
                            Some(shape_type(
                                copy_type(row, budget, location)?,
                                budget,
                                location,
                            )?)
                        } else {
                            None
                        };
                        let fields = match normalized.as_ref().unwrap_or(row) {
                            ValueType::Record(fields) => fields,
                            ValueType::Unestablished | ValueType::RecordKind => continue,
                            _ => return Err(error(location, "group_by needs record rows")),
                        };
                        for (label, ty) in fields {
                            budget.charge(
                                sum(1, label.len().min(field.value.len()), &selector)?,
                                selector.clone(),
                            )?;
                            if label != &field.value || matches!(ty, ValueType::Unestablished) {
                                continue;
                            }
                            if !matches!(
                                ty,
                                ValueType::Integer | ValueType::String | ValueType::Member(_)
                            ) {
                                return Err(error(
                                    &selector,
                                    "group_by keys need integers, strings or nominal members",
                                ));
                            }
                            if key_type.as_ref().is_some_and(|previous| previous != ty) {
                                return Err(error(
                                    &selector,
                                    "group_by needs homogeneous key types",
                                ));
                            }
                            if key_type.is_none() {
                                key_type = Some(copy_type(ty, budget, &selector)?);
                            }
                        }
                    }
                    let mut groups = Vec::new();
                    if !elements.is_empty() {
                        let mut fields = metadata_vec(2, budget, location)?;
                        budget.charge("key".len() + "items".len(), location.clone())?;
                        fields.push(("key".into(), key_type.unwrap_or(ValueType::Unestablished)));
                        fields.push((
                            "items".into(),
                            ValueType::Array(ArrayType::Elements(elements)),
                        ));
                        push_metadata(&mut groups, ValueType::Record(fields), budget, location)?;
                    }
                    push_metadata(
                        &mut result,
                        ValueType::Array(ArrayType::Elements(groups)),
                        budget,
                        location,
                    )?;
                }
                Ok(result)
            }
            ValueExpressionKind::Require {
                condition,
                value,
                message,
            } => {
                self.condition(condition, budget)?;
                let types = self.walk(value, budget)?;
                allocation::<u8>(message.value.len(), location)?;
                budget.charge(message.value.len(), Location::Query(message.range.clone()))?;
                Ok(types)
            }
            ValueExpressionKind::Range { lower, upper } => {
                for expression in [lower, upper] {
                    for ty in self.walk(expression, budget)? {
                        require_type(&ty, ScalarRequirement::Integer, location)?;
                    }
                }
                one_type(
                    ValueType::Set(Some(SetElementType::Integer)),
                    budget,
                    location,
                )
            }
            ValueExpressionKind::Conditional {
                branches,
                otherwise,
            } => {
                let mut types = Vec::new();
                for (condition, branch) in branches {
                    self.condition(condition, budget)?;
                    append_types(
                        &mut types,
                        self.walk_control(branch, budget, transfer)?,
                        budget,
                        location,
                    )?;
                }
                append_types(
                    &mut types,
                    self.walk_control(otherwise, budget, transfer)?,
                    budget,
                    location,
                )?;
                Ok(types)
            }
            ValueExpressionKind::Loop { states, body } => {
                let mut initial = metadata_vec(states.len(), budget, location)?;
                for (_, value) in states {
                    initial.push(self.walk(value, budget)?);
                }
                let saved = self.locals.len();
                self.queries.enter_scope(budget, &expression.range)?;
                let result = (|| {
                    for ((name, value), facts) in states.iter().zip(initial) {
                        function_local(name, &self.locals, budget)?;
                        if self.global_exists(&name.value, name.range.clone(), budget)? {
                            return Err(error(
                                &Location::Query(name.range.clone()),
                                "binding shadows an existing source or let",
                            ));
                        }
                        self.queries.prepare_local(name, value, &facts, budget)?;
                        push_metadata(
                            &mut self.locals,
                            (name.value.as_str(), facts),
                            budget,
                            location,
                        )?;
                    }
                    self.queries.prepare_computation(expression, budget)?;
                    self.walk_control(body, budget, Some(states.len()))
                })();
                self.locals.truncate(saved);
                self.queries.leave_scope();
                result
            }
            ValueExpressionKind::Break(value) => self.walk(value, budget),
            ValueExpressionKind::Continue(values) => {
                for value in values {
                    self.walk(value, budget)?;
                }
                Ok(Vec::new())
            }
            ValueExpressionKind::Block { bindings, value } => {
                let saved = self.locals.len();
                self.queries.enter_scope(budget, &expression.range)?;
                let result = (|| {
                    for (pattern, value) in bindings {
                        let types = self.walk(value, budget)?;
                        self.pattern(pattern, &types, false, budget)?;
                        self.queries.prepare_pattern(pattern, value, budget)?;
                    }
                    self.walk_control(value, budget, transfer)
                })();
                self.locals.truncate(saved);
                self.queries.leave_scope();
                result
            }
            ValueExpressionKind::ValueMatch { subject, arms } => {
                if arms.is_empty()
                    || !matches!(
                        arms.last().map(|a| (&a.pattern.value, &a.guard)),
                        Some((PatternKind::Wildcard, None))
                    )
                {
                    return Err(error(
                        location,
                        "value match needs a final unguarded wildcard",
                    ));
                }
                let facts = self.walk(subject, budget)?;
                let mut types = Vec::new();
                for (index, arm) in arms.iter().enumerate() {
                    if index + 1 < arms.len()
                        && matches!(arm.pattern.value, PatternKind::Wildcard)
                        && arm.guard.is_none()
                    {
                        return Err(error(
                            &Location::Query(arm.pattern.range.clone()),
                            "unguarded wildcard must be the final arm",
                        ));
                    }
                    let saved = self.locals.len();
                    self.queries.enter_scope(budget, &arm.pattern.range)?;
                    let result = (|| {
                        self.pattern(&arm.pattern, &facts, false, budget)?;
                        self.queries
                            .prepare_pattern(&arm.pattern, subject, budget)?;
                        if let Some(guard) = &arm.guard {
                            self.condition(guard, budget)?;
                        }
                        self.walk_control(&arm.value, budget, transfer)
                    })();
                    self.locals.truncate(saved);
                    self.queries.leave_scope();
                    append_types(&mut types, result?, budget, location)?;
                }
                Ok(types)
            }
            ValueExpressionKind::Comprehension {
                constructor,
                clauses,
                head,
            } => {
                let saved = self.locals.len();
                let result = (|| {
                    self.clauses(clauses, budget)?;
                    let types = self.walk(head, budget)?;
                    let ty = match constructor {
                        ValueConstructor::Array => ValueType::Array(ArrayType::Elements(types)),
                        ValueConstructor::Set => {
                            let mut element_type = None;
                            merge_set_types(&mut element_type, &types, budget, location)?;
                            ValueType::Set(element_type)
                        }
                    };
                    one_type(ty, budget, location)
                })();
                self.locals.truncate(saved);
                result
            }
        }
    }

    fn scoped_types(
        &mut self,
        predicate: &'a PredicateArgument<Q>,
        source: &'a ValueExpression<Q>,
        types: &[ValueType],
        element: bool,
        budget: &mut Budget,
    ) -> Result<Vec<ValueType>, QueryError> {
        let range = &predicate.body.range;
        let location = Location::Query(range.clone());
        let saved = self.locals.len();
        self.queries.enter_scope(budget, range)?;
        let result = (|| {
            push_metadata(
                &mut self.locals,
                (PREDICATE_SUBJECT, copy_types(types, budget, &location)?),
                budget,
                &location,
            )?;
            if let Some(pattern) = &predicate.argument {
                self.pattern(pattern, types, true, budget)?;
            }
            self.queries.prepare_predicate(
                predicate.argument.as_ref(),
                source,
                types,
                element,
                budget,
            )?;
            self.walk(&predicate.body, budget)
        })();
        self.locals.truncate(saved);
        self.queries.leave_scope();
        result
    }

    fn pattern(
        &mut self,
        pattern: &'a Pattern,
        facts: &[ValueType],
        required: bool,
        budget: &mut Budget,
    ) -> Result<(), QueryError> {
        let names = if required {
            pattern::required_facts(pattern, facts, budget)?
        } else {
            pattern::facts(pattern, facts, budget)?
        };
        for (name, facts) in names {
            let location = Location::Query(name.range.clone());
            function_local(name, &self.locals, budget)?;
            if self.global_exists(&name.value, name.range.clone(), budget)? {
                return Err(error(
                    &location,
                    "binding shadows an existing source or let",
                ));
            }
            push_metadata(
                &mut self.locals,
                (name.value.as_str(), facts),
                budget,
                &location,
            )?;
        }
        Ok(())
    }

    fn clauses(
        &mut self,
        clauses: &'a [Located<ValueGenerator<Q>>],
        budget: &mut Budget,
    ) -> Result<(), QueryError> {
        for clause in clauses {
            let clause_location = Location::Query(clause.range.clone());
            budget.charge(1, clause_location.clone())?;
            match &clause.value {
                ValueGenerator::In {
                    binders,
                    source,
                    filter,
                } => {
                    if binders.is_empty() {
                        return Err(error(&clause_location, "in generator needs a binder"));
                    }
                    let source_types = self.walk(source, budget)?;
                    let mut elements = Vec::new();
                    for ty in source_types {
                        match shape_type(ty, budget, &clause_location)? {
                            ValueType::Array(
                                ArrayType::Positions(entries) | ArrayType::Elements(entries),
                            )
                            | ValueType::ArrayKind(entries) => {
                                append_types(&mut elements, entries, budget, &clause_location)?
                            }
                            ValueType::KeyedArray(keyed) => append_types(
                                &mut elements,
                                keyed.elements,
                                budget,
                                &clause_location,
                            )?,
                            ValueType::Set(element_type) => push_metadata(
                                &mut elements,
                                set_value_type(element_type),
                                budget,
                                &clause_location,
                            )?,
                            ValueType::Unestablished => push_metadata(
                                &mut elements,
                                ValueType::Unestablished,
                                budget,
                                &clause_location,
                            )?,
                            _ => {
                                return Err(error(
                                    &Location::Query(source.range.clone()),
                                    "in source needs an array or supported set",
                                ));
                            }
                        }
                    }
                    if elements.is_empty() {
                        push_metadata(
                            &mut elements,
                            ValueType::Unestablished,
                            budget,
                            &clause_location,
                        )?;
                    }
                    for binder in binders {
                        self.pattern(binder, &elements, false, budget)?;
                        self.queries
                            .prepare_generator(binder, source, &elements, true, budget)?;
                    }
                    if let Some(filter) = filter {
                        self.condition(filter, budget)?;
                    }
                }
                ValueGenerator::Bind {
                    binder,
                    value,
                    filter,
                } => {
                    let types = self.walk(value, budget)?;
                    self.pattern(binder, &types, false, budget)?;
                    self.queries
                        .prepare_generator(binder, value, &types, false, budget)?;
                    if let Some(filter) = filter {
                        self.condition(filter, budget)?;
                    }
                }
            }
        }
        Ok(())
    }

    fn condition(
        &mut self,
        condition: &'a ValueExpression<Q>,
        budget: &mut Budget,
    ) -> Result<(), QueryError> {
        let location = Location::Query(condition.range.clone());
        for ty in self.walk(condition, budget)? {
            budget.charge(1, location.clone())?;
            require_type(&ty, ScalarRequirement::Boolean, &location)?;
        }
        Ok(())
    }

    fn axis_sources(
        &mut self,
        sources: &'a [ValueExpression<Q>],
        budget: &mut Budget,
        location: &Location,
    ) -> Result<Vec<Option<ValueKeyType>>, QueryError> {
        if sources.is_empty() {
            return Err(error(location, "axis sources need nonzero rank"));
        }
        let mut facts = metadata_vec(sources.len(), budget, location)?;
        for source in sources {
            let types = self.walk(source, budget)?;
            facts.push(source_key_type(
                &types,
                budget,
                &Location::Query(source.range.clone()),
            )?);
        }
        Ok(facts)
    }

    // Tuple and record positions retain each concrete branch possibility. Admit
    // the bounded product before materializing it; no unknown slot hides a known
    // incompatible type in a later access or recursive equality.
    fn positions(
        &mut self,
        children: impl Iterator<Item = &'a ValueExpression<Q>>,
        budget: &mut Budget,
        location: &Location,
    ) -> Result<Vec<Vec<ValueType>>, QueryError> {
        let mut positions = metadata_vec(1, budget, location)?;
        positions.push(Vec::new());
        for child in children {
            let types = self.walk(child, budget)?;
            positions = extend_type_positions(&positions, &types, budget, location)?;
        }
        Ok(positions)
    }
}

fn zip_exact_type(
    left: &ValueType,
    right: &ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    if matches!(left, ValueType::Declared { .. }) || matches!(right, ValueType::Declared { .. }) {
        let left = shape_type(copy_type(left, budget, location)?, budget, location)?;
        let right = shape_type(copy_type(right, budget, location)?, budget, location)?;
        return zip_exact_type(&left, &right, budget, location);
    }
    let deferred = [ValueType::Unestablished];
    let [left, right] = [left, right].map(|ty| match ty {
        ValueType::KeyedArray(keyed) => Ok((keyed.axes.as_deref(), keyed.elements.as_slice())),
        ValueType::ArrayKind(elements) => Ok((None, elements.as_slice())),
        ValueType::Unestablished => Ok((None, deferred.as_slice())),
        _ => Err(error(location, "zip_exact needs keyed arrays")),
    });
    let (left_axes, a) = left?;
    let (right_axes, b) = right?;
    if let (Some(a), Some(b)) = (left_axes, right_axes)
        && !same_axis_types(a, b, budget, location)?
    {
        return Err(error(
            location,
            "zip_exact needs identical axis rank and types",
        ));
    }
    let axes = match left_axes.or(right_axes) {
        Some(axes) => Some(copy_axis_types(axes, budget, location)?),
        None => None,
    };
    let mut elements = Vec::new();
    for a in a {
        for b in b {
            let mut pair = metadata_vec(2, budget, location)?;
            pair.push(copy_type(a, budget, location)?);
            pair.push(copy_type(b, budget, location)?);
            push_metadata(&mut elements, ValueType::Tuple(pair), budget, location)?;
        }
    }
    Ok(ValueType::KeyedArray(KeyedArrayType { axes, elements }))
}

// Keep known component facts even when one deferred component prevents a public
// complete axis description. This catches rank/identity conflicts in all arms.
fn key_component_type(
    ty: &ValueType,
    location: &Location,
) -> Result<Option<ValueKeyType>, QueryError> {
    match ty {
        ValueType::Declared {
            actual,
            declaration,
        } => {
            if !matches!(
                actual.as_ref(),
                ValueType::Unestablished | ValueType::ScalarKind
            ) {
                return key_component_type(actual, location);
            }
            match underlying(declaration) {
                DeclaredType::Integer => Ok(Some(ValueKeyType::Integer)),
                DeclaredType::Member(id) if !matches!(actual.as_ref(), ValueType::ScalarKind) => {
                    Ok(Some(ValueKeyType::Member(*id)))
                }
                _ => Err(error(location, "key components need integers or members")),
            }
        }
        // A successful primitive key must be integer. Keep that family and
        // rank established while its actual primitive kind remains deferred.
        ValueType::Integer | ValueType::ScalarKind => Ok(Some(ValueKeyType::Integer)),
        ValueType::Member(id) => Ok(Some(ValueKeyType::Member(*id))),
        ValueType::Unestablished => Ok(None),
        _ => Err(error(location, "key components need integers or members")),
    }
}

fn merge_key_facts(
    facts: &mut Option<Vec<Option<ValueKeyType>>>,
    types: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    for ty in types {
        budget.charge(1, location.clone())?;
        let normalized = if matches!(ty, ValueType::Declared { .. }) {
            Some(shape_type(
                copy_type(ty, budget, location)?,
                budget,
                location,
            )?)
        } else {
            None
        };
        let ty = normalized.as_ref().unwrap_or(ty);
        let components = match ty {
            ValueType::Unestablished | ValueType::TupleKind => continue,
            ValueType::Tuple(types) if !types.is_empty() => {
                let mut result = metadata_vec(types.len(), budget, location)?;
                for ty in types {
                    budget.charge(1, location.clone())?;
                    result.push(key_component_type(ty, location)?);
                }
                result
            }
            ValueType::Integer | ValueType::ScalarKind | ValueType::Member(_) => {
                let mut result = metadata_vec(1, budget, location)?;
                result.push(key_component_type(ty, location)?);
                result
            }
            _ => {
                return Err(error(
                    location,
                    "key needs an integer, member or nonempty flat tuple",
                ));
            }
        };
        match facts {
            Some(previous) => {
                if previous.len() != components.len() {
                    return Err(error(location, "key rank mismatch"));
                }
                for (previous, ty) in previous.iter_mut().zip(components) {
                    budget.charge(1, location.clone())?;
                    if previous.is_some() && ty.is_some() && *previous != ty {
                        return Err(error(location, "incompatible keyed dimension type"));
                    }
                    if previous.is_none() {
                        *previous = ty;
                    }
                }
            }
            None => *facts = Some(components),
        }
    }
    Ok(())
}

fn check_key_facts(
    facts: &Option<Vec<Option<ValueKeyType>>>,
    axes: &[ValueKeyType],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    if let Some(facts) = facts {
        if facts.len() != axes.len() {
            return Err(error(location, "key rank mismatch"));
        }
        for (fact, axis) in facts.iter().zip(axes) {
            budget.charge(1, location.clone())?;
            if fact.is_some_and(|fact| fact != *axis) {
                return Err(error(location, "incompatible keyed dimension type"));
            }
        }
    }
    Ok(())
}

fn established_facts(
    facts: Option<Vec<Option<ValueKeyType>>>,
    budget: &mut Budget,
    location: &Location,
) -> Result<Option<Vec<ValueKeyType>>, QueryError> {
    let Some(facts) = facts else {
        return Ok(None);
    };
    let mut axes = metadata_vec(facts.len(), budget, location)?;
    for fact in facts {
        budget.charge(1, location.clone())?;
        let Some(fact) = fact else {
            return Ok(None);
        };
        axes.push(fact);
    }
    Ok(Some(axes))
}

fn source_key_type(
    types: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<Option<ValueKeyType>, QueryError> {
    let mut result = None;
    for ty in types {
        budget.charge(1, location.clone())?;
        let normalized = if matches!(ty, ValueType::Declared { .. }) {
            Some(shape_type(
                copy_type(ty, budget, location)?,
                budget,
                location,
            )?)
        } else {
            None
        };
        let ty = normalized.as_ref().unwrap_or(ty);
        let keys = match ty {
            ValueType::Array(ArrayType::Positions(elements) | ArrayType::Elements(elements))
            | ValueType::ArrayKind(elements)
            | ValueType::KeyedArray(KeyedArrayType { elements, .. }) => {
                let mut key_type = None;
                for ty in elements {
                    budget.charge(1, location.clone())?;
                    let ty = key_component_type(ty, location)?;
                    if key_type.is_some() && ty.is_some() && key_type != ty {
                        return Err(error(location, "incompatible axis source type"));
                    }
                    if ty.is_some() {
                        key_type = ty;
                    }
                }
                key_type
            }
            ValueType::Set(Some(SetElementType::Integer)) => Some(ValueKeyType::Integer),
            ValueType::Set(Some(SetElementType::Member(id))) => Some(ValueKeyType::Member(*id)),
            ValueType::Set(None) | ValueType::Unestablished => None,
            _ => {
                return Err(error(
                    location,
                    "axis source needs an integer or member array/set",
                ));
            }
        };
        if result.is_some() && keys.is_some() && result != keys {
            return Err(error(location, "incompatible axis source type"));
        }
        if keys.is_some() {
            result = keys;
        }
    }
    Ok(result)
}

fn check_source_facts(
    facts: &Option<Vec<Option<ValueKeyType>>>,
    sources: &[Option<ValueKeyType>],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    if let Some(facts) = facts {
        if facts.len() != sources.len() {
            return Err(error(location, "axis source rank mismatch"));
        }
        for (fact, source) in facts.iter().zip(sources) {
            budget.charge(1, location.clone())?;
            if fact.is_some() && source.is_some() && *fact != *source {
                return Err(error(location, "incompatible axis source type"));
            }
            // Unknown sources do not acquire identity from the key.
        }
    }
    Ok(())
}

#[derive(Clone, Copy)]
enum ScalarRequirement {
    String,
    Boolean,
    Integer,
    Numeric,
}

pub(crate) fn predicate_types(
    types: &[ValueType],
    budget: &mut Budget,
    range: &std::ops::Range<usize>,
) -> Result<(), QueryError> {
    let location = Location::Query(range.clone());
    for ty in types {
        budget.charge(1, location.clone())?;
        require_type(ty, ScalarRequirement::Boolean, &location)?;
    }
    Ok(())
}

fn require_type(
    ty: &ValueType,
    requirement: ScalarRequirement,
    location: &Location,
) -> Result<(), QueryError> {
    if let ValueType::Declared {
        actual,
        declaration,
    } = ty
    {
        if !matches!(
            actual.as_ref(),
            ValueType::Unestablished | ValueType::ScalarKind
        ) {
            return require_type(actual, requirement, location);
        }
        let expected = underlying(declaration);
        let accepted = match requirement {
            ScalarRequirement::String => matches!(expected, DeclaredType::String),
            ScalarRequirement::Boolean => matches!(expected, DeclaredType::Boolean),
            ScalarRequirement::Integer => matches!(expected, DeclaredType::Integer),
            ScalarRequirement::Numeric => {
                matches!(expected, DeclaredType::Integer | DeclaredType::Float)
            }
        };
        if accepted {
            return Ok(());
        }
        return Err(error(location, "incompatible declared operand type"));
    }
    let accepted = matches!(ty, ValueType::Unestablished | ValueType::ScalarKind)
        || match requirement {
            ScalarRequirement::String => matches!(ty, ValueType::String),
            ScalarRequirement::Boolean => matches!(ty, ValueType::Boolean),
            ScalarRequirement::Integer => matches!(ty, ValueType::Integer),
            ScalarRequirement::Numeric => matches!(ty, ValueType::Integer | ValueType::Float),
        };
    if !accepted {
        return Err(error(
            location,
            match requirement {
                ScalarRequirement::String => "dictionary key needs a present string",
                ScalarRequirement::Boolean => "condition needs a fixed Boolean",
                ScalarRequirement::Integer => "operation needs integers",
                ScalarRequirement::Numeric => "operation needs numeric operands",
            },
        ));
    }
    Ok(())
}

fn set_value_type(ty: Option<SetElementType>) -> ValueType {
    match ty {
        Some(SetElementType::Boolean) => ValueType::Boolean,
        Some(SetElementType::Integer) => ValueType::Integer,
        Some(SetElementType::Float) => ValueType::Float,
        Some(SetElementType::Member(id)) => ValueType::Member(id),
        None => ValueType::Unestablished,
    }
}

fn merge_set_types(
    element_type: &mut Option<SetElementType>,
    types: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    for ty in types {
        budget.charge(1, location.clone())?;
        let normalized = if matches!(ty, ValueType::Declared { .. }) {
            Some(shape_type(
                copy_type(ty, budget, location)?,
                budget,
                location,
            )?)
        } else {
            None
        };
        let ty = normalized.as_ref().unwrap_or(ty);
        let ty = match ty {
            ValueType::Boolean => SetElementType::Boolean,
            ValueType::Integer => SetElementType::Integer,
            ValueType::Float => SetElementType::Float,
            ValueType::Member(id) => SetElementType::Member(*id),
            ValueType::Unestablished => continue,
            _ => {
                return Err(error(
                    location,
                    "set elements must have one supported scalar type",
                ));
            }
        };
        if element_type.is_some_and(|previous| previous != ty) {
            return Err(error(
                location,
                "set elements must have one supported scalar type",
            ));
        }
        *element_type = Some(ty);
    }
    Ok(())
}

fn compatible_types(
    left: &ValueType,
    right: &ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<bool, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        if let ValueType::Declared { declaration, .. } = left {
            if let ValueType::Declared {
                declaration: expected,
                ..
            } = right
            {
                return compatible_declarations(declaration, expected, budget, location);
            }
            let expected = DeclaredType::Optional(Box::new(copy_declaration(
                underlying(declaration),
                budget,
                location,
            )?));
            check_known_type(right, &expected, budget, location)?;
            return Ok(true);
        }
        if matches!(right, ValueType::Declared { .. }) {
            return compatible_types(right, left, budget, location);
        }
        Ok(match (left, right) {
            (ValueType::Absent, _) | (_, ValueType::Absent) => true,
            (ValueType::Unestablished, _) | (_, ValueType::Unestablished) => true,
            (
                ValueType::ScalarKind,
                ValueType::ScalarKind
                | ValueType::Boolean
                | ValueType::Integer
                | ValueType::Float
                | ValueType::String,
            )
            | (
                ValueType::Boolean | ValueType::Integer | ValueType::Float | ValueType::String,
                ValueType::ScalarKind,
            ) => true,
            (ValueType::Boolean, ValueType::Boolean)
            | (ValueType::Integer, ValueType::Integer)
            | (ValueType::Float, ValueType::Float)
            | (ValueType::String, ValueType::String) => true,
            (ValueType::RecordKind, ValueType::RecordKind | ValueType::Record(_))
            | (ValueType::Record(_), ValueType::RecordKind)
            | (ValueType::TupleKind, ValueType::TupleKind | ValueType::Tuple(_))
            | (ValueType::Tuple(_), ValueType::TupleKind) => true,
            (ValueType::Member(a), ValueType::Member(b)) => a == b,
            (ValueType::ArrayKind(a), ValueType::ArrayKind(b))
            | (
                ValueType::ArrayKind(a),
                ValueType::Array(ArrayType::Positions(b) | ArrayType::Elements(b)),
            )
            | (
                ValueType::Array(ArrayType::Positions(a) | ArrayType::Elements(a)),
                ValueType::ArrayKind(b),
            ) => compatible_keyed_elements(a, b, budget, location)?,
            (ValueType::ArrayKind(a), ValueType::KeyedArray(b)) => {
                compatible_keyed_elements(a, &b.elements, budget, location)?
            }
            (ValueType::KeyedArray(a), ValueType::ArrayKind(b)) => {
                compatible_keyed_elements(&a.elements, b, budget, location)?
            }
            (ValueType::KeyedArray(a), ValueType::KeyedArray(b)) => {
                if let (Some(a), Some(b)) = (&a.axes, &b.axes)
                    && !same_axis_types(a, b, budget, location)?
                {
                    return Ok(false);
                }
                compatible_keyed_elements(&a.elements, &b.elements, budget, location)?
            }
            (ValueType::Set(a), ValueType::Set(b)) => a.is_none() || b.is_none() || a == b,
            (ValueType::Tuple(a), ValueType::Tuple(b)) => {
                if a.len() != b.len() {
                    return Ok(false);
                }
                for (a, b) in a.iter().zip(b) {
                    if !compatible_types(a, b, budget, location)? {
                        return Ok(false);
                    }
                }
                true
            }
            (ValueType::Array(a), ValueType::Array(b)) => {
                match (a, b) {
                    (ArrayType::Positions(a), ArrayType::Positions(b)) => {
                        for (a, b) in a.iter().zip(b) {
                            if !compatible_types(a, b, budget, location)? {
                                return Ok(false);
                            }
                        }
                    }
                    (
                        ArrayType::Positions(a) | ArrayType::Elements(a),
                        ArrayType::Positions(b) | ArrayType::Elements(b),
                    ) => {
                        for a in a {
                            for b in b {
                                if !compatible_types(a, b, budget, location)? {
                                    return Ok(false);
                                }
                            }
                        }
                    }
                }
                true
            }
            (ValueType::Record(a), ValueType::Record(b)) => {
                if a.len() != b.len() {
                    return Ok(false);
                }
                for (label, ty) in a {
                    let mut other = None;
                    for (other_label, other_ty) in b {
                        budget.charge(
                            sum(1, label.len().min(other_label.len()), location)?,
                            location.clone(),
                        )?;
                        if label == other_label {
                            other = Some(other_ty);
                            break;
                        }
                    }
                    let Some(other) = other else {
                        return Ok(false);
                    };
                    if !compatible_types(ty, other, budget, location)? {
                        return Ok(false);
                    }
                }
                true
            }
            _ => false,
        })
    })
}

// Keyed facts retain possible element types, not correspondence between keys.
// Check each known family here; execution checks the actual matching cells.
fn compatible_keyed_elements(
    left: &[ValueType],
    right: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<bool, QueryError> {
    if left.is_empty() || right.is_empty() {
        return Ok(true);
    }
    for (types, alternatives) in [(left, right), (right, left)] {
        for ty in types {
            let mut compatible = false;
            for alternative in alternatives {
                if compatible_types(ty, alternative, budget, location)? {
                    compatible = true;
                    break;
                }
            }
            if !compatible {
                return Ok(false);
            }
        }
    }
    Ok(true)
}

fn binary_type(
    operator: ValueBinaryOperator,
    left: &ValueType,
    right: &ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    if !matches!(
        operator,
        ValueBinaryOperator::Equal | ValueBinaryOperator::NotEqual
    ) && (matches!(left, ValueType::Declared { .. })
        || matches!(right, ValueType::Declared { .. }))
    {
        let left = shape_type(copy_type(left, budget, location)?, budget, location)?;
        let right = shape_type(copy_type(right, budget, location)?, budget, location)?;
        return binary_type(operator, &left, &right, budget, location);
    }
    match operator {
        ValueBinaryOperator::Add
        | ValueBinaryOperator::Subtract
        | ValueBinaryOperator::Multiply
        | ValueBinaryOperator::Divide
        | ValueBinaryOperator::Less
        | ValueBinaryOperator::LessEqual
        | ValueBinaryOperator::Greater
        | ValueBinaryOperator::GreaterEqual => {
            require_type(left, ScalarRequirement::Numeric, location)?;
            require_type(right, ScalarRequirement::Numeric, location)?;
            Ok(match operator {
                ValueBinaryOperator::Less
                | ValueBinaryOperator::LessEqual
                | ValueBinaryOperator::Greater
                | ValueBinaryOperator::GreaterEqual => ValueType::Boolean,
                ValueBinaryOperator::Divide => ValueType::Float,
                _ if matches!(left, ValueType::Float) || matches!(right, ValueType::Float) => {
                    ValueType::Float
                }
                _ if matches!(left, ValueType::ScalarKind)
                    || matches!(right, ValueType::ScalarKind) =>
                {
                    ValueType::ScalarKind
                }
                _ if matches!(left, ValueType::Unestablished)
                    || matches!(right, ValueType::Unestablished) =>
                {
                    ValueType::Unestablished
                }
                _ => ValueType::Integer,
            })
        }
        ValueBinaryOperator::IntegerDivide | ValueBinaryOperator::Modulo => {
            require_type(left, ScalarRequirement::Integer, location)?;
            require_type(right, ScalarRequirement::Integer, location)?;
            Ok(ValueType::Integer)
        }
        ValueBinaryOperator::Contains
        | ValueBinaryOperator::StartsWith
        | ValueBinaryOperator::EndsWith => {
            if !matches!(
                left,
                ValueType::String | ValueType::ScalarKind | ValueType::Unestablished
            ) || !matches!(
                right,
                ValueType::String | ValueType::ScalarKind | ValueType::Unestablished
            ) {
                return Err(string_operand_error(budget, location));
            }
            Ok(ValueType::Boolean)
        }
        ValueBinaryOperator::And | ValueBinaryOperator::Or => {
            require_type(left, ScalarRequirement::Boolean, location)?;
            require_type(right, ScalarRequirement::Boolean, location)?;
            Ok(ValueType::Boolean)
        }
        ValueBinaryOperator::Equal | ValueBinaryOperator::NotEqual => {
            if !compatible_types(left, right, budget, location)? {
                return Err(error(location, "equality needs compatible types"));
            }
            Ok(ValueType::Boolean)
        }
        ValueBinaryOperator::In => {
            let mut element_type = None;
            let deferred_primitive = matches!(left, ValueType::ScalarKind)
                && matches!(
                    right,
                    ValueType::Unestablished
                        | ValueType::Set(
                            None | Some(
                                SetElementType::Boolean
                                    | SetElementType::Integer
                                    | SetElementType::Float
                            )
                        )
                );
            if deferred_primitive {
                budget.charge(1, location.clone())?;
            } else {
                merge_set_types(
                    &mut element_type,
                    std::slice::from_ref(left),
                    budget,
                    location,
                )?;
            }
            match right {
                ValueType::Set(ty)
                    if ty.is_none() || element_type.is_none() || ty == &element_type =>
                {
                    Ok(ValueType::Boolean)
                }
                ValueType::Unestablished => Ok(ValueType::Boolean),
                _ => Err(error(
                    location,
                    "membership needs a compatible supported set",
                )),
            }
        }
        ValueBinaryOperator::Concatenate => match (left, right) {
            (ValueType::String, ValueType::String)
            | (
                ValueType::ScalarKind,
                ValueType::String | ValueType::ScalarKind | ValueType::Unestablished,
            )
            | (ValueType::String | ValueType::Unestablished, ValueType::ScalarKind) => {
                Ok(ValueType::String)
            }
            (ValueType::Array(a), ValueType::Array(b)) => {
                let (ArrayType::Positions(a_entries) | ArrayType::Elements(a_entries)) = a;
                let (ArrayType::Positions(b_entries) | ArrayType::Elements(b_entries)) = b;
                let mut entries = copy_types(a_entries, budget, location)?;
                append_types(
                    &mut entries,
                    copy_types(b_entries, budget, location)?,
                    budget,
                    location,
                )?;
                Ok(ValueType::Array(
                    if matches!((a, b), (ArrayType::Positions(_), ArrayType::Positions(_))) {
                        ArrayType::Positions(entries)
                    } else {
                        ArrayType::Elements(entries)
                    },
                ))
            }
            (ValueType::Unestablished, other) | (other, ValueType::Unestablished)
                if matches!(
                    other,
                    ValueType::Unestablished | ValueType::String | ValueType::Array(_)
                ) =>
            {
                Ok(ValueType::Unestablished)
            }
            _ => Err(error(
                location,
                "concatenation needs two strings or two positional arrays",
            )),
        },
    }
}

pub(crate) fn boolean(value: ConstructedValue, location: &Location) -> Result<bool, QueryError> {
    if let ConstructedValue::Boolean(value) = value.into_data() {
        Ok(value)
    } else {
        Err(error(location, "condition needs a fixed Boolean"))
    }
}

fn integer(value: ConstructedValue, location: &Location) -> Result<i64, QueryError> {
    if let ConstructedValue::Integer(value) = value.into_data() {
        Ok(value)
    } else {
        Err(error(location, "operation needs integers"))
    }
}

fn scalar(
    value: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    budget.charge_results(1, location.clone())?;
    Ok(value)
}

fn exact_float(value: i64, location: &Location) -> Result<f64, QueryError> {
    let magnitude = value.unsigned_abs();
    let significant_bits = u64::BITS - magnitude.leading_zeros();
    if significant_bits > 53 && magnitude.trailing_zeros() < significant_bits - 53 {
        return Err(error(
            location,
            "integer cannot be represented exactly as binary64",
        ));
    }
    // The significand test establishes exact representation, including MIN;
    // a float-to-i64 cast would saturate and wrongly accept MAX.
    Ok(value as f64)
}

fn numeric_float(value: ConstructedValue, location: &Location) -> Result<f64, QueryError> {
    match value.into_data() {
        ConstructedValue::Integer(value) => exact_float(value, location),
        ConstructedValue::Float(value) => {
            finite(value, location)?;
            Ok(value)
        }
        _ => Err(error(location, "operation needs numeric operands")),
    }
}

fn unary(
    operator: ValueUnaryOperator,
    value: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let value = match (operator, value.into_data()) {
        (ValueUnaryOperator::Not, value) => ConstructedValue::Boolean(!boolean(value, location)?),
        (
            ValueUnaryOperator::Positive,
            value @ (ConstructedValue::Integer(_) | ConstructedValue::Float(_)),
        ) => value,
        (ValueUnaryOperator::Negative, ConstructedValue::Integer(value)) => {
            ConstructedValue::Integer(
                value
                    .checked_neg()
                    .ok_or_else(|| error(location, "integer overflow"))?,
            )
        }
        (ValueUnaryOperator::Negative, ConstructedValue::Float(value)) => {
            ConstructedValue::Float(-value)
        }
        _ => return Err(error(location, "operation needs numeric operands")),
    };
    scalar(value, budget, location)
}

fn string_operand_error(budget: &mut Budget, location: &Location) -> QueryError {
    let message = "string matching needs two strings";
    match budget.charge(message.len(), location.clone()) {
        Ok(()) => error(location, message),
        Err(error) => error,
    }
}

fn string_match_ref(
    operator: ValueBinaryOperator,
    left: &ConstructedValue,
    right: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let (ConstructedValue::String(text), ConstructedValue::String(search)) =
        (left.data(), right.data())
    else {
        return Err(string_operand_error(budget, location));
    };
    // Admit a byte-scan bound before borrowing the existing text. No
    // substring or normalized text is allocated by these operations.
    let work = if search.is_empty() {
        0
    } else if operator == ValueBinaryOperator::Contains {
        sum(text.len(), search.len(), location)?
    } else {
        text.len().min(search.len())
    };
    budget.charge(work, location.clone())?;
    let matched = match operator {
        ValueBinaryOperator::Contains => text.contains(search.as_str()),
        ValueBinaryOperator::StartsWith => text.starts_with(search.as_str()),
        ValueBinaryOperator::EndsWith => text.ends_with(search.as_str()),
        _ => unreachable!("string matching operator"),
    };
    scalar(ConstructedValue::Boolean(matched), budget, location)
}

fn binary(
    operator: ValueBinaryOperator,
    left: ConstructedValue,
    right: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let (left, right) = if matches!(
        operator,
        ValueBinaryOperator::Equal | ValueBinaryOperator::NotEqual
    ) {
        (left, right)
    } else {
        (
            expose(left, budget, location)?,
            expose(right, budget, location)?,
        )
    };
    match operator {
        ValueBinaryOperator::Contains
        | ValueBinaryOperator::StartsWith
        | ValueBinaryOperator::EndsWith => {
            string_match_ref(operator, &left, &right, budget, location)
        }
        ValueBinaryOperator::Concatenate => match (left, right) {
            (ConstructedValue::String(left), ConstructedValue::String(right)) => {
                let len = sum(left.len(), right.len(), location)?;
                allocation::<u8>(len, location)?;
                budget.charge(len, location.clone())?;
                budget.charge_results(1, location.clone())?;
                let mut value = String::with_capacity(len);
                value.push_str(&left);
                value.push_str(&right);
                Ok(ConstructedValue::String(value))
            }
            (ConstructedValue::Array(left), ConstructedValue::Array(right)) => {
                let len = sum(left.len(), right.len(), location)?;
                let mut values = admit_container(len, budget, location)?;
                values.extend(left);
                values.extend(right);
                Ok(ConstructedValue::Array(values))
            }
            _ => Err(error(
                location,
                "concatenation needs two strings or two positional arrays",
            )),
        },
        ValueBinaryOperator::Equal | ValueBinaryOperator::NotEqual => {
            let equal = equal_values(&left, &right, budget, location)?;
            scalar(
                ConstructedValue::Boolean(if operator == ValueBinaryOperator::Equal {
                    equal
                } else {
                    !equal
                }),
                budget,
                location,
            )
        }
        ValueBinaryOperator::In => {
            let ConstructedValue::Set {
                element_type,
                elements,
            } = right
            else {
                return Err(error(location, "membership needs a supported set"));
            };
            let ty = scalar_set_type(&left)
                .ok_or_else(|| error(location, "membership needs a supported scalar"))?;
            if element_type.is_some_and(|element_type| element_type != ty) {
                return Err(error(location, "membership element type mismatch"));
            }
            let mut found = false;
            for value in &elements {
                if compare_set_values(&left, value, budget, location)? == Ordering::Equal {
                    found = true;
                    break;
                }
            }
            scalar(ConstructedValue::Boolean(found), budget, location)
        }
        ValueBinaryOperator::And | ValueBinaryOperator::Or => {
            let a = boolean(left, location)?;
            let b = boolean(right, location)?;
            scalar(
                ConstructedValue::Boolean(if operator == ValueBinaryOperator::And {
                    a && b
                } else {
                    a || b
                }),
                budget,
                location,
            )
        }
        ValueBinaryOperator::IntegerDivide | ValueBinaryOperator::Modulo => {
            let a = integer(left, location)?;
            let b = integer(right, location)?;
            if b == 0 {
                return Err(error(location, "division by zero"));
            }
            let value = if operator == ValueBinaryOperator::IntegerDivide {
                a.checked_div(b)
            } else {
                a.checked_rem(b)
            }
            .ok_or_else(|| error(location, "integer overflow"))?;
            scalar(ConstructedValue::Integer(value), budget, location)
        }
        ValueBinaryOperator::Add
        | ValueBinaryOperator::Subtract
        | ValueBinaryOperator::Multiply => {
            if let (ConstructedValue::Integer(a), ConstructedValue::Integer(b)) = (&left, &right) {
                let value = match operator {
                    ValueBinaryOperator::Add => a.checked_add(*b),
                    ValueBinaryOperator::Subtract => a.checked_sub(*b),
                    ValueBinaryOperator::Multiply => a.checked_mul(*b),
                    _ => unreachable!("integer arithmetic"),
                }
                .ok_or_else(|| error(location, "integer overflow"))?;
                return scalar(ConstructedValue::Integer(value), budget, location);
            }
            float_operation(
                operator,
                numeric_float(left, location)?,
                numeric_float(right, location)?,
                budget,
                location,
            )
        }
        ValueBinaryOperator::Divide => float_operation(
            operator,
            numeric_float(left, location)?,
            numeric_float(right, location)?,
            budget,
            location,
        ),
        ValueBinaryOperator::Less
        | ValueBinaryOperator::LessEqual
        | ValueBinaryOperator::Greater
        | ValueBinaryOperator::GreaterEqual => {
            let order = if let (ConstructedValue::Integer(a), ConstructedValue::Integer(b)) =
                (&left, &right)
            {
                a.cmp(b)
            } else {
                numeric_float(left, location)?
                    .partial_cmp(&numeric_float(right, location)?)
                    .expect("finite numeric operands")
            };
            let value = match operator {
                ValueBinaryOperator::Less => order == Ordering::Less,
                ValueBinaryOperator::LessEqual => order != Ordering::Greater,
                ValueBinaryOperator::Greater => order == Ordering::Greater,
                ValueBinaryOperator::GreaterEqual => order != Ordering::Less,
                _ => unreachable!("comparison"),
            };
            scalar(ConstructedValue::Boolean(value), budget, location)
        }
    }
}

fn float_operation(
    operator: ValueBinaryOperator,
    a: f64,
    b: f64,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let (value, mathematically_zero) = match operator {
        ValueBinaryOperator::Add => (a + b, a == -b),
        ValueBinaryOperator::Subtract => (a - b, a == b),
        ValueBinaryOperator::Multiply => (a * b, a == 0.0 || b == 0.0),
        ValueBinaryOperator::Divide => {
            if b == 0.0 {
                return Err(error(location, "division by zero"));
            }
            (a / b, a == 0.0)
        }
        _ => unreachable!("floating arithmetic"),
    };
    finite(value, location)?;
    if value == 0.0 && !mathematically_zero {
        return Err(error(location, "nonzero floating result rounded to zero"));
    }
    scalar(ConstructedValue::Float(value), budget, location)
}

fn equal_values(
    left: &ConstructedValue,
    right: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<bool, QueryError> {
    budget.within_evaluation(1, location.clone(), |budget| {
        budget.charge(1, location.clone())?;
        if declaration(left).is_some() || declaration(right).is_some() {
            let a = constructed_value_type(left, budget, location.clone())?;
            let b = constructed_value_type(right, budget, location.clone())?;
            if !compatible_types(&a, &b, budget, location)? {
                return Err(error(
                    location,
                    "equality needs compatible underlying types",
                ));
            }
        }
        Ok(match (left.data(), right.data()) {
            (ConstructedValue::Absent, ConstructedValue::Absent) => true,
            (ConstructedValue::Absent, _) | (_, ConstructedValue::Absent) => false,
            (ConstructedValue::Boolean(a), ConstructedValue::Boolean(b)) => a == b,
            (ConstructedValue::Integer(a), ConstructedValue::Integer(b)) => a == b,
            (ConstructedValue::Float(a), ConstructedValue::Float(b)) => a == b,
            (ConstructedValue::String(a), ConstructedValue::String(b)) => {
                budget.charge(a.len().min(b.len()), location.clone())?;
                a == b
            }
            (ConstructedValue::Member(a), ConstructedValue::Member(b)) => {
                check_member_pair(a, b, budget, location)?;
                if a.type_id != b.type_id {
                    return Err(error(location, "equality needs compatible nominal types"));
                }
                a.member_id == b.member_id
            }
            (
                ConstructedValue::KeyedArray {
                    axes: a,
                    entries: a_entries,
                },
                ConstructedValue::KeyedArray {
                    axes: b,
                    entries: b_entries,
                },
            ) => {
                if a.len() != b.len() || a_entries.len() != b_entries.len() {
                    return Ok(false);
                }
                for (a, b) in a.iter().zip(b) {
                    budget.charge(1, location.clone())?;
                    if a.key_type != b.key_type {
                        return Err(error(location, "equality needs compatible keyed types"));
                    }
                    if !equal_keys(&a.keys, &b.keys, budget, location)? {
                        return Ok(false);
                    }
                }
                for (a, b) in a_entries.iter().zip(b_entries) {
                    budget.charge(1, location.clone())?;
                    if !equal_keys(&a.key, &b.key, budget, location)?
                        || !equal_values(&a.value, &b.value, budget, location)?
                    {
                        return Ok(false);
                    }
                }
                true
            }
            (ConstructedValue::Array(a), ConstructedValue::Array(b))
            | (ConstructedValue::Tuple(a), ConstructedValue::Tuple(b)) => {
                if a.len() != b.len() {
                    return Ok(false);
                }
                for (a, b) in a.iter().zip(b) {
                    if !equal_values(a, b, budget, location)? {
                        return Ok(false);
                    }
                }
                true
            }
            (
                ConstructedValue::Set {
                    element_type: a_type,
                    elements: a,
                },
                ConstructedValue::Set {
                    element_type: b_type,
                    elements: b,
                },
            ) => {
                if matches!((a_type, b_type), (Some(a), Some(b)) if a != b) {
                    return Err(error(location, "equality needs compatible set types"));
                }
                if a.len() != b.len() {
                    return Ok(false);
                }
                for value in a {
                    let mut found = false;
                    for other in b {
                        if equal_values(value, other, budget, location)? {
                            found = true;
                            break;
                        }
                    }
                    if !found {
                        return Ok(false);
                    }
                }
                true
            }
            (ConstructedValue::Record(a), ConstructedValue::Record(b)) => {
                if a.len() != b.len() {
                    return Ok(false);
                }
                for (label, value) in a {
                    let mut other = None;
                    for (other_label, other_value) in b {
                        budget.charge(
                            sum(1, label.len().min(other_label.len()), location)?,
                            location.clone(),
                        )?;
                        if label == other_label {
                            other = Some(other_value);
                            break;
                        }
                    }
                    let Some(other) = other else {
                        return Ok(false);
                    };
                    if !equal_values(value, other, budget, location)? {
                        return Ok(false);
                    }
                }
                true
            }
            _ => return Err(error(location, "equality needs compatible types")),
        })
    })
}

fn run<'a, Q, H: ValueQueryHost<Q> + ?Sized>(
    expression: &'a PreparedValue<'a, Q>,
    queries: &mut H,
    locals: &mut Frame<'a>,
    budget: &mut Budget,
    check_value: &mut impl FnMut(&ConstructedValue, &mut Budget, &Location) -> Result<(), QueryError>,
) -> Result<ConstructedValue, H::Error> {
    let value = run_value(expression, queries, locals, budget, check_value)?;
    let location = Location::Query(expression.range.clone());
    budget.within_evaluation(1, location.clone(), |budget| {
        Ok(value.materialize(budget, &location)?)
    })
}

struct PreparedArguments<'a, 'f, Q, F> {
    arguments: &'a [PreparedArgument<'a, Q>],
    frames: Vec<Frame<'a>>,
    check_value: &'f mut F,
}
impl<Q, E, F> ValueArguments<Q, E> for PreparedArguments<'_, '_, Q, F>
where
    E: From<QueryError>,
    F: FnMut(&ConstructedValue, &mut Budget, &Location) -> Result<(), QueryError>,
{
    fn evaluate(
        &mut self,
        expression: &ValueExpression<Q>,
        queries: &mut dyn ValueQueryHost<Q, Error = E>,
        budget: &mut Budget,
    ) -> Result<ConstructedRead, E> {
        let index = self
            .arguments
            .iter()
            .position(|argument| std::ptr::eq(argument.source, expression))
            .ok_or_else(|| {
                QueryError::query(
                    expression.range.clone(),
                    "argument was not prepared in this invocation",
                )
            })?;
        let value = run_value(
            &self.arguments[index].expression,
            queries,
            &mut self.frames[index],
            budget,
            self.check_value,
        )?;
        Ok(ConstructedRead {
            value,
            location: Location::Query(expression.range.clone()),
            declaration: None,
        })
    }
}

fn run_value<'a, Q, H: ValueQueryHost<Q> + ?Sized>(
    expression: &'a PreparedValue<'a, Q>,
    queries: &mut H,
    locals: &mut Frame<'a>,
    budget: &mut Budget,
    check_value: &mut impl FnMut(&ConstructedValue, &mut Budget, &Location) -> Result<(), QueryError>,
) -> Result<RuntimeValue, H::Error> {
    execution::run_scalar(expression, queries, locals, budget, check_value)
}

fn entries(
    array: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let array = expose(array, budget, location)?;
    let ConstructedValue::KeyedArray { axes, entries } = array else {
        return Err(error(location, "entries needs a keyed array"));
    };
    check_keyed(&axes, &entries, budget, location)?;
    let mut records = admit_container(entries.len(), budget, location)?;
    for entry in entries {
        // The outer array and record add two levels around a moved cell.
        budget.within_evaluation(2, location.clone(), |budget| {
            copy_size(&entry.value, budget, location).map(|_| ())
        })?;
        let key = if entry.key.len() == 1 {
            budget.charge(1, location.clone())?;
            key_value(entry.key.into_iter().next().expect("rank one"))
        } else {
            let mut components = admit_container(entry.key.len(), budget, location)?;
            for key in entry.key {
                budget.charge(1, location.clone())?;
                components.push(key_value(key));
            }
            ConstructedValue::Tuple(components)
        };
        budget.within_evaluation(2, location.clone(), |budget| {
            copy_size(&key, budget, location).map(|_| ())
        })?;
        let mut fields = admit_container(2, budget, location)?;
        budget.charge("key".len() + "value".len(), location.clone())?;
        fields.push(("key".into(), key));
        fields.push(("value".into(), entry.value));
        records.push(ConstructedValue::Record(fields));
    }
    Ok(ConstructedValue::Array(records))
}

fn zip_exact(
    left: ConstructedValue,
    right: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let left = expose(left, budget, location)?;
    let right = expose(right, budget, location)?;
    let (
        ConstructedValue::KeyedArray {
            axes,
            entries: left,
        },
        ConstructedValue::KeyedArray {
            axes: right_axes,
            entries: right,
        },
    ) = (left, right)
    else {
        return Err(error(location, "zip_exact needs keyed arrays"));
    };
    check_keyed(&axes, &left, budget, location)?;
    check_keyed(&right_axes, &right, budget, location)?;
    budget.charge(1, location.clone())?;
    if axes.len() != right_axes.len() {
        return Err(error(location, "zip_exact needs identical ordered axes"));
    }
    for (a, b) in axes.iter().zip(&right_axes) {
        budget.charge(1, location.clone())?;
        if a.key_type != b.key_type || !equal_keys(&a.keys, &b.keys, budget, location)? {
            return Err(error(location, "zip_exact needs identical ordered axes"));
        }
    }
    budget.charge(1, location.clone())?;
    if left.len() != right.len() {
        return Err(error(location, "zip_exact needs identical present keys"));
    }
    let mut entries = admit_container(left.len(), budget, location)?;
    for (a, b) in left.into_iter().zip(right) {
        if !equal_keys(&a.key, &b.key, budget, location)? {
            return Err(error(location, "zip_exact needs identical present keys"));
        }
        // The keyed container and tuple add two levels around moved values.
        budget.within_evaluation(2, location.clone(), |budget| {
            copy_size(&a.value, budget, location)?;
            copy_size(&b.value, budget, location).map(|_| ())
        })?;
        let mut pair = admit_container(2, budget, location)?;
        pair.push(a.value);
        pair.push(b.value);
        entries.push(KeyedEntry {
            key: a.key,
            value: ConstructedValue::Tuple(pair),
        });
    }
    Ok(ConstructedValue::KeyedArray { axes, entries })
}

fn group_by(
    rows: ConstructedValue,
    field: &Located<String>,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let rows = expose(rows, budget, location)?;
    let ConstructedValue::Array(rows) = rows else {
        return Err(error(location, "group_by needs a positional array"));
    };
    let selector = Location::Query(field.range.clone());
    let mut groups = admit_container(0, budget, location)?;
    let mut key_type = None;
    for row in rows {
        budget.charge(1, location.clone())?;
        let ConstructedValue::Record(fields) = row.data() else {
            return Err(error(location, "group_by needs record rows"));
        };
        // Moving rows adds a group record and items array around them. Check
        // that added depth without copying or charging their result units again.
        budget.within_evaluation(2, location.clone(), |budget| {
            copy_size(&row, budget, location).map(|_| ())
        })?;
        let mut key = None;
        for (label, value) in fields {
            budget.charge(
                sum(1, label.len().min(field.value.len()), &selector)?,
                selector.clone(),
            )?;
            if label == &field.value {
                key = Some(value);
                break;
            }
        }
        let Some(key) = key else {
            admit_diagnostic("missing record field: ", &field.value, budget, &selector)?;
            return Err(error(
                &selector,
                format!("missing record field: {}", field.value),
            ));
        };
        let ty = match key.data() {
            ConstructedValue::Integer(_) => ValueType::Integer,
            ConstructedValue::String(_) => ValueType::String,
            ConstructedValue::Member(member) => ValueType::Member(member.type_id),
            _ => {
                return Err(error(
                    &selector,
                    "group_by keys need integers, strings or nominal members",
                ));
            }
        };
        budget.charge(1, selector.clone())?;
        if key_type.as_ref().is_some_and(|previous| previous != &ty) {
            return Err(error(&selector, "group_by needs homogeneous key types"));
        }
        key_type = Some(ty);
        let mut matched = None;
        for (index, group) in groups.iter().enumerate() {
            let ConstructedValue::Record(fields) = group else {
                unreachable!("group record")
            };
            if equal_values(key, &fields[0].1, budget, &selector)? {
                matched = Some(index);
                break;
            }
        }
        let index = match matched {
            Some(index) => index,
            None => {
                let key = copy_constructed_value(key, budget, selector.clone())?;
                let mut fields = admit_container(2, budget, location)?;
                budget.charge("key".len() + "items".len(), location.clone())?;
                fields.push(("key".into(), key));
                fields.push((
                    "items".into(),
                    ConstructedValue::Array(admit_container(0, budget, location)?),
                ));
                allocation::<ConstructedValue>(sum(groups.len(), 1, location)?, location)?;
                budget.charge(1, location.clone())?;
                budget.charge_results(1, location.clone())?;
                groups.push(ConstructedValue::Record(fields));
                groups.len() - 1
            }
        };
        let ConstructedValue::Record(fields) = &mut groups[index] else {
            unreachable!("group record")
        };
        let ConstructedValue::Array(items) = &mut fields[1].1 else {
            unreachable!("group items")
        };
        allocation::<ConstructedValue>(sum(items.len(), 1, location)?, location)?;
        budget.charge(1, location.clone())?;
        budget.charge_results(1, location.clone())?;
        items.push(row);
    }
    Ok(ConstructedValue::Array(groups))
}

// Filtering loses positions while preserving established element facts.
fn filter_elements(
    ty: ValueType,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    match shape_type(ty, budget, location)? {
        ValueType::Array(ArrayType::Positions(elements) | ArrayType::Elements(elements))
        | ValueType::ArrayKind(elements) => Ok(elements),
        ValueType::Unestablished => one_type(ValueType::Unestablished, budget, location),
        _ => Err(error(location, "filter needs a positional array")),
    }
}

// Removal loses positional facts, but retains admitted element kinds.
fn scalar_pipeline_elements(
    ty: ValueType,
    tally: bool,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    let elements = match shape_type(ty, budget, location)? {
        ValueType::Array(ArrayType::Positions(elements) | ArrayType::Elements(elements))
        | ValueType::ArrayKind(elements) => elements,
        ValueType::Unestablished => return one_type(ValueType::Unestablished, budget, location),
        _ => return Err(error(location, "collection stage needs a positional array")),
    };
    let mut element_type = None;
    for element in &elements {
        budget.charge(1, location.clone())?;
        let ty = shape_type(copy_type(element, budget, location)?, budget, location)?;
        if matches!(ty, ValueType::Unestablished) {
            continue;
        }
        if tally {
            if ty != ValueType::String {
                return Err(error(location, "tally needs strings"));
            }
        } else if !matches!(
            ty,
            ValueType::Boolean
                | ValueType::Integer
                | ValueType::Float
                | ValueType::String
                | ValueType::Member(_)
        ) {
            return Err(error(location, "unique needs homogeneous scalar elements"));
        }
        if element_type
            .as_ref()
            .is_some_and(|previous| previous != &ty)
        {
            return Err(error(location, "unique needs homogeneous scalar elements"));
        }
        element_type = Some(ty);
    }
    Ok(elements)
}

fn unique_value(
    mut array: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    if declaration(&array).is_some() {
        scalar_pipeline_elements(
            constructed_value_type(&array, budget, location.clone())?,
            false,
            budget,
            location,
        )?;
    }
    let mut data = &mut array;
    while let ConstructedValue::Declared { value, .. } = data {
        data = value;
    }
    let ConstructedValue::Array(rows) = data else {
        return Err(error(location, "unique needs a positional array"));
    };
    let mut element_type = None;
    let mut retained = 0;
    for index in 0..rows.len() {
        budget.charge(1, location.clone())?;
        let ty = match rows[index].data() {
            ConstructedValue::Boolean(_) => ValueType::Boolean,
            ConstructedValue::Integer(_) => ValueType::Integer,
            ConstructedValue::Float(value) => {
                finite(*value, location)?;
                ValueType::Float
            }
            ConstructedValue::String(_) => ValueType::String,
            ConstructedValue::Member(member) => {
                member_bytes(member, budget, location)?;
                ValueType::Member(member.type_id)
            }
            _ => return Err(error(location, "unique needs homogeneous scalar elements")),
        };
        if element_type
            .as_ref()
            .is_some_and(|previous| previous != &ty)
        {
            return Err(error(location, "unique needs homogeneous scalar elements"));
        }
        element_type = Some(ty);
        let mut duplicate = false;
        for previous in &rows[..retained] {
            if equal_values(previous, &rows[index], budget, location)? {
                duplicate = true;
                break;
            }
        }
        if !duplicate {
            rows.swap(retained, index);
            retained += 1;
        }
    }
    rows.truncate(retained);
    Ok(array)
}

fn tally_value(
    array: ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    if declaration(&array).is_some() {
        scalar_pipeline_elements(
            constructed_value_type(&array, budget, location.clone())?,
            true,
            budget,
            location,
        )?;
    }
    let ConstructedValue::Array(rows) = array.data() else {
        return Err(error(location, "tally needs a positional array"));
    };
    for row in rows {
        budget.charge(1, location.clone())?;
        if !matches!(row.data(), ConstructedValue::String(_)) {
            return Err(error(location, "tally needs strings"));
        }
    }
    let ConstructedValue::Array(rows) = expose(array, budget, location)? else {
        unreachable!("checked positional array")
    };
    let mut fields: Vec<(String, ConstructedValue)> = metadata_vec(rows.len(), budget, location)?;
    budget.charge(1, location.clone())?;
    budget.charge_results(1, location.clone())?;
    for row in rows {
        budget.charge(1, location.clone())?;
        let ConstructedValue::String(label) = expose(row, budget, location)? else {
            return Err(error(location, "tally needs strings"));
        };
        let mut existing = None;
        for (previous, count) in &mut fields {
            budget.charge(
                sum(1, previous.len().min(label.len()), location)?,
                location.clone(),
            )?;
            if *previous == label {
                existing = Some(count);
                break;
            }
        }
        if let Some(ConstructedValue::Integer(count)) = existing {
            *count = count
                .checked_add(1)
                .ok_or_else(|| error(location, "tally count overflow"))?;
            continue;
        }
        budget.charge(2, location.clone())?;
        budget.charge_results(2, location.clone())?;
        fields.push((label, ConstructedValue::Integer(1)));
    }
    Ok(ConstructedValue::Record(fields))
}

fn sort_type(
    ty: ValueType,
    selector: Option<&Located<SortSelector>>,
    budget: &mut Budget,
    location: &Location,
) -> Result<ValueType, QueryError> {
    let retained = match &ty {
        ValueType::Declared { declaration, .. } => {
            Some(copy_declaration(declaration, budget, location)?)
        }
        _ => None,
    };
    let selected = selector.map_or_else(
        || location.clone(),
        |selector| Location::Query(selector.range.clone()),
    );
    let field = match selector {
        Some(Located {
            value: SortSelector::Field(field),
            range,
        }) => Some(Located::new(field.as_str(), range.clone())),
        _ => None,
    };
    let ty = match shape_type(ty, budget, location)? {
        ty @ (ValueType::Array(_) | ValueType::ArrayKind(_)) => {
            if matches!(
                selector.map(|selector| &selector.value),
                Some(SortSelector::Value)
            ) {
                return Err(error(&selected, "value ordering needs a dictionary"));
            }
            ValueType::Array(ArrayType::Elements(ordering_elements(
                ty, field, budget, location,
            )?))
        }
        ty @ ValueType::Set(_) => {
            if selector.is_some() {
                return Err(error(&selected, "set sorting uses its scalar values"));
            }
            ty
        }
        ValueType::Record(fields) => {
            if selector.is_some() {
                check_ordering_types(
                    fields.iter().map(|(_, value)| value),
                    field,
                    budget,
                    &selected,
                )?;
            }
            ValueType::Record(fields)
        }
        ty @ (ValueType::RecordKind | ValueType::Unestablished) => ty,
        _ => return Err(error(location, "sort needs an array, set or dictionary")),
    };
    Ok(if let Some(declaration) = retained {
        ValueType::Declared {
            actual: Box::new(ty),
            declaration,
        }
    } else {
        ty
    })
}

// Ordering retains row facts but cannot retain their original positions.
fn ordering_elements(
    ty: ValueType,
    field: Option<Located<&str>>,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    let elements = match shape_type(ty, budget, location)? {
        ValueType::Array(ArrayType::Positions(elements) | ArrayType::Elements(elements))
        | ValueType::ArrayKind(elements) => elements,
        ValueType::Unestablished => return one_type(ValueType::Unestablished, budget, location),
        _ => return Err(error(location, "ordering needs a positional array")),
    };
    let selector = field.as_ref().map_or_else(
        || location.clone(),
        |field| Location::Query(field.range.clone()),
    );
    check_ordering_types(elements.iter(), field, budget, &selector)?;
    Ok(elements)
}

fn check_ordering_types<'a>(
    elements: impl IntoIterator<Item = &'a ValueType>,
    field: Option<Located<&str>>,
    budget: &mut Budget,
    selector: &Location,
) -> Result<(), QueryError> {
    let mut key_type = None;
    for element in elements {
        budget.charge(1, selector.clone())?;
        let ty = shape_type(copy_type(element, budget, selector)?, budget, selector)?;
        let ty = if let Some(field) = &field {
            match ty {
                ValueType::Record(fields) => {
                    let mut selected = ValueType::Unestablished;
                    for (label, ty) in fields {
                        budget.charge(
                            sum(1, label.len().min(field.value.len()), selector)?,
                            selector.clone(),
                        )?;
                        if label == field.value {
                            selected = ty;
                            break;
                        }
                    }
                    selected
                }
                ValueType::RecordKind | ValueType::Unestablished | ValueType::Absent => continue,
                _ => return Err(error(selector, "field ordering needs record rows")),
            }
        } else {
            ty
        };
        let ty = shape_type(ty, budget, selector)?;
        match ty {
            // Presence and missing data remain runtime checks, including in
            // skipped branches. An optional declaration still supplies its kind.
            ValueType::Absent | ValueType::Unestablished => continue,
            ValueType::Integer | ValueType::Float | ValueType::String | ValueType::Member(_) => {}
            _ => {
                return Err(error(
                    selector,
                    "ordering keys need integers, finite floats, strings or nominal members",
                ));
            }
        }
        if key_type.as_ref().is_some_and(|previous| previous != &ty) {
            return Err(error(selector, "ordering needs homogeneous key types"));
        }
        key_type = Some(ty);
    }
    Ok(())
}

#[derive(Clone, Copy, PartialEq, Eq)]
pub(crate) enum OrderingKeyType {
    Integer,
    Float,
    String,
    Member(NominalTypeId),
}

pub(crate) fn ordering_key<'a>(
    row: &'a ConstructedValue,
    field: Option<&str>,
    budget: &mut Budget,
    location: &Location,
) -> Result<(&'a ConstructedValue, OrderingKeyType), QueryError> {
    budget.charge(1, location.clone())?;
    let key = if let Some(field) = field {
        let ConstructedValue::Record(fields) = row.data() else {
            return Err(error(location, "field ordering needs record rows"));
        };
        let mut key = None;
        for (label, value) in fields {
            budget.charge(
                sum(1, label.len().min(field.len()), location)?,
                location.clone(),
            )?;
            if label == field {
                key = Some(value);
                break;
            }
        }
        key.ok_or_else(|| error(location, "missing ordering field"))?
    } else {
        row
    };
    let key = key.data();
    let ty = match key {
        ConstructedValue::Integer(_) => OrderingKeyType::Integer,
        ConstructedValue::Float(value) => {
            finite(*value, location)?;
            OrderingKeyType::Float
        }
        ConstructedValue::String(_) => OrderingKeyType::String,
        ConstructedValue::Member(member) => {
            member_bytes(member, budget, location)?;
            OrderingKeyType::Member(member.type_id)
        }
        ConstructedValue::Absent => return Err(error(location, "ordering keys must be present")),
        _ => {
            return Err(error(
                location,
                "ordering keys need integers, finite floats, strings or nominal members",
            ));
        }
    };
    Ok((key, ty))
}

pub(crate) fn compare_ordering_keys(
    left: &ConstructedValue,
    right: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<Ordering, QueryError> {
    budget.charge(1, location.clone())?;
    match (left, right) {
        (ConstructedValue::Integer(a), ConstructedValue::Integer(b)) => Ok(a.cmp(b)),
        (ConstructedValue::Float(a), ConstructedValue::Float(b)) => a
            .partial_cmp(b)
            .ok_or_else(|| error(location, "nonfinite float")),
        (ConstructedValue::String(a), ConstructedValue::String(b)) => {
            for (a, b) in a.bytes().zip(b.bytes()) {
                budget.charge(1, location.clone())?;
                let order = a.cmp(&b);
                if order != Ordering::Equal {
                    return Ok(order);
                }
            }
            Ok(a.len().cmp(&b.len()))
        }
        (ConstructedValue::Member(a), ConstructedValue::Member(b)) if a.type_id == b.type_id => {
            check_member_pair(a, b, budget, location)?;
            Ok(a.declaration_order.cmp(&b.declaration_order))
        }
        _ => Err(error(location, "ordering needs homogeneous key types")),
    }
}

#[derive(Clone, Copy)]
enum SortKey<'a> {
    Value(&'a ConstructedValue),
    Label(&'a str),
}

#[derive(Clone, Copy)]
struct OrderingRow<'a> {
    index: usize,
    key: SortKey<'a>,
}

fn sort_value(
    mut collection: ConstructedValue,
    selector: Option<&Located<SortSelector>>,
    descending: bool,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    if declaration(&collection).is_some() {
        sort_type(
            constructed_value_type(&collection, budget, location.clone())?,
            selector,
            budget,
            location,
        )?;
    }
    let selected = selector.map_or_else(
        || location.clone(),
        |selector| Location::Query(selector.range.clone()),
    );
    let field = match selector.map(|selector| &selector.value) {
        Some(SortSelector::Field(field)) => Some(field.as_str()),
        _ => None,
    };
    let data = collection.data();
    let count = match data {
        ConstructedValue::Array(rows) => {
            if matches!(
                selector.map(|selector| &selector.value),
                Some(SortSelector::Value)
            ) {
                return Err(error(&selected, "value ordering needs a dictionary"));
            }
            rows.len()
        }
        ConstructedValue::Set { elements, .. } => {
            if selector.is_some() {
                return Err(error(&selected, "set sorting uses its scalar values"));
            }
            elements.len()
        }
        ConstructedValue::Record(fields) => fields.len(),
        _ => return Err(error(location, "sort needs an array, set or dictionary")),
    };
    let mut order: Vec<OrderingRow<'_>> = metadata_vec(count, budget, location)?;
    let mut key_type = None;
    for index in 0..count {
        let key = match data {
            ConstructedValue::Set { elements, .. } => {
                budget.charge(1, selected.clone())?;
                SortKey::Value(elements[index].data())
            }
            ConstructedValue::Record(fields) if selector.is_none() => {
                budget.charge(1, selected.clone())?;
                SortKey::Label(&fields[index].0)
            }
            _ => {
                let row = match data {
                    ConstructedValue::Array(rows) => &rows[index],
                    ConstructedValue::Record(fields) => &fields[index].1,
                    _ => unreachable!("checked collection kind"),
                };
                let (key, ty) = ordering_key(row, field, budget, &selected)?;
                if key_type.is_some_and(|previous| previous != ty) {
                    return Err(error(&selected, "ordering needs homogeneous key types"));
                }
                if let (Some(first), ConstructedValue::Member(member)) = (order.first(), key)
                    && let SortKey::Value(ConstructedValue::Member(first)) = first.key
                {
                    check_member_pair(first, member, budget, &selected)?;
                }
                key_type = Some(ty);
                SortKey::Value(key)
            }
        };
        order.push(OrderingRow { index, key });
    }
    let mut scratch = metadata_vec(order.len(), budget, location)?;
    scratch.extend_from_slice(&order);
    let mut width = 1;
    while width < order.len() {
        // Admit one descriptor write per output slot before each merge pass.
        budget.charge(order.len(), location.clone())?;
        let mut start = 0;
        while start < order.len() {
            let middle = start.saturating_add(width).min(order.len());
            let end = middle.saturating_add(width).min(order.len());
            let (mut left, mut right) = (start, middle);
            for slot in &mut scratch[start..end] {
                let take_left = if right == end {
                    true
                } else if left == middle {
                    false
                } else {
                    let order = match (order[left].key, order[right].key) {
                        (SortKey::Label(left), SortKey::Label(right)) => {
                            crate::ordering::compare_text(left, right, budget, &selected)?
                        }
                        (SortKey::Value(left), SortKey::Value(right))
                            if matches!(data, ConstructedValue::Set { .. }) =>
                        {
                            compare_set_values(left, right, budget, &selected)?
                        }
                        (SortKey::Value(left), SortKey::Value(right)) => {
                            compare_ordering_keys(left, right, budget, &selected)?
                        }
                        _ => unreachable!("one collection key kind"),
                    };
                    if descending {
                        order != Ordering::Less
                    } else {
                        order != Ordering::Greater
                    }
                };
                *slot = if take_left {
                    let row = order[left];
                    left += 1;
                    row
                } else {
                    let row = order[right];
                    right += 1;
                    row
                };
            }
            start = end;
        }
        std::mem::swap(&mut order, &mut scratch);
        width = width.saturating_mul(2);
    }
    let mut destinations = metadata_vec(order.len(), budget, location)?;
    destinations.resize(order.len(), 0);
    for (destination, row) in order.iter().enumerate() {
        budget.charge(1, location.clone())?;
        destinations[row.index] = destination;
    }
    // End the key borrows before moving payloads. Declarations and stored field
    // order move with their original rows; transparent collection annotations survive.
    drop(order);
    drop(scratch);
    let mut data = &mut collection;
    while let ConstructedValue::Declared { value, .. } = data {
        data = value;
    }
    for index in 0..count {
        while destinations[index] != index {
            budget.charge(1, location.clone())?;
            let destination = destinations[index];
            match data {
                ConstructedValue::Array(rows) | ConstructedValue::Set { elements: rows, .. } => {
                    rows.swap(index, destination)
                }
                ConstructedValue::Record(fields) => fields.swap(index, destination),
                _ => unreachable!("checked collection kind"),
            }
            destinations.swap(index, destination);
        }
    }
    Ok(collection)
}

fn extremum_position(
    operator: ValueExtremum,
    array: &ConstructedValue,
    field: Option<&Located<String>>,
    budget: &mut Budget,
    location: &Location,
) -> Result<Option<usize>, QueryError> {
    let ConstructedValue::Array(rows) = array.data() else {
        return Err(error(location, "ordering needs a positional array"));
    };
    let selector = field.map_or_else(
        || location.clone(),
        |field| Location::Query(field.range.clone()),
    );
    let mut selected: Option<(usize, &ConstructedValue)> = None;
    let mut key_type = None;
    for (index, row) in rows.iter().enumerate() {
        let (key, ty) = ordering_key(
            row,
            field.map(|field| field.value.as_str()),
            budget,
            &selector,
        )?;
        if key_type.is_some_and(|previous| previous != ty) {
            return Err(error(&selector, "ordering needs homogeneous key types"));
        }
        key_type = Some(ty);
        let replace = match selected {
            None => true,
            Some((_, previous)) => {
                let order = compare_ordering_keys(key, previous, budget, &selector)?;
                order
                    == if operator == ValueExtremum::Min {
                        Ordering::Less
                    } else {
                        Ordering::Greater
                    }
            }
        };
        if replace {
            selected = Some((index, key));
        }
    }
    Ok(selected.map(|(index, _)| index))
}

fn reduce_ref(
    operator: ValueReducer,
    array: &ConstructedValue,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let array = array.data();
    // Sources are eager; reductions inspect their admitted immutable data.
    let (positional, keyed) = match &array {
        ConstructedValue::Array(values) => (values.as_slice(), &[][..]),
        ConstructedValue::KeyedArray { entries, .. } => (&[][..], entries.as_slice()),
        _ => return Err(error(location, "reducer needs an array")),
    };
    let len = positional.len().max(keyed.len());
    let values = positional
        .iter()
        .chain(keyed.iter().map(|entry| &entry.value));
    let value = match operator {
        ValueReducer::Length => {
            budget.charge(1, location.clone())?;
            ConstructedValue::Integer(
                i64::try_from(len).map_err(|_| error(location, "length overflow"))?,
            )
        }
        ValueReducer::Sum => {
            let mut total = 0_i64;
            for value in values {
                budget.charge(1, location.clone())?;
                let ConstructedValue::Integer(value) = value.data() else {
                    return Err(error(location, "sum needs integer array elements"));
                };
                total = total
                    .checked_add(*value)
                    .ok_or_else(|| error(location, "integer sum overflow"))?;
            }
            ConstructedValue::Integer(total)
        }
        ValueReducer::Forall | ValueReducer::Exists => {
            let mut result = operator == ValueReducer::Forall;
            for value in values {
                budget.charge(1, location.clone())?;
                let ConstructedValue::Boolean(value) = value.data() else {
                    return Err(error(
                        location,
                        "quantifier needs fixed Boolean array elements",
                    ));
                };
                // Scan every element even once the Boolean result is decisive.
                if operator == ValueReducer::Forall {
                    result &= value;
                } else {
                    result |= value;
                }
            }
            ConstructedValue::Boolean(result)
        }
    };
    scalar(value, budget, location)
}

fn take_position(
    values: Vec<ConstructedValue>,
    position: usize,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let index = position
        .checked_sub(1)
        .filter(|index| *index < values.len())
        .ok_or_else(|| error(location, "missing collection position"))?;
    // Moving an admitted child needs no result readmission. Charge the traversal
    // that consumes preceding positions before selecting it.
    budget.charge(sum(index, 1, location)?, location.clone())?;
    Ok(values.into_iter().nth(index).expect("position checked"))
}

fn integer_range(
    lower: i64,
    upper: i64,
    budget: &mut Budget,
    location: &Location,
) -> Result<ConstructedValue, QueryError> {
    let len = if upper < lower {
        0
    } else {
        usize::try_from(i128::from(upper) - i128::from(lower) + 1)
            .map_err(|_| error(location, "range cardinality overflow"))?
    };
    allocation::<ConstructedValue>(len, location)?;
    budget.charge(len, location.clone())?;
    let units = sum(
        1,
        len.checked_mul(2)
            .ok_or_else(|| error(location, "range allocation overflow"))?,
        location,
    )?;
    budget.charge_results(units, location.clone())?;
    let mut elements = Vec::with_capacity(len);
    for offset in 0..len {
        let value = i64::try_from(i128::from(lower) + offset as i128)
            .map_err(|_| error(location, "range value overflow"))?;
        elements.push(ConstructedValue::Integer(value));
    }
    Ok(ConstructedValue::Set {
        element_type: Some(SetElementType::Integer),
        elements,
    })
}

fn insert_set(
    values: &mut Vec<ConstructedValue>,
    element_type: &mut Option<SetElementType>,
    value: ConstructedValue,
    admit_slot: bool,
    budget: &mut Budget,
    location: &Location,
) -> Result<(), QueryError> {
    let ty = scalar_set_type(&value)
        .ok_or_else(|| error(location, "set elements must have one supported scalar type"))?;
    if element_type.is_some_and(|previous| previous != ty) {
        return Err(error(location, "set element type mismatch"));
    }
    *element_type = Some(ty);
    match value.data() {
        ConstructedValue::Float(value) => finite(*value, location)?,
        ConstructedValue::Member(member) => {
            for previous in values.iter() {
                if let ConstructedValue::Member(previous) = previous.data() {
                    check_member_pair(previous, member, budget, location)?;
                }
            }
        }
        _ => {}
    }
    for existing in values.iter() {
        if compare_set_values(&value, existing, budget, location)? == Ordering::Equal {
            return Ok(());
        }
    }
    allocation::<ConstructedValue>(sum(values.len(), 1, location)?, location)?;
    if admit_slot {
        budget.charge_results(1, location.clone())?;
    }
    values.push(value);
    Ok(())
}

/// Copy inferred facts under the active metadata allowance.
///
/// # Errors
/// Metadata allocation, work or nesting exhaustion retains the supplied location.
pub fn copy_value_types(
    types: &[ValueType],
    budget: &mut Budget,
    location: Location,
) -> Result<Vec<ValueType>, QueryError> {
    copy_types(types, budget, &location)
}

// Shared tuple/record type products preserve every preflighted branch possibility.
pub(crate) fn extend_type_positions(
    positions: &[Vec<ValueType>],
    types: &[ValueType],
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<Vec<ValueType>>, QueryError> {
    let count = positions
        .len()
        .checked_mul(types.len())
        .ok_or_else(|| error(location, "type possibilities overflow"))?;
    let mut expanded = metadata_vec(count, budget, location)?;
    for position in positions {
        for ty in types {
            let mut entries = copy_types(position, budget, location)?;
            let ty = copy_type(ty, budget, location)?;
            push_metadata(&mut entries, ty, budget, location)?;
            expanded.push(entries);
        }
    }
    Ok(expanded)
}

pub(crate) fn function_facts<K>(
    declaration: &DeclaredType<K>,
    budget: &mut Budget,
    location: &Location,
) -> Result<Vec<ValueType>, QueryError> {
    if crate::runtime_types::contains_native(declaration, budget, location)? {
        one_type(ValueType::Unestablished, budget, location)
    } else {
        let declaration =
            crate::runtime_types::constructed_declaration(declaration, budget, location)?;
        one_type(
            declared_fact(&declaration, ValueType::Unestablished, budget, location)?,
            budget,
            location,
        )
    }
}

pub(crate) fn prepare_function_body<'a, Q, K, H: ValueQueryHost<Q>>(
    declaration: crate::functions::DeclarationRef<'a, Q, K>,
    queries: &mut H,
    budget: &mut Budget,
) -> Result<execution::Body<'a, Q, K>, QueryError> {
    let globals = BTreeMap::new();
    let mut analysis = Analysis::new(Globals::Facts(&globals), queries);
    let mut preparation = Preparation::new();
    for parameter in declaration.parameters.iter() {
        let types = function_facts(
            parameter.declaration,
            budget,
            &Location::Query(parameter.range.clone()),
        )?;
        match parameter.pattern {
            pattern::PatternRef::Name(name) => {
                function_local(name, &analysis.locals, budget)?;
                push_metadata(
                    &mut analysis.locals,
                    (name.value.as_str(), types),
                    budget,
                    &Location::Query(name.range.clone()),
                )?;
                push_metadata(
                    &mut preparation.locals,
                    name.value.as_str(),
                    budget,
                    &Location::Query(name.range.clone()),
                )?;
            }
            pattern::PatternRef::Pattern(pattern) => {
                analysis.pattern(pattern, &types, false, budget)?;
                pattern::names(pattern, &mut preparation.locals, budget)?;
            }
        }
    }
    let mut bindings = metadata_vec(
        declaration.bindings.len(),
        budget,
        &Location::Query(declaration.name.range.clone()),
    )?;
    for (name, value) in declaration.bindings {
        function_local(name, &analysis.locals, budget)?;
        let types = analysis.walk(value, budget)?;
        let expression = preparation.resolve(value, analysis.queries, budget)?;
        analysis
            .queries
            .prepare_local(name, value, &types, budget)?;
        push_metadata(
            &mut analysis.locals,
            (name.value.as_str(), types),
            budget,
            &Location::Query(name.range.clone()),
        )?;
        push_metadata(
            &mut preparation.locals,
            name.value.as_str(),
            budget,
            &Location::Query(name.range.clone()),
        )?;
        bindings.push((name.value.as_str(), expression));
    }
    analysis.walk(declaration.value, budget)?;
    let value = preparation.resolve(declaration.value, analysis.queries, budget)?;
    Ok(execution::Body {
        declaration,
        bindings,
        value,
    })
}
fn function_local(
    name: &Located<String>,
    locals: &[(&str, Vec<ValueType>)],
    budget: &mut Budget,
) -> Result<(), QueryError> {
    let location = Location::Query(name.range.clone());
    budget.charge(name.value.len() + 1, location.clone())?;
    if name.value == "_" {
        return Err(error(&location, "discard name cannot be bound"));
    }
    for (previous, _) in locals {
        budget.charge(1 + previous.len().min(name.value.len()), location.clone())?;
        if *previous == name.value {
            return Err(error(&location, "binding is already defined"));
        }
    }
    Ok(())
}
pub(crate) fn run_functions(
    declarations: &[crate::FunctionDeclaration],
    entry: &ValueExpression,
    bindings: &Bindings<ConstructedValue>,
    budget: &mut Budget,
    limits: crate::FunctionLimits,
) -> Result<ConstructedValue, crate::FunctionError<QueryError>> {
    let mut retained = Vec::new();
    for d in declarations {
        crate::projection::admit_slots::<crate::functions::DeclarationRef<'_, (), ()>>(
            1,
            budget,
            &d.name.range,
        )?;
        retained.push(d.as_borrowed().into());
    }
    run_function_refs(&retained, entry, bindings, budget, limits)
}
pub(crate) fn run_function_refs(
    declarations: &[crate::functions::DeclarationRef<'_, (), ()>],
    entry: &ValueExpression,
    bindings: &Bindings<ConstructedValue>,
    budget: &mut Budget,
    limits: crate::FunctionLimits,
) -> Result<ConstructedValue, crate::FunctionError<QueryError>> {
    let mut queries = NoQueries {
        bindings: Some(bindings),
    };
    let mut resolver = crate::functions::Resolver {
        queries: &mut queries,
        declarations,
    };
    let location = Location::Query(entry.range.clone());
    let mut bodies = metadata_vec(declarations.len(), budget, &location)?;
    for declaration in declarations {
        bodies.push(prepare_function_body(*declaration, &mut resolver, budget)?);
    }
    Analysis::new(Globals::Available(bindings), &mut resolver).walk(entry, budget)?;
    let mut preparation = Preparation::new();
    let entry = preparation.resolve(entry, &mut resolver, budget)?;
    let names = preparation.names;
    let mut frame = Frame::new(names.clone(), budget, &location)?;
    let mut calls = crate::functions::CallTrace::default();
    let mut check = |_: &ConstructedValue, _: &mut Budget, _: &Location| Ok(());
    let mut host = execution::ScalarHost {
        queries: &mut queries,
        frame: &mut frame,
        check: &mut check,
        query: std::marker::PhantomData,
        calls: &mut calls,
    };
    let result = execution::execute(
        &entry,
        &names,
        &bodies,
        &mut host,
        budget,
        limits.active_depth,
        0,
    )
    .and_then(|v| v.materialize(budget, &location));
    result.map_err(|error| crate::FunctionError {
        error,
        omitted_calls: calls.omitted,
        calls: calls
            .frames
            .into_iter()
            .map(|(id, range)| crate::FunctionCall {
                function: declarations[id].name.value.chars().take(64).collect(),
                range,
            })
            .collect(),
    })
}