edifact_rs_derive/

lib.rs

#![deny(unsafe_code)]
//! Derive macros for `EdifactSerialize` and `EdifactDeserialize`.
//!
//! # Segment struct (single segment)
//!
//! ```ignore
//! #[derive(EdifactSerialize, EdifactDeserialize)]
//! #[edifact(segment = "BGM")]
//! pub struct BgmSegment {
//!     #[edifact(element = 0)]
//!     pub doc_name_code: String,
//!     #[edifact(element = 1)]
//!     pub doc_id: String,
//!     #[edifact(element = 2)]
//!     pub msg_function: Option<String>,
//! }
//! ```
//!
//! # Segment struct with qualifier
//!
//! ```ignore
//! #[derive(EdifactSerialize, EdifactDeserialize)]
//! #[edifact(segment = "NAD", qualifier = "MS")]
//! pub struct NadMs {
//!     #[edifact(element = 1)]
//!     pub party_id: String,
//! }
//! ```
//!
//! # Message struct (multiple segments)
//!
//! ```ignore
//! #[derive(EdifactSerialize, EdifactDeserialize)]
//! pub struct OrdersMessage {
//!     pub bgm: BgmSegment,
//!     pub buyer: NadMs,
//!     #[edifact(group)]
//!     pub lines: Vec<LinSegment>,
//! }
//! ```
//!
//! # `#[edifact(group)]` and `Vec<T>` fields
//!
//! The `#[edifact(group)]` attribute marks a `Vec<T>` field as a contiguous group of
//! repeated segments.  Without the attribute, `Vec<T>` on a segment struct collects
//! all matching segments from the window into the `Vec`.
//!
//! `#[edifact(group)]` is a documentation and validation marker: it makes the
//! repeating-group intent explicit and enforces two compile-time constraints:
//!
//! 1. The annotated field **must** be of type `Vec<T>` — any other type is rejected
//!    with a clear error message.
//! 2. `#[edifact(group)]` cannot be combined with `#[edifact(element = ...)]` or
//!    `#[edifact(component = ...)]` — positional placement and group semantics are
//!    mutually exclusive.
//!
//! At runtime it generates the same code as a bare `Vec<T>`: every segment matching
//! `T`'s tag and qualifier is collected, in document order, without a contiguity
//! requirement.  When you need contiguity enforced, use
//! [`contiguous_groups_by_qualifier`] directly on the parsed segments.
//!
//! # `#[edifact(repeat)]` — a repeating *data element*
//!
//! `group` repeats the **segment**; `repeat` repeats the **data element inside
//! one segment** (ISO 9735-1 §8.6). Both are `Vec<T>` in Rust and nothing but
//! the attribute can tell them apart:
//!
//! ```text
//! RFF+ON:1'RFF+ON:2'      two RFF segments        → #[edifact(group)]
//! RFF+ON:1*ON:2           one RFF, two occurrences → #[edifact(repeat)]
//! ```
//!
//! A repetition separator divides whole occurrences, so every component of the
//! element is transferred in each one — which is why the qualifier `ON` above
//! appears twice. The derive handles that: a non-repeating field in the same
//! element is emitted once per occurrence, and a repeating one contributes its
//! *k*-th item.
//!
//! ```ignore
//! #[derive(EdifactDeserialize, EdifactSerialize)]
//! #[edifact(segment = "RFF")]
//! struct OrderReferences {
//!     #[edifact(element = 0, component = 0)]
//!     qualifier: String,                     // "ON", in every occurrence
//!     #[edifact(element = 0, component = 1, repeat)]
//!     numbers: Vec<String>,                  // ["1", "2"]
//! }
//! ```
//!
//! An occurrence that omits the component yields `""` rather than being dropped:
//! §8.7.3 makes the position of an occurrence significant, so `DE*DE***DE`
//! deliberately transfers two empty ones. An empty `Vec` emits the element as
//! absent, which keeps the elements after it in position (§8.7.1).
//!
//! Writing a repetition needs an active repetition separator; without one the
//! writer returns `RepetitionSeparatorNotDeclared` (`E037`) rather than emitting
//! output that reads back as a single occurrence.
//!
//! [`contiguous_groups_by_qualifier`]: https://docs.rs/edifact-rs/latest/edifact_rs/fn.contiguous_groups_by_qualifier.html
//!
//! # `#[edifact(required)]` on `Option<T>` fields
//!
//! By default, `Option<T>` fields produce `None` when the element is absent.
//! Annotating an `Option<T>` field with `#[edifact(required)]` changes this:
//! instead of `None`, deserialization returns
//! `edifact_rs::EdifactError::MissingRequiredElement`
//! when the element is absent or empty.  The Rust type stays `Option<T>`, which
//! is useful when the EDIFACT specification mandates the element but your domain
//! model treats it as optional for other reasons.
//!
//! ```ignore
//! #[derive(EdifactSerialize, EdifactDeserialize)]
//! #[edifact(segment = "DTM")]
//! pub struct DtmSegment {
//!     #[edifact(element = 0)]
//!     qualifier: String,
//!     /// Required by the spec but kept as Option in the domain model.
//!     #[edifact(element = 1, required)]
//!     date_time: Option<String>,
//!     #[edifact(element = 2)]
//!     format_code: Option<String>,
//! }
//! ```
//!
//! # Non-`String` fields and `Display` / `FromStr`
//! Non-`String` field types (e.g. `u32`, `bool`, your own newtype) are serialized via
//! `Display` and deserialized via `FromStr`.  The derive macro does **not** add a
//! compile-time bound; if the type does not implement both traits the generated code
//! will fail to compile with a standard "trait not satisfied" error.
//!
//! To avoid surprises, ensure any non-`String` field type implements both:
//! ```ignore
//! impl std::fmt::Display for MyCode { ... }
//! impl std::str::FromStr for MyCode { ... }
//! ```

use proc_macro::TokenStream;
use proc_macro2::TokenStream as TokenStream2;
use quote::quote;
use syn::{Data, DeriveInput, Field, Fields, Type, parse_macro_input, spanned::Spanned};

// ── entry points ───────────────────────────────────────────────────────────────

#[proc_macro_derive(EdifactSerialize, attributes(edifact))]
/// Derive `edifact_rs::EdifactSerialize` for segment or message structs.
///
/// # Limitations
///
/// - **No generics**: the struct must not have generic type parameters.
/// - **No lifetime parameters**: the struct must own all its data (`String`,
///   not `&str`).  Borrow-based structs such as `Segment<'a>` cannot use this
///   derive macro.
pub fn derive_edifact_serialize(input: TokenStream) -> TokenStream {
    let input = parse_macro_input!(input as DeriveInput);
    impl_serialize(&input)
        .unwrap_or_else(|e| e.to_compile_error())
        .into()
}

#[proc_macro_derive(EdifactDeserialize, attributes(edifact))]
/// Derive `edifact_rs::EdifactDeserialize` for segment or message structs.
///
/// # Limitations
///
/// - **No generics**: the struct must not have generic type parameters.
/// - **No lifetime parameters**: the struct must own all its data (`String`,
///   not `&str`).  Add owned wrapper types or clone components at the
///   deserialization site if lifetime flexibility is required.
pub fn derive_edifact_deserialize(input: TokenStream) -> TokenStream {
    let input = parse_macro_input!(input as DeriveInput);
    impl_deserialize(&input)
        .unwrap_or_else(|e| e.to_compile_error())
        .into()
}

#[proc_macro_derive(EdifactCompositeDeserialize, attributes(edifact))]
/// Derive `edifact_rs::EdifactCompositeDeserialize` for a composite-element struct.
///
/// Each named field maps to one component of the composite, in declaration
/// order, unless `#[edifact(component = N)]` overrides the index. `Option<T>`
/// fields are optional; a bare field is required and an absent or empty
/// component is an `EdifactError::MissingRequiredComponent`.
///
/// Pair the resulting type with `#[edifact(element = N, composite)]` on a
/// segment struct's field.
///
/// # Limitations
///
/// Same as [`macro@EdifactDeserialize`]: named-field structs only, no generics,
/// no lifetime parameters. Field types must be `String` or `Option<String>`.
pub fn derive_edifact_composite_deserialize(input: TokenStream) -> TokenStream {
    let input = parse_macro_input!(input as DeriveInput);
    impl_composite_deserialize(&input)
        .unwrap_or_else(|e| e.to_compile_error())
        .into()
}

#[proc_macro_derive(EdifactCompositeSerialize, attributes(edifact))]
/// Derive `edifact_rs::EdifactCompositeSerialize` for a composite-element struct.
///
/// The mirror of [`macro@EdifactCompositeDeserialize`]: field `n` is emitted as
/// component `n`, `None` becomes an empty component, and any gap left by a
/// `component = N` override is filled so later components keep their positions.
///
/// # Limitations
///
/// Same as [`macro@EdifactSerialize`]: named-field structs only, no generics,
/// no lifetime parameters. Field types must be `String` or `Option<String>`.
pub fn derive_edifact_composite_serialize(input: TokenStream) -> TokenStream {
    let input = parse_macro_input!(input as DeriveInput);
    impl_composite_serialize(&input)
        .unwrap_or_else(|e| e.to_compile_error())
        .into()
}

// ── attribute containers ───────────────────────────────────────────────────────

/// How a field's element slot was written in the attribute.
///
/// `Index` is the historical positional form.  `Code` is a UN/EDIFACT data
/// element identifier resolved against the struct's `layout` — during *const
/// evaluation*, so a stale or mistyped identifier is a compile error rather
/// than a silent read of the neighbouring element.
#[derive(Clone)]
enum Position {
    /// `#[edifact(element = 4)]`
    Index(u32),
    /// `#[edifact(element = "3055")]`
    Code(String),
}

#[derive(Default)]
struct StructAttrs {
    /// `#[edifact(segment = "TAG")]`
    segment: Option<String>,
    /// `#[edifact(qualifier = "Q")]` — element 0 value for segment matching
    qualifier: Option<String>,
    qualifier_span: Option<proc_macro2::Span>,
    /// `#[edifact(qualifier_from = N)]` — zero-based element index; qualifier is dynamic at runtime.
    qualifier_from: Option<u32>,
    qualifier_from_span: Option<proc_macro2::Span>,
    /// `#[edifact(layout = path::to::SEGMENT_DEFINITION)]` — the directory
    /// definition that code-based `element` attributes resolve against.
    layout: Option<syn::Path>,
    layout_span: Option<proc_macro2::Span>,
}

#[derive(Default)]
struct FieldAttrs {
    /// `#[edifact(element = N)]` or `#[edifact(element = "3055")]`
    element: Option<Position>,
    element_span: Option<proc_macro2::Span>,
    /// `#[edifact(component = N)]` — component index within the element (for composite data elements)
    component: Option<u32>,
    component_span: Option<proc_macro2::Span>,
    /// `#[edifact(composite)]` — map the field as a full composite element via composite serde traits.
    composite: bool,
    composite_span: Option<proc_macro2::Span>,
    /// `#[edifact(group)]` — `Vec<T>`: each item is a separate segment
    group: bool,
    group_span: Option<proc_macro2::Span>,
    /// `#[edifact(qualifier = "Q")]` — message field constrained to qualifier.
    qualifier: Option<String>,
    qualifier_span: Option<proc_macro2::Span>,
    /// `#[edifact(required)]` — treat an `Option<T>` field as mandatory.
    ///
    /// Without this attribute, `Option<T>` fields produce `None` when the element
    /// is absent.  With `#[edifact(required)]` the deserialization emits
    /// `EdifactError::MissingRequiredElement` instead, even though the Rust type is
    /// still `Option<T>`.  This is useful for elements that the EDIFACT spec marks as
    /// mandatory but which your domain model represents as optional for other reasons.
    required: bool,
    required_span: Option<proc_macro2::Span>,
    /// `#[edifact(repeat)]` — `Vec<T>`: the *data element* repeats within one
    /// segment (ISO 9735-1 §8.6), rather than the segment repeating.
    ///
    /// Distinct from `group`, which is about repeated segments. `RFF+ON:1*ON:2`
    /// is one `RFF` whose element 0 occurs twice; `RFF+ON:1'RFF+ON:2'` is two
    /// `RFF` segments. Both are `Vec<T>` in Rust and nothing but the attribute
    /// can tell them apart.
    repeat: bool,
    repeat_span: Option<proc_macro2::Span>,
}

// ── attribute parsing ──────────────────────────────────────────────────────────

/// Largest accepted `element` / `component` index.
///
/// Serialization emits one statement per slot up to the highest declared index,
/// so an unbounded value makes rustc generate an arbitrary amount of code — a
/// typo'd `element = 200000` was enough to exhaust memory and kill the compiler.
/// UN/EDIFACT caps segments at 99 data elements and composites at 99 components,
/// so 256 is generous.
const MAX_POSITION_INDEX: u32 = 256;

fn check_index_bound(lit: &syn::LitInt, value: u32, key: &str) -> syn::Result<()> {
    if value > MAX_POSITION_INDEX {
        return Err(syn::Error::new(
            lit.span(),
            format!(
                "`{key}` index {value} exceeds the maximum of {MAX_POSITION_INDEX}; \
                 UN/EDIFACT allows at most 99 elements per segment and 99 components per composite"
            ),
        ));
    }
    Ok(())
}

fn parse_struct_attrs(input: &DeriveInput) -> syn::Result<StructAttrs> {
    let mut out = StructAttrs::default();
    for attr in &input.attrs {
        if !attr.path().is_ident("edifact") {
            continue;
        }
        attr.parse_nested_meta(|meta| {
            if meta.path.is_ident("segment") {
                if out.segment.is_some() {
                    return Err(meta.error("duplicate `segment`"));
                }
                let lit = meta.value()?.parse::<syn::LitStr>()?;
                let tag = lit.value();
                if tag.len() != 3 || !tag.bytes().all(|b| b.is_ascii_uppercase()) {
                    return Err(syn::Error::new(
                        lit.span(),
                        format!(
                            "segment tag must be exactly 3 ASCII uppercase letters; got {tag:?}"
                        ),
                    ));
                }
                out.segment = Some(tag);
            } else if meta.path.is_ident("qualifier") {
                if out.qualifier.is_some() {
                    return Err(meta.error("duplicate `qualifier`"));
                }
                out.qualifier = Some(meta.value()?.parse::<syn::LitStr>()?.value());
                out.qualifier_span = Some(meta.path.span());
            } else if meta.path.is_ident("qualifier_from") {
                if out.qualifier_from.is_some() {
                    return Err(meta.error("duplicate `qualifier_from`"));
                }
                let lit = meta.value()?.parse::<syn::LitInt>()?;
                let idx: u32 = lit.base10_parse()?;
                check_index_bound(&lit, idx, "qualifier_from")?;
                out.qualifier_from = Some(idx);
                out.qualifier_from_span = Some(meta.path.span());
            } else if meta.path.is_ident("layout") {
                if out.layout.is_some() {
                    return Err(meta.error("duplicate `layout`"));
                }
                out.layout_span = Some(meta.path.span());
                let value = meta.value()?;
                // Accept both `layout = crate::defs::NAD` and the string form
                // `layout = "crate::defs::NAD"`, since attribute paths are
                // commonly written either way.
                out.layout = Some(if value.peek(syn::LitStr) {
                    value.parse::<syn::LitStr>()?.parse()?
                } else {
                    value.parse::<syn::Path>()?
                });
            } else {
                return Err(meta.error("unknown struct-level `edifact` key; expected `segment`, `qualifier`, `qualifier_from`, or `layout`"));
            }
            Ok(())
        })?;
    }
    if out.layout.is_some() && out.segment.is_none() {
        return Err(syn::Error::new(
            out.layout_span.unwrap_or_else(|| input.span()),
            "#[edifact(layout = ...)] requires #[edifact(segment = ...)]: a layout describes one segment",
        ));
    }
    if (out.qualifier.is_some() || out.qualifier_from.is_some()) && out.segment.is_none() {
        return Err(syn::Error::new(
            out.qualifier_span
                .or(out.qualifier_from_span)
                .unwrap_or_else(|| input.span()),
            "#[edifact(qualifier = ...)] / #[edifact(qualifier_from = ...)] require #[edifact(segment = ...)]",
        ));
    }
    if out.qualifier.is_some() && out.qualifier_from.is_some() {
        return Err(syn::Error::new(
            out.qualifier_from_span
                .or(out.qualifier_span)
                .unwrap_or_else(|| input.span()),
            "use either #[edifact(qualifier = ...)] or #[edifact(qualifier_from = ...)], not both",
        ));
    }
    Ok(out)
}

fn parse_field_attrs(field: &Field) -> syn::Result<FieldAttrs> {
    let mut out = FieldAttrs::default();
    for attr in &field.attrs {
        if !attr.path().is_ident("edifact") {
            continue;
        }
        attr.parse_nested_meta(|meta| {
            if meta.path.is_ident("element") {
                if out.element.is_some() {
                    return Err(meta.error("duplicate `element`"));
                }
                out.element_span = Some(meta.path.span());
                let value = meta.value()?;
                out.element = Some(if value.peek(syn::LitStr) {
                    let lit = value.parse::<syn::LitStr>()?;
                    let code = lit.value();
                    if code.is_empty() {
                        return Err(syn::Error::new(
                            lit.span(),
                            "`element` data element identifier must not be empty",
                        ));
                    }
                    Position::Code(code)
                } else {
                    let lit = value.parse::<syn::LitInt>()?;
                    let idx: u32 = lit.base10_parse()?;
                    check_index_bound(&lit, idx, "element")?;
                    Position::Index(idx)
                });
            } else if meta.path.is_ident("component") {
                if out.component.is_some() {
                    return Err(meta.error("duplicate `component`"));
                }
                out.component_span = Some(meta.path.span());
                let value = meta.value()?;
                if value.peek(syn::LitStr) {
                    let lit = value.parse::<syn::LitStr>()?;
                    return Err(syn::Error::new(
                        lit.span(),
                        "put the data element identifier in `element`: \
                         `#[edifact(element = \"3055\")]` resolves both the element and the \
                         component position from the directory",
                    ));
                }
                let lit = value.parse::<syn::LitInt>()?;
                let idx: u32 = lit.base10_parse()?;
                check_index_bound(&lit, idx, "component")?;
                out.component = Some(idx);
            } else if meta.path.is_ident("composite") {
                out.composite = true;
                out.composite_span = Some(meta.path.span());
            } else if meta.path.is_ident("group") {
                out.group = true;
                out.group_span = Some(meta.path.span());
            } else if meta.path.is_ident("qualifier") {
                if out.qualifier.is_some() {
                    return Err(meta.error("duplicate `qualifier`"));
                }
                out.qualifier = Some(meta.value()?.parse::<syn::LitStr>()?.value());
                out.qualifier_span = Some(meta.path.span());
            } else if meta.path.is_ident("required") {
                out.required = true;
                out.required_span = Some(meta.path.span());
            } else if meta.path.is_ident("repeat") {
                out.repeat = true;
                out.repeat_span = Some(meta.path.span());
            } else {
                return Err(meta.error("unknown field-level `edifact` key; expected `element`, `component`, `composite`, `group`, `qualifier`, `repeat`, or `required`"));
            }
            Ok(())
        })?;
    }
    Ok(out)
}

// ── slot resolution ────────────────────────────────────────────────────────────

/// The element/component slot a field maps to, as token expressions.
struct Slots {
    /// `usize` expression for the zero-based element index.
    element: TokenStream2,
    /// `usize` expression for the zero-based component index.
    component: TokenStream2,
    /// Whether the field reads through a component accessor.
    ///
    /// Always true for a code-addressed field: whether the identifier landed on
    /// a component or a whole element is only known after const evaluation, and
    /// reading component 0 is equivalent to reading the element either way.
    has_component: bool,
    /// `bool` expression: does this field address a component *inside* a
    /// composite?
    ///
    /// Decides between [`EdifactError::MissingRequiredComponent`] and
    /// [`EdifactError::MissingRequiredElement`].  It cannot be folded into
    /// `has_component`, because a code naming the first component of a composite
    /// resolves to component index 0 just like a whole element does — and
    /// reporting `E021` where `E008` belongs sends downstream routing to the
    /// wrong branch.  For a code slot this is a `const` lookup, so the branch
    /// folds away.
    names_component: TokenStream2,
}

/// Resolve every field's slot, emitting the `const` items that code-addressed
/// fields need.
///
/// The returned prelude must be placed at the top of each generated function
/// body that uses the slots.  It carries three compile-time guarantees:
/// every identifier exists in the layout, none is ambiguous, and no two fields
/// claim the same slot.
fn resolve_slots(
    struct_attrs: &StructAttrs,
    field_data: &[(&syn::Ident, &Type, FieldAttrs)],
) -> syn::Result<(TokenStream2, Vec<Slots>)> {
    let mut consts: Vec<TokenStream2> = Vec::new();
    let mut slots: Vec<Slots> = Vec::with_capacity(field_data.len());
    let mut slot_entries: Vec<TokenStream2> = Vec::new();

    if struct_attrs.qualifier.is_some() {
        // The struct-level qualifier owns element 0 / component 0.
        slot_entries.push(quote! { (0usize, 0usize) });
    }

    for (i, (ident, _, attrs)) in field_data.iter().enumerate() {
        if attrs.group {
            slots.push(Slots {
                element: quote! { 0usize },
                component: quote! { 0usize },
                has_component: false,
                names_component: quote! { false },
            });
            continue;
        }
        let component_index = attrs.component.unwrap_or(0);
        let slot = match &attrs.element {
            Some(Position::Code(code)) => {
                let Some(layout) = &struct_attrs.layout else {
                    return Err(syn::Error::new(
                        attrs.element_span.unwrap_or_else(|| ident.span()),
                        format!(
                            "field `{ident}`: `element = \"{code}\"` addresses a UN/EDIFACT data \
                             element identifier, which needs a directory to resolve against; add \
                             #[edifact(layout = path::to::SEGMENT_DEFINITION)] to the struct"
                        ),
                    ));
                };
                let slot_ident = syn::Ident::new(
                    &format!("__EDIFACT_SLOT_{i}"),
                    attrs.element_span.unwrap_or_else(|| ident.span()),
                );
                let unknown_msg = format!(
                    "field `{ident}`: data element {code} is not defined exactly once in the \
                     segment layout — check the identifier against the directory"
                );
                consts.push(quote! {
                    const _: () = ::core::assert!(#layout.code_positions(#code) == 1, #unknown_msg);
                });
                if attrs.component.is_some() {
                    let conflict_msg = format!(
                        "field `{ident}`: `component = N` may only accompany an identifier that \
                         names a whole data element, but {code} names a component inside one"
                    );
                    consts.push(quote! {
                        const _: () =
                            ::core::assert!(#layout.component_slot(#code) == 0, #conflict_msg);
                    });
                    consts.push(quote! {
                        // The guard above already reported an unresolvable
                        // identifier by name; short-circuit so `element_slot`
                        // does not panic a second time with a vaguer message.
                        const #slot_ident: (usize, usize) =
                            if #layout.code_positions(#code) == 1 {
                                (#layout.element_slot(#code), #component_index as usize)
                            } else {
                                (0, 0)
                            };
                    });
                } else {
                    consts.push(quote! {
                        const #slot_ident: (usize, usize) =
                            if #layout.code_positions(#code) == 1 {
                                (#layout.element_slot(#code), #layout.component_slot(#code))
                            } else {
                                (0, 0)
                            };
                    });
                }
                slot_entries.push(quote! { #slot_ident });
                let names_component = if attrs.component.is_some() {
                    // `component = N` on a whole-element identifier: the field
                    // does address a component inside that composite.
                    quote! { true }
                } else {
                    quote! { #layout.code_is_component(#code) }
                };
                Slots {
                    element: quote! { #slot_ident.0 },
                    component: quote! { #slot_ident.1 },
                    has_component: true,
                    names_component,
                }
            }
            Some(Position::Index(idx)) => {
                let idx = *idx;
                let explicit = attrs.component.is_some();
                slot_entries.push(quote! { (#idx as usize, #component_index as usize) });
                Slots {
                    element: quote! { #idx as usize },
                    component: quote! { #component_index as usize },
                    has_component: explicit,
                    names_component: quote! { #explicit },
                }
            }
            None => {
                // Declaration order is the implicit element index.
                let idx = i as u32;
                let explicit = attrs.component.is_some();
                slot_entries.push(quote! { (#idx as usize, #component_index as usize) });
                Slots {
                    element: quote! { #idx as usize },
                    component: quote! { #component_index as usize },
                    has_component: explicit,
                    names_component: quote! { #explicit },
                }
            }
        };
        slots.push(slot);
    }

    // Slot collisions between code-addressed fields (and between a code and a
    // positional field) can only be seen after const evaluation, so the check
    // itself has to run there.  Macro-time `check_duplicate_slots` still covers
    // the all-positional case with a friendlier message.
    if struct_attrs.layout.is_some() && !slot_entries.is_empty() {
        let count = slot_entries.len();
        consts.push(quote! {
            const __EDIFACT_SLOTS: [(usize, usize); #count] = [#(#slot_entries),*];
            const _: () = {
                let mut i = 0;
                while i < __EDIFACT_SLOTS.len() {
                    let mut j = i + 1;
                    while j < __EDIFACT_SLOTS.len() {
                        ::core::assert!(
                            !(__EDIFACT_SLOTS[i].0 == __EDIFACT_SLOTS[j].0
                                && __EDIFACT_SLOTS[i].1 == __EDIFACT_SLOTS[j].1),
                            "two fields resolve to the same element/component slot; \
                             give each field a distinct data element identifier or index"
                        );
                        j += 1;
                    }
                    i += 1;
                }
            };
        });
    }

    Ok((quote! { #(#consts)* }, slots))
}

// ── type helpers ───────────────────────────────────────────────────────────────

fn is_option_type(ty: &Type) -> bool {
    matches!(ty, Type::Path(p) if p.path.segments.last().is_some_and(|s| s.ident == "Option"))
}

fn is_vec_type(ty: &Type) -> bool {
    matches!(ty, Type::Path(p) if p.path.segments.last().is_some_and(|s| s.ident == "Vec"))
}

/// Returns `true` for the `String` path type.
///
/// Accepts only:
/// - `String` (bare, single-segment)
/// - `std::string::String` (fully qualified standard library path)
/// - `alloc::string::String` (fully qualified alloc path for `no_std` contexts)
///
/// A user-defined type whose last segment is `String` but that does not match
/// one of these three forms is **not** treated as a string type, which prevents
/// accidental string-extraction code generation for unrelated user types.
///
/// **Shadowing caveat:** bare `String` (single-segment, no path prefix) is matched
/// by name only. If a crate shadows the standard-library `String` with a local type
/// of the same name, this function will still classify it as a string type and the
/// derive macro will generate incorrect string-extraction code rather than a
/// composite or element parse. To avoid this, always use the fully-qualified path
/// (`std::string::String`) in struct fields when `String` is shadowed in scope.
fn is_string_type(ty: &Type) -> bool {
    let Type::Path(p) = ty else { return false };
    // Single-segment bare "String"
    if p.path.is_ident("String") {
        return true;
    }
    // Fully-qualified std::string::String or alloc::string::String
    let segs = &p.path.segments;
    segs.len() == 3
        && (segs[0].ident == "std" || segs[0].ident == "alloc")
        && segs[1].ident == "string"
        && segs[2].ident == "String"
}

/// Returns `true` for `&str` or `&'_ str` reference types.
fn is_str_ref_type(ty: &Type) -> bool {
    let Type::Reference(r) = ty else { return false };
    matches!(r.elem.as_ref(), Type::Path(p) if p.path.is_ident("str"))
}

/// Returns `true` when `ty` is a type that can yield `&str` without allocating
/// (i.e. `String` or `&str`).
fn is_str_like(ty: &Type) -> bool {
    is_string_type(ty) || is_str_ref_type(ty)
}

fn option_inner_type(ty: &Type) -> Option<&Type> {
    let Type::Path(path) = ty else { return None };
    let seg = path.path.segments.last()?;
    if seg.ident != "Option" {
        return None;
    }
    let syn::PathArguments::AngleBracketed(args) = &seg.arguments else {
        return None;
    };
    let syn::GenericArgument::Type(inner) = args.args.first()? else {
        return None;
    };
    Some(inner)
}

fn vec_inner_type(ty: &Type) -> Option<&Type> {
    let Type::Path(path) = ty else { return None };
    let seg = path.path.segments.last()?;
    if seg.ident != "Vec" {
        return None;
    }
    let syn::PathArguments::AngleBracketed(args) = &seg.arguments else {
        return None;
    };
    let syn::GenericArgument::Type(inner) = args.args.first()? else {
        return None;
    };
    Some(inner)
}

// ── named field extraction ─────────────────────────────────────────────────────

/// Reject two fields that map to the same `(element, component)` slot.
///
/// Serialization keys its emit table by slot, so a duplicate silently dropped
/// one field from the output while deserialization still read both — an
/// asymmetric, compile-clean data loss.
///
/// Only positional fields are checked here; code-addressed fields have no
/// macro-time index, and are covered by the const-evaluated uniqueness check
/// emitted by [`resolve_slots`].
fn check_duplicate_slots(
    field_data: &[(&syn::Ident, &Type, FieldAttrs)],
    is_segment_struct: bool,
) -> syn::Result<()> {
    if !is_segment_struct {
        return Ok(());
    }
    let mut seen: Vec<((u32, u32), &syn::Ident)> = Vec::with_capacity(field_data.len());
    for (i, (ident, _, attrs)) in field_data.iter().enumerate() {
        // Group fields are not positional, so they occupy no slot.
        if attrs.group {
            continue;
        }
        let element = match &attrs.element {
            Some(Position::Index(idx)) => *idx,
            Some(Position::Code(_)) => continue,
            None => i as u32,
        };
        let slot = (element, attrs.component.unwrap_or(0));
        if let Some((_, first)) = seen.iter().find(|(s, _)| *s == slot) {
            return Err(syn::Error::new(
                ident.span(),
                format!(
                    "field `{ident}` maps to element {} component {}, which is already \
                     claimed by field `{first}`; give each field a distinct \
                     `#[edifact(element = ..., component = ...)]` slot",
                    slot.0, slot.1
                ),
            ));
        }
        seen.push((slot, ident));
    }
    Ok(())
}

// ── composite derives ─────────────────────────────────────────────────────────

/// One resolved component slot of a composite struct.
struct CompositeSlot<'a> {
    ident: &'a syn::Ident,
    ty: &'a Type,
    index: u32,
    optional: bool,
}

/// Resolve each field of a composite struct to a component index.
///
/// Declaration order is the default; `#[edifact(component = N)]` overrides it.
/// Only the attributes that mean something for a composite are accepted — the
/// segment-level ones (`element`, `group`, `qualifier`, `composite`) have no
/// meaning inside one and are rejected rather than silently ignored.
fn composite_slots(input: &DeriveInput) -> syn::Result<Vec<CompositeSlot<'_>>> {
    let fields = get_named_fields(input)?;
    let mut slots: Vec<CompositeSlot<'_>> = Vec::with_capacity(fields.named.len());

    for (decl_index, field) in fields.named.iter().enumerate() {
        let ident = field.ident.as_ref().expect("named fields checked above");
        let attrs = parse_field_attrs(field)?;

        for (present, span, key) in [
            (attrs.element.is_some(), attrs.element_span, "element"),
            (attrs.composite, attrs.composite_span, "composite"),
            (attrs.group, attrs.group_span, "group"),
            (attrs.qualifier.is_some(), attrs.qualifier_span, "qualifier"),
        ] {
            if present {
                return Err(syn::Error::new(
                    span.unwrap_or_else(|| field.span()),
                    format!(
                        "`{key}` has no meaning on a composite struct field; \
                         a composite maps its fields to components, so only \
                         `component` and `required` apply"
                    ),
                ));
            }
        }

        let ty = &field.ty;
        let inner = option_inner_type(ty).unwrap_or(ty);
        if !is_string_type(inner) {
            return Err(syn::Error::new(
                ty.span(),
                "composite struct fields must be `String` or `Option<String>`; \
                 a component is a single text value",
            ));
        }

        slots.push(CompositeSlot {
            ident,
            ty,
            index: attrs.component.unwrap_or(decl_index as u32),
            optional: is_option_type(ty) && !attrs.required,
        });
    }

    // Two fields on one component would make the mapping ambiguous in one
    // direction and lossy in the other.
    let mut seen: Vec<(u32, &syn::Ident)> = Vec::with_capacity(slots.len());
    for slot in &slots {
        if let Some((_, first)) = seen.iter().find(|(i, _)| *i == slot.index) {
            return Err(syn::Error::new(
                slot.ident.span(),
                format!(
                    "component {} is already mapped by field `{first}`",
                    slot.index
                ),
            ));
        }
        seen.push((slot.index, slot.ident));
    }
    Ok(slots)
}

fn impl_composite_deserialize(input: &DeriveInput) -> syn::Result<TokenStream2> {
    let name = &input.ident;
    let slots = composite_slots(input)?;

    let assignments = slots.iter().map(|slot| {
        let CompositeSlot {
            ident,
            ty,
            index,
            optional,
        } = slot;
        let idx = *index as usize;
        if *optional {
            quote! {
                #ident: match __composite.get(#idx) {
                    Some(v) if !v.is_empty() => Some(::std::string::String::from(v)),
                    _ => None,
                },
            }
        } else {
            // An absent or empty component in a required slot is the exact
            // condition `MissingRequiredComponent` exists to name.
            let build = if is_option_type(ty) {
                quote! { Some(::std::string::String::from(__value)) }
            } else {
                quote! { ::std::string::String::from(__value) }
            };
            quote! {
                #ident: {
                    let __value = __composite
                        .get(#idx)
                        .filter(|v| !v.is_empty())
                        .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredComponent {
                            tag: ::std::string::String::from(stringify!(#name)),
                            element_index: 0,
                            component_index: #idx,
                        })?;
                    #build
                },
            }
        }
    });

    Ok(quote! {
        impl ::edifact_rs::EdifactCompositeDeserialize for #name {
            fn edifact_deserialize_composite(
                __composite: ::edifact_rs::CompositeElement<'_>,
            ) -> ::core::result::Result<Self, ::edifact_rs::EdifactError> {
                ::core::result::Result::Ok(Self {
                    #(#assignments)*
                })
            }
        }
    })
}

fn impl_composite_serialize(input: &DeriveInput) -> syn::Result<TokenStream2> {
    let name = &input.ident;
    let slots = composite_slots(input)?;

    // Emit in component order, filling any slot a `component = N` override
    // skipped so the components that follow keep their positions.
    let mut ordered: Vec<&CompositeSlot<'_>> = slots.iter().collect();
    ordered.sort_by_key(|slot| slot.index);
    let highest = ordered.last().map_or(0, |slot| slot.index);

    let emits = (0..=highest).map(|index| {
        let value = match ordered.iter().find(|slot| slot.index == index) {
            Some(slot) => {
                let ident = slot.ident;
                if is_option_type(slot.ty) {
                    quote! { self.#ident.as_deref().unwrap_or("") }
                } else {
                    quote! { self.#ident.as_str() }
                }
            }
            None => quote! { "" },
        };
        // Component 0 opens the element; the rest extend it.
        if index == 0 {
            quote! { __emitter.emit(::edifact_rs::EdifactEvent::Element { value: #value })?; }
        } else {
            quote! {
                __emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: #value })?;
            }
        }
    });

    // A field-less composite still occupies its element slot.
    let body = if slots.is_empty() {
        quote! { __emitter.emit(::edifact_rs::EdifactEvent::Element { value: "" })?; }
    } else {
        quote! { #(#emits)* }
    };

    Ok(quote! {
        impl ::edifact_rs::EdifactCompositeSerialize for #name {
            fn edifact_serialize_composite<__E: ::edifact_rs::EventEmitter>(
                &self,
                __emitter: &mut __E,
            ) -> ::core::result::Result<(), ::edifact_rs::EdifactError> {
                #body
                ::core::result::Result::Ok(())
            }
        }
    })
}

fn get_named_fields(input: &DeriveInput) -> syn::Result<&syn::FieldsNamed> {
    if !input.generics.params.is_empty() {
        return Err(syn::Error::new(
            input.generics.params.span(),
            "EdifactSerialize/EdifactDeserialize do not support generic structs",
        ));
    }
    match &input.data {
        Data::Struct(s) => match &s.fields {
            Fields::Named(f) => Ok(f),
            _ => Err(syn::Error::new(
                input.span(),
                "EdifactSerialize/EdifactDeserialize only support structs with named fields",
            )),
        },
        _ => Err(syn::Error::new(
            input.span(),
            "EdifactSerialize/EdifactDeserialize only support structs",
        )),
    }
}

fn validate_field_attrs(
    ident: &syn::Ident,
    ty: &Type,
    attrs: &FieldAttrs,
    is_segment_struct: bool,
) -> syn::Result<()> {
    if attrs.group && !is_vec_type(ty) {
        return Err(syn::Error::new(
            attrs.group_span.unwrap_or_else(|| ident.span()),
            format!("field `{ident}`: #[edifact(group)] requires Vec<T>"),
        ));
    }
    if attrs.group && (attrs.element.is_some() || attrs.component.is_some()) {
        return Err(syn::Error::new(
            attrs.group_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(group)] cannot be combined with element/component positioning"
            ),
        ));
    }
    if attrs.repeat && !is_vec_type(ty) {
        return Err(syn::Error::new(
            attrs.repeat_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(repeat)] requires Vec<T> — a repeating data element \
                 has one occurrence per item"
            ),
        ));
    }
    if attrs.repeat && !is_segment_struct {
        return Err(syn::Error::new(
            attrs.repeat_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(repeat)] is only valid on segment structs; a message \
                 struct repeats whole segments, which is #[edifact(group)]"
            ),
        ));
    }
    if attrs.repeat && attrs.group {
        return Err(syn::Error::new(
            attrs.repeat_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(repeat)] repeats a data element inside one segment; \
                 #[edifact(group)] repeats the segment itself — they are different structures"
            ),
        ));
    }
    if attrs.repeat && attrs.composite {
        return Err(syn::Error::new(
            attrs.repeat_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(repeat)] cannot be combined with \
                 #[edifact(composite)]; map one component across the occurrences instead"
            ),
        ));
    }
    if attrs.composite && attrs.component.is_some() {
        return Err(syn::Error::new(
            attrs.component_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(component = ...)] cannot be combined with #[edifact(composite)]"
            ),
        ));
    }
    if attrs.composite && attrs.group {
        return Err(syn::Error::new(
            attrs.composite_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(composite)] cannot be combined with #[edifact(group)]"
            ),
        ));
    }
    if is_segment_struct && attrs.group {
        return Err(syn::Error::new(
            attrs.group_span.unwrap_or_else(|| ident.span()),
            format!("field `{ident}`: #[edifact(group)] is only valid on message structs"),
        ));
    }
    if !is_segment_struct && (attrs.element.is_some() || attrs.component.is_some()) {
        return Err(syn::Error::new(
            attrs
                .element_span
                .or(attrs.component_span)
                .unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: element/component positioning is only valid on segment structs"
            ),
        ));
    }
    if !is_segment_struct && attrs.composite {
        return Err(syn::Error::new(
            attrs.composite_span.unwrap_or_else(|| ident.span()),
            format!("field `{ident}`: #[edifact(composite)] is only valid on segment structs"),
        ));
    }
    if is_segment_struct && attrs.qualifier.is_some() {
        return Err(syn::Error::new(
            attrs.qualifier_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(qualifier = ...)] is only valid on message struct fields"
            ),
        ));
    }
    if attrs.qualifier.is_some() && attrs.group && !is_vec_type(ty) {
        return Err(syn::Error::new(
            attrs.qualifier_span.unwrap_or_else(|| ident.span()),
            format!("field `{ident}`: qualifier-constrained groups must be Vec<T>"),
        ));
    }
    if attrs.required && !is_option_type(ty) {
        return Err(syn::Error::new(
            attrs.required_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(required)] only applies to Option<T> fields; \
                 non-Option fields are always required"
            ),
        ));
    }
    if attrs.required && attrs.composite {
        return Err(syn::Error::new(
            attrs.required_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(required)] cannot be combined with \
                 #[edifact(composite)]; use a non-optional field type to require the \
                 composite element"
            ),
        ));
    }
    if attrs.required && !is_segment_struct {
        return Err(syn::Error::new(
            attrs.required_span.unwrap_or_else(|| ident.span()),
            format!(
                "field `{ident}`: #[edifact(required)] is only valid on segment struct \
                 element fields; to require a segment in a message struct, use a \
                 non-optional field type"
            ),
        ));
    }
    Ok(())
}

// ── EdifactSerialize ───────────────────────────────────────────────────────────

/// Element index known at macro-expansion time; declaration order is the default.
///
/// Code-addressed fields have no such index — callers reach this only on the
/// positional path, which `resolve_slots` keeps separate.
fn static_element_index(attrs: &FieldAttrs, decl_index: usize) -> u32 {
    match &attrs.element {
        Some(Position::Index(idx)) => *idx,
        _ => decl_index as u32,
    }
}

/// Generate `EdifactSerialize` for a segment struct that addresses fields by
/// UN/EDIFACT data element identifier.
///
/// The positional path lays out its emit order at macro-expansion time, which a
/// code-addressed struct cannot do: its slots are only known once the `const`
/// items in `slot_prelude` are evaluated.  So each field contributes a
/// `(element, component, value)` triple and
/// [`emit_sparse_segment`][edifact_rs::emit_sparse_segment] orders them.
/// Absent optional values still contribute an empty triple, so a trailing `None`
/// produces the same empty element the positional path emits.
fn impl_serialize_sparse(
    name: &syn::Ident,
    seg_tag: &str,
    struct_attrs: &StructAttrs,
    field_data: &[(&syn::Ident, &Type, FieldAttrs)],
    slots: &[Slots],
    slot_prelude: &TokenStream2,
) -> TokenStream2 {
    let mut stmts: Vec<TokenStream2> = Vec::new();

    if let Some(qual) = &struct_attrs.qualifier {
        stmts.push(quote! {
            __parts.push((0usize, 0usize, ::std::borrow::Cow::Borrowed(#qual)));
        });
    }

    for ((ident, ty, attrs), slot) in field_data.iter().zip(slots) {
        let (element, component) = (&slot.element, &slot.component);
        if attrs.composite {
            // A composite field owns its whole element; replay its own events
            // into consecutive component slots.
            let serialize_composite = if is_option_type(ty) {
                quote! {
                    if let ::core::option::Option::Some(__v) = &self.#ident {
                        ::edifact_rs::EdifactCompositeSerialize::edifact_serialize_composite(
                            __v, &mut __sub,
                        )?;
                    }
                }
            } else {
                quote! {
                    ::edifact_rs::EdifactCompositeSerialize::edifact_serialize_composite(
                        &self.#ident, &mut __sub,
                    )?;
                }
            };
            stmts.push(quote! {
                {
                    let mut __sub = ::edifact_rs::VecEmitter::default();
                    #serialize_composite
                    let mut __comp = 0usize;
                    let mut __any = false;
                    for __event in __sub.events {
                        match __event {
                            ::edifact_rs::OwnedEdifactEvent::Element { value } => {
                                __comp = 0;
                                __any = true;
                                __parts.push((#element, 0usize, ::std::borrow::Cow::Owned(value)));
                            }
                            ::edifact_rs::OwnedEdifactEvent::ComponentElement { value } => {
                                __comp += 1;
                                __any = true;
                                __parts.push((#element, __comp, ::std::borrow::Cow::Owned(value)));
                            }
                            _ => {}
                        }
                    }
                    if !__any {
                        __parts.push((#element, 0usize, ::std::borrow::Cow::Borrowed("")));
                    }
                }
            });
            continue;
        }

        let value_expr = if is_option_type(ty) {
            let inner_is_str = option_inner_type(ty).is_some_and(is_str_like);
            if inner_is_str {
                quote! {
                    match &self.#ident {
                        ::core::option::Option::Some(__v) => ::std::borrow::Cow::Borrowed(__v.as_str()),
                        ::core::option::Option::None => ::std::borrow::Cow::Borrowed(""),
                    }
                }
            } else {
                quote! {
                    match &self.#ident {
                        ::core::option::Option::Some(__v) => {
                            ::std::borrow::Cow::Owned(::std::string::ToString::to_string(__v))
                        }
                        ::core::option::Option::None => ::std::borrow::Cow::Borrowed(""),
                    }
                }
            }
        } else if is_string_type(ty) {
            quote! { ::std::borrow::Cow::Borrowed(self.#ident.as_str()) }
        } else if is_str_ref_type(ty) {
            quote! { ::std::borrow::Cow::Borrowed(self.#ident) }
        } else {
            quote! { ::std::borrow::Cow::Owned(::std::string::ToString::to_string(&self.#ident)) }
        };

        stmts.push(quote! {
            __parts.push((#element, #component, #value_expr));
        });
    }

    let capacity = field_data.len() + usize::from(struct_attrs.qualifier.is_some());

    quote! {
        impl ::edifact_rs::EdifactSerialize for #name {
            fn edifact_serialize<__E: ::edifact_rs::EventEmitter>(
                &self,
                emitter: &mut __E,
            ) -> ::core::result::Result<(), ::edifact_rs::EdifactError> {
                #slot_prelude
                let mut __parts: ::std::vec::Vec<(
                    usize,
                    usize,
                    ::std::borrow::Cow<'_, str>,
                )> = ::std::vec::Vec::with_capacity(#capacity);
                #(#stmts)*
                ::edifact_rs::emit_sparse_segment(emitter, #seg_tag, &mut __parts)
            }
        }
    }
}

fn impl_serialize(input: &DeriveInput) -> syn::Result<TokenStream2> {
    let name = &input.ident;
    let struct_attrs = parse_struct_attrs(input)?;
    let fields = get_named_fields(input)?;
    let is_segment_struct = struct_attrs.segment.is_some();

    // Collect (field_ident, field_type, FieldAttrs).
    let field_data: Vec<(&syn::Ident, &Type, FieldAttrs)> = fields
        .named
        .iter()
        .map(|f| {
            let attrs = parse_field_attrs(f)?;
            let ident = f
                .ident
                .as_ref()
                .ok_or_else(|| syn::Error::new_spanned(f, "only named fields are supported"))?;
            validate_field_attrs(ident, &f.ty, &attrs, is_segment_struct)?;
            Ok((ident, &f.ty, attrs))
        })
        .collect::<syn::Result<_>>()?;
    check_duplicate_slots(&field_data, is_segment_struct)?;
    let (slot_prelude, slots) = resolve_slots(&struct_attrs, &field_data)?;
    let uses_code_slots = field_data
        .iter()
        .any(|(_, _, attrs)| matches!(attrs.element, Some(Position::Code(_))));

    let body = if let Some(seg_tag) = &struct_attrs.segment {
        if uses_code_slots {
            return Ok(impl_serialize_sparse(
                name,
                seg_tag,
                &struct_attrs,
                &field_data,
                &slots,
                &slot_prelude,
            ));
        }
        // ── Segment struct: emit one EDIFACT segment ──────────────────────────
        //
        // Fields are laid out on a two-dimensional grid — data element index by
        // component index — at macro-expansion time, so the generated code stays
        // straight-line event emission with no runtime allocation.
        //
        // The grid is what makes components work at all. Keying the layout on
        // the element index alone collapsed every field sharing an element into
        // one entry, so all but the last were silently dropped on write:
        // a `DTM` with three `component` fields went out as `DTM+102'` instead of
        // `DTM+137:20260101:102'`, and the loss was invisible until a partner
        // rejected the file.

        let mut grid: std::collections::BTreeMap<u32, std::collections::BTreeMap<u32, Cell>> =
            std::collections::BTreeMap::new();

        if struct_attrs.qualifier.is_some() {
            // The qualifier occupies element 0 / component 0, so a field cannot.
            for (i, (ident, _, attrs)) in field_data.iter().enumerate() {
                let elem = static_element_index(attrs, i);
                let comp = attrs.component.unwrap_or(0);
                if elem == 0 && comp == 0 {
                    return Err(syn::Error::new(
                        attrs
                            .element_span
                            .or(attrs.component_span)
                            .unwrap_or_else(|| ident.span()),
                        format!(
                            "field `{ident}`: cannot use #[edifact(qualifier = ...)] with a field at element = 0 without component >= 1; the qualifier occupies component 0"
                        ),
                    ));
                }
            }
            grid.entry(0).or_default().insert(0, Cell::Qualifier);
        }

        for (i, (_, _, attrs)) in field_data.iter().enumerate() {
            // Group fields belong to message structs and occupy no slot;
            // `validate_field_attrs` already rejects them on a segment struct.
            if attrs.group {
                continue;
            }
            let element = static_element_index(attrs, i);
            let component = attrs.component.unwrap_or(0);
            // `check_duplicate_slots` has already proved this cell is free.
            grid.entry(element)
                .or_default()
                .insert(component, Cell::Field(i));
        }

        let empty_element = quote! {
            emitter.emit(::edifact_rs::EdifactEvent::Element { value: "" })?;
        };
        let empty_component = quote! {
            emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: "" })?;
        };

        let mut elem_stmts: Vec<TokenStream2> = Vec::new();
        if let Some(&max_element) = grid.keys().max() {
            for element in 0..=max_element {
                let Some(components) = grid.get(&element) else {
                    // A declared gap between elements is an empty element.
                    elem_stmts.push(empty_element.clone());
                    continue;
                };
                let max_component = components.keys().max().copied().unwrap_or(0);

                // A repetition separator divides whole occurrences, so an
                // element with any repeating field is emitted as a unit: every
                // component is re-stated for each occurrence.
                let repeating: Vec<u32> = components
                    .iter()
                    .filter_map(|(component, cell)| match cell {
                        Cell::Field(index) if field_data[*index].2.repeat => Some(*component),
                        _ => None,
                    })
                    .collect();
                if !repeating.is_empty() {
                    if let Some(&component) = components.iter().find_map(|(c, cell)| match cell {
                        Cell::Field(index) if field_data[*index].2.composite => Some(c),
                        _ => None,
                    }) {
                        let (ident, _, _) = &field_data[match components[&component] {
                            Cell::Field(index) => index,
                            Cell::Qualifier => unreachable!("a qualifier is not composite"),
                        }];
                        return Err(syn::Error::new(
                            ident.span(),
                            format!(
                                "field `{ident}`: a data element cannot hold both a \
                                 #[edifact(composite)] field and a #[edifact(repeat)] one — the \
                                 composite already spans the whole element"
                            ),
                        ));
                    }
                    let cells: Vec<Option<(&syn::Ident, &Type, bool)>> = (0..=max_component)
                        .map(|component| match components.get(&component) {
                            Some(Cell::Field(index)) => {
                                let (ident, ty, attrs) = &field_data[*index];
                                Some((*ident, *ty, attrs.repeat))
                            }
                            // The struct-level qualifier is a literal, not a
                            // field, and it is always at component 0 — where a
                            // repeating element's qualifier belongs anyway.
                            Some(Cell::Qualifier) | None => None,
                        })
                        .collect();
                    let mut cells = cells;
                    if matches!(components.get(&0), Some(Cell::Qualifier)) {
                        let qual = struct_attrs.qualifier.clone().unwrap_or_default();
                        let literal = syn::LitStr::new(&qual, proc_macro2::Span::call_site());
                        elem_stmts.push(emit_repeating_element_with_qualifier(
                            &literal,
                            &cells[1..],
                            &repeat_lengths(&field_data, components),
                        ));
                        continue;
                    }
                    cells.truncate(usize::try_from(max_component).unwrap_or(0) + 1);
                    elem_stmts.push(emit_repeating_element(
                        &cells,
                        &repeat_lengths(&field_data, components),
                    ));
                    continue;
                }

                for component in 0..=max_component {
                    match components.get(&component) {
                        Some(Cell::Qualifier) => {
                            let qual = struct_attrs.qualifier.as_deref().unwrap_or("");
                            elem_stmts.push(quote! {
                                emitter.emit(::edifact_rs::EdifactEvent::Element { value: #qual })?;
                            });
                        }
                        Some(Cell::Field(index)) => {
                            let (ident, ty, attrs) = &field_data[*index];
                            if attrs.composite {
                                // A composite field emits its own Element plus
                                // ComponentElement events for the whole slot.
                                elem_stmts.push(emit_composite_field(ident, ty));
                            } else if component == 0 {
                                elem_stmts.push(emit_element(ident, ty));
                            } else {
                                elem_stmts.push(emit_component_element(ident, ty));
                            }
                        }
                        None if component == 0 => elem_stmts.push(empty_element.clone()),
                        None => elem_stmts.push(empty_component.clone()),
                    }
                }
            }
        }

        quote! {
            emitter.emit(::edifact_rs::EdifactEvent::StartSegment { tag: #seg_tag })?;
            #(#elem_stmts)*
            emitter.emit(::edifact_rs::EdifactEvent::EndSegment)?;
        }
    } else {
        // ── Message struct: delegate to each field ────────────────────────────
        let stmts: Vec<TokenStream2> = field_data
            .iter()
            .map(|(ident, ty, attrs)| {
                if attrs.group || is_vec_type(ty) {
                    quote! {
                        for __item in &self.#ident {
                            ::edifact_rs::EdifactSerialize::edifact_serialize(__item, emitter)?;
                        }
                    }
                } else {
                    quote! {
                        ::edifact_rs::EdifactSerialize::edifact_serialize(&self.#ident, emitter)?;
                    }
                }
            })
            .collect();
        quote! { #(#stmts)* }
    };

    Ok(quote! {
        impl ::edifact_rs::EdifactSerialize for #name {
            fn edifact_serialize<__E: ::edifact_rs::EventEmitter>(
                &self,
                emitter: &mut __E,
            ) -> ::core::result::Result<(), ::edifact_rs::EdifactError> {
                #body
                ::core::result::Result::Ok(())
            }
        }
    })
}

/// Generate the `let` binding that reads a `#[edifact(repeat)]` field.
///
/// One item per occurrence of the data element, taken from the same component
/// position in each — `RFF+ON:1*ON:2` at component 1 is `["1", "2"]`.
///
/// A missing element yields an empty `Vec` rather than an error: the field is a
/// collection, and "no occurrences" is what an absent repeating element means.
fn repeating_field_init(
    ident: &syn::Ident,
    ty: &Type,
    element: &TokenStream2,
    component: &TokenStream2,
    owned: bool,
) -> syn::Result<TokenStream2> {
    let inner = vec_inner_type(ty).ok_or_else(|| {
        syn::Error::new(
            ident.span(),
            format!("field `{ident}`: #[edifact(repeat)] requires Vec<T>"),
        )
    })?;
    let reader = if owned {
        quote! { ::edifact_rs::repeated_components_owned }
    } else {
        quote! { ::edifact_rs::repeated_components }
    };
    // `&str` items would borrow from the segment, which the owned path cannot
    // offer and the borrowed path only can with a lifetime the derive does not
    // thread; `String` and parsed scalars cover the real cases.
    let convert = if is_string_type(inner) {
        quote! { ::core::result::Result::Ok(::std::string::ToString::to_string(__value)) }
    } else {
        let message = format!(
            "field `{ident}`: repeating value is not a valid {}",
            quote!(#inner)
        );
        quote! {
            __value.parse::<#inner>().map_err(|_| ::edifact_rs::EdifactError::InvalidFieldValue {
                tag: __seg.tag.to_string(),
                element_index: #element,
                value: ::std::format!("{}: {}", #message, __value),
            })
        }
    };
    Ok(quote! {
        let #ident = #reader(__seg, #element, #component)
            .map(|__value| #convert)
            .collect::<::core::result::Result<::std::vec::Vec<#inner>, ::edifact_rs::EdifactError>>()?;
    })
}

/// What occupies one `(element, component)` cell of a segment's layout.
enum Cell {
    /// The struct-level `#[edifact(qualifier = "…")]`, which owns (0, 0).
    Qualifier,
    /// An index into `field_data`.
    Field(usize),
}

/// `Vec::len()` expressions for every repeating field of one element.
fn repeat_lengths(
    field_data: &[(&syn::Ident, &Type, FieldAttrs)],
    components: &std::collections::BTreeMap<u32, Cell>,
) -> Vec<TokenStream2> {
    components
        .values()
        .filter_map(|cell| match cell {
            Cell::Field(index) if field_data[*index].2.repeat => {
                let ident = field_data[*index].0;
                Some(quote! { self.#ident.len() })
            }
            _ => None,
        })
        .collect()
}

/// [`emit_repeating_element`] for an element whose component 0 is the
/// struct-level qualifier literal rather than a field.
fn emit_repeating_element_with_qualifier(
    qualifier: &syn::LitStr,
    rest: &[Option<(&syn::Ident, &Type, bool)>],
    lengths: &[TokenStream2],
) -> TokenStream2 {
    let values: Vec<TokenStream2> = rest
        .iter()
        .map(|cell| match cell {
            Some((ident, ty, repeat)) => occurrence_value(ident, ty, *repeat),
            None => quote! { ::std::borrow::Cow::Borrowed("") },
        })
        .collect();
    quote! {
        {
            let __n = ::core::cmp::max(1usize, [#(#lengths),*].into_iter().max().unwrap_or(0));
            for __k in 0..__n {
                let __event = if __k == 0 {
                    ::edifact_rs::EdifactEvent::Element { value: #qualifier }
                } else {
                    ::edifact_rs::EdifactEvent::RepeatElement { value: #qualifier }
                };
                emitter.emit(__event)?;
                #(
                    let __v = #values;
                    emitter.emit(::edifact_rs::EdifactEvent::ComponentElement {
                        value: __v.as_ref(),
                    })?;
                )*
            }
        }
    }
}

/// One component's value at occurrence `__k`, as a `Cow<str>` expression.
///
/// A repeating field takes its `__k`-th item; a non-repeating one is constant
/// across occurrences, which is exactly right for `RFF+ON:1*ON:2` — the
/// qualifier `ON` belongs to every occurrence, and the standard requires it to
/// be transferred in each.
fn occurrence_value(ident: &syn::Ident, ty: &Type, repeat: bool) -> TokenStream2 {
    let empty = quote! { ::std::borrow::Cow::Borrowed("") };
    if repeat {
        let inner_is_str = vec_inner_type(ty).is_some_and(is_str_like);
        let map = if inner_is_str {
            quote! { |__v| ::std::borrow::Cow::Borrowed(__v.as_ref()) }
        } else {
            quote! { |__v| ::std::borrow::Cow::Owned(::std::string::ToString::to_string(__v)) }
        };
        return quote! { self.#ident.get(__k).map(#map).unwrap_or(#empty) };
    }
    if is_option_type(ty) {
        return if option_inner_type(ty).is_some_and(is_str_like) {
            quote! {
                self.#ident
                    .as_deref()
                    .map(::std::borrow::Cow::Borrowed)
                    .unwrap_or(#empty)
            }
        } else {
            quote! {
                self.#ident
                    .as_ref()
                    .map(|__v| ::std::borrow::Cow::Owned(::std::string::ToString::to_string(__v)))
                    .unwrap_or(#empty)
            }
        };
    }
    if is_string_type(ty) {
        quote! { ::std::borrow::Cow::Borrowed(self.#ident.as_str()) }
    } else if is_str_ref_type(ty) {
        quote! { ::std::borrow::Cow::Borrowed(self.#ident) }
    } else {
        quote! { ::std::borrow::Cow::Owned(::std::string::ToString::to_string(&self.#ident)) }
    }
}

/// Emit a data element that repeats (ISO 9735-1 §8.6).
///
/// The repetition separator divides whole **occurrences**, not components, so
/// every component of the element is re-emitted for each one — `RFF+ON:1*ON:2`
/// carries its `ON` qualifier twice. `components` is the element's full
/// component list in order; `None` is a gap that stays empty.
///
/// The occurrence count is the longest repeating field in the element, and at
/// least one: an element with no occurrences is still transferred, as absent,
/// which is what keeps the elements after it in position (§8.7.1).
fn emit_repeating_element(
    components: &[Option<(&syn::Ident, &Type, bool)>],
    lengths: &[TokenStream2],
) -> TokenStream2 {
    let values: Vec<TokenStream2> = components
        .iter()
        .map(|cell| match cell {
            Some((ident, ty, repeat)) => occurrence_value(ident, ty, *repeat),
            None => quote! { ::std::borrow::Cow::Borrowed("") },
        })
        .collect();
    let (first, rest) = values.split_first().expect("an element has ≥1 component");
    quote! {
        {
            let __n = ::core::cmp::max(1usize, [#(#lengths),*].into_iter().max().unwrap_or(0));
            for __k in 0..__n {
                let __v = #first;
                let __event = if __k == 0 {
                    ::edifact_rs::EdifactEvent::Element { value: __v.as_ref() }
                } else {
                    ::edifact_rs::EdifactEvent::RepeatElement { value: __v.as_ref() }
                };
                emitter.emit(__event)?;
                #(
                    let __v = #rest;
                    emitter.emit(::edifact_rs::EdifactEvent::ComponentElement {
                        value: __v.as_ref(),
                    })?;
                )*
            }
        }
    }
}

/// Generate the token stream that emits field `ident` (of type `ty`) as one element.
///
/// For `String` and `&str` fields the value is emitted zero-copy via `.as_str()`
/// (or directly).  All other types fall back to `ToString::to_string`.
fn emit_element(ident: &syn::Ident, ty: &Type) -> TokenStream2 {
    if is_option_type(ty) {
        let inner_is_str = option_inner_type(ty).is_some_and(is_str_like);
        if inner_is_str {
            quote! {
                match &self.#ident {
                    ::core::option::Option::Some(__v) => {
                        emitter.emit(::edifact_rs::EdifactEvent::Element { value: __v.as_str() })?;
                    }
                    ::core::option::Option::None => {
                        emitter.emit(::edifact_rs::EdifactEvent::Element { value: "" })?;
                    }
                }
            }
        } else {
            quote! {
                match &self.#ident {
                    ::core::option::Option::Some(__v) => {
                        let __s = ::std::string::ToString::to_string(__v);
                        emitter.emit(::edifact_rs::EdifactEvent::Element { value: &__s })?;
                    }
                    ::core::option::Option::None => {
                        emitter.emit(::edifact_rs::EdifactEvent::Element { value: "" })?;
                    }
                }
            }
        }
    } else if is_string_type(ty) {
        quote! {
            emitter.emit(::edifact_rs::EdifactEvent::Element { value: self.#ident.as_str() })?;
        }
    } else if is_str_ref_type(ty) {
        quote! {
            emitter.emit(::edifact_rs::EdifactEvent::Element { value: self.#ident })?;
        }
    } else {
        quote! {
            {
                let __s = ::std::string::ToString::to_string(&self.#ident);
                emitter.emit(::edifact_rs::EdifactEvent::Element { value: &__s })?;
            }
        }
    }
}

/// Generate the token stream that emits field `ident` as a composite component (`ComponentElement`).
///
/// For `String` and `&str` fields the value is emitted zero-copy.
fn emit_component_element(ident: &syn::Ident, ty: &Type) -> TokenStream2 {
    if is_option_type(ty) {
        let inner_is_str = option_inner_type(ty).is_some_and(is_str_like);
        if inner_is_str {
            quote! {
                match &self.#ident {
                    ::core::option::Option::Some(__v) => {
                        emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: __v.as_str() })?;
                    }
                    ::core::option::Option::None => {
                        emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: "" })?;
                    }
                }
            }
        } else {
            quote! {
                match &self.#ident {
                    ::core::option::Option::Some(__v) => {
                        let __s = ::std::string::ToString::to_string(__v);
                        emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: &__s })?;
                    }
                    ::core::option::Option::None => {
                        emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: "" })?;
                    }
                }
            }
        }
    } else if is_string_type(ty) {
        quote! {
            emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: self.#ident.as_str() })?;
        }
    } else if is_str_ref_type(ty) {
        quote! {
            emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: self.#ident })?;
        }
    } else {
        quote! {
            {
                let __s = ::std::string::ToString::to_string(&self.#ident);
                emitter.emit(::edifact_rs::EdifactEvent::ComponentElement { value: &__s })?;
            }
        }
    }
}

/// Generate the token stream that emits a full composite field via `EdifactCompositeSerialize`.
fn emit_composite_field(ident: &syn::Ident, ty: &Type) -> TokenStream2 {
    if is_option_type(ty) {
        quote! {
            match &self.#ident {
                ::core::option::Option::Some(__v) => {
                    ::edifact_rs::EdifactCompositeSerialize::edifact_serialize_composite(__v, emitter)?;
                }
                ::core::option::Option::None => {
                    emitter.emit(::edifact_rs::EdifactEvent::Element { value: "" })?;
                }
            }
        }
    } else {
        quote! {
            ::edifact_rs::EdifactCompositeSerialize::edifact_serialize_composite(&self.#ident, emitter)?;
        }
    }
}

// ── EdifactDeserialize ─────────────────────────────────────────────────────────

fn impl_deserialize(input: &DeriveInput) -> syn::Result<TokenStream2> {
    let name = &input.ident;
    let struct_attrs = parse_struct_attrs(input)?;
    let fields = get_named_fields(input)?;
    let is_segment_struct = struct_attrs.segment.is_some();

    let field_data: Vec<(&syn::Ident, &Type, FieldAttrs)> = fields
        .named
        .iter()
        .map(|f| {
            let attrs = parse_field_attrs(f)?;
            let ident = f
                .ident
                .as_ref()
                .ok_or_else(|| syn::Error::new_spanned(f, "only named fields are supported"))?;
            validate_field_attrs(ident, &f.ty, &attrs, is_segment_struct)?;
            Ok((ident, &f.ty, attrs))
        })
        .collect::<syn::Result<_>>()?;
    check_duplicate_slots(&field_data, is_segment_struct)?;
    let (slot_prelude, slots) = resolve_slots(&struct_attrs, &field_data)?;

    let field_names: Vec<&syn::Ident> = field_data.iter().map(|(id, _, _)| *id).collect();

    let (body, owned_body, segment_tag_impl) = if let Some(seg_tag) = &struct_attrs.segment {
        // ── Segment struct ────────────────────────────────────────────────────
        let qualifier_guard = if let Some(qual) = &struct_attrs.qualifier {
            quote! {
                if __seg.element_str(0).unwrap_or("") != #qual {
                    return ::core::result::Result::Err(
                        ::edifact_rs::EdifactError::MissingRequiredElement {
                            tag: #seg_tag.to_owned(),
                            element_index: 0,
                        }
                    );
                }
            }
        } else if let Some(idx) = struct_attrs.qualifier_from {
            quote! {
                // Fully-qualified patterns: a user type named `Some`/`None` in
                // scope (e.g. `pub use MyOpt::*`) would otherwise shadow the
                // std variants and break the generated code.
                match __seg.element_str(#idx as usize) {
                    ::core::option::Option::None => return ::core::result::Result::Err(
                        ::edifact_rs::EdifactError::MissingRequiredElement {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx as usize,
                        }
                    ),
                    ::core::option::Option::Some("") => return ::core::result::Result::Err(
                        ::edifact_rs::EdifactError::InvalidFieldValue {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx as usize,
                            value: ::std::string::String::new(),
                        }
                    ),
                    ::core::option::Option::Some(__qual_val) => { let _ = __qual_val; }
                }
            }
        } else {
            quote! {}
        };

        let find_seg = if let Some(qual) = &struct_attrs.qualifier {
            quote! {
                ::edifact_rs::find_qualified_segment(segments, #seg_tag, #qual)
            }
        } else {
            quote! {
                ::edifact_rs::find_segment(segments, #seg_tag)
            }
        };

        let field_inits: Vec<TokenStream2> = field_data
            .iter()
            .zip(slots.iter())
            .map(|((ident, ty, attrs), slot)| -> syn::Result<TokenStream2> {
                let idx = &slot.element;
                if attrs.repeat {
                    return repeating_field_init(ident, ty, &slot.element, &slot.component, false);
                }
                if attrs.composite {
                    if is_option_type(ty) {
                        let inner_ty = option_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                        return Ok(quote! {
                            let #ident = match ::edifact_rs::composite_element(__seg, #idx) {
                                ::core::option::Option::Some(__composite) => {
                                    ::core::option::Option::Some(
                                        <#inner_ty as ::edifact_rs::EdifactCompositeDeserialize>::edifact_deserialize_composite(__composite)?
                                    )
                                }
                                ::core::option::Option::None => ::core::option::Option::None,
                            };
                        });
                    }
                    return Ok(quote! {
                        let #ident = <#ty as ::edifact_rs::EdifactCompositeDeserialize>::edifact_deserialize_composite(
                            ::edifact_rs::composite_element(__seg, #idx).ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                tag: #seg_tag.to_owned(),
                                element_index: #idx,
                            })?
                        )?;
                    });
                }
                let comp = &slot.component;
                let value_expr = if slot.has_component {
                    quote! {
                        __seg.get_element(#idx).and_then(|__e| __e.get_component(#comp))
                    }
                } else {
                    quote! { __seg.element_str(#idx) }
                };
                // Report the variant that matches what the field actually
                // addresses.  For a code slot `names_component` is a `const`
                // lookup, so this branch folds away.
                let names_component = &slot.names_component;
                let missing_required_err = quote! {
                    if #names_component {
                        ::edifact_rs::EdifactError::MissingRequiredComponent {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx,
                            component_index: #comp,
                        }
                    } else {
                        ::edifact_rs::EdifactError::MissingRequiredElement {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx,
                        }
                    }
                };
                Ok(if is_option_type(ty) {
                    let inner_ty = option_inner_type(ty);
                    let inner_is_str = inner_ty.is_some_and(is_str_like);
                    if attrs.required {
                        // #[edifact(required)] on Option<T>: treat absence as an error.
                        // Emits MissingRequiredComponent when combined with component = N,
                        // MissingRequiredElement otherwise.
                        if inner_is_str {
                            quote! {
                                let #ident = ::core::option::Option::Some(
                                    #value_expr
                                        .filter(|__s| !__s.is_empty())
                                        .ok_or_else(|| #missing_required_err)?
                                        .to_owned()
                                );
                            }
                        } else {
                            let inner_ty = inner_ty
                                .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                            quote! {
                                let #ident = ::core::option::Option::Some(
                                    #value_expr
                                        .filter(|__s| !__s.is_empty())
                                        .ok_or_else(|| #missing_required_err)?
                                        .parse::<#inner_ty>()
                                        .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })?
                                );
                            }
                        }
                    } else if inner_is_str {
                        quote! {
                            let #ident = #value_expr
                                .filter(|__s| !__s.is_empty())
                                .map(::std::string::String::from);
                        }
                    } else {
                        let inner_ty = inner_ty
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                        quote! {
                            let #ident = #value_expr
                                .filter(|__s| !__s.is_empty())
                                .map(|__s| __s.parse::<#inner_ty>()
                                    .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })
                                )
                                .transpose()?;
                        }
                    }
                } else if is_str_like(ty) {
                    quote! {
                        let #ident = #value_expr
                            .filter(|__s| !__s.is_empty())
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                tag: #seg_tag.to_owned(),
                                element_index: #idx,
                            })?
                            .to_owned();
                    }
                } else {
                    quote! {
                        let #ident = #value_expr
                            .filter(|__s| !__s.is_empty())
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                tag: #seg_tag.to_owned(),
                                element_index: #idx,
                            })?
                            .parse::<#ty>()
                            .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })?;
                    }
                })
            })
            .collect::<syn::Result<_>>()?;

        let body = quote! {
            #slot_prelude
            let __seg = #find_seg
                .ok_or_else(|| ::edifact_rs::EdifactError::MissingSegment {
                    tag: #seg_tag.to_owned(),
                    expected_position: "message body".to_owned(),
                })?;
            #qualifier_guard
            #(#field_inits)*
            ::core::result::Result::Ok(Self { #(#field_names),* })
        };

        // Also generate EdifactSegmentTag impl.
        // Declare the qualifier through `QUALIFIER_PATTERN` rather than by
        // hand-rolling `matches_segment`.  Overriding only the borrowed matcher
        // left `matches_owned_segment` (which consults `QUALIFIER_PATTERN`)
        // matching on tag alone, so the owned deserialization path picked up
        // wrongly-qualified segments and then failed to parse them.
        let qualifier_match = if let Some(qual) = &struct_attrs.qualifier {
            quote! {
                const QUALIFIER_PATTERN: ::core::option::Option<&'static str> =
                    ::core::option::Option::Some(#qual);
            }
        } else if let Some(idx) = struct_attrs.qualifier_from {
            // "Any non-empty value at element `idx`" cannot be expressed as a
            // `QUALIFIER_PATTERN` (which is element 0 only), so both matchers are
            // overridden explicitly and must stay in agreement.
            quote! {
                fn matches_segment(seg: &::edifact_rs::Segment<'_>) -> bool {
                    seg.tag == Self::SEGMENT_TAG
                        && !seg.element_str(#idx as usize).unwrap_or("").is_empty()
                }

                fn matches_owned_segment(seg: &::edifact_rs::OwnedSegment) -> bool {
                    seg.tag == Self::SEGMENT_TAG
                        && !seg
                            .elements
                            .get(#idx as usize)
                            .and_then(|e| e.components.first())
                            .map(|(c, _)| c.as_str())
                            .unwrap_or("")
                            .is_empty()
                }
            }
        } else {
            quote! {}
        };

        let seg_tag_impl = quote! {
            impl ::edifact_rs::EdifactSegmentTag for #name {
                const SEGMENT_TAG: &'static str = #seg_tag;
                #qualifier_match
            }
        };

        // ── Owned-segment deserialization path ────────────────────────────────
        // Works directly on `&[OwnedSegment]` without allocating a `Vec<Segment>`.
        let find_seg_owned = if let Some(qual) = &struct_attrs.qualifier {
            quote! {
                ::edifact_rs::find_qualified_segment_owned(segments, #seg_tag, #qual)
            }
        } else {
            quote! {
                ::edifact_rs::find_segment_owned(segments, #seg_tag)
            }
        };

        let field_inits_owned: Vec<TokenStream2> = field_data
            .iter()
            .zip(slots.iter())
            .map(|((ident, ty, attrs), slot)| -> syn::Result<TokenStream2> {
                let idx = &slot.element;
                if attrs.repeat {
                    return repeating_field_init(ident, ty, &slot.element, &slot.component, true);
                }
                if attrs.composite {
                    if is_option_type(ty) {
                        let inner_ty = option_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                        return Ok(quote! {
                            let #ident = match __seg.elements.get(#idx) {
                                ::core::option::Option::Some(__e) => {
                                    let __cows = __e.components.iter()
                                        .map(|(s, _)| ::std::borrow::Cow::Borrowed(s.as_str()))
                                        .collect::<::std::vec::Vec<::std::borrow::Cow<'_, str>>>();
                                    ::core::option::Option::Some(
                                        <#inner_ty as ::edifact_rs::EdifactCompositeDeserialize>::edifact_deserialize_composite(
                                            ::edifact_rs::CompositeElement::from_slice(&__cows)
                                        )?
                                    )
                                }
                                ::core::option::Option::None => ::core::option::Option::None,
                            };
                        });
                    }
                    return Ok(quote! {
                        let #ident = {
                            let __cows = __seg.elements.get(#idx)
                                .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                    tag: #seg_tag.to_owned(),
                                    element_index: #idx,
                                })?
                                .components.iter()
                                .map(|(s, _)| ::std::borrow::Cow::Borrowed(s.as_str()))
                                .collect::<::std::vec::Vec<::std::borrow::Cow<'_, str>>>();
                            <#ty as ::edifact_rs::EdifactCompositeDeserialize>::edifact_deserialize_composite(
                                ::edifact_rs::CompositeElement::from_slice(&__cows)
                            )?
                        };
                    });
                }
                let comp = &slot.component;
                let value_expr_owned = if slot.has_component {
                    quote! { __seg.component_str(#idx, #comp) }
                } else {
                    quote! { __seg.element_str(#idx) }
                };
                // Same variant selection as the borrowed path; the two must
                // agree or the same input yields different error codes.
                let names_component = &slot.names_component;
                let missing_required_err_owned = quote! {
                    if #names_component {
                        ::edifact_rs::EdifactError::MissingRequiredComponent {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx,
                            component_index: #comp,
                        }
                    } else {
                        ::edifact_rs::EdifactError::MissingRequiredElement {
                            tag: #seg_tag.to_owned(),
                            element_index: #idx,
                        }
                    }
                };
                Ok(if is_option_type(ty) {
                    if let Some(inner_ty) = option_inner_type(ty) {
                        if attrs.required {
                            // #[edifact(required)] on Option<T>: absence is an error.
                            // Emits MissingRequiredComponent when combined with component = N,
                            // MissingRequiredElement otherwise.
                            if is_str_like(inner_ty) {
                                quote! {
                                    let #ident = ::core::option::Option::Some(
                                        #value_expr_owned
                                            .filter(|__s| !__s.is_empty())
                                            .ok_or_else(|| #missing_required_err_owned)?
                                            .to_owned()
                                    );
                                }
                            } else {
                                quote! {
                                    let #ident = ::core::option::Option::Some(
                                        #value_expr_owned
                                            .filter(|__s| !__s.is_empty())
                                            .ok_or_else(|| #missing_required_err_owned)?
                                            .parse::<#inner_ty>()
                                            .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })?
                                    );
                                }
                            }
                        } else if is_str_like(inner_ty) {
                            quote! {
                                let #ident = #value_expr_owned
                                    .filter(|__s| !__s.is_empty())
                                    .map(::std::string::String::from);
                            }
                        } else {
                            quote! {
                                let #ident = #value_expr_owned
                                    .filter(|__s| !__s.is_empty())
                                    .map(|__s| __s.parse::<#inner_ty>()
                                        .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })
                                    )
                                    .transpose()?;
                            }
                        }
                    } else {
                        // Fallback: treat as String (should not happen with well-formed types).
                        quote! {
                            let #ident = #value_expr_owned
                                .filter(|__s| !__s.is_empty())
                                .map(::std::string::String::from);
                        }
                    }
                } else if is_str_like(ty) {
                    quote! {
                        let #ident = #value_expr_owned
                            .filter(|__s| !__s.is_empty())
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                tag: #seg_tag.to_owned(),
                                element_index: #idx,
                            })?
                            .to_owned();
                    }
                } else {
                    quote! {
                        let #ident = #value_expr_owned
                            .filter(|__s| !__s.is_empty())
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingRequiredElement {
                                tag: #seg_tag.to_owned(),
                                element_index: #idx,
                            })?
                            .parse::<#ty>()
                            .map_err(|_| ::edifact_rs::EdifactError::InvalidText { offset: __seg.span.start })?;
                    }
                })
            })
            .collect::<syn::Result<_>>()?;

        let owned_body = quote! {
            #slot_prelude
            let __seg = #find_seg_owned
                .ok_or_else(|| ::edifact_rs::EdifactError::MissingSegment {
                    tag: #seg_tag.to_owned(),
                    expected_position: "message body".to_owned(),
                })?;
            #qualifier_guard
            #(#field_inits_owned)*
            ::core::result::Result::Ok(Self { #(#field_names),* })
        };

        (body, owned_body, seg_tag_impl)
    } else {
        // ── Message struct: delegate to each field ────────────────────────────
        let field_inits: Vec<TokenStream2> = field_data
            .iter()
            .map(|(ident, ty, attrs)| -> syn::Result<TokenStream2> {
                Ok(if let Some(qual) = &attrs.qualifier {
                    if attrs.group || is_vec_type(ty) {
                        let inner_ty = vec_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Vec<T>"))?;
                        quote! {
                            let #ident = segments
                                .iter()
                                .filter(|__seg| {
                                    __seg.tag == <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG
                                        && __seg.element_str(0).unwrap_or("") == #qual
                                })
                                .map(|__seg| {
                                    ::edifact_rs::EdifactDeserialize::edifact_deserialize(
                                        ::core::slice::from_ref(__seg),
                                    )
                                })
                                .collect::<::core::result::Result<::std::vec::Vec<#inner_ty>, ::edifact_rs::EdifactError>>()?;
                        }
                    } else if is_option_type(ty) {
                        let inner_ty = option_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                        quote! {
                            let #ident = match ::edifact_rs::find_qualified_segment(
                                segments,
                                <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG,
                                #qual,
                            ) {
                                ::core::option::Option::Some(__seg) => {
                                    ::core::option::Option::Some(
                                        ::edifact_rs::EdifactDeserialize::edifact_deserialize(
                                            ::core::slice::from_ref(__seg),
                                        )?
                                    )
                                }
                                ::core::option::Option::None => ::core::option::Option::None,
                            };
                        }
                    } else {
                        quote! {
                            let __seg = ::edifact_rs::find_qualified_segment(
                                segments,
                                <#ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG,
                                #qual,
                            )
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingSegment {
                                tag: <#ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG.to_owned(),
                                expected_position: "message body".to_owned(),
                            })?;
                            let #ident = ::edifact_rs::EdifactDeserialize::edifact_deserialize(
                                ::core::slice::from_ref(__seg),
                            )?;
                        }
                    }
                } else if attrs.group || is_vec_type(ty) {
                    let inner_ty = vec_inner_type(ty)
                        .ok_or_else(|| syn::Error::new(ident.span(), "expected Vec<T>"))?;
                    quote! {
                        let #ident = ::edifact_rs::find_segments_typed::<#inner_ty>(segments)
                            .map(|__seg| {
                                <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize(
                                    ::core::slice::from_ref(__seg),
                                )
                            })
                            .collect::<::core::result::Result<::std::vec::Vec<#inner_ty>, _>>()?;
                    }
                } else if is_option_type(ty) {
                    let inner_ty = option_inner_type(ty)
                        .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                    quote! {
                        let #ident = if segments
                            .iter()
                            .any(|__seg| __seg.tag == <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG)
                        {
                            ::core::option::Option::Some(
                                <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize(segments)?
                            )
                        } else {
                            ::core::option::Option::None
                        };
                    }
                } else {
                    quote! {
                        let #ident = ::edifact_rs::EdifactDeserialize::edifact_deserialize(segments)?;
                    }
                })
            })
            .collect::<syn::Result<_>>()?;

        let body = quote! {
            #(#field_inits)*
            ::core::result::Result::Ok(Self { #(#field_names),* })
        };

        // ── Owned-segment message deserialization path ────────────────────────
        // Works directly on `&[OwnedSegment]` without converting to `Vec<Segment>`.
        let field_inits_owned: Vec<TokenStream2> = field_data
            .iter()
            .map(|(ident, ty, attrs)| -> syn::Result<TokenStream2> {
                Ok(if let Some(qual) = &attrs.qualifier {
                    if attrs.group || is_vec_type(ty) {
                        let inner_ty = vec_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Vec<T>"))?;
                        quote! {
                            let #ident = segments
                                .iter()
                                .filter(|__seg| {
                                    __seg.tag == <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG
                                        && __seg.element_str(0).unwrap_or("") == #qual
                                })
                                .map(|__seg| {
                                    <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(
                                        ::core::slice::from_ref(__seg),
                                    )
                                })
                                .collect::<::core::result::Result<::std::vec::Vec<#inner_ty>, ::edifact_rs::EdifactError>>()?;
                        }
                    } else if is_option_type(ty) {
                        let inner_ty = option_inner_type(ty)
                            .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                        quote! {
                            let #ident = match ::edifact_rs::find_qualified_segment_owned(
                                segments,
                                <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG,
                                #qual,
                            ) {
                                ::core::option::Option::Some(__seg) => {
                                    ::core::option::Option::Some(
                                        <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(
                                            ::core::slice::from_ref(__seg),
                                        )?
                                    )
                                }
                                ::core::option::Option::None => ::core::option::Option::None,
                            };
                        }
                    } else {
                        quote! {
                            let __seg = ::edifact_rs::find_qualified_segment_owned(
                                segments,
                                <#ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG,
                                #qual,
                            )
                            .ok_or_else(|| ::edifact_rs::EdifactError::MissingSegment {
                                tag: <#ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG.to_owned(),
                                expected_position: "message body".to_owned(),
                            })?;
                            let #ident = <#ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(
                                ::core::slice::from_ref(__seg),
                            )?;
                        }
                    }
                } else if attrs.group || is_vec_type(ty) {
                    let inner_ty = vec_inner_type(ty)
                        .ok_or_else(|| syn::Error::new(ident.span(), "expected Vec<T>"))?;
                    quote! {
                        let #ident = segments
                            .iter()
                            .filter(|__seg| <#inner_ty as ::edifact_rs::EdifactSegmentTag>::matches_owned_segment(__seg))
                            .map(|__seg| {
                                <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(
                                    ::core::slice::from_ref(__seg),
                                )
                            })
                            .collect::<::core::result::Result<::std::vec::Vec<#inner_ty>, _>>()?;
                    }
                } else if is_option_type(ty) {
                    let inner_ty = option_inner_type(ty)
                        .ok_or_else(|| syn::Error::new(ident.span(), "expected Option<T>"))?;
                    quote! {
                        let #ident = if segments
                            .iter()
                            .any(|__seg| __seg.tag == <#inner_ty as ::edifact_rs::EdifactSegmentTag>::SEGMENT_TAG)
                        {
                            ::core::option::Option::Some(
                                <#inner_ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(segments)?
                            )
                        } else {
                            ::core::option::Option::None
                        };
                    }
                } else {
                    quote! {
                        let #ident = <#ty as ::edifact_rs::EdifactDeserialize>::edifact_deserialize_owned(segments)?;
                    }
                })
            })
            .collect::<syn::Result<_>>()?;

        let owned_body = quote! {
            #(#field_inits_owned)*
            ::core::result::Result::Ok(Self { #(#field_names),* })
        };

        (body, owned_body, quote! {})
    };

    Ok(quote! {
        impl ::edifact_rs::EdifactDeserialize for #name {
            fn edifact_deserialize(
                segments: &[::edifact_rs::Segment<'_>],
            ) -> ::core::result::Result<Self, ::edifact_rs::EdifactError> {
                #body
            }

            fn edifact_deserialize_owned(
                segments: &[::edifact_rs::OwnedSegment],
            ) -> ::core::result::Result<Self, ::edifact_rs::EdifactError> {
                #owned_body
            }
        }
        #segment_tag_impl
    })
}

#[cfg(test)]
mod tests {
    /// Compile-fail / compile-pass suite for the derive macros.
    ///
    /// The blessed `.stderr` files hold only this crate's own diagnostics, so
    /// they are stable across toolchains and CI runs the suite on both MSRV and
    /// stable.  Keep it that way: an expectation that captures a *rustc*
    /// warning or note will drift on the next release and drown real
    /// regressions in noise.  If a UI case triggers an incidental lint, silence
    /// it at the source (see `tests/ui/support.rs`) rather than blessing it.
    ///
    /// The suite is off by default because it is slow; set `EDIFACT_UI_TESTS=1`
    /// to run it, or use `just ui` / `just ui-msrv`.
    ///
    /// Re-bless after intentional message changes with `just ui-bless`.
    #[test]
    fn trybuild_ui() {
        if std::env::var_os("EDIFACT_UI_TESTS").is_none() {
            eprintln!(
                "skipping derive UI suite: set EDIFACT_UI_TESTS=1 to run it \
                 (expectations are pinned to the MSRV toolchain)"
            );
            return;
        }
        let t = trybuild::TestCases::new();
        t.pass("tests/ui/pass_*.rs");
        t.compile_fail("tests/ui/fail_*.rs");
    }
}