Crate type_bridge_schema_migration 

Verified offline schema migration contracts and provider lowering policy.

Re-exports

pub use lowering::SchemaFactCatalog;

pub use lowering::SchemaLoweringBinding;

pub use lowering::SchemaLoweringDiagnostic;

pub use lowering::SchemaLoweringPlan;

pub use lowering::StatementOperationKind;

pub use lowering::StatementUnit;

pub use lowering::TypeQlStatement;

pub use lowering::TypeQlVerb;

pub use lowering::lower_schema_delta;

pub use profile::AnnotationKind;

pub use profile::AnnotationSubjectKind;

pub use profile::AnnotationTransition;

pub use profile::EvidenceFlag;

pub use profile::EvidenceRequirement;

pub use profile::FactKind;

pub use profile::FactTransition;

pub use profile::InterfaceDefault;

pub use profile::InterfaceKind;

pub use profile::LoweringMechanism;

pub use profile::SafetyScenario;

pub use profile::SafetyScenarioRule;

pub use profile::SchemaLoweringProfile;

pub use profile::TransitionRule;

pub use profile::annotation_transition_rule;

pub use profile::canonical_profile_bytes;

pub use profile::fact_transition_rule;

pub use profile::profile_fingerprint;

pub use profile::schema_lowering_profile_binding;

pub use profile::typedb_3_12_1_profile;

Modules

lowering

Deterministic offline lowering of validated schema deltas to TypeDB 3.12.1 TypeQL.

profile

Closed TypeDB 3.12.1 schema-transition registry.

Structs

AppliedRecord

Identity-only applied-ledger record for one verified manifest.

CanonicalMigrationHistoryEvidence

Exact canonical-file authority retained from one successful discovery.

ExecutionFence

A monotonically increasing store-issued migration fencing token.

ExecutionScope

One durable managed migration scope.

GeneratedMigration

A freshly authored manifest with its exact canonical persistence bytes.

GroupCommitFailure

A provider commit failure with explicit asymmetric certainty.

GroupEventRecord

Identity-only journal event for one verified transaction group.

JournalEntry

One record after the store atomically assigns its ordering sequence.

JournalSequence

Store-assigned monotonic ordering identity for journal entries.

LeaseHolderId

Caller-supplied lease holder identity with no machine-derived garnish.

LegacyAppliedSetDigest

Digest binding every semantic row in the released applied ledger.

LegacyMigrationAppLabel

A lossless bounded UTF-8 application label from released migration history.

LegacyMigrationChecksum

A tagged legacy migration checksum.

LegacyMigrationId

Lossless compound identity for a released migration frontier member.

LegacyMigrationName

A lossless bounded UTF-8 migration name from released migration history.

LegacyMigrationReference

One legacy frontier migration named by the canonical bridge.

MigrationApplyApproval

A one-time operator approval bound to one exact verified transition.

MigrationAuthoringLock

Exclusive advisory lock shared by canonical migration publishers.

MigrationDirectory

A retained cross-platform capability for one migration directory.

MigrationDirectoryEntry

One direct entry observed through a retained migration-directory handle.

MigrationGenerationRequest

Inputs authoring the next migration for one application lineage.

MigrationHistoryGraph

A validated DAG whose only node authority is a verified canonical manifest.

MigrationLease

Store-issued authority to mutate one migration scope.

MigrationSafetyPolicy

Explicit per-class apply policy.

MigrationVerifyReport

The complete read-only verification report.

OpenPlanRecord

One trusted, still-open plan and its ordered group events.

OpenRollbackPlanRecord

One trusted, still-open rollback plan and its ordered step events.

PlanRecord

Identity-only journal record for one complete verified apply plan.

RollbackPlanRecord

Identity-only journal record for one complete verified rollback plan.

RollbackStepEventRecord

Identity-only journal event for one verified rollback step transaction.

RolledBackRecord

Identity-only retirement record for one rolled-back applied migration.

SchemaLoweringProfileFingerprint

A fingerprint whose metadata is pinned to the schema-lowering domain.

SchemaLoweringProfileId

A validated schema-lowering profile identifier.

SchemaMigrationDraft

Trusted authoring input containing only context-free schema steps.

VerifiedMigrationApplyManifest

One verified manifest plus its external digest and rederived step evidence.

VerifiedMigrationApplyPlan

An opaque, deterministic, pre-I/O migration apply plan.

VerifiedMigrationRollbackManifest

One verified manifest with its complete reverse program.

VerifiedMigrationRollbackPlan

A complete pre-verified rollback plan in reverse-topological order.

VerifiedMigrationRollbackStep

One lowered reverse program for one forward schema step.

VerifiedMigrationTransactionGroup

One verifier-owned transaction group ending in exactly one schema delta.

VerifiedSchemaMigrationManifest

A manifest whose complete schema program has been replayed and recomputed.

Enums

GroupCommitCertainty

Commit certainty owned by the migration journal layer.

GroupJournalEventKind

Durable commit-boundary event vocabulary for one transaction group.

GroupRecoveryDecision

Fail-closed recovery decision for one positional transaction group.

GroupRecoveryObservation

Optional live managed-semantic evidence used during recovery.

MigrationApplyPlanError

Failure while deriving a provider-neutral apply plan before any I/O.

MigrationApplyTarget

Select the target closure of a migration apply operation.

MigrationDriftFinding

One verified drift finding.

MigrationExecutionOutcome

Terminal result of one coordinator invocation.

MigrationExecutionPosition

Exact execution position associated with a non-success apply outcome.

MigrationGenerationOutcome

Result of one offline generation attempt.

MigrationPreviewError

Failure rendering a review-only TypeQL preview for a generated manifest.

MigrationRollbackOutcome

Terminal result of one rollback coordinator invocation.

SafetyClass

The exact eight-class provider-neutral migration safety vocabulary.

SafetyClassificationError

A malformed formal transition that cannot be assigned a safety class.

SafetyPolicyDecision

How the apply gate treats one manifest safety classification.

VerifiedMigrationApplyStep

One trusted step aligned to its independently verified execution evidence.

Constants

LEGACY_APPLIED_SET_ALGORITHM

Digest algorithm vocabulary for the complete released applied set.

LEGACY_APPLIED_SET_CANONICALIZATION

Canonicalization/domain vocabulary for the complete released applied set.

LEGACY_CHECKSUM_ALGORITHM

Tag identifying the legacy checksum algorithm: SHA-256 over the authored Python migration source, hex-encoded and truncated to 16 characters.

SCHEMA_LOWERING_PROFILE_CANONICALIZATION

Canonicalization version for schema-lowering profile documents.

SCHEMA_LOWERING_PROFILE_FINGERPRINT_DOMAIN

Fingerprint domain for schema-lowering profile documents.

TYPEDB_3_12_1_SCHEMA_LOWERING_PROFILE_ID

The only schema-lowering profile admitted by this V2 contract revision.

Traits

MigrationExecutionJournal

Durable applied ledger and open-plan journal.

MigrationExecutionProvider

Provider seam for exact managed-state observation and group transactions.

MigrationLeaseStore

Store-backed exclusive lease service.

PreparedMigrationGroup

One provider transaction prepared for an exact verifier-owned group.

Functions

active_applied_entries

Filter an applied ledger down to its active records.

build_legacy_frontier_bridge

Build the verified zero-operation bridge for one legacy frontier.

build_verified_manifest

Replay a trusted draft against an exact declared source and managed context.

build_verified_migration_apply_plan

Build a complete apply plan from verified history and explicit execution policy.

build_verified_migration_rollback_plan

Build a complete rollback plan from verified history and explicit policy.

canonical_history_declared_legacy_bridge_count_in

Count direct canonical candidates that declare a legacy bridge.

canonical_history_declares_legacy_bridge_in

Return whether any direct canonical candidate declares a legacy bridge.

classify_operation_safety

Classify one validated formal operation without granting execution authority.

decide_group_recovery

Decide recovery from durable event and freshly observed managed semantics.

decode_verified_manifest

Decode canonical bytes and return only a fully replay-verified manifest.

discover_verified_migration_chain

Discover, order, and replay-verify one complete canonical migration chain.

discover_verified_migration_chain_in

Discover and replay-verify through a retained directory capability.

discover_verified_migration_chain_with_evidence_in

Discover and replay-verify through a retained directory while preserving the exact canonical-file authority used to build the graph.

discover_verified_migrations

Discover only direct canonical V2 children and verify each before graph use.

discover_verified_migrations_in

Discover through a retained directory capability.

encode_verified_manifest

Encode a verified manifest under the bounded canonical JSON contract.

execute_verified_migration_apply_plan

Execute one complete verified plan under a store-backed fenced lease.

execute_verified_migration_rollback_plan

Execute one complete verified rollback plan under a store-backed lease.

generate_next_migration

Author the next verified migration from the discovered history graph.

partition_transaction_groups

Partition trusted apply evidence into exact assertion-plus-delta transactions.

render_migration_preview

Render the review-only TypeQL preview of a verified manifest.

require_adoption_authority_pair

Require adopted genesis and the unique canonical legacy bridge to exist as one inseparable authority pair.

require_adoption_authority_pair_state

Require the raw adoption-authority presence state to be complete.

try_acquire_migration_authoring_lock

Acquire the shared canonical-history authoring lock without waiting.

validate_portable_direct_child

Validate one UTF-8, cross-platform direct-child name.

verified_manifest_digest

Compute the external raw full-SHA256 digest of exact canonical manifest bytes.

verify_migration_state

Verify the migration state triad and report every drift finding.

write_generated_migration_under_lock

Publish a generated manifest while its directory’s authoring lock is held.

Type Aliases

ExecutionFuture

Boxed future returned by provider-neutral execution stores.

GroupCommitFuture

Future returned by a consuming provider commit operation.