fix(driver-sql)!: findWithWindowFunctions presents its rows like every other read door (#16609) - #16716

📓 Docs Drift Check

This PR changes 1 package(s): @objectstack/driver-sql, touching 1 documentable anchor(s).

2 hand-written doc(s) NAME something this change touched and may need an implementation-accuracy re-verification:

• content/docs/data-modeling/queries.mdx (via findWithWindowFunctions (symbol, a method of class SqlDriver))
• content/docs/protocol/objectql/query-syntax.mdx (via findWithWindowFunctions (symbol, a method of class SqlDriver))

⛔ 1 release-owned page(s) also name something this change touched. These are read-only:

• content/docs/releases/v17.mdx (via findWithWindowFunctions (symbol, a method of class SqlDriver))

content/docs/releases/ is RELEASE-OWNED (AGENTS.md "Documentation Guardrails"): release
notes are written centrally at release time, and a code PR that edits them is the exact PR
that guardrail exists to stop. They are still audited — read-only. If one of them is actually
wrong, file an issue or open a dedicated docs-only PR; do not edit it here.

# while this PR is open — GitHub drops the merge commit once it closes
git fetch origin dce03cc6802761f1c99eeddb27ece57aab5e8442 && git checkout dce03cc6802761f1c99eeddb27ece57aab5e8442
# afterwards, rebuild it from the two parents, which stay fetchable
git fetch origin b38821d1ce220527e2a7f34e254a96c48e2a9ba3 ea93dbea526f5a0084c742686dee5875951fe224 && git checkout -B drift-repro b38821d1ce220527e2a7f34e254a96c48e2a9ba3 && git merge --no-ff ea93dbea526f5a0084c742686dee5875951fe224

node scripts/docs-audit/affected-docs.mjs --json b38821d1ce220527e2a7f34e254a96c48e2a9ba3

Advisory only, and a precision-first one (#9192): a page is listed because it names a
symbol, wire route or SDK method this diff touched — not because it mentions a changed
package. Each row says which anchor put it there, so a wrong row is reportable rather than
merely annoying. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs b38821d1ce220527e2a7f34e254a96c48e2a9ba3 → pass the list as
args.docs, on the commit named under Which tree this was computed on.

Contract review (CONTRACT_REVIEW_TIER) — verdict: PASS WITH FINDINGS

Isolated seat; read only #16609, the B1 ruling on #13973 (comment 5507803003), this PR, and the tree (refs/pull/16716/head = 8981967939, base a0856e3bf9, origin/main now 8ccf7a1dfd).

Ruling implemented: partially — the code implements #16609's deliverable on every dialect through the shared presenter; the enforcement cells cover SQLite only, and the governed declaration (ADR-0053 D-F1) still says this door is not covered.

1. Ruling

#16609 has no maintainer ruling of its own. It carries a triage note (os-zhuang, 2026-09-07) and a PM dispatch (5576867473 / 5577336659) that adopt the card's own deliverable verbatim; Clause-②: yes is carried by the PM claim, not by a ruling. The parent ruling it derives from, #13973 comment 5507803003, verbatim:

Ruled: B1, narrow form. For the builtin audit columns (created_at, updated_at) and every declared Field.datetime column, driver-sql's read door presents the canonical instant YYYY-MM-DDTHH:MM:SS.sssZ on every dialect, exactly as it already does on SQLite: the two if (this.isSqlite) gates around repairNaiveUtcAuditTimestamp and normalizeSqliteDatetimeOutput in formatOutput become unconditional […], the aggregate() / distinct() presentation path (readPresentationKind) gains the same arm for the two column classes […]

#16716 is not a pure extension of B1 — it is wider (finding F1 below). B1 rules two column classes (audit stamps, Field.datetime). Routing the window door through formatOutput moves seven: those two, plus boolean, JSON, numeric-string, Field.date, Field.time, and the external.columnMap key rename. Six of the seven are what #16609 explicitly asks for ("the same presentation the other doors apply"); the seventh (columnMap) nobody named.

2. What changes on the wire for a findWithWindowFunctions caller

Enumerated from formatOutput at the PR head (sql-driver.ts:16711) and at origin/main post-#16619 (:16787, where the instant gates are unconditional and the audit arm is presentAuditTimestampOutput). memory: @objectstack/driver-memory has no findWithWindowFunctions — this is a driver-sql-only extension door, so N/A.

Alias columns: carved out, and the carve-out is sound — aliasIdentifierSql (:4826) wraps the alias through knex wrapIdentifier, so Postgres does not case-fold it and the row key equals String(wf.alias); the snapshot-and-restore at :9047-9060 therefore always finds the alias it protects.

3. Same presenter — confirmed, not a copy

sql-driver.ts:9058 calls this.formatOutput(object, row), the exact call findRows() makes at :5928; find()/findOne() apply nothing else per row. formatOutput / readPresentationKind / presentReadValue are called, never edited (hot-file fence held; git merge-tree origin/main refs/pull/16716/head is clean).

4. Governed paths

No. Three files: .changeset/window-functions-row-presentation.md, packages/drivers/driver-sql/src/sql-driver-window-function-output.test.ts, packages/drivers/driver-sql/src/sql-driver.ts. docs/adr/** untouched — so this is not the maintainer's merge on that ground. But see F4: the governed declaration goes stale the moment this merges.

5. Changeset — minor, and that is the repo-mandated level for a ! commit

.changeset/window-functions-row-presentation.md:2 grades @objectstack/driver-sql: minor with a **BREAKING** banner and an ADR-0087 not-required (no-migration-prescription) disposition. scripts/check-changeset-no-major.mjs:5-6, 41-45, 64-66 forbids major during the launch window and names the banner + disposition as the two carriers of breaking-ness. So ! + minor is compliant here, not a finding. FROM/TO coverage is incomplete — F2.

6. Tests / CI

• Pin that reddens on revert: yes — presents a declared Field.boolean as a boolean, not 1/0 and the JSON pin (sql-driver-window-function-output.test.ts:113-124), plus the three-way collision pin (:167-178); the PR's ablation shows 4 red.
• CI on 8981967939: 46 check runs, all success or skipped, none failed (Temporal Conformance, Test Core 6/6, Lint & Repo Gates, all four Type Check jobs, Governed Surface Queue Guard). mergeable_state: clean, draft.

Findings

F1 — wider than B1, with no ruling of its own on #16609. sql-driver.ts:9058 — routing through formatOutput moves the seven classes in §2, not the two B1 rules. That is what #16609 asks for and what triage adopted, so it is not blocking; but the maintainer signing Clause-②: yes should know the door moves booleans, JSON, numerics, Field.date, Field.time and columnMap keys, not only instants. Expectation: the PR body's "The fix" section lists all seven classes (it currently names boolean, JSON and the instants).

F2 — changeset FROM/TO incomplete. .changeset/window-functions-row-presentation.md:36-41 names boolean (1→true), object (JSON text → parsed) and the instants (TO given only by reference, "the same presented value find() gives"). Expectation: add FROM/TO lines for (a) external.columnMap — remote column key → local field key, every dialect; (b) SQLite numeric string → number; (c) MySQL Field.date Date → YYYY-MM-DD text; (d) Field.time → canonical HH:MM:SS[.fff]; and spell the instant TO as YYYY-MM-DDTHH:MM:SS.sssZ text on every dialect now that #16619 (45cfa1b88) is on main.

F3 — conformance cells on SQLite only. sql-driver-window-function-output.test.ts:52 — one describe, one in-memory SQLite driver; no DIALECT_CELLS / declareDialectCell arm although live-dialect-matrix.testkit.ts exists on the PR base and sql-driver-13973-canonical-iso-read-door.test.ts:118-124 shows the measure(cell) pattern. Consequence: the MySQL boolean half (the isSqlite || isMysql gate at :16751) and the PG/MySQL instant fold for this door are unmeasured — Temporal Conformance runs pnpm --filter @objectstack/driver-sql test with the live URLs, but this file has no live arm so it runs SQLite there too. The PR body's own admission stands: the five instant-agreement cases cannot fail on SQLite. Expectation: a measure(cell) over DIALECT_CELLS for this door asserting typeof row.ok === 'boolean' (MySQL cell) and expectCanonicalInstant for closed_at / created_at / updated_at (PG + MySQL cells).

F4 — the governed declaration contradicts the tree after merge. docs/adr/0053-date-and-datetime-semantics.md:1080-1081 ("findWithWindowFunctions is not one of these doors") and :1157-1159 ("Not covered: findWithWindowFunctions, which applies no read presentation of any kind today") on origin/main, plus sql-driver-13973-canonical-iso-read-door.test.ts:20-22, all become false when this merges — declared narrower than enforced, which is the inverse of the D-F addendum's stated purpose. Expectation: either fold a one-line D-F1 amendment into this PR (which makes it governed → the maintainer's merge), or file a docs-only governed card for the ADR line and link it in the PR body before merge; the test-header comment is non-governed and can be corrected here once the branch is on origin/main.

F5 — branch predates #16619. The head's last merge is of a0856e3bf9; origin/main has since taken 45cfa1b88 (#16619), whose formatOutput is the post-B1 presenter. merge-tree is clean, but every CI leg — including Temporal Conformance — measured this door through the pre-B1 formatOutput (:16745 at the head still gates the instants on isSqlite). Expectation: merge origin/main and re-run, so the "declared to CI" claim for PG/MySQL is measured against the presenter that will actually ship.

Not findings, recorded: no git stash, no governed edit, #13973 not folded in, #3797/#3849 not reopened; the collision ruling (alias wins the key, value stays raw) is pinned in code and test as triage demanded.

Generated by Claude Code

Patch round — F2, F3, F5 and the test-header half of F4 (director seat)

New head: d257234a75ee5263ca001f6debb7734f43eeb765 (was 8981967939). One commit, no production code touched — sql-driver.ts is byte-identical to the reviewed head. docs/adr/** untouched: the ADR-0053 D-F1 amendment is governed and rides on docs-only card #16782.

F5 — merged origin/main

Plain merge of origin/main ed7243d52 into the branch (no rebase, no force-push). The head now carries #16619 45cfa1b88, so formatOutput's instant gates are unconditional and every leg from here measures the post-B1 presenter that will actually ship — the thing the review flagged as unmeasured. Merge was clean; merge-tree had already predicted that.

F3 — the live-dialect arm

sql-driver-window-function-output.test.ts gains a measure(cell) arm over DIALECT_CELLS, declared through declareDialectCell exactly as sql-driver-13973-canonical-iso-read-door.test.ts does — so an unprovisioned cell is a named skip, never a silent pass, and a named RED under OS_EXPECT_LIVE_DIALECT_MATRIX=1.

Five cells per dialect, asserting the two halves the SQLite-only arm structurally cannot reach:

• §L1 typeof row.ok === 'boolean' — the MySQL half of the isSqlite || isMysql boolean gate, plus the value pair [true, false] so a rule folding every value one way could not pass.
• §L2 canonical YYYY-MM-DDTHH:MM:SS.sssZ for closed_at / created_at / updated_at on the PG + MySQL cells, asserted absolutely (not as a door agreement) — an agreement between two doors that are both wrong is green.
• §L0 fixture non-vacuity: both rows came back carrying every column under test, so no assertion below can pass having checked nothing.
• §L3 the window row equals the find() row on every declared column, value and type.
• §L4 the fold is the driver's, not the client's: raw knex past every presentation still hands back a Date for the instants and a number for MySQL tinyint(1). This is what makes §L1/§L2 measurements rather than restatements of client behaviour (ADR-0053 D-F2).

Live cells also run assertThreeWayZoneSkew, so a Z that survived only because every clock agreed cannot pass.

F2 — changeset FROM/TO now covers all seven classes

.changeset/window-functions-row-presentation.md gains a per-class, per-dialect FROM → TO table. minor, the **BREAKING** banner and the ADR-0087 not-required (no-migration-prescription) disposition are unchanged. Added, as the review asked:

unchanged rows are recorded rather than omitted — the same code path now runs for them, and silence there would read as "not considered". The two per-dialect claims that are not self-evident were re-verified in the merged tree rather than relayed: the PG date OID parser is pinned to text (sql-driver.ts:5418) and columnFieldByObject is populated at :9676 and consumed at :16849.

F4 — the non-governed half only

The header comment of sql-driver-13973-canonical-iso-read-door.test.ts said this door "applies no read presentation of any kind". Since #16609 it routes through formatOutput, so the comment now says that, points at the pin, and explicitly flags that ADR-0053 D-F1 still records the door as not covered with #16782 carrying the amendment — so a reader cannot mistake the stale ADR line for current behaviour. The governed ADR edit itself is not in this PR.

Test counts

pnpm --filter @objectstack/driver-sql exec vitest run src/sql-driver-window-function-output.test.ts

Test Files  1 passed (1)
     Tests  17 passed | 2 skipped (19)

Was 12 passed / 0 skipped. The 2 skipped are the named live cells, verbatim from --reporter=verbose:

↓ sql-driver — window-function row presentation (#16609) matrix (live postgres)
    > is provisioned — set OS_TEST_POSTGRES_URL to run this cell of the D-A3 driver axis
↓ sql-driver — window-function row presentation (#16609) matrix (live mysql)
    > is provisioned — set OS_TEST_MYSQL_URL to run this cell of the D-A3 driver axis

⚠️ NOT MEASURED locally: the MySQL boolean half and the PG/MySQL instant fold for this door. No live URLs in this container. They are measured by CI's Temporal Conformance (live PG + MySQL), which provisions both and runs pnpm --filter @objectstack/driver-sql test. The five SQLite cells of the new arm DID run and are green, so the arm is not vacuous even here.

Gates — exit codes verbatim

Exit codes were captured by redirecting to a file before any pipe, never read through | tail. The three the review named print their own verdict lines:

✓ This diff introduces no `major` bump.
✓ check-adr-0087-registration: 1 declared-breaking changeset(s), each carrying an ADR-0087 disposition.
    .changeset/window-functions-row-presentation.md  [BREAKING+bang]  not-required (no-migration-prescription)
✓ No empty-frontmatter changeset introduced by this diff (1 declaring changeset(s) added).

The last two are the ones that could have reddened on an F2 edit — the banner and the disposition survived the rewrite, which is what they assert.

check-changeset-no-major additionally reports LEVEL AXIS: NOT MEASURED locally (no pull_request payload was available to read a declaration from). That is the same local/--event split the original body already recorded as noted, not filed; it is neither a pass nor a failure here, and CI's --event run is what judges the LEVEL axis.

dispatch-gates --commands derives 57 families for this change set (unchanged from the reviewed head — the same four paths, no new file kind). The eight above are the ones this patch round could move; the remaining families and the repo-wide pnpm lint are CI's run, not this seat's.

Not done, and why

• F1's code half — nothing to do: F1 is an expectation on the PR body, and the body's "The fix" section now enumerates all seven classes with the ADR-0053 D-F1 / docs(adr-0053): D-F1 says findWithWindowFunctions applies no read presentation — false once #16716 merges (governed, docs-only) #16782 note. The body edit landed; GitHub appended its bare-form footer beside the original session-URL one, which is the documented behaviour of a PATCH and not a mutation.
• F4's governed half — docs/adr/0053-date-and-datetime-semantics.md:1080-1081, :1157-1159 deliberately untouched. Governed, docs-only, maintainer merge: docs(adr-0053): D-F1 says findWithWindowFunctions applies no read presentation — false once #16716 merges (governed, docs-only) #16782.
• One cosmetic typo in the commit body (SS4 where §L4 was meant). Left as-is: amending was excluded by this round's dispatch, the branch squashes on merge, and the section names are correct in the file itself and above.

Generated by Claude Code

Contract review (CONTRACT_REVIEW_TIER, isolated seat) — PR #16716 @ d257234 — re-review

Verdict: CHANGES REQUIRED — one line, in the PR's own changeset.

Every code and test expectation from the prior review (comment 5578892124) is discharged and independently re-verified below. What blocks is new and was introduced by the patch round itself: the F2 discharge walked the changeset into the ADR-0087 gate's FROM → TO label detector, and Check Changeset is red on d257234a7 (check-adr-0087-registration, job 101948563951). The patch-round comment reports that same script at exit 0 locally; it does not reproduce — see R1. The governed ADR-0053 D-F1 amendment stays on card #16782 and does not block this PR.

Read only #16609, this PR, its three comments, the tree at refs/review/16716b = d257234a75ee5263ca001f6debb7734f43eeb765 (merge-base with origin/main = ed7243d52, the PR's recorded base), and the CI on that head. Never checked out, never stashed, no edit; ref deleted after.

Prior findings — discharged?

Verification

1. Files. git diff ed7243d52..d257234a7 --name-status: A .changeset/window-functions-row-presentation.md, M packages/drivers/driver-sql/src/sql-driver-13973-canonical-iso-read-door.test.ts, A packages/drivers/driver-sql/src/sql-driver-window-function-output.test.ts, M packages/drivers/driver-sql/src/sql-driver.ts — four files. docs/adr/**, content/docs/releases/**, packages/spec/**: absent. The 156-file 8981967..d257234 range is origin/main's own motion arriving through the merge, not this PR's. Two commits on the branch since the prior head: the merge and d257234a7.

2. Changeset. Frontmatter "@objectstack/driver-sql": minor; the **BREAKING** banner and the single <!-- adr-0087: not-required (no-migration-prescription) … --> marker are byte-unchanged from 8981967 (the diff between the two heads touches only the body: the new §"What moves" heading + table + two paragraphs, one added Number(row.amount) bullet, one bullet reworded, one columnMap bullet). Per-dialect claims spot-checked against the head's sql-driver.ts: boolean gate isSqlite || isMysql (:16861 arm + MySQL arm), JSON parse under isSqlite (:16897), numeric-string fold (:16916), PG date OID parser pinned to text (:5418), columnFieldByObject populated :9676 / consumed :16849-16851. Content correct. Gate outcome: R1.

3. Live-dialect arm (sql-driver-window-function-output.test.ts:227-380). Imports DIALECT_CELLS, declareDialectCell, assertThreeWayZoneSkew, readServerZone, type DialectCell from ./live-dialect-matrix.testkit.js (:50-56); for (const cell of DIALECT_CELLS) declareDialectCell(cell, 'window-function row presentation (#16609)', measure) (:378-380). declareDialectCell (testkit :506-540) routes an unprovisioned cell to declareUnprovisionedCell, whose it.skipIf(!EXPECT_LIVE_DIALECTS) is a named skip locally and an expect.fail RED under OS_EXPECT_LIVE_DIALECT_MATRIX=1 — no silent path. §L1 expect(typeof row.ok).toBe('boolean') + [true, false] (:317-325); §L2 expectCanonicalInstant over closed_at/created_at/updated_at — not Date, typeof 'string', /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/ — and closed_at equal to the two seeded ISO literals (:327-335); §L4 reads the raw row through (driver as any).knex(LIVE_TABLE)…first() and asserts the instants are Date and MySQL ok is a number off the client (:349-371), which is what makes §L1/§L2 a measurement of formatOutput rather than of the client. Live cells run assertThreeWayZoneSkew (:269). §L0 non-vacuity (:305-315), §L3 door agreement (:337-347).

4. 13973 header. sql-driver-13973-canonical-iso-read-door.test.ts:20-28 now: "Since driver-sql: findWithWindowFunctions returns storage forms — a declared boolean answers 1 and an object field answers JSON text where find() answers true and the parsed object #16609 it routes each row through the SAME formatOutput pass find() runs (minus the window-alias columns) … pinned by sql-driver-window-function-output.test.ts … ⚠️ ADR-0053 D-F1 still RECORDS that door as not covered … docs-only governed card docs(adr-0053): D-F1 says findWithWindowFunctions applies no read presentation — false once #16716 merges (governed, docs-only) #16782 carries the amendment." Nothing else in the file moved.

5. sql-driver.ts hunk unchanged. git diff a0856e3bf..8981967 vs git diff ed7243d52..d257234a7 on the file, @@/index lines stripped: byte-identical — one hunk, return await builder; → rows + snapshot / this.formatOutput(object, row) / restore. It now sits at :9074-9133 (call at :9129, was :9058) purely because origin/main grew above it. Blob differs from 8981967 only by the merged main content. formatOutput / readPresentationKind / presentReadValue still called, never edited.

6. PR body. "The fix" carries the seven-class table with per-dialect "where the row actually changes"; the ADR-0053 D-F1 / docs(adr-0053): D-F1 says findWithWindowFunctions applies no read presentation — false once #16716 merges (governed, docs-only) #16782 note; the "Superseded by the patch round" note on the conformance counts (17 passed | 2 skipped).

7. CI on d257234a7 (33 check runs, read 05:38Z): Check Changeset — failure (R1). Temporal Conformance (live PG + MySQL) — success (05:31–05:37Z). Success: Build Core, Test Core 1/6, Dogfood Verify CLI, Type Check · source gates / debt ledger / consumer gates, Governed Surface Queue Guard, Check Documentation Links, Flag docs, Check PR Size, Auto Label, the three claim guards ×2. Skipped: Build Docs, Console Pin Gate, Packed-tarball smoke. Still in progress: Test Core 2–6/6, Dogfood Regression Gate 1–3/3, Lint & Repo Gates, Type Check · workspace.
   On the live cells having actually run: the job's driver-sql step (ci.yml at the head, job Temporal Conformance (live PG + MySQL), step "Run driver-sql suite against both live servers") sets OS_TEST_POSTGRES_URL, OS_TEST_MYSQL_URL and OS_EXPECT_LIVE_DIALECT_MATRIX: '1', runs pnpm --filter @objectstack/driver-sql test (= bare vitest run, no include/exclude), so an unprovisioned #16609 cell would have been a RED, not a skip; success therefore means §L0–§L4 passed on live PG and live MySQL. Stated as an inference from job config + conclusion: the log API returns only the last 5000 of 11027 lines and the driver-sql block is in the first half I could not retrieve.

Residual findings

R1 — Check Changeset red on the head; the F2 discharge is the cause. Blocking. check-adr-0087-registration --base ed7243d52 (job 101948563951, 05:31:25Z): "not-required (no-migration-prescription) contradicts the changeset's own body, which carries a migration prescription. Evidence (from-to-label): **What moves, FROM → TO, per column class and per dialect.** Routing this door". Reproduced with the gate's own export: scripts/check-adr-0087-registration.mjs is the same blob at the head and at the merge base (ebc55c70cc), and findMigrationPrescription() from that file returns null for the 8981967 body, {branch:'from-to-label', line:'**What moves, FROM → TO, …'} for the d257234 body, and null again for the d257234 body with only that heading reworded (**What moves, per column class and per dialect (storage form → presented form).**). The table rows (1 / 0 → true / false, Date → '2026-01-10T…'), the → rewrite bullets and the word "renames" in the columnMap row do not trip any branch — the prior head already carried the arrow bullets and was green. Only the literal FROM … → … TO used as a label does (FROM_TO_LABEL_RE :1132; labelPositioned :1308 — a comma before FROM is not a governing word). So the patch-round line "check-adr-0087-registration.mjs --base origin/main → exit 0" does not reproduce against this head; CI is authoritative. Expectation: reword that one heading so the placeholder token is not used as a label (the reworded form above verifies null; do not drop the **BREAKING** token or switch category — the gate's own text forbids both routes here). No other file moves.

R2 — nits, non-blocking. (a) sql-driver-window-function-output.test.ts:49 imports '../src/index.js' from inside src/ — resolves to the same file, but the sibling convention is './index.js' (sql-driver-13973-…:71). (b) The same file's header :14-21 and :168-171 still describe the instant presentation as "under change (ADR-0053 D-F1)"; #16619 has landed and is merged here, so the SQLite arm's agreement-not-literal rationale is now historical — the ## Two arms section (:26-45) states the current position correctly, so this is wording, not substance.

Not findings, recorded: no governed path in the diff; no git stash (stash list empty); #13973 not folded in; #3797 / #3849 not reopened; the alias-collision ruling remains pinned in code (sql-driver.ts:9094-9115) and test (:208-217).

Blocks landing besides #16782: R1 only — a one-line changeset heading edit, then Check Changeset must be green on the new head (and the still-running jobs must finish green).

Generated by Claude Code

Patch round 2 — R1 (director seat)

R1 is fixed on a new head; nothing else moved. One file, one line.

The reword (.changeset/window-functions-row-presentation.md:35) — the placeholder token is no longer used as a label:

• before: **What moves, FROM → TO, per column class and per dialect.**
• after: **What moves, per column class and per dialect (storage form → presented form).**

The **BREAKING** token, the minor frontmatter and the adr-0087: not-required (no-migration-prescription) marker are byte-unchanged — the gate's own success line re-reads all three back ([BREAKING+bang] not-required (no-migration-prescription)).

Detector reading, both legs. findMigrationPrescription imported from scripts/check-adr-0087-registration.mjs and run over the changeset body:

• new body (ea93dbea5): null
• old body (d257234a7, control leg): {"branch":"from-to-label","line":"**What moves, FROM → TO, per column class and per dialect.** Routing this door"}

The control leg is why the null is a measurement and not a vacuous pass: the same function on the same head still finds the old line.

Gates, exit codes captured before any pipe, run in the worktree at the new head with --base origin/main (merge base ed7243d52):

The first one was 1 on d257234a7 with exactly the evidence line R1 quoted, which is the reproduction the prior patch-round comment lacked: the gate diffs HEAD, not the working tree, so an uncommitted reword still reads red. check-changeset-no-major repeats its standing LEVEL AXIS: NOT MEASURED note (no pull_request payload locally); that is neither pass nor failure and is unchanged from the prior head.

New head: ea93dbea5 (ea93dbea526f5a0084c742686dee5875951fe224), branch claude/issue-16609-window-functions-presentation. Not rebased, not amended; d257234a7 is its parent.

R2 left alone, deliberately. (a) '../src/index.js' → './index.js' is unambiguous, but it moves a test file, and this round's commit is scoped docs(changeset) — a test edit under that message, or a second unsanctioned commit, buys a nit at the cost of a re-run of the whole driver-sql matrix. (b) The stale "under change (ADR-0053 D-F1)" wording: the re-review places it in sql-driver-window-function-output.test.ts:14-21 / :168-171, while the dispatch names sql-driver-13973-canonical-iso-read-door.test.ts — the two disagree on which file, so it is not the unambiguous edit the round allows. Both are non-blocking by the reviewer's own grading and are better carried on the next round or a follow-up card.

CI on the new head is not waited on here.

Generated by Claude Code

Contract review — R1 discharged at ea93dbea5 (director seat, CONTRACT_REVIEW_TIER)

The re-review at d257234 (5579881064) left exactly one blocking item, R1: the changeset heading **What moves, FROM → TO, …** read by check-adr-0087-registration as a migration prescription. Patch round 2 (5579915463) reworded that single line; the gate's own findMigrationPrescription() answers null on the new body and from-to-label on the old one (control leg), and the three changeset gates exit 0 at the committed head.

Read on CI at ea93dbea5 (05:5xZ): Check Changeset success, Governed Surface Queue Guard success, Type Check · source gates success; Test Core, Temporal Conformance and Lint & Repo Gates in progress, 0 failures. The diff d257234..ea93dbea5 is the one changeset line. Verdict for the head: PASS (F1–F5 discharged at d257234, R1 here). R2 nits stay non-blocking. ADR-0053 D-F1 amendment is card #16782 (governed, maintainer merge), tracked separately.

Landing: needs:contract-review cleared on both carriers, ready, auto-merge; the queue admits it only when the in-progress runs are green.

Generated by Claude Code