[kvlonge]

Parser batch after gaps-f (#61): the tokenizer and depth fixes, three auditor withholds, and the anonymous-procedure part of the D133 remainder.

Tokenizer and depth (product lane)

• An unterminated /* comment is refused with SQ0001 "Unterminated block comment" and its span.
• The AST depth guard counts a flat left-associative operator chain as one level. A 50,000-term + chain parses, and dropping it doesn't recurse. 600 nested unary minus signs still give E_GUARD_AST_DEPTH_EXCEEDED.

Stack overflow when dropping chained trees (fuzz, 45e21bd)

• A 70k-term chain of ::, [1], .a, COLLATE, IS NULL or IN, or one mixing them with =/+, overflowed the stack while its tree was dropped, even after the depth guard had refused it. The AstNode derive now generates take_expressions, and BinaryOp, Cast, CollationExpr, DotAccess, In, IsNull, IsTrueFalse, JsonExtractFunc, LikeOp, Subscript, UnaryOp, Alias and Between drop through one shared worklist. This replaces the BinaryOp-only worklist.
• Regression test on a 2 MB thread at 70k terms: + and || parse; ::, =, [1], .a and =/IS NULL are refused with E_GUARD_AST_DEPTH_EXCEEDED; a :: chain cut off by a syntax error is refused. Without the fix the test process aborts with a stack overflow.

Auditor withholds

• ACCOUNTS lists (release channels, release directives, replication and failover) keep [ org . ] account as a table reference, with each part quoted separately.
• ALTER SET/UNSET property kinds upper-case only unquoted names, so ALTER ORGANIZATION ACCOUNT UNSET "v1 Q" keeps v1 Q.
• INTERVAL literal qualifiers with a field precision become one qualifier node holding the fields and the leading and fractional seconds precisions (faithful Snowflake modes only). YEAR(9) TO MONTH no longer becomes a call plus a variable, and SECOND(9), (3) no longer splits into two select items.

D133 (utility)
Snowflake's WITH … AS PROCEDURE grammar is looser than the parser allowed. Per the receipts it accepts:

• parameters and RETURNS TABLE columns given by name alone;
• names as RUNTIME_VERSION, HANDLER, IMPORTS and PACKAGES values;
• an expression CTE body after the procedure.
  Quoted strings and reserved words stay refused. This clears 24 of 27 settled-accept cases. The other 3 have an invalid LANGUAGE SQL AS 'm' body, which Snowflake reaches only after its parameter error.

Each fix has a regression test that fails without it. The gate report follows in a comment.

[kvlonge]

Gate (D94) and landing record.

• Command: make check-merge RECORDER=0 on the exact head f28341e6c37687759cad688d5556b31d98dc00dc, one build job. Exit 0.
• The head contains main d10844175 (feat: DuckShop batch 6 (projection EXCLUDE, SYSTEM$TYPEOF stripped in a later query) #64), merged in. Two earlier gate runs on this branch were stopped before they finished: on 26de8c4 for the fuzz drop crash, and on 52d15aa because feat: DuckShop batch 6 (projection EXCLUDE, SYSTEM$TYPEOF stripped in a later query) #64 landed.
• Landed by fast-forward: main = f28341e6. main tree = head tree = f098b1d7005128810072dc544ac1564789f76464.
• Coverage diff against the committed baseline in the gate: no regression, DOCUMENTED or CATALOGUE lines; 0 forms lost, 0 obligations lost.
• Measured against main (parser at f3c75ab, unchanged by feat: DuckShop batch 6 (projection EXCLUDE, SYSTEM$TYPEOF stripped in a later query) #64) on catalogue e914d92 with evidence 21e794d: +43 obligations, 0 lost, 0 forms gained or lost. Receipted Snowflake-parsed cases now rejected: 0. Snowflake syntax errors now accepted: 0. Documented (D113) refused cases now accepted: 0.
• The 43 gained obligations: 40 in sf.utility.call-with.* (anonymous procedures), 2 for the long + chain (operators-arithmetic.add.o007, .o008) and 1 in functions.concat.concat-subscript-dot. The quoting and interval fixes change trees only and gain no obligations until review.
• Fuzz drop crash: 12 chain kinds at 70k terms on a 2 MB thread (+, ||, ::, =, [1], .a, COLLATE, IS NULL, IN, : path, =/IS NULL, and a :: chain cut off by a syntax error) now parse or are refused cleanly. Without the fix the test aborts with a stack overflow. Also checked by hand at 300k terms (::, [1], =/IS NULL, IN, +).
• Stale reviews: the gate printed none. Reviews that bind the parser tree go stale on any parser commit until the auditor renews them in D118. The INTERVAL qualifier, ACCOUNTS and UNSET withholds need re-review there.