@cedarjs/internal 4.0.0-canary.13809 → 4.0.0-canary.13811

package/dist/cjs/generate/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/generate/generate.ts"],"names":[],"mappings":";AAWA,eAAO,MAAM,QAAQ;;;;;;EA6CpB,CAAA;AAED,eAAO,MAAM,GAAG,qBAoCf,CAAA"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/generate/generate.ts"],"names":[],"mappings":";AAWA,eAAO,MAAM,QAAQ;;;;;;EA2CpB,CAAA;AAED,eAAO,MAAM,GAAG,qBAoCf,CAAA"}

package/dist/cjs/generate/generate.js

@@ -36,7 +36,7 @@ const generate = async () => {
   const { typeDefFiles, errors: generateTypeDefsErrors } = await (0, import_typeDefinitions.generateTypeDefs)();
   const clientPresetFiles = [];
   const { possibleTypesFiles, errors: generatePossibleTypesErrors } = await (0, import_possibleTypes.generatePossibleTypes)();
-  const { files: gqlormFiles, errors: gqlormErrors } = config.experimental?.gqlorm?.enabled ? await (0, import_gqlormSchema.generateGqlormArtifacts)() : { files: [], errors: [] };
+  const { files: gqlormFiles, errors: gqlormErrors } = await (0, import_gqlormSchema.generateGqlormArtifacts)();
   if (config.graphql.trustedDocuments) {
     const preset = await (0, import_clientPreset.generateClientPreset)();
     clientPresetFiles.push(...preset.clientPresetFiles);

package/dist/cjs/generate/gqlormSchema.d.ts

@@ -1,5 +1,36 @@
 import type * as DMMF from '@prisma/dmmf';
 type ModelSchema = Record<string, string[]>;
+interface FrontendFieldInfo {
+    name: string;
+    tsType: string;
+}
+interface FrontendModelInfo {
+    modelName: string;
+    camelName: string;
+    fields: FrontendFieldInfo[];
+}
+export interface BackendFieldInfo {
+    name: string;
+    graphqlType: string;
+    isRequired: boolean;
+    isId: boolean;
+}
+export interface BackendModelInfo {
+    modelName: string;
+    camelName: string;
+    pluralName: string;
+    fields: BackendFieldInfo[];
+    idField: BackendFieldInfo | undefined;
+}
+/**
+ * Map a DMMF field type to its GraphQL SDL equivalent.
+ *
+ * Enum fields (kind === 'enum') are mapped to String. Unknown scalar types
+ * fall back to String.
+ */
+export declare function mapDmmfTypeToGraphql(type: string, kind: string): string;
+export declare function buildFrontendModelInfo(dmmf: DMMF.Document): FrontendModelInfo[];
+export declare function generateWebGqlormModelsContent(models: FrontendModelInfo[]): string;
 /**
  * Build a ModelSchema from a Prisma DMMF document.
  *
@@ -7,12 +38,57 @@ type ModelSchema = Record<string, string[]>;
  * with a mock DMMF object.
  */
 export declare function buildModelSchema(dmmf: DMMF.Document): ModelSchema;
+/**
+ * Build enriched model information from the DMMF, applying the same visibility
+ * rules as `buildModelSchema()` but also collecting type, nullability, and
+ * @id flag per field.
+ *
+ * **Note:** This function silently excludes sensitive fields without emitting
+ * warnings. It is designed to run after `buildModelSchema()` (which emits the
+ * warnings). In `generateGqlormArtifacts()` the call order is guaranteed, but
+ * callers using this function standalone should be aware that no warnings will
+ * be printed for auto-hidden sensitive fields.
+ *
+ * This is a pure function — safe for testing.
+ */
+export declare function buildBackendModelInfo(dmmf: DMMF.Document): BackendModelInfo[];
+/**
+ * Scan all SDL files in the given directory and return the set of GraphQL type
+ * names that are already defined by user-authored SDLs.
+ *
+ * This prevents gqlorm from generating duplicate type definitions that would
+ * cause merge conflicts in `makeMergedSchema`.
+ */
+export declare function getExistingSdlTypeNames(graphqlDir: string): Set<string>;
+/**
+ * Generate the full TypeScript source for `.cedar/gqlorm/backend.ts`.
+ *
+ * The generated file exports:
+ * - `schema`: a gql DocumentNode with type defs and Query fields
+ * - `createGqlormResolvers(db: GqlormDb)`: a factory function that takes a
+ *   Prisma client-like object and returns a resolvers object
+ *
+ * The file does NOT import `db` directly. Instead, the Babel inject plugin
+ * imports `db` from `src/lib/db` in `graphql.ts` (where that alias resolves
+ * correctly) and passes it to `createGqlormResolvers`.
+ *
+ * The generated `GqlormDb` interface is scoped to exactly the visible models
+ * and fields — no hidden/sensitive fields, no @gqlorm hide models, no
+ * dependency on the generated Prisma client path or @prisma/client.
+ */
+export declare function generateGqlormBackendContent(models: BackendModelInfo[]): string;
 /**
  * Generate gqlorm artifacts from the Prisma schema.
  *
  * Reads the project's Prisma schema via DMMF, applies visibility rules
- * (@gqlorm directives + sensitivity heuristics), and writes the resulting
- * ModelSchema to `.cedar/gqlorm-schema.json`.
+ * (@gqlorm directives + sensitivity heuristics), and writes:
+ *
+ * 1. `.cedar/gqlorm-schema.json` — the frontend ModelSchema (field names only)
+ * 2. `.cedar/gqlorm/backend.ts` — auto-generated GraphQL types and resolvers
+ *    for models that don't already have manually-written SDL files
+ *
+ * Cedar targets Node.js 24, which strips TypeScript types natively without any
+ * flags, so backend.ts can be imported directly at runtime
  *
  * Returns the same `{ files, errors }` shape used by other generators so it
  * can be integrated into `generate.ts` without special handling.

package/dist/cjs/generate/gqlormSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gqlormSchema.d.ts","sourceRoot":"","sources":["../../../src/generate/gqlormSchema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,IAAI,MAAM,cAAc,CAAA;AAgBzC,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AAiC3C;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAkDjE;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC;IACvD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAC9C,CAAC,CA+BD"}
+{"version":3,"file":"gqlormSchema.d.ts","sourceRoot":"","sources":["../../../src/generate/gqlormSchema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,IAAI,MAAM,cAAc,CAAA;AA8BzC,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AAE3C,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,iBAAiB;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAA;CACtC;AAqDD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMvE;AAoGD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAClB,iBAAiB,EAAE,CAiDrB;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,iBAAiB,EAAE,GAC1B,MAAM,CA2CR;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAkDjE;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,EAAE,CA2D7E;AAkBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CA6BvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,gBAAgB,EAAE,GACzB,MAAM,CA0IR;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC;IACvD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAC9C,CAAC,CAgFD"}

package/dist/cjs/generate/gqlormSchema.js

@@ -28,15 +28,35 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var gqlormSchema_exports = {};
 __export(gqlormSchema_exports, {
+  buildBackendModelInfo: () => buildBackendModelInfo,
+  buildFrontendModelInfo: () => buildFrontendModelInfo,
   buildModelSchema: () => buildModelSchema,
-  generateGqlormArtifacts: () => generateGqlormArtifacts
+  generateGqlormArtifacts: () => generateGqlormArtifacts,
+  generateGqlormBackendContent: () => generateGqlormBackendContent,
+  generateWebGqlormModelsContent: () => generateWebGqlormModelsContent,
+  getExistingSdlTypeNames: () => getExistingSdlTypeNames,
+  mapDmmfTypeToGraphql: () => mapDmmfTypeToGraphql
 });
 module.exports = __toCommonJS(gqlormSchema_exports);
 var import_node_fs = __toESM(require("node:fs"), 1);
 var import_node_path = __toESM(require("node:path"), 1);
 var import_project_config = require("@cedarjs/project-config");
-const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RW_DataMigration"]);
-const SENSITIVE_PATTERNS = ["password", "secret", "token", "hash", "salt"];
+var import_cedarPluralize = require("@cedarjs/utils/cedarPluralize");
+const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set([
+  "RW_DataMigration",
+  "Cedar_DataMigration"
+]);
+const SENSITIVE_PATTERNS = [
+  "password",
+  "secret",
+  "token",
+  "hash",
+  "salt",
+  "apikey",
+  "secretkey",
+  "encryptionkey",
+  "privatekey"
+];
 function hasDirective(doc, directive) {
   if (!doc) {
     return false;
@@ -56,6 +76,172 @@ function emitSensitivityWarning(modelName, fieldName) {
 `
   );
 }
+const DMMF_TYPE_TO_GRAPHQL = {
+  String: "String",
+  Int: "Int",
+  Float: "Float",
+  BigInt: "BigInt",
+  Boolean: "Boolean",
+  DateTime: "DateTime",
+  Json: "JSON",
+  Decimal: "String",
+  Bytes: "String"
+};
+function mapDmmfTypeToGraphql(type, kind) {
+  if (kind === "enum") {
+    return "String";
+  }
+  return DMMF_TYPE_TO_GRAPHQL[type] ?? "String";
+}
+function graphqlTypeToTsType(graphqlType) {
+  switch (graphqlType) {
+    case "Int":
+    case "Float":
+    case "BigInt":
+      return "number";
+    case "Boolean":
+      return "boolean";
+    default:
+      return "string";
+  }
+}
+function graphqlTypeToTsInterfaceType(graphqlType, isRequired) {
+  let tsType;
+  switch (graphqlType) {
+    case "Int":
+    case "Float":
+    case "BigInt":
+      tsType = "number";
+      break;
+    case "Boolean":
+      tsType = "boolean";
+      break;
+    case "DateTime":
+      tsType = "Date";
+      break;
+    default:
+      tsType = "string";
+  }
+  return isRequired ? tsType : `${tsType} | null`;
+}
+function dmmfTypeToFrontendTsType(type, kind, isRequired) {
+  let tsType;
+  if (kind === "enum") {
+    tsType = "string";
+  } else {
+    switch (type) {
+      case "String":
+        tsType = "string";
+        break;
+      case "Int":
+      case "Float":
+        tsType = "number";
+        break;
+      case "BigInt":
+        tsType = "bigint";
+        break;
+      case "Boolean":
+        tsType = "boolean";
+        break;
+      case "DateTime":
+        tsType = "string";
+        break;
+      case "Json":
+        tsType = "unknown";
+        break;
+      case "Bytes":
+      case "Decimal":
+        tsType = "string";
+        break;
+      default:
+        tsType = "unknown";
+    }
+  }
+  if (isRequired) {
+    return tsType;
+  }
+  return `${tsType} | null`;
+}
+function buildFrontendModelInfo(dmmf) {
+  const models = [];
+  for (const model of dmmf.datamodel.models) {
+    if (INTERNAL_MODEL_NAMES.has(model.name)) {
+      continue;
+    }
+    if (hasDirective(model.documentation, "hide")) {
+      continue;
+    }
+    const fields = [];
+    for (const field of model.fields) {
+      if (field.kind !== "scalar" && field.kind !== "enum") {
+        continue;
+      }
+      if (hasDirective(field.documentation, "hide")) {
+        continue;
+      }
+      const isShown = hasDirective(field.documentation, "show");
+      if (!isShown && isSensitiveField(field.name)) {
+        continue;
+      }
+      fields.push({
+        name: field.name,
+        tsType: dmmfTypeToFrontendTsType(
+          field.type,
+          field.kind,
+          field.isRequired
+        )
+      });
+    }
+    if (fields.length > 0) {
+      models.push({
+        modelName: model.name,
+        camelName: model.name.charAt(0).toLowerCase() + model.name.slice(1),
+        fields
+      });
+    }
+  }
+  return models;
+}
+function generateWebGqlormModelsContent(models) {
+  if (models.length === 0) {
+    return [
+      "// Auto-generated by Cedar \u2014 do not edit",
+      "// Regenerated on every codegen run. Source: api/db/schema.prisma",
+      "",
+      "declare module '@cedarjs/gqlorm/types/orm' {",
+      "  interface GqlormTypeMap {}",
+      "}",
+      ""
+    ].join("\n");
+  }
+  const lines = [
+    "// Auto-generated by Cedar \u2014 do not edit",
+    "// Regenerated on every codegen run. Source: api/db/schema.prisma",
+    "",
+    "declare namespace GqlormScalar {"
+  ];
+  for (const model of models) {
+    lines.push(`  interface ${model.modelName} {`);
+    for (const field of model.fields) {
+      lines.push(`    ${field.name}: ${field.tsType}`);
+    }
+    lines.push("  }");
+    lines.push("");
+  }
+  lines.push("}");
+  lines.push("");
+  lines.push("declare module '@cedarjs/gqlorm/types/orm' {");
+  lines.push("  interface GqlormTypeMap {");
+  lines.push("    models: {");
+  for (const model of models) {
+    lines.push(`      ${model.camelName}: GqlormScalar.${model.modelName}`);
+  }
+  lines.push("    }");
+  lines.push("  }");
+  lines.push("}");
+  lines.push("");
+  return lines.join("\n");
+}
 function buildModelSchema(dmmf) {
   const schema = {};
   for (const model of dmmf.datamodel.models) {
@@ -90,6 +276,185 @@ function buildModelSchema(dmmf) {
   }
   return schema;
 }
+function buildBackendModelInfo(dmmf) {
+  const models = [];
+  for (const model of dmmf.datamodel.models) {
+    if (INTERNAL_MODEL_NAMES.has(model.name)) {
+      continue;
+    }
+    if (hasDirective(model.documentation, "hide")) {
+      continue;
+    }
+    const fields = [];
+    for (const field of model.fields) {
+      if (field.kind !== "scalar" && field.kind !== "enum") {
+        continue;
+      }
+      if (hasDirective(field.documentation, "hide")) {
+        continue;
+      }
+      const isShown = hasDirective(field.documentation, "show");
+      if (!isShown && isSensitiveField(field.name)) {
+        continue;
+      }
+      fields.push({
+        name: field.name,
+        graphqlType: mapDmmfTypeToGraphql(field.type, field.kind),
+        isRequired: field.isRequired,
+        isId: field.isId
+      });
+    }
+    if (fields.length > 0) {
+      const camelName = model.name.charAt(0).toLowerCase() + model.name.slice(1);
+      const pluralName = (0, import_cedarPluralize.pluralize)(camelName);
+      models.push({
+        modelName: model.name,
+        camelName,
+        pluralName,
+        fields,
+        idField: fields.find((f) => f.isId)
+      });
+    }
+  }
+  return models;
+}
+const TYPE_DEF_REGEX = /\btype\s+([A-Z]\w*)\s*\{/g;
+const STRUCTURAL_TYPE_NAMES = /* @__PURE__ */ new Set(["Query", "Mutation", "Subscription"]);
+function getExistingSdlTypeNames(graphqlDir) {
+  const typeNames = /* @__PURE__ */ new Set();
+  if (!import_node_fs.default.existsSync(graphqlDir)) {
+    return typeNames;
+  }
+  const sdlFiles = import_node_fs.default.readdirSync(graphqlDir).filter((file) => {
+    return /\.sdl\.(ts|js)$/.test(file) && !file.startsWith("__gqlorm__");
+  });
+  for (const file of sdlFiles) {
+    const content = import_node_fs.default.readFileSync(import_node_path.default.join(graphqlDir, file), "utf-8");
+    let match;
+    TYPE_DEF_REGEX.lastIndex = 0;
+    while ((match = TYPE_DEF_REGEX.exec(content)) !== null) {
+      const name = match[1];
+      if (!STRUCTURAL_TYPE_NAMES.has(name)) {
+        typeNames.add(name);
+      }
+    }
+  }
+  return typeNames;
+}
+function generateGqlormBackendContent(models) {
+  if (models.length === 0) {
+    return "";
+  }
+  const lines = [
+    "// This file is auto-generated by Cedar gqlorm codegen.",
+    "// Do not edit \u2014 it will be overwritten on every codegen run.",
+    "// To hide a model from gqlorm, add /// @gqlorm hide in schema.prisma.",
+    "",
+    "import gql from 'graphql-tag'",
+    "",
+    "// Generated minimal interface \u2014 only visible models and fields, only the",
+    "// operations used by this file. No @gqlorm hide models, no sensitive fields.",
+    "// Scoped to avoid any dependency on the generated Prisma client path or",
+    "// @prisma/client (which is an empty shim in Prisma v7).",
+    "interface GqlormDb {"
+  ];
+  for (const model of models) {
+    const selectType = model.fields.map((f) => `${f.name}: true`).join("; ");
+    lines.push(`  ${model.camelName}: {`);
+    lines.push("    findMany(args: {");
+    lines.push(`      select: { ${selectType} }`);
+    lines.push("    }): Promise<");
+    lines.push("      Array<{");
+    for (const field of model.fields) {
+      const tsType = graphqlTypeToTsInterfaceType(
+        field.graphqlType,
+        field.isRequired
+      );
+      lines.push(`        ${field.name}: ${tsType}`);
+    }
+    lines.push("      }>");
+    lines.push("    >");
+    if (model.idField) {
+      const idTsType = graphqlTypeToTsType(model.idField.graphqlType);
+      lines.push("    findUnique(args: {");
+      lines.push(`      where: { ${model.idField.name}: ${idTsType} }`);
+      lines.push(`      select: { ${selectType} }`);
+      lines.push("    }): Promise<{");
+      for (const field of model.fields) {
+        const tsType = graphqlTypeToTsInterfaceType(
+          field.graphqlType,
+          field.isRequired
+        );
+        lines.push(`      ${field.name}: ${tsType}`);
+      }
+      lines.push("    } | null>");
+    }
+    lines.push("  }");
+  }
+  lines.push("}");
+  lines.push("");
+  lines.push("export const schema = gql`");
+  for (const model of models) {
+    lines.push(`  type ${model.modelName} {`);
+    for (const field of model.fields) {
+      const nullMark = field.isRequired ? "!" : "";
+      lines.push(`    ${field.name}: ${field.graphqlType}${nullMark}`);
+    }
+    lines.push("  }");
+    lines.push("");
+  }
+  lines.push("  type Query {");
+  for (const model of models) {
+    lines.push(`    ${model.pluralName}: [${model.modelName}!]! @skipAuth`);
+    if (model.idField) {
+      const idNullMark = model.idField.isRequired ? "!" : "";
+      lines.push(
+        `    ${model.camelName}(${model.idField.name}: ${model.idField.graphqlType}${idNullMark}): ${model.modelName} @skipAuth`
+      );
+    }
+  }
+  lines.push("  }");
+  lines.push("`");
+  lines.push("");
+  lines.push(
+    "// db is passed in from graphql.ts by the Babel inject plugin, which imports it"
+  );
+  lines.push(
+    "// from 'src/lib/db' in a context where that alias resolves correctly."
+  );
+  lines.push("export function createGqlormResolvers(db: GqlormDb) {");
+  lines.push("  return {");
+  lines.push("    Query: {");
+  for (let i = 0; i < models.length; i++) {
+    const model = models[i];
+    const selectObj = model.fields.map((f) => `${f.name}: true`).join(", ");
+    lines.push(`      ${model.pluralName}: () => {`);
+    lines.push(`        return db.${model.camelName}.findMany({`);
+    lines.push(`          select: { ${selectObj} },`);
+    lines.push("        })");
+    lines.push("      },");
+    if (model.idField) {
+      const idFieldName = model.idField.name;
+      const tsType = graphqlTypeToTsType(model.idField.graphqlType);
+      lines.push(
+        `      ${model.camelName}: (_root: unknown, { ${idFieldName} }: { ${idFieldName}: ${tsType} }) => {`
+      );
+      lines.push(`        return db.${model.camelName}.findUnique({`);
+      lines.push(`          where: { ${idFieldName} },`);
+      lines.push(`          select: { ${selectObj} },`);
+      lines.push("        })");
+      lines.push("      },");
+    }
+    if (i < models.length - 1) {
+      lines.push("");
+    }
+  }
+  lines.push("    },");
+  lines.push("  }");
+  lines.push("}");
+  lines.push("");
+  return lines.join("\n");
+}
 async function generateGqlormArtifacts() {
   const files = [];
   const errors = [];
@@ -98,14 +463,50 @@ async function generateGqlormArtifacts() {
     const mod = await import("@prisma/internals");
     const { getDMMF } = mod.default || mod;
     const dmmf = await getDMMF({ datamodel: schemas });
+    const paths = (0, import_project_config.getPaths)();
+    const generatedBase = paths.generated.base;
     const modelSchema = buildModelSchema(dmmf);
-    const outputPath = import_node_path.default.join(
-      (0, import_project_config.getPaths)().generated.base,
-      "gqlorm-schema.json"
+    const frontendModels = buildFrontendModelInfo(dmmf);
+    const schemaOutputPath = import_node_path.default.join(generatedBase, "gqlorm-schema.json");
+    const webTypesOutputPath = import_node_path.default.join(
+      generatedBase,
+      "types",
+      "includes",
+      "web-gqlorm-models.d.ts"
+    );
+    import_node_fs.default.mkdirSync(import_node_path.default.dirname(schemaOutputPath), { recursive: true });
+    import_node_fs.default.writeFileSync(schemaOutputPath, JSON.stringify(modelSchema, null, 2));
+    files.push(schemaOutputPath);
+    import_node_fs.default.mkdirSync(import_node_path.default.dirname(webTypesOutputPath), { recursive: true });
+    import_node_fs.default.writeFileSync(
+      webTypesOutputPath,
+      generateWebGqlormModelsContent(frontendModels)
     );
-    import_node_fs.default.mkdirSync(import_node_path.default.dirname(outputPath), { recursive: true });
-    import_node_fs.default.writeFileSync(outputPath, JSON.stringify(modelSchema, null, 2));
-    files.push(outputPath);
+    files.push(webTypesOutputPath);
+    const backendOutputDir = import_node_path.default.join(generatedBase, "gqlorm");
+    const backendOutputPath = import_node_path.default.join(backendOutputDir, "backend.ts");
+    if ((0, import_project_config.getConfig)().experimental?.gqlorm?.enabled) {
+      const graphqlDir = paths.api.graphql;
+      const existingTypes = getExistingSdlTypeNames(graphqlDir);
+      const allModels = buildBackendModelInfo(dmmf);
+      const gqlormModels = allModels.filter(
+        (m) => !existingTypes.has(m.modelName)
+      );
+      if (gqlormModels.length > 0) {
+        const backendContent = generateGqlormBackendContent(gqlormModels);
+        import_node_fs.default.mkdirSync(backendOutputDir, { recursive: true });
+        import_node_fs.default.writeFileSync(backendOutputPath, backendContent);
+        files.push(backendOutputPath);
+      } else {
+        if (import_node_fs.default.existsSync(backendOutputPath)) {
+          import_node_fs.default.unlinkSync(backendOutputPath);
+        }
+      }
+    } else {
+      if (import_node_fs.default.existsSync(backendOutputPath)) {
+        import_node_fs.default.unlinkSync(backendOutputPath);
+      }
+    }
   } catch (error) {
     errors.push({
       message: "Failed to generate gqlorm schema artifacts",
@@ -116,6 +517,12 @@ async function generateGqlormArtifacts() {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  buildBackendModelInfo,
+  buildFrontendModelInfo,
   buildModelSchema,
-  generateGqlormArtifacts
+  generateGqlormArtifacts,
+  generateGqlormBackendContent,
+  generateWebGqlormModelsContent,
+  getExistingSdlTypeNames,
+  mapDmmfTypeToGraphql
 });

package/dist/cjs/generate/watch.js

@@ -23,7 +23,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var import_node_fs = __toESM(require("node:fs"), 1);
-var import_path = __toESM(require("path"), 1);
+var import_node_path = __toESM(require("node:path"), 1);
 var import_ansis = __toESM(require("ansis"), 1);
 var import_chokidar = __toESM(require("chokidar"), 1);
 var import_project_config = require("@cedarjs/project-config");
@@ -32,18 +32,22 @@ var import_files = require("../files.js");
 var import_routes = require("../routes.js");
 var import_clientPreset = require("./clientPreset.js");
 var import_generate = require("./generate.js");
+var import_gqlormSchema = require("./gqlormSchema.js");
 var import_graphqlCodeGen = require("./graphqlCodeGen.js");
 var import_graphqlSchema = require("./graphqlSchema.js");
 var import_typeDefinitions = require("./typeDefinitions.js");
 const rwjsPaths = (0, import_project_config.getPaths)();
-const generatedDirName = import_path.default.basename(rwjsPaths.generated.base);
-const watcher = import_chokidar.default.watch("(web|api)/src/**/*.{ts,js,jsx,tsx}", {
-  persistent: true,
-  ignored: ["node_modules", generatedDirName],
-  ignoreInitial: true,
-  cwd: rwjsPaths.base,
-  awaitWriteFinish: true
-});
+const generatedDirName = import_node_path.default.basename(rwjsPaths.generated.base);
+const watcher = import_chokidar.default.watch(
+  ["(web|api)/src/**/*.{ts,js,jsx,tsx}", "api/db/**/*.prisma"],
+  {
+    persistent: true,
+    ignored: ["node_modules", generatedDirName],
+    ignoreInitial: true,
+    cwd: rwjsPaths.base,
+    awaitWriteFinish: true
+  }
+);
 const action = {
   add: "Created",
   unlink: "Deleted",
@@ -83,7 +87,7 @@ Created ${files.length} in ${Date.now() - start} ms`);
     return;
   }
   const eventTigger = eventName;
-  const absPath = import_path.default.join(rwjsPaths.base, p);
+  const absPath = import_node_path.default.join(rwjsPaths.base, p);
   const start = Date.now();
   const finished = (type) => import_cliLogger.cliLogger.debug(
     action[eventTigger],
@@ -118,6 +122,9 @@ Created ${files.length} in ${Date.now() - start} ms`);
     await (0, import_graphqlSchema.generateGraphQLSchema)();
     await (0, import_graphqlCodeGen.generateTypeDefGraphQLApi)();
     finished("GraphQL Schema");
+  } else if (absPath.startsWith(import_node_path.default.join(rwjsPaths.base, "api/db/")) && absPath.endsWith(".prisma")) {
+    await (0, import_gqlormSchema.generateGqlormArtifacts)();
+    finished("Prisma Schema");
   }
   if (routesWarningMessage) {
     console.warn(routesWarningMessage);

package/dist/generate/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/generate/generate.ts"],"names":[],"mappings":";AAWA,eAAO,MAAM,QAAQ;;;;;;EA6CpB,CAAA;AAED,eAAO,MAAM,GAAG,qBAoCf,CAAA"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/generate/generate.ts"],"names":[],"mappings":";AAWA,eAAO,MAAM,QAAQ;;;;;;EA2CpB,CAAA;AAED,eAAO,MAAM,GAAG,qBAoCf,CAAA"}

package/dist/generate/generate.js

@@ -12,7 +12,7 @@ const generate = async () => {
   const { typeDefFiles, errors: generateTypeDefsErrors } = await generateTypeDefs();
   const clientPresetFiles = [];
   const { possibleTypesFiles, errors: generatePossibleTypesErrors } = await generatePossibleTypes();
-  const { files: gqlormFiles, errors: gqlormErrors } = config.experimental?.gqlorm?.enabled ? await generateGqlormArtifacts() : { files: [], errors: [] };
+  const { files: gqlormFiles, errors: gqlormErrors } = await generateGqlormArtifacts();
   if (config.graphql.trustedDocuments) {
     const preset = await generateClientPreset();
     clientPresetFiles.push(...preset.clientPresetFiles);

package/dist/generate/gqlormSchema.d.ts

@@ -1,5 +1,36 @@
 import type * as DMMF from '@prisma/dmmf';
 type ModelSchema = Record<string, string[]>;
+interface FrontendFieldInfo {
+    name: string;
+    tsType: string;
+}
+interface FrontendModelInfo {
+    modelName: string;
+    camelName: string;
+    fields: FrontendFieldInfo[];
+}
+export interface BackendFieldInfo {
+    name: string;
+    graphqlType: string;
+    isRequired: boolean;
+    isId: boolean;
+}
+export interface BackendModelInfo {
+    modelName: string;
+    camelName: string;
+    pluralName: string;
+    fields: BackendFieldInfo[];
+    idField: BackendFieldInfo | undefined;
+}
+/**
+ * Map a DMMF field type to its GraphQL SDL equivalent.
+ *
+ * Enum fields (kind === 'enum') are mapped to String. Unknown scalar types
+ * fall back to String.
+ */
+export declare function mapDmmfTypeToGraphql(type: string, kind: string): string;
+export declare function buildFrontendModelInfo(dmmf: DMMF.Document): FrontendModelInfo[];
+export declare function generateWebGqlormModelsContent(models: FrontendModelInfo[]): string;
 /**
  * Build a ModelSchema from a Prisma DMMF document.
  *
@@ -7,12 +38,57 @@ type ModelSchema = Record<string, string[]>;
  * with a mock DMMF object.
  */
 export declare function buildModelSchema(dmmf: DMMF.Document): ModelSchema;
+/**
+ * Build enriched model information from the DMMF, applying the same visibility
+ * rules as `buildModelSchema()` but also collecting type, nullability, and
+ * @id flag per field.
+ *
+ * **Note:** This function silently excludes sensitive fields without emitting
+ * warnings. It is designed to run after `buildModelSchema()` (which emits the
+ * warnings). In `generateGqlormArtifacts()` the call order is guaranteed, but
+ * callers using this function standalone should be aware that no warnings will
+ * be printed for auto-hidden sensitive fields.
+ *
+ * This is a pure function — safe for testing.
+ */
+export declare function buildBackendModelInfo(dmmf: DMMF.Document): BackendModelInfo[];
+/**
+ * Scan all SDL files in the given directory and return the set of GraphQL type
+ * names that are already defined by user-authored SDLs.
+ *
+ * This prevents gqlorm from generating duplicate type definitions that would
+ * cause merge conflicts in `makeMergedSchema`.
+ */
+export declare function getExistingSdlTypeNames(graphqlDir: string): Set<string>;
+/**
+ * Generate the full TypeScript source for `.cedar/gqlorm/backend.ts`.
+ *
+ * The generated file exports:
+ * - `schema`: a gql DocumentNode with type defs and Query fields
+ * - `createGqlormResolvers(db: GqlormDb)`: a factory function that takes a
+ *   Prisma client-like object and returns a resolvers object
+ *
+ * The file does NOT import `db` directly. Instead, the Babel inject plugin
+ * imports `db` from `src/lib/db` in `graphql.ts` (where that alias resolves
+ * correctly) and passes it to `createGqlormResolvers`.
+ *
+ * The generated `GqlormDb` interface is scoped to exactly the visible models
+ * and fields — no hidden/sensitive fields, no @gqlorm hide models, no
+ * dependency on the generated Prisma client path or @prisma/client.
+ */
+export declare function generateGqlormBackendContent(models: BackendModelInfo[]): string;
 /**
  * Generate gqlorm artifacts from the Prisma schema.
  *
  * Reads the project's Prisma schema via DMMF, applies visibility rules
- * (@gqlorm directives + sensitivity heuristics), and writes the resulting
- * ModelSchema to `.cedar/gqlorm-schema.json`.
+ * (@gqlorm directives + sensitivity heuristics), and writes:
+ *
+ * 1. `.cedar/gqlorm-schema.json` — the frontend ModelSchema (field names only)
+ * 2. `.cedar/gqlorm/backend.ts` — auto-generated GraphQL types and resolvers
+ *    for models that don't already have manually-written SDL files
+ *
+ * Cedar targets Node.js 24, which strips TypeScript types natively without any
+ * flags, so backend.ts can be imported directly at runtime
  *
  * Returns the same `{ files, errors }` shape used by other generators so it
  * can be integrated into `generate.ts` without special handling.

package/dist/generate/gqlormSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gqlormSchema.d.ts","sourceRoot":"","sources":["../../src/generate/gqlormSchema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,IAAI,MAAM,cAAc,CAAA;AAgBzC,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AAiC3C;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAkDjE;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC;IACvD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAC9C,CAAC,CA+BD"}
+{"version":3,"file":"gqlormSchema.d.ts","sourceRoot":"","sources":["../../src/generate/gqlormSchema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,IAAI,MAAM,cAAc,CAAA;AA8BzC,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AAE3C,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,iBAAiB;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAA;CACtC;AAqDD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMvE;AAoGD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAClB,iBAAiB,EAAE,CAiDrB;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,iBAAiB,EAAE,GAC1B,MAAM,CA2CR;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAkDjE;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,EAAE,CA2D7E;AAkBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CA6BvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,gBAAgB,EAAE,GACzB,MAAM,CA0IR;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC;IACvD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAC9C,CAAC,CAgFD"}

package/dist/generate/gqlormSchema.js

@@ -1,8 +1,22 @@
 import fs from "node:fs";
 import path from "node:path";
-import { getPaths, getPrismaSchemas } from "@cedarjs/project-config";
-const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set(["RW_DataMigration"]);
-const SENSITIVE_PATTERNS = ["password", "secret", "token", "hash", "salt"];
+import { getConfig, getPaths, getPrismaSchemas } from "@cedarjs/project-config";
+import { pluralize } from "@cedarjs/utils/cedarPluralize";
+const INTERNAL_MODEL_NAMES = /* @__PURE__ */ new Set([
+  "RW_DataMigration",
+  "Cedar_DataMigration"
+]);
+const SENSITIVE_PATTERNS = [
+  "password",
+  "secret",
+  "token",
+  "hash",
+  "salt",
+  "apikey",
+  "secretkey",
+  "encryptionkey",
+  "privatekey"
+];
 function hasDirective(doc, directive) {
   if (!doc) {
     return false;
@@ -22,6 +36,172 @@ function emitSensitivityWarning(modelName, fieldName) {
 `
   );
 }
+const DMMF_TYPE_TO_GRAPHQL = {
+  String: "String",
+  Int: "Int",
+  Float: "Float",
+  BigInt: "BigInt",
+  Boolean: "Boolean",
+  DateTime: "DateTime",
+  Json: "JSON",
+  Decimal: "String",
+  Bytes: "String"
+};
+function mapDmmfTypeToGraphql(type, kind) {
+  if (kind === "enum") {
+    return "String";
+  }
+  return DMMF_TYPE_TO_GRAPHQL[type] ?? "String";
+}
+function graphqlTypeToTsType(graphqlType) {
+  switch (graphqlType) {
+    case "Int":
+    case "Float":
+    case "BigInt":
+      return "number";
+    case "Boolean":
+      return "boolean";
+    default:
+      return "string";
+  }
+}
+function graphqlTypeToTsInterfaceType(graphqlType, isRequired) {
+  let tsType;
+  switch (graphqlType) {
+    case "Int":
+    case "Float":
+    case "BigInt":
+      tsType = "number";
+      break;
+    case "Boolean":
+      tsType = "boolean";
+      break;
+    case "DateTime":
+      tsType = "Date";
+      break;
+    default:
+      tsType = "string";
+  }
+  return isRequired ? tsType : `${tsType} | null`;
+}
+function dmmfTypeToFrontendTsType(type, kind, isRequired) {
+  let tsType;
+  if (kind === "enum") {
+    tsType = "string";
+  } else {
+    switch (type) {
+      case "String":
+        tsType = "string";
+        break;
+      case "Int":
+      case "Float":
+        tsType = "number";
+        break;
+      case "BigInt":
+        tsType = "bigint";
+        break;
+      case "Boolean":
+        tsType = "boolean";
+        break;
+      case "DateTime":
+        tsType = "string";
+        break;
+      case "Json":
+        tsType = "unknown";
+        break;
+      case "Bytes":
+      case "Decimal":
+        tsType = "string";
+        break;
+      default:
+        tsType = "unknown";
+    }
+  }
+  if (isRequired) {
+    return tsType;
+  }
+  return `${tsType} | null`;
+}
+function buildFrontendModelInfo(dmmf) {
+  const models = [];
+  for (const model of dmmf.datamodel.models) {
+    if (INTERNAL_MODEL_NAMES.has(model.name)) {
+      continue;
+    }
+    if (hasDirective(model.documentation, "hide")) {
+      continue;
+    }
+    const fields = [];
+    for (const field of model.fields) {
+      if (field.kind !== "scalar" && field.kind !== "enum") {
+        continue;
+      }
+      if (hasDirective(field.documentation, "hide")) {
+        continue;
+      }
+      const isShown = hasDirective(field.documentation, "show");
+      if (!isShown && isSensitiveField(field.name)) {
+        continue;
+      }
+      fields.push({
+        name: field.name,
+        tsType: dmmfTypeToFrontendTsType(
+          field.type,
+          field.kind,
+          field.isRequired
+        )
+      });
+    }
+    if (fields.length > 0) {
+      models.push({
+        modelName: model.name,
+        camelName: model.name.charAt(0).toLowerCase() + model.name.slice(1),
+        fields
+      });
+    }
+  }
+  return models;
+}
+function generateWebGqlormModelsContent(models) {
+  if (models.length === 0) {
+    return [
+      "// Auto-generated by Cedar \u2014 do not edit",
+      "// Regenerated on every codegen run. Source: api/db/schema.prisma",
+      "",
+      "declare module '@cedarjs/gqlorm/types/orm' {",
+      "  interface GqlormTypeMap {}",
+      "}",
+      ""
+    ].join("\n");
+  }
+  const lines = [
+    "// Auto-generated by Cedar \u2014 do not edit",
+    "// Regenerated on every codegen run. Source: api/db/schema.prisma",
+    "",
+    "declare namespace GqlormScalar {"
+  ];
+  for (const model of models) {
+    lines.push(`  interface ${model.modelName} {`);
+    for (const field of model.fields) {
+      lines.push(`    ${field.name}: ${field.tsType}`);
+    }
+    lines.push("  }");
+    lines.push("");
+  }
+  lines.push("}");
+  lines.push("");
+  lines.push("declare module '@cedarjs/gqlorm/types/orm' {");
+  lines.push("  interface GqlormTypeMap {");
+  lines.push("    models: {");
+  for (const model of models) {
+    lines.push(`      ${model.camelName}: GqlormScalar.${model.modelName}`);
+  }
+  lines.push("    }");
+  lines.push("  }");
+  lines.push("}");
+  lines.push("");
+  return lines.join("\n");
+}
 function buildModelSchema(dmmf) {
   const schema = {};
   for (const model of dmmf.datamodel.models) {
@@ -56,6 +236,185 @@ function buildModelSchema(dmmf) {
   }
   return schema;
 }
+function buildBackendModelInfo(dmmf) {
+  const models = [];
+  for (const model of dmmf.datamodel.models) {
+    if (INTERNAL_MODEL_NAMES.has(model.name)) {
+      continue;
+    }
+    if (hasDirective(model.documentation, "hide")) {
+      continue;
+    }
+    const fields = [];
+    for (const field of model.fields) {
+      if (field.kind !== "scalar" && field.kind !== "enum") {
+        continue;
+      }
+      if (hasDirective(field.documentation, "hide")) {
+        continue;
+      }
+      const isShown = hasDirective(field.documentation, "show");
+      if (!isShown && isSensitiveField(field.name)) {
+        continue;
+      }
+      fields.push({
+        name: field.name,
+        graphqlType: mapDmmfTypeToGraphql(field.type, field.kind),
+        isRequired: field.isRequired,
+        isId: field.isId
+      });
+    }
+    if (fields.length > 0) {
+      const camelName = model.name.charAt(0).toLowerCase() + model.name.slice(1);
+      const pluralName = pluralize(camelName);
+      models.push({
+        modelName: model.name,
+        camelName,
+        pluralName,
+        fields,
+        idField: fields.find((f) => f.isId)
+      });
+    }
+  }
+  return models;
+}
+const TYPE_DEF_REGEX = /\btype\s+([A-Z]\w*)\s*\{/g;
+const STRUCTURAL_TYPE_NAMES = /* @__PURE__ */ new Set(["Query", "Mutation", "Subscription"]);
+function getExistingSdlTypeNames(graphqlDir) {
+  const typeNames = /* @__PURE__ */ new Set();
+  if (!fs.existsSync(graphqlDir)) {
+    return typeNames;
+  }
+  const sdlFiles = fs.readdirSync(graphqlDir).filter((file) => {
+    return /\.sdl\.(ts|js)$/.test(file) && !file.startsWith("__gqlorm__");
+  });
+  for (const file of sdlFiles) {
+    const content = fs.readFileSync(path.join(graphqlDir, file), "utf-8");
+    let match;
+    TYPE_DEF_REGEX.lastIndex = 0;
+    while ((match = TYPE_DEF_REGEX.exec(content)) !== null) {
+      const name = match[1];
+      if (!STRUCTURAL_TYPE_NAMES.has(name)) {
+        typeNames.add(name);
+      }
+    }
+  }
+  return typeNames;
+}
+function generateGqlormBackendContent(models) {
+  if (models.length === 0) {
+    return "";
+  }
+  const lines = [
+    "// This file is auto-generated by Cedar gqlorm codegen.",
+    "// Do not edit \u2014 it will be overwritten on every codegen run.",
+    "// To hide a model from gqlorm, add /// @gqlorm hide in schema.prisma.",
+    "",
+    "import gql from 'graphql-tag'",
+    "",
+    "// Generated minimal interface \u2014 only visible models and fields, only the",
+    "// operations used by this file. No @gqlorm hide models, no sensitive fields.",
+    "// Scoped to avoid any dependency on the generated Prisma client path or",
+    "// @prisma/client (which is an empty shim in Prisma v7).",
+    "interface GqlormDb {"
+  ];
+  for (const model of models) {
+    const selectType = model.fields.map((f) => `${f.name}: true`).join("; ");
+    lines.push(`  ${model.camelName}: {`);
+    lines.push("    findMany(args: {");
+    lines.push(`      select: { ${selectType} }`);
+    lines.push("    }): Promise<");
+    lines.push("      Array<{");
+    for (const field of model.fields) {
+      const tsType = graphqlTypeToTsInterfaceType(
+        field.graphqlType,
+        field.isRequired
+      );
+      lines.push(`        ${field.name}: ${tsType}`);
+    }
+    lines.push("      }>");
+    lines.push("    >");
+    if (model.idField) {
+      const idTsType = graphqlTypeToTsType(model.idField.graphqlType);
+      lines.push("    findUnique(args: {");
+      lines.push(`      where: { ${model.idField.name}: ${idTsType} }`);
+      lines.push(`      select: { ${selectType} }`);
+      lines.push("    }): Promise<{");
+      for (const field of model.fields) {
+        const tsType = graphqlTypeToTsInterfaceType(
+          field.graphqlType,
+          field.isRequired
+        );
+        lines.push(`      ${field.name}: ${tsType}`);
+      }
+      lines.push("    } | null>");
+    }
+    lines.push("  }");
+  }
+  lines.push("}");
+  lines.push("");
+  lines.push("export const schema = gql`");
+  for (const model of models) {
+    lines.push(`  type ${model.modelName} {`);
+    for (const field of model.fields) {
+      const nullMark = field.isRequired ? "!" : "";
+      lines.push(`    ${field.name}: ${field.graphqlType}${nullMark}`);
+    }
+    lines.push("  }");
+    lines.push("");
+  }
+  lines.push("  type Query {");
+  for (const model of models) {
+    lines.push(`    ${model.pluralName}: [${model.modelName}!]! @skipAuth`);
+    if (model.idField) {
+      const idNullMark = model.idField.isRequired ? "!" : "";
+      lines.push(
+        `    ${model.camelName}(${model.idField.name}: ${model.idField.graphqlType}${idNullMark}): ${model.modelName} @skipAuth`
+      );
+    }
+  }
+  lines.push("  }");
+  lines.push("`");
+  lines.push("");
+  lines.push(
+    "// db is passed in from graphql.ts by the Babel inject plugin, which imports it"
+  );
+  lines.push(
+    "// from 'src/lib/db' in a context where that alias resolves correctly."
+  );
+  lines.push("export function createGqlormResolvers(db: GqlormDb) {");
+  lines.push("  return {");
+  lines.push("    Query: {");
+  for (let i = 0; i < models.length; i++) {
+    const model = models[i];
+    const selectObj = model.fields.map((f) => `${f.name}: true`).join(", ");
+    lines.push(`      ${model.pluralName}: () => {`);
+    lines.push(`        return db.${model.camelName}.findMany({`);
+    lines.push(`          select: { ${selectObj} },`);
+    lines.push("        })");
+    lines.push("      },");
+    if (model.idField) {
+      const idFieldName = model.idField.name;
+      const tsType = graphqlTypeToTsType(model.idField.graphqlType);
+      lines.push(
+        `      ${model.camelName}: (_root: unknown, { ${idFieldName} }: { ${idFieldName}: ${tsType} }) => {`
+      );
+      lines.push(`        return db.${model.camelName}.findUnique({`);
+      lines.push(`          where: { ${idFieldName} },`);
+      lines.push(`          select: { ${selectObj} },`);
+      lines.push("        })");
+      lines.push("      },");
+    }
+    if (i < models.length - 1) {
+      lines.push("");
+    }
+  }
+  lines.push("    },");
+  lines.push("  }");
+  lines.push("}");
+  lines.push("");
+  return lines.join("\n");
+}
 async function generateGqlormArtifacts() {
   const files = [];
   const errors = [];
@@ -64,14 +423,50 @@ async function generateGqlormArtifacts() {
     const mod = await import("@prisma/internals");
     const { getDMMF } = mod.default || mod;
     const dmmf = await getDMMF({ datamodel: schemas });
+    const paths = getPaths();
+    const generatedBase = paths.generated.base;
     const modelSchema = buildModelSchema(dmmf);
-    const outputPath = path.join(
-      getPaths().generated.base,
-      "gqlorm-schema.json"
+    const frontendModels = buildFrontendModelInfo(dmmf);
+    const schemaOutputPath = path.join(generatedBase, "gqlorm-schema.json");
+    const webTypesOutputPath = path.join(
+      generatedBase,
+      "types",
+      "includes",
+      "web-gqlorm-models.d.ts"
+    );
+    fs.mkdirSync(path.dirname(schemaOutputPath), { recursive: true });
+    fs.writeFileSync(schemaOutputPath, JSON.stringify(modelSchema, null, 2));
+    files.push(schemaOutputPath);
+    fs.mkdirSync(path.dirname(webTypesOutputPath), { recursive: true });
+    fs.writeFileSync(
+      webTypesOutputPath,
+      generateWebGqlormModelsContent(frontendModels)
     );
-    fs.mkdirSync(path.dirname(outputPath), { recursive: true });
-    fs.writeFileSync(outputPath, JSON.stringify(modelSchema, null, 2));
-    files.push(outputPath);
+    files.push(webTypesOutputPath);
+    const backendOutputDir = path.join(generatedBase, "gqlorm");
+    const backendOutputPath = path.join(backendOutputDir, "backend.ts");
+    if (getConfig().experimental?.gqlorm?.enabled) {
+      const graphqlDir = paths.api.graphql;
+      const existingTypes = getExistingSdlTypeNames(graphqlDir);
+      const allModels = buildBackendModelInfo(dmmf);
+      const gqlormModels = allModels.filter(
+        (m) => !existingTypes.has(m.modelName)
+      );
+      if (gqlormModels.length > 0) {
+        const backendContent = generateGqlormBackendContent(gqlormModels);
+        fs.mkdirSync(backendOutputDir, { recursive: true });
+        fs.writeFileSync(backendOutputPath, backendContent);
+        files.push(backendOutputPath);
+      } else {
+        if (fs.existsSync(backendOutputPath)) {
+          fs.unlinkSync(backendOutputPath);
+        }
+      }
+    } else {
+      if (fs.existsSync(backendOutputPath)) {
+        fs.unlinkSync(backendOutputPath);
+      }
+    }
   } catch (error) {
     errors.push({
       message: "Failed to generate gqlorm schema artifacts",
@@ -81,6 +476,12 @@ async function generateGqlormArtifacts() {
   return { files, errors };
 }
 export {
+  buildBackendModelInfo,
+  buildFrontendModelInfo,
   buildModelSchema,
-  generateGqlormArtifacts
+  generateGqlormArtifacts,
+  generateGqlormBackendContent,
+  generateWebGqlormModelsContent,
+  getExistingSdlTypeNames,
+  mapDmmfTypeToGraphql
 };

package/dist/generate/watch.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import fs from "node:fs";
-import path from "path";
+import path from "node:path";
 import ansis from "ansis";
 import chokidar from "chokidar";
 import { getPaths } from "@cedarjs/project-config";
@@ -14,6 +14,7 @@ import {
 import { warningForDuplicateRoutes } from "../routes.js";
 import { generateClientPreset } from "./clientPreset.js";
 import { generate } from "./generate.js";
+import { generateGqlormArtifacts } from "./gqlormSchema.js";
 import {
   generateTypeDefGraphQLApi,
   generateTypeDefGraphQLWeb
@@ -29,13 +30,16 @@ import {
 } from "./typeDefinitions.js";
 const rwjsPaths = getPaths();
 const generatedDirName = path.basename(rwjsPaths.generated.base);
-const watcher = chokidar.watch("(web|api)/src/**/*.{ts,js,jsx,tsx}", {
-  persistent: true,
-  ignored: ["node_modules", generatedDirName],
-  ignoreInitial: true,
-  cwd: rwjsPaths.base,
-  awaitWriteFinish: true
-});
+const watcher = chokidar.watch(
+  ["(web|api)/src/**/*.{ts,js,jsx,tsx}", "api/db/**/*.prisma"],
+  {
+    persistent: true,
+    ignored: ["node_modules", generatedDirName],
+    ignoreInitial: true,
+    cwd: rwjsPaths.base,
+    awaitWriteFinish: true
+  }
+);
 const action = {
   add: "Created",
   unlink: "Deleted",
@@ -110,6 +114,9 @@ Created ${files.length} in ${Date.now() - start} ms`);
     await generateGraphQLSchema();
     await generateTypeDefGraphQLApi();
     finished("GraphQL Schema");
+  } else if (absPath.startsWith(path.join(rwjsPaths.base, "api/db/")) && absPath.endsWith(".prisma")) {
+    await generateGqlormArtifacts();
+    finished("Prisma Schema");
   }
   if (routesWarningMessage) {
     console.warn(routesWarningMessage);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cedarjs/internal",
-  "version": "4.0.0-canary.13809+f4d5684a29",
+  "version": "4.0.0-canary.13811+d81274ecc8",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
@@ -159,12 +159,13 @@
     "@babel/plugin-transform-react-jsx": "7.28.6",
     "@babel/plugin-transform-typescript": "^7.26.8",
     "@babel/traverse": "7.29.0",
-    "@cedarjs/babel-config": "4.0.0-canary.13809",
-    "@cedarjs/cli-helpers": "4.0.0-canary.13809",
-    "@cedarjs/graphql-server": "4.0.0-canary.13809",
-    "@cedarjs/project-config": "4.0.0-canary.13809",
-    "@cedarjs/router": "4.0.0-canary.13809",
-    "@cedarjs/structure": "4.0.0-canary.13809",
+    "@cedarjs/babel-config": "4.0.0-canary.13811",
+    "@cedarjs/cli-helpers": "4.0.0-canary.13811",
+    "@cedarjs/graphql-server": "4.0.0-canary.13811",
+    "@cedarjs/project-config": "4.0.0-canary.13811",
+    "@cedarjs/router": "4.0.0-canary.13811",
+    "@cedarjs/structure": "4.0.0-canary.13811",
+    "@cedarjs/utils": "4.0.0-canary.13811",
     "@graphql-codegen/add": "6.0.0",
     "@graphql-codegen/cli": "6.2.1",
     "@graphql-codegen/client-preset": "5.2.4",
@@ -197,7 +198,7 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.2",
-    "@cedarjs/framework-tools": "4.0.0-canary.13809",
+    "@cedarjs/framework-tools": "4.0.0-canary.13811",
     "concurrently": "9.2.1",
     "graphql-tag": "2.12.6",
     "publint": "0.3.18",
@@ -210,5 +211,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "f4d5684a29838388cab209670ad76ea613c6d190"
+  "gitHead": "d81274ecc8944eaa7a99249911420771a860bae5"
 }