@prisma-next/cli 0.3.0-dev.13 → 0.3.0-dev.14

package/dist/exports/control-api.js

@@ -0,0 +1,240 @@
+import {
+  assertFrameworkComponentsCompatible
+} from "../chunk-6EPKRATC.js";
+import "../chunk-VI2YETW7.js";
+
+// src/control-api/client.ts
+import { createControlPlaneStack } from "@prisma-next/core-control-plane/stack";
+
+// src/control-api/operations/db-init.ts
+import { notOk, ok } from "@prisma-next/utils/result";
+async function executeDbInit(options) {
+  const { driver, familyInstance, contractIR, mode, migrations, frameworkComponents } = options;
+  const planner = migrations.createPlanner(familyInstance);
+  const runner = migrations.createRunner(familyInstance);
+  const schemaIR = await familyInstance.introspect({ driver });
+  const policy = { allowedOperationClasses: ["additive"] };
+  const plannerResult = await planner.plan({
+    contract: contractIR,
+    schema: schemaIR,
+    policy,
+    frameworkComponents
+  });
+  if (plannerResult.kind === "failure") {
+    return notOk({
+      code: "PLANNING_FAILED",
+      summary: "Migration planning failed due to conflicts",
+      conflicts: plannerResult.conflicts
+    });
+  }
+  const migrationPlan = plannerResult.plan;
+  const existingMarker = await familyInstance.readMarker({ driver });
+  if (existingMarker) {
+    const markerMatchesDestination = existingMarker.coreHash === migrationPlan.destination.coreHash && (!migrationPlan.destination.profileHash || existingMarker.profileHash === migrationPlan.destination.profileHash);
+    if (markerMatchesDestination) {
+      const result2 = {
+        mode,
+        plan: { operations: [] },
+        ...mode === "apply" ? {
+          execution: { operationsPlanned: 0, operationsExecuted: 0 },
+          marker: {
+            coreHash: existingMarker.coreHash,
+            profileHash: existingMarker.profileHash
+          }
+        } : {},
+        summary: "Database already at target contract state"
+      };
+      return ok(result2);
+    }
+    return notOk({
+      code: "MARKER_ORIGIN_MISMATCH",
+      summary: "Existing contract marker does not match plan destination",
+      marker: {
+        coreHash: existingMarker.coreHash,
+        profileHash: existingMarker.profileHash
+      },
+      destination: {
+        coreHash: migrationPlan.destination.coreHash,
+        profileHash: migrationPlan.destination.profileHash
+      }
+    });
+  }
+  if (mode === "plan") {
+    const result2 = {
+      mode: "plan",
+      plan: { operations: migrationPlan.operations },
+      summary: `Planned ${migrationPlan.operations.length} operation(s)`
+    };
+    return ok(result2);
+  }
+  const runnerResult = await runner.execute({
+    plan: migrationPlan,
+    driver,
+    destinationContract: contractIR,
+    policy,
+    // db init plans and applies back-to-back from a fresh introspection, so per-operation
+    // pre/postchecks and the idempotency probe are usually redundant overhead. We still
+    // enforce marker/origin compatibility and a full schema verification after apply.
+    executionChecks: {
+      prechecks: false,
+      postchecks: false,
+      idempotencyChecks: false
+    },
+    frameworkComponents
+  });
+  if (!runnerResult.ok) {
+    return notOk({
+      code: "RUNNER_FAILED",
+      summary: runnerResult.failure.summary
+    });
+  }
+  const execution = runnerResult.value;
+  const result = {
+    mode: "apply",
+    plan: { operations: migrationPlan.operations },
+    execution: {
+      operationsPlanned: execution.operationsPlanned,
+      operationsExecuted: execution.operationsExecuted
+    },
+    marker: migrationPlan.destination.profileHash ? {
+      coreHash: migrationPlan.destination.coreHash,
+      profileHash: migrationPlan.destination.profileHash
+    } : { coreHash: migrationPlan.destination.coreHash },
+    summary: `Applied ${execution.operationsExecuted} operation(s), marker written`
+  };
+  return ok(result);
+}
+
+// src/control-api/client.ts
+function createControlClient(options) {
+  return new ControlClientImpl(options);
+}
+var ControlClientImpl = class {
+  options;
+  stack = null;
+  driver = null;
+  familyInstance = null;
+  frameworkComponents = null;
+  initialized = false;
+  defaultConnection;
+  constructor(options) {
+    this.options = options;
+    this.defaultConnection = options.connection;
+  }
+  init() {
+    if (this.initialized) {
+      return;
+    }
+    this.stack = createControlPlaneStack({
+      target: this.options.target,
+      adapter: this.options.adapter,
+      driver: this.options.driver,
+      extensionPacks: this.options.extensionPacks
+    });
+    this.familyInstance = this.options.family.create(this.stack);
+    const rawComponents = [
+      this.options.target,
+      this.options.adapter,
+      ...this.options.extensionPacks ?? []
+    ];
+    this.frameworkComponents = assertFrameworkComponentsCompatible(
+      this.options.family.familyId,
+      this.options.target.targetId,
+      rawComponents
+    );
+    this.initialized = true;
+  }
+  async connect(connection) {
+    this.init();
+    if (this.driver) {
+      throw new Error("Already connected. Call close() before reconnecting.");
+    }
+    const resolvedConnection = connection ?? this.defaultConnection;
+    if (resolvedConnection === void 0) {
+      throw new Error(
+        "No connection provided. Pass a connection to connect() or provide a default connection when creating the client."
+      );
+    }
+    if (!this.stack?.driver) {
+      throw new Error(
+        "Driver is not configured. Pass a driver descriptor when creating the control client to enable database operations."
+      );
+    }
+    this.driver = await this.stack?.driver.create(resolvedConnection);
+  }
+  async close() {
+    if (this.driver) {
+      await this.driver.close();
+      this.driver = null;
+    }
+  }
+  async ensureConnected() {
+    this.init();
+    if (!this.driver && this.defaultConnection !== void 0) {
+      await this.connect(this.defaultConnection);
+    }
+    if (!this.driver || !this.familyInstance || !this.frameworkComponents) {
+      throw new Error("Not connected. Call connect(connection) first.");
+    }
+    return {
+      driver: this.driver,
+      familyInstance: this.familyInstance,
+      frameworkComponents: this.frameworkComponents
+    };
+  }
+  async verify(options) {
+    const { driver, familyInstance } = await this.ensureConnected();
+    const contractIR = familyInstance.validateContractIR(options.contractIR);
+    return familyInstance.verify({
+      driver,
+      contractIR,
+      expectedTargetId: this.options.target.targetId,
+      contractPath: ""
+    });
+  }
+  async schemaVerify(options) {
+    const { driver, familyInstance, frameworkComponents } = await this.ensureConnected();
+    const contractIR = familyInstance.validateContractIR(options.contractIR);
+    return familyInstance.schemaVerify({
+      driver,
+      contractIR,
+      strict: options.strict ?? false,
+      contractPath: "",
+      frameworkComponents
+    });
+  }
+  async sign(options) {
+    const { driver, familyInstance } = await this.ensureConnected();
+    const contractIR = familyInstance.validateContractIR(options.contractIR);
+    return familyInstance.sign({
+      driver,
+      contractIR,
+      contractPath: ""
+    });
+  }
+  async dbInit(options) {
+    const { driver, familyInstance, frameworkComponents } = await this.ensureConnected();
+    if (!this.options.target.migrations) {
+      throw new Error(`Target "${this.options.target.targetId}" does not support migrations`);
+    }
+    const contractIR = familyInstance.validateContractIR(options.contractIR);
+    return executeDbInit({
+      driver,
+      familyInstance,
+      contractIR,
+      mode: options.mode,
+      migrations: this.options.target.migrations,
+      frameworkComponents
+    });
+  }
+  async introspect(options) {
+    const { driver, familyInstance } = await this.ensureConnected();
+    const _schema = options?.schema;
+    void _schema;
+    return familyInstance.introspect({ driver });
+  }
+};
+export {
+  createControlClient
+};
+//# sourceMappingURL=control-api.js.map

package/dist/exports/control-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/control-api/client.ts","../../src/control-api/operations/db-init.ts"],"sourcesContent":["import type { TargetBoundComponentDescriptor } from '@prisma-next/contract/framework-components';\nimport { createControlPlaneStack } from '@prisma-next/core-control-plane/stack';\nimport type {\n  ControlDriverInstance,\n  ControlFamilyInstance,\n  ControlPlaneStack,\n  SignDatabaseResult,\n  VerifyDatabaseResult,\n  VerifyDatabaseSchemaResult,\n} from '@prisma-next/core-control-plane/types';\nimport { assertFrameworkComponentsCompatible } from '../utils/framework-components';\nimport { executeDbInit } from './operations/db-init';\nimport type {\n  ControlClient,\n  ControlClientOptions,\n  DbInitOptions,\n  DbInitResult,\n  IntrospectOptions,\n  SchemaVerifyOptions,\n  SignOptions,\n  VerifyOptions,\n} from './types';\n\n/**\n * Creates a programmatic control client for Prisma Next operations.\n *\n * The client accepts framework component descriptors at creation time,\n * manages driver lifecycle via connect()/close(), and exposes domain\n * operations that delegate to the existing family instance methods.\n *\n * @see {@link ControlClient} for the client interface\n * @see README.md \"Programmatic Control API\" section for usage examples\n */\nexport function createControlClient(options: ControlClientOptions): ControlClient {\n  return new ControlClientImpl(options);\n}\n\n/**\n * Implementation of ControlClient.\n * Manages initialization and connection state, delegates operations to family instance.\n */\nclass ControlClientImpl implements ControlClient {\n  private readonly options: ControlClientOptions;\n  private stack: ControlPlaneStack<string, string> | null = null;\n  private driver: ControlDriverInstance<string, string> | null = null;\n  private familyInstance: ControlFamilyInstance<string> | null = null;\n  private frameworkComponents: ReadonlyArray<\n    TargetBoundComponentDescriptor<string, string>\n  > | null = null;\n  private initialized = false;\n  private readonly defaultConnection: unknown;\n\n  constructor(options: ControlClientOptions) {\n    this.options = options;\n    this.defaultConnection = options.connection;\n  }\n\n  init(): void {\n    if (this.initialized) {\n      return; // Idempotent\n    }\n\n    // Create the control plane stack\n    this.stack = createControlPlaneStack({\n      target: this.options.target,\n      adapter: this.options.adapter,\n      driver: this.options.driver,\n      extensionPacks: this.options.extensionPacks,\n    });\n\n    // Create family instance using the stack\n    this.familyInstance = this.options.family.create(this.stack);\n\n    // Validate and type-narrow framework components\n    const rawComponents = [\n      this.options.target,\n      this.options.adapter,\n      ...(this.options.extensionPacks ?? []),\n    ];\n    this.frameworkComponents = assertFrameworkComponentsCompatible(\n      this.options.family.familyId,\n      this.options.target.targetId,\n      rawComponents,\n    );\n\n    this.initialized = true;\n  }\n\n  async connect(connection?: unknown): Promise<void> {\n    // Auto-init if needed\n    this.init();\n\n    if (this.driver) {\n      throw new Error('Already connected. Call close() before reconnecting.');\n    }\n\n    // Resolve connection: argument > default from options\n    const resolvedConnection = connection ?? this.defaultConnection;\n    if (resolvedConnection === undefined) {\n      throw new Error(\n        'No connection provided. Pass a connection to connect() or provide a default connection when creating the client.',\n      );\n    }\n\n    // Check for driver descriptor\n    if (!this.stack?.driver) {\n      throw new Error(\n        'Driver is not configured. Pass a driver descriptor when creating the control client to enable database operations.',\n      );\n    }\n\n    // Create driver instance\n    // Cast through any since connection type is driver-specific at runtime.\n    // The driver descriptor is typed with any for TConnection in ControlClientOptions,\n    // but createControlPlaneStack defaults it to string. We bridge this at runtime.\n    // biome-ignore lint/suspicious/noExplicitAny: required for runtime connection type flexibility\n    this.driver = await this.stack?.driver.create(resolvedConnection as any);\n  }\n\n  async close(): Promise<void> {\n    if (this.driver) {\n      await this.driver.close();\n      this.driver = null;\n    }\n  }\n\n  private async ensureConnected(): Promise<{\n    driver: ControlDriverInstance<string, string>;\n    familyInstance: ControlFamilyInstance<string>;\n    frameworkComponents: ReadonlyArray<TargetBoundComponentDescriptor<string, string>>;\n  }> {\n    // Auto-init if needed\n    this.init();\n\n    // Auto-connect if not connected and default connection is available\n    if (!this.driver && this.defaultConnection !== undefined) {\n      await this.connect(this.defaultConnection);\n    }\n\n    if (!this.driver || !this.familyInstance || !this.frameworkComponents) {\n      throw new Error('Not connected. Call connect(connection) first.');\n    }\n    return {\n      driver: this.driver,\n      familyInstance: this.familyInstance,\n      frameworkComponents: this.frameworkComponents,\n    };\n  }\n\n  async verify(options: VerifyOptions): Promise<VerifyDatabaseResult> {\n    const { driver, familyInstance } = await this.ensureConnected();\n\n    // Validate contract using family instance\n    const contractIR = familyInstance.validateContractIR(options.contractIR);\n\n    // Delegate to family instance verify method\n    // Note: We pass empty strings for contractPath/configPath since the programmatic\n    // API doesn't deal with file paths. The family instance accepts these as optional\n    // metadata for error reporting.\n    return familyInstance.verify({\n      driver,\n      contractIR,\n      expectedTargetId: this.options.target.targetId,\n      contractPath: '',\n    });\n  }\n\n  async schemaVerify(options: SchemaVerifyOptions): Promise<VerifyDatabaseSchemaResult> {\n    const { driver, familyInstance, frameworkComponents } = await this.ensureConnected();\n\n    // Validate contract using family instance\n    const contractIR = familyInstance.validateContractIR(options.contractIR);\n\n    // Delegate to family instance schemaVerify method\n    return familyInstance.schemaVerify({\n      driver,\n      contractIR,\n      strict: options.strict ?? false,\n      contractPath: '',\n      frameworkComponents,\n    });\n  }\n\n  async sign(options: SignOptions): Promise<SignDatabaseResult> {\n    const { driver, familyInstance } = await this.ensureConnected();\n\n    // Validate contract using family instance\n    const contractIR = familyInstance.validateContractIR(options.contractIR);\n\n    // Delegate to family instance sign method\n    return familyInstance.sign({\n      driver,\n      contractIR,\n      contractPath: '',\n    });\n  }\n\n  async dbInit(options: DbInitOptions): Promise<DbInitResult> {\n    const { driver, familyInstance, frameworkComponents } = await this.ensureConnected();\n\n    // Check target supports migrations\n    if (!this.options.target.migrations) {\n      throw new Error(`Target \"${this.options.target.targetId}\" does not support migrations`);\n    }\n\n    // Validate contract using family instance\n    const contractIR = familyInstance.validateContractIR(options.contractIR);\n\n    // Delegate to extracted dbInit operation\n    return executeDbInit({\n      driver,\n      familyInstance,\n      contractIR,\n      mode: options.mode,\n      migrations: this.options.target.migrations,\n      frameworkComponents,\n    });\n  }\n\n  async introspect(options?: IntrospectOptions): Promise<unknown> {\n    const { driver, familyInstance } = await this.ensureConnected();\n\n    // TODO: Pass schema option to familyInstance.introspect when schema filtering is implemented\n    const _schema = options?.schema;\n    void _schema;\n\n    return familyInstance.introspect({ driver });\n  }\n}\n","import type { TargetBoundComponentDescriptor } from '@prisma-next/contract/framework-components';\nimport type { ContractIR } from '@prisma-next/contract/ir';\nimport type {\n  ControlDriverInstance,\n  ControlFamilyInstance,\n  MigrationPlan,\n  MigrationPlannerResult,\n  MigrationRunnerResult,\n  TargetMigrationsCapability,\n} from '@prisma-next/core-control-plane/types';\nimport { notOk, ok } from '@prisma-next/utils/result';\nimport type { DbInitResult, DbInitSuccess } from '../types';\n\n/**\n * Options for executing dbInit operation.\n */\nexport interface ExecuteDbInitOptions<TFamilyId extends string, TTargetId extends string> {\n  readonly driver: ControlDriverInstance<TFamilyId, TTargetId>;\n  readonly familyInstance: ControlFamilyInstance<TFamilyId>;\n  readonly contractIR: ContractIR;\n  readonly mode: 'plan' | 'apply';\n  readonly migrations: TargetMigrationsCapability<\n    TFamilyId,\n    TTargetId,\n    ControlFamilyInstance<TFamilyId>\n  >;\n  readonly frameworkComponents: ReadonlyArray<TargetBoundComponentDescriptor<TFamilyId, TTargetId>>;\n}\n\n/**\n * Executes the dbInit operation.\n *\n * This is the core logic extracted from the CLI command, without any file I/O,\n * process.exit(), or console output. It uses the Result pattern to return\n * success or failure details.\n *\n * @param options - The options for executing dbInit\n * @returns Result with DbInitSuccess on success, DbInitFailure on failure\n */\nexport async function executeDbInit<TFamilyId extends string, TTargetId extends string>(\n  options: ExecuteDbInitOptions<TFamilyId, TTargetId>,\n): Promise<DbInitResult> {\n  const { driver, familyInstance, contractIR, mode, migrations, frameworkComponents } = options;\n\n  // Create planner and runner from target migrations capability\n  const planner = migrations.createPlanner(familyInstance);\n  const runner = migrations.createRunner(familyInstance);\n\n  // Introspect live schema\n  const schemaIR = await familyInstance.introspect({ driver });\n\n  // Policy for init mode (additive only)\n  const policy = { allowedOperationClasses: ['additive'] as const };\n\n  // Plan migration\n  const plannerResult: MigrationPlannerResult = await planner.plan({\n    contract: contractIR,\n    schema: schemaIR,\n    policy,\n    frameworkComponents,\n  });\n\n  if (plannerResult.kind === 'failure') {\n    return notOk({\n      code: 'PLANNING_FAILED' as const,\n      summary: 'Migration planning failed due to conflicts',\n      conflicts: plannerResult.conflicts,\n    });\n  }\n\n  const migrationPlan: MigrationPlan = plannerResult.plan;\n\n  // Check for existing marker - handle idempotency and mismatch errors\n  const existingMarker = await familyInstance.readMarker({ driver });\n  if (existingMarker) {\n    const markerMatchesDestination =\n      existingMarker.coreHash === migrationPlan.destination.coreHash &&\n      (!migrationPlan.destination.profileHash ||\n        existingMarker.profileHash === migrationPlan.destination.profileHash);\n\n    if (markerMatchesDestination) {\n      // Already at destination - return success with no operations\n      const result: DbInitSuccess = {\n        mode,\n        plan: { operations: [] },\n        ...(mode === 'apply'\n          ? {\n              execution: { operationsPlanned: 0, operationsExecuted: 0 },\n              marker: {\n                coreHash: existingMarker.coreHash,\n                profileHash: existingMarker.profileHash,\n              },\n            }\n          : {}),\n        summary: 'Database already at target contract state',\n      };\n      return ok(result);\n    }\n\n    // Marker exists but doesn't match destination - fail\n    return notOk({\n      code: 'MARKER_ORIGIN_MISMATCH' as const,\n      summary: 'Existing contract marker does not match plan destination',\n      marker: {\n        coreHash: existingMarker.coreHash,\n        profileHash: existingMarker.profileHash,\n      },\n      destination: {\n        coreHash: migrationPlan.destination.coreHash,\n        profileHash: migrationPlan.destination.profileHash,\n      },\n    });\n  }\n\n  // Plan mode - don't execute\n  if (mode === 'plan') {\n    const result: DbInitSuccess = {\n      mode: 'plan',\n      plan: { operations: migrationPlan.operations },\n      summary: `Planned ${migrationPlan.operations.length} operation(s)`,\n    };\n    return ok(result);\n  }\n\n  // Apply mode - execute runner\n  const runnerResult: MigrationRunnerResult = await runner.execute({\n    plan: migrationPlan,\n    driver,\n    destinationContract: contractIR,\n    policy,\n    // db init plans and applies back-to-back from a fresh introspection, so per-operation\n    // pre/postchecks and the idempotency probe are usually redundant overhead. We still\n    // enforce marker/origin compatibility and a full schema verification after apply.\n    executionChecks: {\n      prechecks: false,\n      postchecks: false,\n      idempotencyChecks: false,\n    },\n    frameworkComponents,\n  });\n\n  if (!runnerResult.ok) {\n    return notOk({\n      code: 'RUNNER_FAILED' as const,\n      summary: runnerResult.failure.summary,\n    });\n  }\n\n  const execution = runnerResult.value;\n\n  const result: DbInitSuccess = {\n    mode: 'apply',\n    plan: { operations: migrationPlan.operations },\n    execution: {\n      operationsPlanned: execution.operationsPlanned,\n      operationsExecuted: execution.operationsExecuted,\n    },\n    marker: migrationPlan.destination.profileHash\n      ? {\n          coreHash: migrationPlan.destination.coreHash,\n          profileHash: migrationPlan.destination.profileHash,\n        }\n      : { coreHash: migrationPlan.destination.coreHash },\n    summary: `Applied ${execution.operationsExecuted} operation(s), marker written`,\n  };\n  return ok(result);\n}\n"],"mappings":";;;;;;AACA,SAAS,+BAA+B;;;ACSxC,SAAS,OAAO,UAAU;AA6B1B,eAAsB,cACpB,SACuB;AACvB,QAAM,EAAE,QAAQ,gBAAgB,YAAY,MAAM,YAAY,oBAAoB,IAAI;AAGtF,QAAM,UAAU,WAAW,cAAc,cAAc;AACvD,QAAM,SAAS,WAAW,aAAa,cAAc;AAGrD,QAAM,WAAW,MAAM,eAAe,WAAW,EAAE,OAAO,CAAC;AAG3D,QAAM,SAAS,EAAE,yBAAyB,CAAC,UAAU,EAAW;AAGhE,QAAM,gBAAwC,MAAM,QAAQ,KAAK;AAAA,IAC/D,UAAU;AAAA,IACV,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,cAAc,SAAS,WAAW;AACpC,WAAO,MAAM;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW,cAAc;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,QAAM,gBAA+B,cAAc;AAGnD,QAAM,iBAAiB,MAAM,eAAe,WAAW,EAAE,OAAO,CAAC;AACjE,MAAI,gBAAgB;AAClB,UAAM,2BACJ,eAAe,aAAa,cAAc,YAAY,aACrD,CAAC,cAAc,YAAY,eAC1B,eAAe,gBAAgB,cAAc,YAAY;AAE7D,QAAI,0BAA0B;AAE5B,YAAMA,UAAwB;AAAA,QAC5B;AAAA,QACA,MAAM,EAAE,YAAY,CAAC,EAAE;AAAA,QACvB,GAAI,SAAS,UACT;AAAA,UACE,WAAW,EAAE,mBAAmB,GAAG,oBAAoB,EAAE;AAAA,UACzD,QAAQ;AAAA,YACN,UAAU,eAAe;AAAA,YACzB,aAAa,eAAe;AAAA,UAC9B;AAAA,QACF,IACA,CAAC;AAAA,QACL,SAAS;AAAA,MACX;AACA,aAAO,GAAGA,OAAM;AAAA,IAClB;AAGA,WAAO,MAAM;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,MACT,QAAQ;AAAA,QACN,UAAU,eAAe;AAAA,QACzB,aAAa,eAAe;AAAA,MAC9B;AAAA,MACA,aAAa;AAAA,QACX,UAAU,cAAc,YAAY;AAAA,QACpC,aAAa,cAAc,YAAY;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI,SAAS,QAAQ;AACnB,UAAMA,UAAwB;AAAA,MAC5B,MAAM;AAAA,MACN,MAAM,EAAE,YAAY,cAAc,WAAW;AAAA,MAC7C,SAAS,WAAW,cAAc,WAAW,MAAM;AAAA,IACrD;AACA,WAAO,GAAGA,OAAM;AAAA,EAClB;AAGA,QAAM,eAAsC,MAAM,OAAO,QAAQ;AAAA,IAC/D,MAAM;AAAA,IACN;AAAA,IACA,qBAAqB;AAAA,IACrB;AAAA;AAAA;AAAA;AAAA,IAIA,iBAAiB;AAAA,MACf,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,mBAAmB;AAAA,IACrB;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,aAAa,IAAI;AACpB,WAAO,MAAM;AAAA,MACX,MAAM;AAAA,MACN,SAAS,aAAa,QAAQ;AAAA,IAChC,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,aAAa;AAE/B,QAAM,SAAwB;AAAA,IAC5B,MAAM;AAAA,IACN,MAAM,EAAE,YAAY,cAAc,WAAW;AAAA,IAC7C,WAAW;AAAA,MACT,mBAAmB,UAAU;AAAA,MAC7B,oBAAoB,UAAU;AAAA,IAChC;AAAA,IACA,QAAQ,cAAc,YAAY,cAC9B;AAAA,MACE,UAAU,cAAc,YAAY;AAAA,MACpC,aAAa,cAAc,YAAY;AAAA,IACzC,IACA,EAAE,UAAU,cAAc,YAAY,SAAS;AAAA,IACnD,SAAS,WAAW,UAAU,kBAAkB;AAAA,EAClD;AACA,SAAO,GAAG,MAAM;AAClB;;;ADrIO,SAAS,oBAAoB,SAA8C;AAChF,SAAO,IAAI,kBAAkB,OAAO;AACtC;AAMA,IAAM,oBAAN,MAAiD;AAAA,EAC9B;AAAA,EACT,QAAkD;AAAA,EAClD,SAAuD;AAAA,EACvD,iBAAuD;AAAA,EACvD,sBAEG;AAAA,EACH,cAAc;AAAA,EACL;AAAA,EAEjB,YAAY,SAA+B;AACzC,SAAK,UAAU;AACf,SAAK,oBAAoB,QAAQ;AAAA,EACnC;AAAA,EAEA,OAAa;AACX,QAAI,KAAK,aAAa;AACpB;AAAA,IACF;AAGA,SAAK,QAAQ,wBAAwB;AAAA,MACnC,QAAQ,KAAK,QAAQ;AAAA,MACrB,SAAS,KAAK,QAAQ;AAAA,MACtB,QAAQ,KAAK,QAAQ;AAAA,MACrB,gBAAgB,KAAK,QAAQ;AAAA,IAC/B,CAAC;AAGD,SAAK,iBAAiB,KAAK,QAAQ,OAAO,OAAO,KAAK,KAAK;AAG3D,UAAM,gBAAgB;AAAA,MACpB,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,MACb,GAAI,KAAK,QAAQ,kBAAkB,CAAC;AAAA,IACtC;AACA,SAAK,sBAAsB;AAAA,MACzB,KAAK,QAAQ,OAAO;AAAA,MACpB,KAAK,QAAQ,OAAO;AAAA,MACpB;AAAA,IACF;AAEA,SAAK,cAAc;AAAA,EACrB;AAAA,EAEA,MAAM,QAAQ,YAAqC;AAEjD,SAAK,KAAK;AAEV,QAAI,KAAK,QAAQ;AACf,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AAGA,UAAM,qBAAqB,cAAc,KAAK;AAC9C,QAAI,uBAAuB,QAAW;AACpC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,KAAK,OAAO,QAAQ;AACvB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAOA,SAAK,SAAS,MAAM,KAAK,OAAO,OAAO,OAAO,kBAAyB;AAAA,EACzE;AAAA,EAEA,MAAM,QAAuB;AAC3B,QAAI,KAAK,QAAQ;AACf,YAAM,KAAK,OAAO,MAAM;AACxB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAc,kBAIX;AAED,SAAK,KAAK;AAGV,QAAI,CAAC,KAAK,UAAU,KAAK,sBAAsB,QAAW;AACxD,YAAM,KAAK,QAAQ,KAAK,iBAAiB;AAAA,IAC3C;AAEA,QAAI,CAAC,KAAK,UAAU,CAAC,KAAK,kBAAkB,CAAC,KAAK,qBAAqB;AACrE,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AACA,WAAO;AAAA,MACL,QAAQ,KAAK;AAAA,MACb,gBAAgB,KAAK;AAAA,MACrB,qBAAqB,KAAK;AAAA,IAC5B;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAuD;AAClE,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,KAAK,gBAAgB;AAG9D,UAAM,aAAa,eAAe,mBAAmB,QAAQ,UAAU;AAMvE,WAAO,eAAe,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,kBAAkB,KAAK,QAAQ,OAAO;AAAA,MACtC,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa,SAAmE;AACpF,UAAM,EAAE,QAAQ,gBAAgB,oBAAoB,IAAI,MAAM,KAAK,gBAAgB;AAGnF,UAAM,aAAa,eAAe,mBAAmB,QAAQ,UAAU;AAGvE,WAAO,eAAe,aAAa;AAAA,MACjC;AAAA,MACA;AAAA,MACA,QAAQ,QAAQ,UAAU;AAAA,MAC1B,cAAc;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAK,SAAmD;AAC5D,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,KAAK,gBAAgB;AAG9D,UAAM,aAAa,eAAe,mBAAmB,QAAQ,UAAU;AAGvE,WAAO,eAAe,KAAK;AAAA,MACzB;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,SAA+C;AAC1D,UAAM,EAAE,QAAQ,gBAAgB,oBAAoB,IAAI,MAAM,KAAK,gBAAgB;AAGnF,QAAI,CAAC,KAAK,QAAQ,OAAO,YAAY;AACnC,YAAM,IAAI,MAAM,WAAW,KAAK,QAAQ,OAAO,QAAQ,+BAA+B;AAAA,IACxF;AAGA,UAAM,aAAa,eAAe,mBAAmB,QAAQ,UAAU;AAGvE,WAAO,cAAc;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,YAAY,KAAK,QAAQ,OAAO;AAAA,MAChC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,SAA+C;AAC9D,UAAM,EAAE,QAAQ,eAAe,IAAI,MAAM,KAAK,gBAAgB;AAG9D,UAAM,UAAU,SAAS;AACzB,SAAK;AAEL,WAAO,eAAe,WAAW,EAAE,OAAO,CAAC;AAAA,EAC7C;AACF;","names":["result"]}

package/dist/exports/index.js

@@ -1,8 +1,9 @@
 import {
   createContractEmitCommand
-} from "../chunk-QUPBU4KV.js";
-import "../chunk-BZMBKEEQ.js";
+} from "../chunk-MG7PBERL.js";
+import "../chunk-DIJPT5TZ.js";
 import "../chunk-HWYQOCAJ.js";
+import "../chunk-VI2YETW7.js";
 
 // src/load-ts-contract.ts
 import { existsSync, unlinkSync, writeFileSync } from "fs";

package/dist/exports/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/load-ts-contract.ts"],"sourcesContent":["import { existsSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport type { ContractIR } from '@prisma-next/contract/ir';\nimport type { Plugin } from 'esbuild';\nimport { build } from 'esbuild';\n\nexport interface LoadTsContractOptions {\n  readonly allowlist?: ReadonlyArray<string>;\n}\n\nconst DEFAULT_ALLOWLIST = ['@prisma-next/*'];\n\nfunction isAllowedImport(importPath: string, allowlist: ReadonlyArray<string>): boolean {\n  for (const pattern of allowlist) {\n    if (pattern.endsWith('/*')) {\n      const prefix = pattern.slice(0, -2);\n      if (importPath === prefix || importPath.startsWith(`${prefix}/`)) {\n        return true;\n      }\n    } else if (importPath === pattern) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction validatePurity(value: unknown): void {\n  if (typeof value !== 'object' || value === null) {\n    return;\n  }\n\n  const seen = new WeakSet();\n  function check(value: unknown): void {\n    if (value === null || typeof value !== 'object') {\n      return;\n    }\n\n    if (seen.has(value)) {\n      throw new Error('Contract export contains circular references');\n    }\n    seen.add(value);\n\n    for (const key in value) {\n      const descriptor = Object.getOwnPropertyDescriptor(value, key);\n      if (descriptor && (descriptor.get || descriptor.set)) {\n        throw new Error(`Contract export contains getter/setter at key \"${key}\"`);\n      }\n      if (descriptor && typeof descriptor.value === 'function') {\n        throw new Error(`Contract export contains function at key \"${key}\"`);\n      }\n      check((value as Record<string, unknown>)[key]);\n    }\n  }\n\n  try {\n    check(value);\n    JSON.stringify(value);\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message.includes('getter') || error.message.includes('circular')) {\n        throw error;\n      }\n      throw new Error(`Contract export is not JSON-serializable: ${error.message}`);\n    }\n    throw new Error('Contract export is not JSON-serializable');\n  }\n}\n\nfunction createImportAllowlistPlugin(allowlist: ReadonlyArray<string>, entryPath: string): Plugin {\n  return {\n    name: 'import-allowlist',\n    setup(build) {\n      build.onResolve({ filter: /.*/ }, (args) => {\n        if (args.kind === 'entry-point') {\n          return undefined;\n        }\n        if (args.path.startsWith('.') || args.path.startsWith('/')) {\n          return undefined;\n        }\n        const isFromEntryPoint = args.importer === entryPath || args.importer === '<stdin>';\n        if (isFromEntryPoint && !isAllowedImport(args.path, allowlist)) {\n          return {\n            path: args.path,\n            external: true,\n          };\n        }\n        return undefined;\n      });\n    },\n  };\n}\n\n/**\n * Loads a contract from a TypeScript file and returns it as ContractIR.\n *\n * **Responsibility: Parsing Only**\n * This function loads and parses a TypeScript contract file. It does NOT normalize the contract.\n * The contract should already be normalized if it was built using the contract builder.\n *\n * Normalization must happen in the contract builder when the contract is created.\n * This function only validates that the contract is JSON-serializable and returns it as-is.\n *\n * @param entryPath - Path to the TypeScript contract file\n * @param options - Optional configuration (import allowlist)\n * @returns The contract as ContractIR (should already be normalized)\n * @throws Error if the contract cannot be loaded or is not JSON-serializable\n */\nexport async function loadContractFromTs(\n  entryPath: string,\n  options?: LoadTsContractOptions,\n): Promise<ContractIR> {\n  const allowlist = options?.allowlist ?? DEFAULT_ALLOWLIST;\n\n  if (!existsSync(entryPath)) {\n    throw new Error(`Contract file not found: ${entryPath}`);\n  }\n\n  const tempFile = join(\n    tmpdir(),\n    `prisma-next-contract-${Date.now()}-${Math.random().toString(36).slice(2)}.mjs`,\n  );\n\n  try {\n    const result = await build({\n      entryPoints: [entryPath],\n      bundle: true,\n      format: 'esm',\n      platform: 'node',\n      target: 'es2022',\n      outfile: tempFile,\n      write: false,\n      metafile: true,\n      plugins: [createImportAllowlistPlugin(allowlist, entryPath)],\n      logLevel: 'error',\n    });\n\n    if (result.errors.length > 0) {\n      const errorMessages = result.errors.map((e: { text: string }) => e.text).join('\\n');\n      throw new Error(`Failed to bundle contract file: ${errorMessages}`);\n    }\n\n    if (!result.outputFiles || result.outputFiles.length === 0) {\n      throw new Error('No output files generated from bundling');\n    }\n\n    const disallowedImports: string[] = [];\n    if (result.metafile) {\n      const inputs = result.metafile.inputs;\n      for (const [, inputData] of Object.entries(inputs)) {\n        const imports =\n          (inputData as { imports?: Array<{ path: string; external?: boolean }> }).imports || [];\n        for (const imp of imports) {\n          if (\n            imp.external &&\n            !imp.path.startsWith('.') &&\n            !imp.path.startsWith('/') &&\n            !isAllowedImport(imp.path, allowlist)\n          ) {\n            disallowedImports.push(imp.path);\n          }\n        }\n      }\n    }\n\n    if (disallowedImports.length > 0) {\n      throw new Error(\n        `Disallowed imports detected. Only imports matching the allowlist are permitted:\\n  Allowlist: ${allowlist.join(', ')}\\n  Disallowed imports: ${disallowedImports.join(', ')}\\n\\nOnly @prisma-next/* packages are allowed in contract files.`,\n      );\n    }\n\n    const bundleContent = result.outputFiles[0]?.text;\n    if (bundleContent === undefined) {\n      throw new Error('Bundle content is undefined');\n    }\n    writeFileSync(tempFile, bundleContent, 'utf-8');\n\n    const module = (await import(`file://${tempFile}`)) as {\n      default?: unknown;\n      contract?: unknown;\n    };\n    unlinkSync(tempFile);\n\n    let contract: unknown;\n\n    if (module.default !== undefined) {\n      contract = module.default;\n    } else if (module.contract !== undefined) {\n      contract = module.contract;\n    } else {\n      throw new Error(\n        `Contract file must export a contract as default export or named export 'contract'. Found exports: ${Object.keys(module as Record<string, unknown>).join(', ') || 'none'}`,\n      );\n    }\n\n    if (typeof contract !== 'object' || contract === null) {\n      throw new Error(`Contract export must be an object, got ${typeof contract}`);\n    }\n\n    validatePurity(contract);\n\n    return contract as ContractIR;\n  } catch (error) {\n    try {\n      if (tempFile) {\n        unlinkSync(tempFile);\n      }\n    } catch {\n      // Ignore cleanup errors\n    }\n\n    if (error instanceof Error) {\n      throw error;\n    }\n    throw new Error(`Failed to load contract from ${entryPath}: ${String(error)}`);\n  }\n}\n"],"mappings":";;;;;;;AAAA,SAAS,YAAY,YAAY,qBAAqB;AACtD,SAAS,cAAc;AACvB,SAAS,YAAY;AAGrB,SAAS,aAAa;AAMtB,IAAM,oBAAoB,CAAC,gBAAgB;AAE3C,SAAS,gBAAgB,YAAoB,WAA2C;AACtF,aAAW,WAAW,WAAW;AAC/B,QAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,UAAI,eAAe,UAAU,WAAW,WAAW,GAAG,MAAM,GAAG,GAAG;AAChE,eAAO;AAAA,MACT;AAAA,IACF,WAAW,eAAe,SAAS;AACjC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAsB;AAC5C,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C;AAAA,EACF;AAEA,QAAM,OAAO,oBAAI,QAAQ;AACzB,WAAS,MAAMA,QAAsB;AACnC,QAAIA,WAAU,QAAQ,OAAOA,WAAU,UAAU;AAC/C;AAAA,IACF;AAEA,QAAI,KAAK,IAAIA,MAAK,GAAG;AACnB,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AACA,SAAK,IAAIA,MAAK;AAEd,eAAW,OAAOA,QAAO;AACvB,YAAM,aAAa,OAAO,yBAAyBA,QAAO,GAAG;AAC7D,UAAI,eAAe,WAAW,OAAO,WAAW,MAAM;AACpD,cAAM,IAAI,MAAM,kDAAkD,GAAG,GAAG;AAAA,MAC1E;AACA,UAAI,cAAc,OAAO,WAAW,UAAU,YAAY;AACxD,cAAM,IAAI,MAAM,6CAA6C,GAAG,GAAG;AAAA,MACrE;AACA,YAAOA,OAAkC,GAAG,CAAC;AAAA,IAC/C;AAAA,EACF;AAEA,MAAI;AACF,UAAM,KAAK;AACX,SAAK,UAAU,KAAK;AAAA,EACtB,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,QAAQ,SAAS,QAAQ,KAAK,MAAM,QAAQ,SAAS,UAAU,GAAG;AAC1E,cAAM;AAAA,MACR;AACA,YAAM,IAAI,MAAM,6CAA6C,MAAM,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AACF;AAEA,SAAS,4BAA4B,WAAkC,WAA2B;AAChG,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAMC,QAAO;AACX,MAAAA,OAAM,UAAU,EAAE,QAAQ,KAAK,GAAG,CAAC,SAAS;AAC1C,YAAI,KAAK,SAAS,eAAe;AAC/B,iBAAO;AAAA,QACT;AACA,YAAI,KAAK,KAAK,WAAW,GAAG,KAAK,KAAK,KAAK,WAAW,GAAG,GAAG;AAC1D,iBAAO;AAAA,QACT;AACA,cAAM,mBAAmB,KAAK,aAAa,aAAa,KAAK,aAAa;AAC1E,YAAI,oBAAoB,CAAC,gBAAgB,KAAK,MAAM,SAAS,GAAG;AAC9D,iBAAO;AAAA,YACL,MAAM,KAAK;AAAA,YACX,UAAU;AAAA,UACZ;AAAA,QACF;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAiBA,eAAsB,mBACpB,WACA,SACqB;AACrB,QAAM,YAAY,SAAS,aAAa;AAExC,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,UAAM,IAAI,MAAM,4BAA4B,SAAS,EAAE;AAAA,EACzD;AAEA,QAAM,WAAW;AAAA,IACf,OAAO;AAAA,IACP,wBAAwB,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,MAAM;AAAA,MACzB,aAAa,CAAC,SAAS;AAAA,MACvB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,OAAO;AAAA,MACP,UAAU;AAAA,MACV,SAAS,CAAC,4BAA4B,WAAW,SAAS,CAAC;AAAA,MAC3D,UAAU;AAAA,IACZ,CAAC;AAED,QAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,YAAM,gBAAgB,OAAO,OAAO,IAAI,CAAC,MAAwB,EAAE,IAAI,EAAE,KAAK,IAAI;AAClF,YAAM,IAAI,MAAM,mCAAmC,aAAa,EAAE;AAAA,IACpE;AAEA,QAAI,CAAC,OAAO,eAAe,OAAO,YAAY,WAAW,GAAG;AAC1D,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,oBAA8B,CAAC;AACrC,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,SAAS;AAC/B,iBAAW,CAAC,EAAE,SAAS,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,cAAM,UACH,UAAwE,WAAW,CAAC;AACvF,mBAAW,OAAO,SAAS;AACzB,cACE,IAAI,YACJ,CAAC,IAAI,KAAK,WAAW,GAAG,KACxB,CAAC,IAAI,KAAK,WAAW,GAAG,KACxB,CAAC,gBAAgB,IAAI,MAAM,SAAS,GACpC;AACA,8BAAkB,KAAK,IAAI,IAAI;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,IAAI;AAAA,QACR;AAAA,eAAiG,UAAU,KAAK,IAAI,CAAC;AAAA,wBAA2B,kBAAkB,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,MAC9K;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO,YAAY,CAAC,GAAG;AAC7C,QAAI,kBAAkB,QAAW;AAC/B,YAAM,IAAI,MAAM,6BAA6B;AAAA,IAC/C;AACA,kBAAc,UAAU,eAAe,OAAO;AAE9C,UAAM,SAAU,MAAM,OAAO,UAAU,QAAQ;AAI/C,eAAW,QAAQ;AAEnB,QAAI;AAEJ,QAAI,OAAO,YAAY,QAAW;AAChC,iBAAW,OAAO;AAAA,IACpB,WAAW,OAAO,aAAa,QAAW;AACxC,iBAAW,OAAO;AAAA,IACpB,OAAO;AACL,YAAM,IAAI;AAAA,QACR,qGAAqG,OAAO,KAAK,MAAiC,EAAE,KAAK,IAAI,KAAK,MAAM;AAAA,MAC1K;AAAA,IACF;AAEA,QAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AACrD,YAAM,IAAI,MAAM,0CAA0C,OAAO,QAAQ,EAAE;AAAA,IAC7E;AAEA,mBAAe,QAAQ;AAEvB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI;AACF,UAAI,UAAU;AACZ,mBAAW,QAAQ;AAAA,MACrB;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,QAAI,iBAAiB,OAAO;AAC1B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,MAAM,gCAAgC,SAAS,KAAK,OAAO,KAAK,CAAC,EAAE;AAAA,EAC/E;AACF;","names":["value","build"]}
+{"version":3,"sources":["../../src/load-ts-contract.ts"],"sourcesContent":["import { existsSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport type { ContractIR } from '@prisma-next/contract/ir';\nimport type { Plugin } from 'esbuild';\nimport { build } from 'esbuild';\n\nexport interface LoadTsContractOptions {\n  readonly allowlist?: ReadonlyArray<string>;\n}\n\nconst DEFAULT_ALLOWLIST = ['@prisma-next/*'];\n\nfunction isAllowedImport(importPath: string, allowlist: ReadonlyArray<string>): boolean {\n  for (const pattern of allowlist) {\n    if (pattern.endsWith('/*')) {\n      const prefix = pattern.slice(0, -2);\n      if (importPath === prefix || importPath.startsWith(`${prefix}/`)) {\n        return true;\n      }\n    } else if (importPath === pattern) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction validatePurity(value: unknown): void {\n  if (typeof value !== 'object' || value === null) {\n    return;\n  }\n\n  const seen = new WeakSet();\n  function check(value: unknown): void {\n    if (value === null || typeof value !== 'object') {\n      return;\n    }\n\n    if (seen.has(value)) {\n      throw new Error('Contract export contains circular references');\n    }\n    seen.add(value);\n\n    for (const key in value) {\n      const descriptor = Object.getOwnPropertyDescriptor(value, key);\n      if (descriptor && (descriptor.get || descriptor.set)) {\n        throw new Error(`Contract export contains getter/setter at key \"${key}\"`);\n      }\n      if (descriptor && typeof descriptor.value === 'function') {\n        throw new Error(`Contract export contains function at key \"${key}\"`);\n      }\n      check((value as Record<string, unknown>)[key]);\n    }\n  }\n\n  try {\n    check(value);\n    JSON.stringify(value);\n  } catch (error) {\n    if (error instanceof Error) {\n      if (error.message.includes('getter') || error.message.includes('circular')) {\n        throw error;\n      }\n      throw new Error(`Contract export is not JSON-serializable: ${error.message}`);\n    }\n    throw new Error('Contract export is not JSON-serializable');\n  }\n}\n\nfunction createImportAllowlistPlugin(allowlist: ReadonlyArray<string>, entryPath: string): Plugin {\n  return {\n    name: 'import-allowlist',\n    setup(build) {\n      build.onResolve({ filter: /.*/ }, (args) => {\n        if (args.kind === 'entry-point') {\n          return undefined;\n        }\n        if (args.path.startsWith('.') || args.path.startsWith('/')) {\n          return undefined;\n        }\n        const isFromEntryPoint = args.importer === entryPath || args.importer === '<stdin>';\n        if (isFromEntryPoint && !isAllowedImport(args.path, allowlist)) {\n          return {\n            path: args.path,\n            external: true,\n          };\n        }\n        return undefined;\n      });\n    },\n  };\n}\n\n/**\n * Loads a contract from a TypeScript file and returns it as ContractIR.\n *\n * **Responsibility: Parsing Only**\n * This function loads and parses a TypeScript contract file. It does NOT normalize the contract.\n * The contract should already be normalized if it was built using the contract builder.\n *\n * Normalization must happen in the contract builder when the contract is created.\n * This function only validates that the contract is JSON-serializable and returns it as-is.\n *\n * @param entryPath - Path to the TypeScript contract file\n * @param options - Optional configuration (import allowlist)\n * @returns The contract as ContractIR (should already be normalized)\n * @throws Error if the contract cannot be loaded or is not JSON-serializable\n */\nexport async function loadContractFromTs(\n  entryPath: string,\n  options?: LoadTsContractOptions,\n): Promise<ContractIR> {\n  const allowlist = options?.allowlist ?? DEFAULT_ALLOWLIST;\n\n  if (!existsSync(entryPath)) {\n    throw new Error(`Contract file not found: ${entryPath}`);\n  }\n\n  const tempFile = join(\n    tmpdir(),\n    `prisma-next-contract-${Date.now()}-${Math.random().toString(36).slice(2)}.mjs`,\n  );\n\n  try {\n    const result = await build({\n      entryPoints: [entryPath],\n      bundle: true,\n      format: 'esm',\n      platform: 'node',\n      target: 'es2022',\n      outfile: tempFile,\n      write: false,\n      metafile: true,\n      plugins: [createImportAllowlistPlugin(allowlist, entryPath)],\n      logLevel: 'error',\n    });\n\n    if (result.errors.length > 0) {\n      const errorMessages = result.errors.map((e: { text: string }) => e.text).join('\\n');\n      throw new Error(`Failed to bundle contract file: ${errorMessages}`);\n    }\n\n    if (!result.outputFiles || result.outputFiles.length === 0) {\n      throw new Error('No output files generated from bundling');\n    }\n\n    const disallowedImports: string[] = [];\n    if (result.metafile) {\n      const inputs = result.metafile.inputs;\n      for (const [, inputData] of Object.entries(inputs)) {\n        const imports =\n          (inputData as { imports?: Array<{ path: string; external?: boolean }> }).imports || [];\n        for (const imp of imports) {\n          if (\n            imp.external &&\n            !imp.path.startsWith('.') &&\n            !imp.path.startsWith('/') &&\n            !isAllowedImport(imp.path, allowlist)\n          ) {\n            disallowedImports.push(imp.path);\n          }\n        }\n      }\n    }\n\n    if (disallowedImports.length > 0) {\n      throw new Error(\n        `Disallowed imports detected. Only imports matching the allowlist are permitted:\\n  Allowlist: ${allowlist.join(', ')}\\n  Disallowed imports: ${disallowedImports.join(', ')}\\n\\nOnly @prisma-next/* packages are allowed in contract files.`,\n      );\n    }\n\n    const bundleContent = result.outputFiles[0]?.text;\n    if (bundleContent === undefined) {\n      throw new Error('Bundle content is undefined');\n    }\n    writeFileSync(tempFile, bundleContent, 'utf-8');\n\n    const module = (await import(`file://${tempFile}`)) as {\n      default?: unknown;\n      contract?: unknown;\n    };\n    unlinkSync(tempFile);\n\n    let contract: unknown;\n\n    if (module.default !== undefined) {\n      contract = module.default;\n    } else if (module.contract !== undefined) {\n      contract = module.contract;\n    } else {\n      throw new Error(\n        `Contract file must export a contract as default export or named export 'contract'. Found exports: ${Object.keys(module as Record<string, unknown>).join(', ') || 'none'}`,\n      );\n    }\n\n    if (typeof contract !== 'object' || contract === null) {\n      throw new Error(`Contract export must be an object, got ${typeof contract}`);\n    }\n\n    validatePurity(contract);\n\n    return contract as ContractIR;\n  } catch (error) {\n    try {\n      if (tempFile) {\n        unlinkSync(tempFile);\n      }\n    } catch {\n      // Ignore cleanup errors\n    }\n\n    if (error instanceof Error) {\n      throw error;\n    }\n    throw new Error(`Failed to load contract from ${entryPath}: ${String(error)}`);\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,YAAY,YAAY,qBAAqB;AACtD,SAAS,cAAc;AACvB,SAAS,YAAY;AAGrB,SAAS,aAAa;AAMtB,IAAM,oBAAoB,CAAC,gBAAgB;AAE3C,SAAS,gBAAgB,YAAoB,WAA2C;AACtF,aAAW,WAAW,WAAW;AAC/B,QAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,YAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,UAAI,eAAe,UAAU,WAAW,WAAW,GAAG,MAAM,GAAG,GAAG;AAChE,eAAO;AAAA,MACT;AAAA,IACF,WAAW,eAAe,SAAS;AACjC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAsB;AAC5C,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C;AAAA,EACF;AAEA,QAAM,OAAO,oBAAI,QAAQ;AACzB,WAAS,MAAMA,QAAsB;AACnC,QAAIA,WAAU,QAAQ,OAAOA,WAAU,UAAU;AAC/C;AAAA,IACF;AAEA,QAAI,KAAK,IAAIA,MAAK,GAAG;AACnB,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AACA,SAAK,IAAIA,MAAK;AAEd,eAAW,OAAOA,QAAO;AACvB,YAAM,aAAa,OAAO,yBAAyBA,QAAO,GAAG;AAC7D,UAAI,eAAe,WAAW,OAAO,WAAW,MAAM;AACpD,cAAM,IAAI,MAAM,kDAAkD,GAAG,GAAG;AAAA,MAC1E;AACA,UAAI,cAAc,OAAO,WAAW,UAAU,YAAY;AACxD,cAAM,IAAI,MAAM,6CAA6C,GAAG,GAAG;AAAA,MACrE;AACA,YAAOA,OAAkC,GAAG,CAAC;AAAA,IAC/C;AAAA,EACF;AAEA,MAAI;AACF,UAAM,KAAK;AACX,SAAK,UAAU,KAAK;AAAA,EACtB,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,QAAQ,SAAS,QAAQ,KAAK,MAAM,QAAQ,SAAS,UAAU,GAAG;AAC1E,cAAM;AAAA,MACR;AACA,YAAM,IAAI,MAAM,6CAA6C,MAAM,OAAO,EAAE;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AACF;AAEA,SAAS,4BAA4B,WAAkC,WAA2B;AAChG,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAMC,QAAO;AACX,MAAAA,OAAM,UAAU,EAAE,QAAQ,KAAK,GAAG,CAAC,SAAS;AAC1C,YAAI,KAAK,SAAS,eAAe;AAC/B,iBAAO;AAAA,QACT;AACA,YAAI,KAAK,KAAK,WAAW,GAAG,KAAK,KAAK,KAAK,WAAW,GAAG,GAAG;AAC1D,iBAAO;AAAA,QACT;AACA,cAAM,mBAAmB,KAAK,aAAa,aAAa,KAAK,aAAa;AAC1E,YAAI,oBAAoB,CAAC,gBAAgB,KAAK,MAAM,SAAS,GAAG;AAC9D,iBAAO;AAAA,YACL,MAAM,KAAK;AAAA,YACX,UAAU;AAAA,UACZ;AAAA,QACF;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAiBA,eAAsB,mBACpB,WACA,SACqB;AACrB,QAAM,YAAY,SAAS,aAAa;AAExC,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,UAAM,IAAI,MAAM,4BAA4B,SAAS,EAAE;AAAA,EACzD;AAEA,QAAM,WAAW;AAAA,IACf,OAAO;AAAA,IACP,wBAAwB,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,EAC3E;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,MAAM;AAAA,MACzB,aAAa,CAAC,SAAS;AAAA,MACvB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,OAAO;AAAA,MACP,UAAU;AAAA,MACV,SAAS,CAAC,4BAA4B,WAAW,SAAS,CAAC;AAAA,MAC3D,UAAU;AAAA,IACZ,CAAC;AAED,QAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,YAAM,gBAAgB,OAAO,OAAO,IAAI,CAAC,MAAwB,EAAE,IAAI,EAAE,KAAK,IAAI;AAClF,YAAM,IAAI,MAAM,mCAAmC,aAAa,EAAE;AAAA,IACpE;AAEA,QAAI,CAAC,OAAO,eAAe,OAAO,YAAY,WAAW,GAAG;AAC1D,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,oBAA8B,CAAC;AACrC,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,SAAS;AAC/B,iBAAW,CAAC,EAAE,SAAS,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,cAAM,UACH,UAAwE,WAAW,CAAC;AACvF,mBAAW,OAAO,SAAS;AACzB,cACE,IAAI,YACJ,CAAC,IAAI,KAAK,WAAW,GAAG,KACxB,CAAC,IAAI,KAAK,WAAW,GAAG,KACxB,CAAC,gBAAgB,IAAI,MAAM,SAAS,GACpC;AACA,8BAAkB,KAAK,IAAI,IAAI;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,kBAAkB,SAAS,GAAG;AAChC,YAAM,IAAI;AAAA,QACR;AAAA,eAAiG,UAAU,KAAK,IAAI,CAAC;AAAA,wBAA2B,kBAAkB,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,MAC9K;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO,YAAY,CAAC,GAAG;AAC7C,QAAI,kBAAkB,QAAW;AAC/B,YAAM,IAAI,MAAM,6BAA6B;AAAA,IAC/C;AACA,kBAAc,UAAU,eAAe,OAAO;AAE9C,UAAM,SAAU,MAAM,OAAO,UAAU,QAAQ;AAI/C,eAAW,QAAQ;AAEnB,QAAI;AAEJ,QAAI,OAAO,YAAY,QAAW;AAChC,iBAAW,OAAO;AAAA,IACpB,WAAW,OAAO,aAAa,QAAW;AACxC,iBAAW,OAAO;AAAA,IACpB,OAAO;AACL,YAAM,IAAI;AAAA,QACR,qGAAqG,OAAO,KAAK,MAAiC,EAAE,KAAK,IAAI,KAAK,MAAM;AAAA,MAC1K;AAAA,IACF;AAEA,QAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AACrD,YAAM,IAAI,MAAM,0CAA0C,OAAO,QAAQ,EAAE;AAAA,IAC7E;AAEA,mBAAe,QAAQ;AAEvB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI;AACF,UAAI,UAAU;AACZ,mBAAW,QAAQ;AAAA,MACrB;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,QAAI,iBAAiB,OAAO;AAC1B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,MAAM,gCAAgC,SAAS,KAAK,OAAO,KAAK,CAAC,EAAE;AAAA,EAC/E;AACF;","names":["value","build"]}

package/dist/utils/cli-errors.d.ts

@@ -3,5 +3,5 @@
  * CLI-specific errors (e.g., Commander.js argument validation) can be added here if needed.
  */
 export type { CliErrorConflict, CliErrorEnvelope } from '@prisma-next/core-control-plane/errors';
-export { CliStructuredError, errorConfigFileNotFound, errorConfigValidation, errorContractConfigMissing, errorContractMissingExtensionPacks, errorContractValidationFailed, errorDatabaseUrlRequired, errorDriverRequired, errorFamilyReadMarkerSqlRequired, errorFileNotFound, errorHashMismatch, errorJsonFormatNotSupported, errorMarkerMissing, errorMigrationPlanningFailed, errorQueryRunnerFactoryRequired, errorRuntime, errorTargetMigrationNotSupported, errorTargetMismatch, errorUnexpected, } from '@prisma-next/core-control-plane/errors';
+export { CliStructuredError, errorConfigFileNotFound, errorConfigValidation, errorContractConfigMissing, errorContractMissingExtensionPacks, errorContractValidationFailed, errorDatabaseConnectionRequired, errorDriverRequired, errorFamilyReadMarkerSqlRequired, errorFileNotFound, errorHashMismatch, errorJsonFormatNotSupported, errorMarkerMissing, errorMigrationPlanningFailed, errorQueryRunnerFactoryRequired, errorRuntime, errorTargetMigrationNotSupported, errorTargetMismatch, errorUnexpected, } from '@prisma-next/core-control-plane/errors';
 //# sourceMappingURL=cli-errors.d.ts.map

package/dist/utils/cli-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-errors.d.ts","sourceRoot":"","sources":["../../src/utils/cli-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAC1B,kCAAkC,EAClC,6BAA6B,EAC7B,wBAAwB,EACxB,mBAAmB,EACnB,gCAAgC,EAChC,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,EAClB,4BAA4B,EAC5B,+BAA+B,EAC/B,YAAY,EACZ,gCAAgC,EAChC,mBAAmB,EACnB,eAAe,GAChB,MAAM,wCAAwC,CAAC"}
+{"version":3,"file":"cli-errors.d.ts","sourceRoot":"","sources":["../../src/utils/cli-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAC1B,kCAAkC,EAClC,6BAA6B,EAC7B,+BAA+B,EAC/B,mBAAmB,EACnB,gCAAgC,EAChC,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,EAClB,4BAA4B,EAC5B,+BAA+B,EAC/B,YAAY,EACZ,gCAAgC,EAChC,mBAAmB,EACnB,eAAe,GAChB,MAAM,wCAAwC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prisma-next/cli",
-  "version": "0.3.0-dev.13",
+  "version": "0.3.0-dev.14",
   "type": "module",
   "sideEffects": false,
   "files": [
@@ -20,10 +20,10 @@
     "string-width": "^7.2.0",
     "strip-ansi": "^7.1.2",
     "wrap-ansi": "^9.0.2",
-    "@prisma-next/contract": "0.3.0-dev.13",
-    "@prisma-next/core-control-plane": "0.3.0-dev.13",
-    "@prisma-next/emitter": "0.3.0-dev.13",
-    "@prisma-next/utils": "0.3.0-dev.13"
+    "@prisma-next/contract": "0.3.0-dev.14",
+    "@prisma-next/core-control-plane": "0.3.0-dev.14",
+    "@prisma-next/emitter": "0.3.0-dev.14",
+    "@prisma-next/utils": "0.3.0-dev.14"
   },
   "devDependencies": {
     "@types/node": "24.10.4",
@@ -31,11 +31,11 @@
     "tsup": "8.5.1",
     "typescript": "5.9.3",
     "vitest": "4.0.16",
-    "@prisma-next/sql-contract": "0.3.0-dev.13",
-    "@prisma-next/sql-contract-emitter": "0.3.0-dev.13",
-    "@prisma-next/sql-contract-ts": "0.3.0-dev.13",
-    "@prisma-next/sql-operations": "0.3.0-dev.13",
-    "@prisma-next/sql-runtime": "0.3.0-dev.13",
+    "@prisma-next/sql-contract": "0.3.0-dev.14",
+    "@prisma-next/sql-contract-emitter": "0.3.0-dev.14",
+    "@prisma-next/sql-contract-ts": "0.3.0-dev.14",
+    "@prisma-next/sql-operations": "0.3.0-dev.14",
+    "@prisma-next/sql-runtime": "0.3.0-dev.14",
     "@prisma-next/test-utils": "0.0.1"
   },
   "exports": {
@@ -74,6 +74,10 @@
     "./config-loader": {
       "types": "./dist/config-loader.d.ts",
       "import": "./dist/config-loader.js"
+    },
+    "./control-api": {
+      "types": "./dist/exports/control-api.d.ts",
+      "import": "./dist/exports/control-api.js"
     }
   },
   "scripts": {

package/src/commands/db-init.ts

@@ -13,7 +13,7 @@ import { loadConfig } from '../config-loader';
 import { performAction } from '../utils/action';
 import {
   errorContractValidationFailed,
-  errorDatabaseUrlRequired,
+  errorDatabaseConnectionRequired,
   errorDriverRequired,
   errorFileNotFound,
   errorJsonFormatNotSupported,
@@ -154,11 +154,11 @@ export function createDbInitCommand(): Command {
           );
         }
 
-        // Resolve database URL
-        const dbUrl = options.db ?? config.db?.url;
-        if (!dbUrl) {
-          throw errorDatabaseUrlRequired({
-            why: `Database URL is required for db init (set db.url in ${configPath}, or pass --db <url>)`,
+        // Resolve database connection (--db flag or config.db.connection)
+        const dbConnection = options.db ?? config.db?.connection;
+        if (!dbConnection) {
+          throw errorDatabaseConnectionRequired({
+            why: `Database connection is required for db init (set db.connection in ${configPath}, or pass --db <url>)`,
           });
         }
 
@@ -176,23 +176,24 @@ export function createDbInitCommand(): Command {
         }
         const migrations = config.target.migrations;
 
-        // Create driver
         let driver: Awaited<ReturnType<(typeof driverDescriptor)['create']>>;
         try {
-          driver = await withSpinner(() => driverDescriptor.create(dbUrl), {
+          driver = await withSpinner(() => driverDescriptor.create(dbConnection), {
             message: 'Connecting to database...',
             flags,
           });
         } catch (error) {
           const message = error instanceof Error ? error.message : String(error);
           const code = (error as { code?: unknown }).code;
-          const redacted = redactDatabaseUrl(dbUrl);
+          // Only redact if connection is a string (URL)
+          const redacted =
+            typeof dbConnection === 'string' ? redactDatabaseUrl(dbConnection) : undefined;
           throw errorRuntime('Database connection failed', {
             why: message,
-            fix: 'Verify the database URL, ensure the database is reachable, and confirm credentials/permissions',
+            fix: 'Verify the database connection, ensure the database is reachable, and confirm credentials/permissions',
             meta: {
               ...(typeof code !== 'undefined' ? { code } : {}),
-              ...redacted,
+              ...(redacted ?? {}),
             },
           });
         }

package/src/commands/db-introspect.ts

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { relative, resolve } from 'node:path';
 import {
-  errorDatabaseUrlRequired,
+  errorDatabaseConnectionRequired,
   errorDriverRequired,
   errorRuntime,
   errorUnexpected,
@@ -103,9 +103,9 @@ export function createDbIntrospectCommand(): Command {
             // Mask password in URL for security
             const maskedUrl = options.db.replace(/:([^:@]+)@/, ':****@');
             details.push({ label: 'database', value: maskedUrl });
-          } else if (config.db?.url) {
+          } else if (config.db?.connection && typeof config.db.connection === 'string') {
             // Mask password in URL for security
-            const maskedUrl = config.db.url.replace(/:([^:@]+)@/, ':****@');
+            const maskedUrl = config.db.connection.replace(/:([^:@]+)@/, ':****@');
             details.push({ label: 'database', value: maskedUrl });
           }
           const header = formatStyledHeader({
@@ -118,10 +118,10 @@ export function createDbIntrospectCommand(): Command {
           console.log(header);
         }
 
-        // Resolve database URL
-        const dbUrl = options.db ?? config.db?.url;
-        if (!dbUrl) {
-          throw errorDatabaseUrlRequired();
+        // Resolve database connection (--db flag or config.db.connection)
+        const dbConnection = options.db ?? config.db?.connection;
+        if (!dbConnection) {
+          throw errorDatabaseConnectionRequired();
         }
 
         // Check for driver
@@ -132,8 +132,7 @@ export function createDbIntrospectCommand(): Command {
         // Store driver descriptor after null check
         const driverDescriptor = config.driver;
 
-        // Create driver
-        const driver = await withSpinner(() => driverDescriptor.create(dbUrl), {
+        const driver = await withSpinner(() => driverDescriptor.create(dbConnection), {
           message: 'Connecting to database...',
           flags,
         });
@@ -199,6 +198,12 @@ export function createDbIntrospectCommand(): Command {
           }
 
           // Build result envelope
+          // Get masked connection URL for meta (only for string connections)
+          const connectionForMeta =
+            typeof dbConnection === 'string'
+              ? dbConnection.replace(/:([^:@]+)@/, ':****@')
+              : undefined;
+
           const introspectResult: IntrospectSchemaResult<unknown> = {
             ok: true,
             summary: 'Schema introspected successfully',
@@ -207,18 +212,11 @@ export function createDbIntrospectCommand(): Command {
               id: config.target.targetId,
             },
             schema: schemaIR,
-            ...(configPath || options.db || config.db?.url
+            ...(configPath || connectionForMeta
               ? {
                   meta: {
                     ...(configPath ? { configPath } : {}),
-                    ...(options.db || config.db?.url
-                      ? {
-                          dbUrl: (options.db ?? config.db?.url ?? '').replace(
-                            /:([^:@]+)@/,
-                            ':****@',
-                          ),
-                        }
-                      : {}),
+                    ...(connectionForMeta ? { dbUrl: connectionForMeta } : {}),
                   },
                 }
               : {}),

package/src/commands/db-schema-verify.ts

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { relative, resolve } from 'node:path';
 import type { ContractIR } from '@prisma-next/contract/ir';
 import {
-  errorDatabaseUrlRequired,
+  errorDatabaseConnectionRequired,
   errorDriverRequired,
   errorFileNotFound,
   errorRuntime,
@@ -144,14 +144,13 @@ export function createDbSchemaVerifyCommand(): Command {
         // Validate contract requirements fail-fast before connecting to database
         assertContractRequirementsSatisfied({ contract: contractIR, stack });
 
-        // Resolve database URL
-        const dbUrl = options.db ?? config.db?.url;
-        if (!dbUrl) {
-          throw errorDatabaseUrlRequired();
+        // Resolve database connection (--db flag or config.db.connection)
+        const dbConnection = options.db ?? config.db?.connection;
+        if (!dbConnection) {
+          throw errorDatabaseConnectionRequired();
         }
 
-        // Create driver
-        const driver = await withSpinner(() => driverDescriptor.create(dbUrl), {
+        const driver = await withSpinner(() => driverDescriptor.create(dbConnection), {
           message: 'Connecting to database...',
           flags,
         });

package/src/commands/db-sign.ts

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { relative, resolve } from 'node:path';
 import {
-  errorDatabaseUrlRequired,
+  errorDatabaseConnectionRequired,
   errorDriverRequired,
   errorFileNotFound,
   errorRuntime,
@@ -124,10 +124,10 @@ export function createDbSignCommand(): Command {
         }
         const contractJson = JSON.parse(contractJsonContent) as Record<string, unknown>;
 
-        // Resolve database URL
-        const dbUrl = options.db ?? config.db?.url;
-        if (!dbUrl) {
-          throw errorDatabaseUrlRequired();
+        // Resolve database connection (--db flag or config.db.connection)
+        const dbConnection = options.db ?? config.db?.connection;
+        if (!dbConnection) {
+          throw errorDatabaseConnectionRequired();
         }
 
         // Check for driver
@@ -159,7 +159,7 @@ export function createDbSignCommand(): Command {
         );
 
         // Create driver (expensive operation - done after validation)
-        const driver = await driverDescriptor.create(dbUrl);
+        const driver = await driverDescriptor.create(dbConnection);
 
         try {
           // Schema verification precondition with spinner

package/src/commands/db-verify.ts

@@ -2,7 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { relative, resolve } from 'node:path';
 import type { ContractIR } from '@prisma-next/contract/ir';
 import {
-  errorDatabaseUrlRequired,
+  errorDatabaseConnectionRequired,
   errorDriverRequired,
   errorFileNotFound,
   errorHashMismatch,
@@ -118,10 +118,10 @@ export function createDbVerifyCommand(): Command {
         }
         const contractJson = JSON.parse(contractJsonContent) as Record<string, unknown>;
 
-        // Resolve database URL
-        const dbUrl = options.db ?? config.db?.url;
-        if (!dbUrl) {
-          throw errorDatabaseUrlRequired();
+        // Resolve database connection (--db flag or config.db.connection)
+        const dbConnection = options.db ?? config.db?.connection;
+        if (!dbConnection) {
+          throw errorDatabaseConnectionRequired();
         }
 
         // Check for driver
@@ -132,8 +132,7 @@ export function createDbVerifyCommand(): Command {
         // Store driver descriptor after null check
         const driverDescriptor = config.driver;
 
-        // Create driver
-        const driver = await withSpinner(() => driverDescriptor.create(dbUrl), {
+        const driver = await withSpinner(() => driverDescriptor.create(dbConnection), {
           message: 'Connecting to database...',
           flags,
         });