@prisma-next/cli 0.5.0-dev.8 → 0.5.0-dev.81

package/src/control-api/operations/db-apply-aggregate.ts

@@ -0,0 +1,397 @@
+import type { Contract } from '@prisma-next/contract/types';
+import type { TargetBoundComponentDescriptor } from '@prisma-next/framework-components/components';
+import type {
+  ControlDriverInstance,
+  ControlExtensionDescriptor,
+  ControlFamilyInstance,
+  MigrationOperationPolicy,
+  MigrationPlanOperation,
+  OperationPreview,
+  TargetMigrationsCapability,
+} from '@prisma-next/framework-components/control';
+import { hasOperationPreview } from '@prisma-next/framework-components/control';
+import {
+  type AggregatePlannerError,
+  type ContractSpaceAggregate,
+  planAggregate,
+} from '@prisma-next/migration-tools/aggregate';
+import { ifDefined } from '@prisma-next/utils/defined';
+import { notOk, ok } from '@prisma-next/utils/result';
+import { CliStructuredError } from '../../utils/cli-errors';
+import {
+  type BuildAggregateInputs,
+  buildContractSpaceAggregate,
+} from '../../utils/contract-space-aggregate-loader';
+import type {
+  AggregatePerSpaceExecutionEntry,
+  DbInitFailure,
+  DbInitResult,
+  DbInitSuccess,
+  DbUpdateFailure,
+  DbUpdateResult,
+  DbUpdateSuccess,
+  OnControlProgress,
+} from '../types';
+import { applyAggregate, buildPerSpaceBreakdown, collectOrdered } from './apply-aggregate';
+import { stripOperations } from './migration-helpers';
+
+/**
+ * Span IDs emitted via `onProgress` during the aggregate apply flow.
+ * Stable identifiers consumed by the structured-output renderer and by
+ * tests asserting on span ids. The `apply` span itself is owned by
+ * the {@link applyAggregate} primitive — only the introspect / plan
+ * spans are emitted directly here.
+ */
+const SPAN_IDS = {
+  introspect: 'introspect',
+  plan: 'plan',
+} as const;
+
+/**
+ * Inputs shared by `db init` and `db update` aggregate apply flows.
+ *
+ * Accepts the already-validated app contract + descriptor list — the
+ * loader gathers the rest from disk + descriptors. The CLI is the
+ * descriptor-import boundary; everything downstream is descriptor-free.
+ */
+export interface ExecuteAggregateApplyOptions<TFamilyId extends string, TTargetId extends string> {
+  readonly driver: ControlDriverInstance<TFamilyId, TTargetId>;
+  readonly familyInstance: ControlFamilyInstance<TFamilyId, unknown>;
+  readonly contract: Contract;
+  readonly mode: 'plan' | 'apply';
+  readonly migrations: TargetMigrationsCapability<
+    TFamilyId,
+    TTargetId,
+    ControlFamilyInstance<TFamilyId, unknown>
+  >;
+  readonly frameworkComponents: ReadonlyArray<TargetBoundComponentDescriptor<TFamilyId, TTargetId>>;
+  readonly migrationsDir: string;
+  readonly extensionPacks: ReadonlyArray<ControlExtensionDescriptor<TFamilyId, TTargetId>>;
+  readonly targetId: TTargetId;
+  readonly policy: MigrationOperationPolicy;
+  readonly action: 'dbInit' | 'dbUpdate';
+  readonly onProgress?: OnControlProgress;
+}
+
+/**
+ * Loader → planner → runner pipeline shared by `db init` and `db update`.
+ *
+ * The pipeline:
+ *
+ * 1. **Load**: build a {@link ContractSpaceAggregate} from the descriptor
+ *    set + on-disk on-disk artefacts. Any layout / drift / disjointness /
+ *    integrity violation short-circuits with a structured error.
+ * 2. **Read DB state**: marker rows (`familyInstance.readAllMarkers`)
+ *    + introspected schema (`familyInstance.introspect`).
+ * 3. **Plan**: {@link planAggregate} chooses graph-walk vs synth per
+ *    member according to `callerPolicy.ignoreGraphFor`. The app member
+ *    is forced through synth (today's daily-driver behaviour); every
+ *    extension member walks its on-disk graph.
+ * 4. **Apply** (when `mode === 'apply'`): every per-space `MigrationPlan`
+ *    feeds into the runner's `executeAcrossSpaces` — one outer
+ *    transaction across every space; failure on any space rolls back
+ *    every space's writes.
+ */
+export async function executeAggregateApply<TFamilyId extends string, TTargetId extends string>(
+  options: ExecuteAggregateApplyOptions<TFamilyId, TTargetId>,
+): Promise<DbInitResult | DbUpdateResult> {
+  const {
+    driver,
+    familyInstance,
+    contract,
+    mode,
+    migrations,
+    frameworkComponents,
+    migrationsDir,
+    extensionPacks,
+    targetId,
+    policy,
+    action,
+    onProgress,
+  } = options;
+
+  // 1. Load aggregate from descriptors + on-disk state.
+  const loadInputs: BuildAggregateInputs<TFamilyId, TTargetId> = {
+    targetId,
+    migrationsDir,
+    appContract: contract,
+    extensionPacks,
+    validateContract: (json) => familyInstance.validateContract(json),
+  };
+  const loaded = await buildContractSpaceAggregate(loadInputs);
+  if (!loaded.ok) {
+    throw loaded.failure;
+  }
+  const aggregate = loaded.value;
+
+  // 2. Read live DB state (markers + schema).
+  const markerRows = await familyInstance.readAllMarkers({ driver });
+
+  // 2a. Orphan-marker pre-flight: refuse to apply when a marker row
+  // exists for a space that is not declared in the aggregate.
+  // Mirrors the M2 marker-check that `db init` / `db update` ran via
+  // `runContractSpaceVerifierMarkerCheck`. Runs before planning so a
+  // user with an orphaned marker (e.g. a retired extension whose
+  // migrations directory has been removed) is told to clean it up
+  // rather than silently advancing the app's marker.
+  const orphanMarkerError = detectOrphanMarkers(aggregate, markerRows);
+  if (orphanMarkerError !== null) {
+    throw orphanMarkerError;
+  }
+
+  onProgress?.({
+    action,
+    kind: 'spanStart',
+    spanId: SPAN_IDS.introspect,
+    label: 'Introspecting database schema',
+  });
+  const schemaIR = await familyInstance.introspect({ driver });
+  onProgress?.({ action, kind: 'spanEnd', spanId: SPAN_IDS.introspect, outcome: 'ok' });
+
+  // 3. Plan via aggregate planner. App is forced through synth (today's
+  // `db init` / `db update` daily-driver behaviour); extensions walk
+  // their on-disk migration graphs.
+  onProgress?.({
+    action,
+    kind: 'spanStart',
+    spanId: SPAN_IDS.plan,
+    label: 'Planning migration',
+  });
+  const planResult = await planAggregate<TFamilyId, TTargetId>({
+    aggregate,
+    currentDBState: { markersBySpaceId: markerRows, schemaIntrospection: schemaIR },
+    familyInstance,
+    migrations,
+    frameworkComponents,
+    callerPolicy: { ignoreGraphFor: new Set([aggregate.app.spaceId]) },
+    operationPolicy: policy,
+  });
+  if (!planResult.ok) {
+    onProgress?.({ action, kind: 'spanEnd', spanId: SPAN_IDS.plan, outcome: 'error' });
+    return mapPlannerError(planResult.failure);
+  }
+  onProgress?.({ action, kind: 'spanEnd', spanId: SPAN_IDS.plan, outcome: 'ok' });
+
+  const orderedResolutions = collectOrdered(planResult.value.applyOrder, planResult.value.perSpace);
+
+  // The destination's structural shape comes from the app's plan — its
+  // `destination` is the storage hash users see in CLI output.
+  const appResolution = orderedResolutions.find((r) => r.spaceId === aggregate.app.spaceId);
+  if (!appResolution) {
+    throw new Error(
+      'Aggregate planner returned no plan for the app member — the planner is supposed to always emit one.',
+    );
+  }
+  const appPlan = appResolution.entry.plan;
+
+  // 4. Plan-mode: surface aggregate operations without applying.
+  if (mode === 'plan') {
+    const aggregateOps = orderedResolutions.flatMap((r) => r.entry.displayOps);
+    const preview = hasOperationPreview(familyInstance)
+      ? familyInstance.toOperationPreview(aggregateOps)
+      : undefined;
+    const perSpace = buildPerSpaceBreakdown(orderedResolutions, aggregate.app.spaceId, {
+      includeMarkers: false,
+    });
+    const summary = `Planned ${aggregateOps.length} operation(s) across ${orderedResolutions.length} space(s)`;
+    return wrapPlanResult({
+      operations: aggregateOps,
+      destination: appPlan.destination,
+      preview,
+      perSpace,
+      summary,
+    });
+  }
+
+  // 5. Apply mode: hand off to the shared `applyAggregate` primitive.
+  // The runner-driving tail is identical for `db init` / `db update` /
+  // `migration apply` — only how each caller produces `perSpacePlans`
+  // differs (synth + graph-walk via planAggregate here; graph-walk
+  // only for migration apply). See M6 sub-spec § Required changes 1.
+  const applied = await applyAggregate({
+    aggregate,
+    perSpacePlans: planResult.value.perSpace,
+    applyOrder: planResult.value.applyOrder,
+    driver,
+    familyInstance,
+    migrations,
+    frameworkComponents,
+    policy,
+    action,
+    ...ifDefined('onProgress', onProgress),
+  });
+  if (!applied.ok) {
+    return buildRunnerFailure({
+      summary: applied.failure.summary,
+      ...ifDefined('why', applied.failure.why),
+      meta: applied.failure.meta,
+    });
+  }
+
+  const aggregateOps = applied.value.orderedResolutions.flatMap((r) => r.entry.displayOps);
+  const summary =
+    action === 'dbInit'
+      ? `Applied ${applied.value.totalOpsExecuted} operation(s) across ${applied.value.orderedResolutions.length} space(s), database signed`
+      : applied.value.totalOpsExecuted === 0
+        ? `Database already matches contract across ${applied.value.orderedResolutions.length} space(s), signature updated`
+        : `Applied ${applied.value.totalOpsExecuted} operation(s) across ${applied.value.orderedResolutions.length} space(s), signature updated`;
+
+  return wrapApplyResult({
+    operations: aggregateOps,
+    destination: appPlan.destination,
+    operationsPlanned: applied.value.totalOpsPlanned,
+    operationsExecuted: applied.value.totalOpsExecuted,
+    perSpace: applied.value.perSpace,
+    summary,
+  });
+}
+
+/**
+ * Compare the live `_prisma_marker` rows against the aggregate's
+ * declared members. Any marker row whose `space` is not a member of
+ * the aggregate is an "orphan" — typically a marker left behind by
+ * an extension that was removed from `extensionPacks` without first
+ * cleaning up its on-disk migrations / database tables.
+ *
+ * Returns a {@link CliStructuredError} envelope (code `5002`,
+ * `kind: 'orphanMarker'`) for the first orphan it finds, or `null`
+ * when every marker row maps to a declared member. Mirrors the M2
+ * `runContractSpaceVerifierMarkerCheck` envelope so downstream
+ * tooling (integration tests, JSON consumers) keeps asserting on the
+ * same shape.
+ */
+function detectOrphanMarkers(
+  aggregate: ContractSpaceAggregate,
+  markerRows: ReadonlyMap<string, unknown>,
+): CliStructuredError | null {
+  const memberSpaceIds = new Set<string>([
+    aggregate.app.spaceId,
+    ...aggregate.extensions.map((m) => m.spaceId),
+  ]);
+  const orphans: string[] = [];
+  for (const [spaceId, row] of markerRows) {
+    if (row !== null && row !== undefined && !memberSpaceIds.has(spaceId)) {
+      orphans.push(spaceId);
+    }
+  }
+  if (orphans.length === 0) return null;
+  orphans.sort((a, b) => a.localeCompare(b));
+  const summary =
+    orphans.length === 1
+      ? `Orphan contract-space marker detected for "${orphans[0]}"`
+      : `Orphan contract-space markers detected for ${orphans.length} spaces`;
+  return new CliStructuredError('5002', summary, {
+    domain: 'MIG',
+    why: `The database has \`_prisma_marker\` rows for spaces (${orphans
+      .map((s) => `"${s}"`)
+      .join(
+        ', ',
+      )}) that are not declared in the project's \`extensionPacks\`. The aggregate pipeline refuses to advance markers it cannot account for.`,
+    fix: 'Either re-declare the missing extension(s) in `extensionPacks` (so the aggregate owns them again), or remove the orphan marker row(s) from `_prisma_marker` once you have confirmed the corresponding tables can be safely retired.',
+    docsUrl: 'https://pris.ly/contract-spaces',
+    meta: {
+      violations: orphans.map((spaceId) => ({ kind: 'orphanMarker', spaceId })),
+    },
+  });
+}
+
+function mapPlannerError(error: AggregatePlannerError): DbInitResult | DbUpdateResult {
+  if (error.kind === 'appSynthFailure') {
+    const failure: DbInitFailure | DbUpdateFailure = {
+      code: 'PLANNING_FAILED',
+      summary: 'Migration planning failed due to conflicts',
+      conflicts: error.conflicts,
+      why: undefined,
+      meta: undefined,
+    };
+    return notOk(failure) as DbInitResult | DbUpdateResult;
+  }
+  if (error.kind === 'extensionPathUnreachable') {
+    return buildRunnerFailure({
+      summary: `Cannot resolve apply path for extension space "${error.spaceId}"`,
+      why: `No path in the on-disk migration graph for extension space "${error.spaceId}" reaches the on-disk head ref hash "${error.target}".`,
+      meta: { spaceId: error.spaceId, target: error.target },
+    });
+  }
+  if (error.kind === 'extensionPathUnsatisfiable') {
+    return buildRunnerFailure({
+      summary: `Cannot resolve apply path for extension space "${error.spaceId}"`,
+      why: `On-disk migration graph for extension space "${error.spaceId}" reaches the on-disk head ref but does not cover required invariants: ${error.missingInvariants.join(', ')}.`,
+      meta: { spaceId: error.spaceId, missingInvariants: error.missingInvariants },
+    });
+  }
+  // policyConflict — surfaces as a runner-style failure naming the
+  // space; conceptually a configuration bug, but mapping it onto the
+  // existing failure surface keeps callers untouched.
+  return buildRunnerFailure({
+    summary: `Aggregate planner policy conflict for space "${error.spaceId}"`,
+    why: error.detail,
+    meta: { spaceId: error.spaceId },
+  });
+}
+
+function wrapPlanResult(args: {
+  readonly operations: readonly MigrationPlanOperation[];
+  readonly destination: { readonly storageHash: string; readonly profileHash?: string };
+  readonly preview: OperationPreview | undefined;
+  readonly perSpace: readonly AggregatePerSpaceExecutionEntry[];
+  readonly summary: string;
+}): DbInitResult | DbUpdateResult {
+  const success: DbInitSuccess | DbUpdateSuccess = {
+    mode: 'plan',
+    plan: {
+      operations: stripOperations(args.operations),
+      ...ifDefined('preview', args.preview),
+    },
+    destination: {
+      storageHash: args.destination.storageHash,
+      ...ifDefined('profileHash', args.destination.profileHash),
+    },
+    perSpace: args.perSpace,
+    summary: args.summary,
+  };
+  return ok(success);
+}
+
+function wrapApplyResult(args: {
+  readonly operations: readonly MigrationPlanOperation[];
+  readonly destination: { readonly storageHash: string; readonly profileHash?: string };
+  readonly operationsPlanned: number;
+  readonly operationsExecuted: number;
+  readonly perSpace: readonly AggregatePerSpaceExecutionEntry[];
+  readonly summary: string;
+}): DbInitResult | DbUpdateResult {
+  const success: DbInitSuccess | DbUpdateSuccess = {
+    mode: 'apply',
+    plan: { operations: stripOperations(args.operations) },
+    destination: {
+      storageHash: args.destination.storageHash,
+      ...ifDefined('profileHash', args.destination.profileHash),
+    },
+    execution: {
+      operationsPlanned: args.operationsPlanned,
+      operationsExecuted: args.operationsExecuted,
+    },
+    marker: args.destination.profileHash
+      ? { storageHash: args.destination.storageHash, profileHash: args.destination.profileHash }
+      : { storageHash: args.destination.storageHash },
+    perSpace: args.perSpace,
+    summary: args.summary,
+  };
+  return ok(success);
+}
+
+function buildRunnerFailure(args: {
+  readonly summary: string;
+  readonly why?: string;
+  readonly meta: Record<string, unknown>;
+}): DbInitResult | DbUpdateResult {
+  const failure: DbInitFailure | DbUpdateFailure = {
+    code: 'RUNNER_FAILED',
+    summary: args.summary,
+    why: args.why,
+    meta: args.meta,
+    conflicts: undefined,
+  };
+  return notOk(failure) as DbInitResult | DbUpdateResult;
+}