@prisma-next/contract 0.12.0-dev.5 → 0.12.0-dev.50

package/dist/resolve-domain-model-DMXbLLjV.d.mts

@@ -0,0 +1,17 @@
+import { l as ContractModelBase, t as ApplicationDomain } from "./domain-envelope-BFYbgufo.mjs";
+
+//#region src/resolve-domain-model.d.ts
+interface ResolvedDomainModel {
+  readonly namespaceId: string;
+  readonly model: ContractModelBase;
+}
+/**
+ * Resolve a bare domain model name to its namespace coordinate and model IR by
+ * scanning the contract's namespaces. For the single-namespace contracts in
+ * scope the scan is exact; cross-namespace bare-name collisions are selected
+ * explicitly (TML-2550).
+ */
+declare function resolveDomainModel(domain: ApplicationDomain, modelName: string): ResolvedDomainModel | undefined;
+//#endregion
+export { resolveDomainModel as n, ResolvedDomainModel as t };
+//# sourceMappingURL=resolve-domain-model-DMXbLLjV.d.mts.map

package/dist/resolve-domain-model-DMXbLLjV.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-domain-model-DMXbLLjV.d.mts","names":[],"sources":["../src/resolve-domain-model.ts"],"mappings":";;;UAGiB,mBAAA;EAAA,SACN,WAAA;EAAA,SACA,KAAA,EAAO,iBAAiB;AAAA;;;;;;AAAA;iBASnB,kBAAA,CACd,MAAA,EAAQ,iBAAA,EACR,SAAA,WACC,mBAAmB"}

package/dist/resolve-domain-model-R4txseVc.mjs

@@ -0,0 +1,20 @@
+//#region src/resolve-domain-model.ts
+/**
+* Resolve a bare domain model name to its namespace coordinate and model IR by
+* scanning the contract's namespaces. For the single-namespace contracts in
+* scope the scan is exact; cross-namespace bare-name collisions are selected
+* explicitly (TML-2550).
+*/
+function resolveDomainModel(domain, modelName) {
+	for (const namespaceId of Object.keys(domain.namespaces)) {
+		const model = domain.namespaces[namespaceId]?.models[modelName];
+		if (model !== void 0) return {
+			namespaceId,
+			model
+		};
+	}
+}
+//#endregion
+export { resolveDomainModel as t };
+
+//# sourceMappingURL=resolve-domain-model-R4txseVc.mjs.map

package/dist/resolve-domain-model-R4txseVc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-domain-model-R4txseVc.mjs","names":[],"sources":["../src/resolve-domain-model.ts"],"sourcesContent":["import type { ApplicationDomain } from './domain-envelope';\nimport type { ContractModelBase } from './domain-types';\n\nexport interface ResolvedDomainModel {\n  readonly namespaceId: string;\n  readonly model: ContractModelBase;\n}\n\n/**\n * Resolve a bare domain model name to its namespace coordinate and model IR by\n * scanning the contract's namespaces. For the single-namespace contracts in\n * scope the scan is exact; cross-namespace bare-name collisions are selected\n * explicitly (TML-2550).\n */\nexport function resolveDomainModel(\n  domain: ApplicationDomain,\n  modelName: string,\n): ResolvedDomainModel | undefined {\n  for (const namespaceId of Object.keys(domain.namespaces)) {\n    const model = domain.namespaces[namespaceId]?.models[modelName];\n    if (model !== undefined) {\n      return { namespaceId, model };\n    }\n  }\n\n  return undefined;\n}\n"],"mappings":";;;;;;;AAcA,SAAgB,mBACd,QACA,WACiC;CACjC,KAAK,MAAM,eAAe,OAAO,KAAK,OAAO,UAAU,GAAG;EACxD,MAAM,QAAQ,OAAO,WAAW,cAAc,OAAO;EACrD,IAAI,UAAU,KAAA,GACZ,OAAO;GAAE;GAAa;EAAM;CAEhC;AAGF"}

package/dist/resolve-domain-model.d.mts

@@ -0,0 +1,2 @@
+import { n as resolveDomainModel, t as ResolvedDomainModel } from "./resolve-domain-model-DMXbLLjV.mjs";
+export { type ResolvedDomainModel, resolveDomainModel };

package/dist/resolve-domain-model.mjs

@@ -0,0 +1,2 @@
+import { t as resolveDomainModel } from "./resolve-domain-model-R4txseVc.mjs";
+export { resolveDomainModel };

package/dist/types.d.mts

@@ -1,4 +1,21 @@
-import { r as DomainNamespaceResolutionError } from "./contract-validation-error-T5LH4DW-.mjs";
-import { A as coreHash, C as PlanMeta, D as StorageEntitySlot, E as StorageBase, F as profileHash, I as ControlPolicy, L as effectiveControl, M as isColumnDefault, N as isColumnDefaultLiteralInputValue, O as StorageHashBase, P as isExecutionMutationDefaultValue, S as JsonValue, T as Source, _ as ExecutionSection, a as $, b as GeneratedValueSpec, c as ColumnDefaultLiteralInputValue, d as DocCollection, f as DocIndex, g as ExecutionMutationDefaultValue, h as ExecutionMutationDefaultPhases, i as ContractValueObjectsMap, j as executionHash, k as StorageNamespace, l as ColumnDefaultLiteralValue, m as ExecutionMutationDefault, n as ContractExecutionSection, o as Brand, p as ExecutionHashBase, r as ContractModelsMap, s as ColumnDefault, t as Contract, u as ContractMarkerRecord, v as Expr, w as ProfileHashBase, x as JsonPrimitive, y as FieldType } from "./contract-types-9BbapbkL.mjs";
-import { C as UnionFieldType, D as crossRef, E as CrossReferenceSchema, O as NamespaceId, S as ScalarFieldType, T as CrossReference, _ as ContractValueObject, a as contractModels, b as ModelStorageBase, c as ContractDiscriminator, d as ContractFieldType, f as ContractModel, g as ContractRelationOn, h as ContractRelation, i as UNBOUND_DOMAIN_NAMESPACE_ID, k as asNamespaceId, l as ContractEmbedRelation, m as ContractReferenceRelation, n as ApplicationDomainNamespace, o as contractValueObjects, p as ContractModelBase, r as ContractWithDomain, s as resolveSingleDomainNamespaceId, t as ApplicationDomain, u as ContractField, v as ContractVariantEntry, w as ValueObjectFieldType, x as ReferenceRelationKeys, y as EmbedRelationKeys } from "./domain-envelope-Cv5OTm8D.mjs";
-export { type $, type ApplicationDomain, type ApplicationDomainNamespace, type Brand, type ColumnDefault, type ColumnDefaultLiteralInputValue, type ColumnDefaultLiteralValue, type Contract, type ContractDiscriminator, type ContractEmbedRelation, type ContractExecutionSection, type ContractField, type ContractFieldType, type ContractMarkerRecord, type ContractModel, type ContractModelBase, type ContractModelsMap, type ContractReferenceRelation, type ContractRelation, type ContractRelationOn, type ContractValueObject, type ContractValueObjectsMap, type ContractVariantEntry, type ContractWithDomain, type ControlPolicy, type CrossReference, CrossReferenceSchema, type DocCollection, type DocIndex, DomainNamespaceResolutionError, type EmbedRelationKeys, type ExecutionHashBase, type ExecutionMutationDefault, type ExecutionMutationDefaultPhases, type ExecutionMutationDefaultValue, type ExecutionSection, type Expr, type FieldType, type GeneratedValueSpec, type JsonPrimitive, type JsonValue, type ModelStorageBase, type NamespaceId, type PlanMeta, type ProfileHashBase, type ReferenceRelationKeys, type ScalarFieldType, type Source, type StorageBase, type StorageEntitySlot, type StorageHashBase, type StorageNamespace, UNBOUND_DOMAIN_NAMESPACE_ID, type UnionFieldType, type ValueObjectFieldType, asNamespaceId, contractModels, contractValueObjects, coreHash, crossRef, effectiveControl, executionHash, isColumnDefault, isColumnDefaultLiteralInputValue, isExecutionMutationDefaultValue, profileHash, resolveSingleDomainNamespaceId };
+import { A as StorageNamespace, C as LedgerEntryRecord, D as StorageBase, E as Source, F as isExecutionMutationDefaultValue, I as profileHash, L as ControlPolicy, M as executionHash, N as isColumnDefault, O as StorageEntitySlot, P as isColumnDefaultLiteralInputValue, R as effectiveControlPolicy, S as JsonValue, T as ProfileHashBase, _ as ExecutionSection, a as $, b as GeneratedValueSpec, c as ColumnDefaultLiteralInputValue, d as DocCollection, f as DocIndex, g as ExecutionMutationDefaultValue, h as ExecutionMutationDefaultPhases, i as ContractValueObjectDefinitions, j as coreHash, k as StorageHashBase, l as ColumnDefaultLiteralValue, m as ExecutionMutationDefault, n as ContractExecutionSection, o as Brand, p as ExecutionHashBase, r as ContractModelDefinitions, s as ColumnDefault, t as Contract, u as ContractMarkerRecord, v as Expr, w as PlanMeta, x as JsonPrimitive, y as FieldType } from "./contract-types-D5lcjipq.mjs";
+import { C as crossRef, S as CrossReferenceSchema, T as asNamespaceId, _ as ReferenceRelationKeys, a as ContractEmbedRelation, b as ValueObjectFieldType, c as ContractModel, d as ContractRelation, f as ContractRelationOn, g as ModelStorageBase, h as EmbedRelationKeys, i as ContractDiscriminator, l as ContractModelBase, m as ContractVariantEntry, n as ApplicationDomainNamespace, o as ContractField, p as ContractValueObject, r as ContractWithDomain, s as ContractFieldType, t as ApplicationDomain, u as ContractReferenceRelation, v as ScalarFieldType, w as NamespaceId, x as CrossReference, y as UnionFieldType } from "./domain-envelope-BFYbgufo.mjs";
+import { n as soleDomainNamespaceId, t as UNBOUND_DOMAIN_NAMESPACE_ID } from "./default-namespace-CWdFpoc_.mjs";
+import { r as DomainNamespaceResolutionError } from "./contract-validation-error-B8UtbPEl.mjs";
+import { n as resolveDomainModel, t as ResolvedDomainModel } from "./resolve-domain-model-DMXbLLjV.mjs";
+
+//#region src/domain-namespace-access.d.ts
+/**
+ * Models map for the contract's single domain namespace. Throws when the
+ * contract does not declare exactly one namespace — bare-name access is
+ * ambiguous across namespaces and must be qualified explicitly (TML-2550).
+ */
+declare function domainModelsAtDefaultNamespace<TModels extends Record<string, ContractModelBase>>(domain: ApplicationDomain<TModels>): TModels;
+/**
+ * Value objects for the contract's single domain namespace, when present.
+ * Throws when the contract does not declare exactly one namespace.
+ */
+declare function domainValueObjectsAtDefaultNamespace<TModels extends Record<string, ContractModelBase>>(domain: ApplicationDomain<TModels>): Record<string, ContractValueObject> | undefined;
+//#endregion
+export { type $, type ApplicationDomain, type ApplicationDomainNamespace, type Brand, type ColumnDefault, type ColumnDefaultLiteralInputValue, type ColumnDefaultLiteralValue, type Contract, type ContractDiscriminator, type ContractEmbedRelation, type ContractExecutionSection, type ContractField, type ContractFieldType, type ContractMarkerRecord, type ContractModel, type ContractModelBase, type ContractModelDefinitions, type ContractReferenceRelation, type ContractRelation, type ContractRelationOn, type ContractValueObject, type ContractValueObjectDefinitions, type ContractVariantEntry, type ContractWithDomain, type ControlPolicy, type CrossReference, CrossReferenceSchema, type DocCollection, type DocIndex, DomainNamespaceResolutionError, type EmbedRelationKeys, type ExecutionHashBase, type ExecutionMutationDefault, type ExecutionMutationDefaultPhases, type ExecutionMutationDefaultValue, type ExecutionSection, type Expr, type FieldType, type GeneratedValueSpec, type JsonPrimitive, type JsonValue, type LedgerEntryRecord, type ModelStorageBase, type NamespaceId, type PlanMeta, type ProfileHashBase, type ReferenceRelationKeys, type ResolvedDomainModel, type ScalarFieldType, type Source, type StorageBase, type StorageEntitySlot, type StorageHashBase, type StorageNamespace, UNBOUND_DOMAIN_NAMESPACE_ID, type UnionFieldType, type ValueObjectFieldType, asNamespaceId, coreHash, crossRef, domainModelsAtDefaultNamespace, domainValueObjectsAtDefaultNamespace, effectiveControlPolicy, executionHash, isColumnDefault, isColumnDefaultLiteralInputValue, isExecutionMutationDefaultValue, profileHash, resolveDomainModel, soleDomainNamespaceId };
+//# sourceMappingURL=types.d.mts.map

package/dist/types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.mts","names":[],"sources":["../src/domain-namespace-access.ts"],"mappings":";;;;;;;;;;;;iBAUgB,8BAAA,iBAA+C,MAAA,SAAe,iBAAA,EAAA,CAC5E,MAAA,EAAQ,iBAAA,CAAkB,OAAA,IACzB,OAAA;;;;;iBAea,oCAAA,iBACE,MAAA,SAAe,iBAAA,EAAA,CAC/B,MAAA,EAAQ,iBAAA,CAAkB,OAAA,IAAW,MAAA,SAAe,mBAAA"}

package/dist/types.mjs

@@ -1,5 +1,7 @@
 import { n as DomainNamespaceResolutionError } from "./contract-validation-error-ClZaKqMW.mjs";
-import { t as asNamespaceId } from "./namespace-id-CVpkSFUK.mjs";
+import { n as soleDomainNamespaceId, t as UNBOUND_DOMAIN_NAMESPACE_ID } from "./default-namespace-Bhu0oN8U.mjs";
+import { t as resolveDomainModel } from "./resolve-domain-model-R4txseVc.mjs";
+import { t as asNamespaceId } from "./namespace-id-BSCer2Vd.mjs";
 import { blindCast } from "@prisma-next/utils/casts";
 import { type } from "arktype";
 //#region src/control-policy.ts
@@ -11,8 +13,8 @@ import { type } from "arktype";
 * Both parameters are optional raw values so this function stays node-type-agnostic
 * and can be called by any consumer (verifier, planner, etc.) without importing IR classes.
 */
-function effectiveControl(nodeControl, defaultControl) {
-	return nodeControl ?? defaultControl ?? "managed";
+function effectiveControlPolicy(nodeControl, defaultControlPolicy) {
+	return nodeControl ?? defaultControlPolicy ?? "managed";
 }
 //#endregion
 //#region src/cross-reference.ts
@@ -29,31 +31,24 @@ function crossRef(model, namespace = DEFAULT_CROSS_REF_NAMESPACE) {
 	};
 }
 //#endregion
-//#region src/domain-envelope.ts
-const UNBOUND_DOMAIN_NAMESPACE_ID = "__unbound__";
-function resolveSingleDomainNamespaceId(domain, namespaceId) {
-	if (namespaceId !== void 0) {
-		if (!Object.hasOwn(domain.namespaces, namespaceId)) throw new DomainNamespaceResolutionError(`domain namespace "${namespaceId}" is not present on the contract`);
-		return namespaceId;
-	}
-	const namespaceIds = Object.keys(domain.namespaces);
-	if (namespaceIds.length === 0) throw new DomainNamespaceResolutionError("domain has no namespaces");
-	if (namespaceIds.length > 1) throw new DomainNamespaceResolutionError(`expected exactly one domain namespace, found ${namespaceIds.length} (${namespaceIds.join(", ")})`);
-	const [soleNamespaceId] = namespaceIds;
-	if (soleNamespaceId === void 0) throw new DomainNamespaceResolutionError("domain has no namespaces");
-	return soleNamespaceId;
-}
-function contractModels(contract, namespaceId) {
-	const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);
-	const domainNamespace = contract.domain.namespaces[resolved];
-	if (domainNamespace === void 0) throw new DomainNamespaceResolutionError(`domain namespace "${resolved}" is not present on the contract`);
+//#region src/domain-namespace-access.ts
+/**
+* Models map for the contract's single domain namespace. Throws when the
+* contract does not declare exactly one namespace — bare-name access is
+* ambiguous across namespaces and must be qualified explicitly (TML-2550).
+*/
+function domainModelsAtDefaultNamespace(domain) {
+	const namespaceId = soleDomainNamespaceId(domain);
+	const domainNamespace = domain.namespaces[namespaceId];
+	if (domainNamespace === void 0) throw new DomainNamespaceResolutionError(`domain namespace "${namespaceId}" is not present on the contract`);
 	return domainNamespace.models;
 }
-function contractValueObjects(contract, namespaceId) {
-	const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);
-	const domainNamespace = contract.domain.namespaces[resolved];
-	if (domainNamespace === void 0) throw new DomainNamespaceResolutionError(`domain namespace "${resolved}" is not present on the contract`);
-	return domainNamespace.valueObjects;
+/**
+* Value objects for the contract's single domain namespace, when present.
+* Throws when the contract does not declare exactly one namespace.
+*/
+function domainValueObjectsAtDefaultNamespace(domain) {
+	return domain.namespaces[soleDomainNamespaceId(domain)]?.valueObjects;
 }
 //#endregion
 //#region src/types.ts
@@ -99,6 +94,6 @@ function isExecutionMutationDefaultValue(value) {
 	return true;
 }
 //#endregion
-export { CrossReferenceSchema, DomainNamespaceResolutionError, UNBOUND_DOMAIN_NAMESPACE_ID, asNamespaceId, contractModels, contractValueObjects, coreHash, crossRef, effectiveControl, executionHash, isColumnDefault, isColumnDefaultLiteralInputValue, isExecutionMutationDefaultValue, profileHash, resolveSingleDomainNamespaceId };
+export { CrossReferenceSchema, DomainNamespaceResolutionError, UNBOUND_DOMAIN_NAMESPACE_ID, asNamespaceId, coreHash, crossRef, domainModelsAtDefaultNamespace, domainValueObjectsAtDefaultNamespace, effectiveControlPolicy, executionHash, isColumnDefault, isColumnDefaultLiteralInputValue, isExecutionMutationDefaultValue, profileHash, resolveDomainModel, soleDomainNamespaceId };
 
 //# sourceMappingURL=types.mjs.map

package/dist/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../src/control-policy.ts","../src/cross-reference.ts","../src/domain-envelope.ts","../src/types.ts"],"sourcesContent":["/**\n * Governance posture for a storage-plane node or for the contract as a whole.\n *\n * - `managed`  — Prisma Next owns the full lifecycle (DDL, migrations, verification).\n * - `tolerated` — node was found in the database but is not schema-managed; Prisma Next\n *   leaves it untouched while tracking its existence.\n * - `external` — node is owned by an external system; Prisma Next never emits DDL for it.\n * - `observed` — read-only access; Prisma Next does not write to or migrate the node.\n */\nexport type ControlPolicy = 'managed' | 'tolerated' | 'external' | 'observed';\n\n/**\n * Resolves the effective control policy for a storage-plane node.\n *\n * Precedence: node-level value → contract default → `'managed'`.\n *\n * Both parameters are optional raw values so this function stays node-type-agnostic\n * and can be called by any consumer (verifier, planner, etc.) without importing IR classes.\n */\nexport function effectiveControl(\n  nodeControl: ControlPolicy | undefined,\n  defaultControl: ControlPolicy | undefined,\n): ControlPolicy {\n  return nodeControl ?? defaultControl ?? 'managed';\n}\n","import { blindCast } from '@prisma-next/utils/casts';\nimport { type Type, type } from 'arktype';\nimport { asNamespaceId, type NamespaceId } from './namespace-id';\n\nexport interface CrossReference {\n  readonly namespace: NamespaceId;\n  readonly model: string;\n}\n\nexport const CrossReferenceSchema = /* @__PURE__ */ blindCast<\n  Type<CrossReference>,\n  'namespace is validated as string at runtime and branded to NamespaceId by asNamespaceId in crossRef(); the schema accepts plain strings but the public type reflects the branded shape'\n>(\n  /* @__PURE__ */ type({\n    '+': 'reject',\n    namespace: 'string',\n    model: 'string',\n  }),\n);\n\nconst DEFAULT_CROSS_REF_NAMESPACE = '__unbound__';\n\nexport function crossRef(\n  model: string,\n  namespace: string = DEFAULT_CROSS_REF_NAMESPACE,\n): CrossReference {\n  return { namespace: asNamespaceId(namespace), model };\n}\n","import { DomainNamespaceResolutionError } from './contract-validation-error';\nimport type { ContractModelBase, ContractValueObject } from './domain-types';\n\nexport const UNBOUND_DOMAIN_NAMESPACE_ID = '__unbound__' as const;\n\n/**\n * One namespace's application-domain entities — models and optional value\n * objects keyed by entity name within that namespace coordinate.\n */\nexport interface ApplicationDomainNamespace<\n  TModels extends Record<string, ContractModelBase> = Record<string, ContractModelBase>,\n> {\n  readonly models: TModels;\n  readonly valueObjects?: Record<string, ContractValueObject>;\n}\n\n/**\n * Application-domain envelope: entity content keyed by namespace id.\n * Mirrors the storage plane's `namespaces` segment (ADR 221).\n */\nexport interface ApplicationDomain<\n  TModels extends Record<string, ContractModelBase> = Record<string, ContractModelBase>,\n> {\n  readonly namespaces: Readonly<Record<string, ApplicationDomainNamespace<TModels>>>;\n}\n\nexport type ContractWithDomain = {\n  readonly domain: ApplicationDomain;\n};\n\nexport function resolveSingleDomainNamespaceId(\n  domain: ApplicationDomain,\n  namespaceId?: string,\n): string {\n  if (namespaceId !== undefined) {\n    if (!Object.hasOwn(domain.namespaces, namespaceId)) {\n      throw new DomainNamespaceResolutionError(\n        `domain namespace \"${namespaceId}\" is not present on the contract`,\n      );\n    }\n    return namespaceId;\n  }\n\n  const namespaceIds = Object.keys(domain.namespaces);\n  if (namespaceIds.length === 0) {\n    throw new DomainNamespaceResolutionError('domain has no namespaces');\n  }\n  if (namespaceIds.length > 1) {\n    throw new DomainNamespaceResolutionError(\n      `expected exactly one domain namespace, found ${namespaceIds.length} (${namespaceIds.join(', ')})`,\n    );\n  }\n  const [soleNamespaceId] = namespaceIds;\n  if (soleNamespaceId === undefined) {\n    throw new DomainNamespaceResolutionError('domain has no namespaces');\n  }\n  return soleNamespaceId;\n}\n\n// Transitional single-namespace projection; pending runtime-qualification slice.\nexport function contractModels<TModels extends Record<string, ContractModelBase>>(\n  contract: { readonly domain: ApplicationDomain<TModels> },\n  namespaceId?: string,\n): TModels {\n  const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);\n  const domainNamespace = contract.domain.namespaces[resolved];\n  if (domainNamespace === undefined) {\n    throw new DomainNamespaceResolutionError(\n      `domain namespace \"${resolved}\" is not present on the contract`,\n    );\n  }\n  return domainNamespace.models;\n}\n\nexport function contractValueObjects<TModels extends Record<string, ContractModelBase>>(\n  contract: { readonly domain: ApplicationDomain<TModels> },\n  namespaceId?: string,\n): Record<string, ContractValueObject> | undefined {\n  const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);\n  const domainNamespace = contract.domain.namespaces[resolved];\n  if (domainNamespace === undefined) {\n    throw new DomainNamespaceResolutionError(\n      `domain namespace \"${resolved}\" is not present on the contract`,\n    );\n  }\n  return domainNamespace.valueObjects;\n}\n","/**\n * Unique symbol used as the key for branding types.\n */\nexport const $: unique symbol = Symbol('__prisma_next_brand__');\n\n/**\n * A helper type to brand a given type with a unique identifier.\n *\n * @template TKey Text used as the brand key.\n * @template TValue Optional value associated with the brand key. Defaults to `true`.\n */\nexport type Brand<TKey extends string | number | symbol, TValue = true> = {\n  [$]: {\n    [K in TKey]: TValue;\n  };\n};\n\n/**\n * Base type for storage contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type StorageHash = StorageHashBase<'sha256:abc123...'>`\n */\nexport type StorageHashBase<THash extends string> = THash & Brand<'StorageHash'>;\n\n/**\n * Base type for execution contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type ExecutionHash = ExecutionHashBase<'sha256:def456...'>`\n */\nexport type ExecutionHashBase<THash extends string> = THash & Brand<'ExecutionHash'>;\n\nexport function executionHash<const T extends string>(value: T): ExecutionHashBase<T> {\n  return value as ExecutionHashBase<T>;\n}\n\nexport function coreHash<const T extends string>(value: T): StorageHashBase<T> {\n  return value as StorageHashBase<T>;\n}\n\n/**\n * Base type for profile contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type ProfileHash = ProfileHashBase<'sha256:def456...'>`\n */\nexport type ProfileHashBase<THash extends string> = THash & Brand<'ProfileHash'>;\n\nexport function profileHash<const T extends string>(value: T): ProfileHashBase<T> {\n  return value as ProfileHashBase<T>;\n}\n\n/**\n * One entity-kind slot in a namespace — a map of entity name to entry.\n * Values are opaque at the foundation layer; family and target concretions\n * refine them to typed IR classes.\n */\nexport type StorageEntitySlot = Readonly<Record<string, unknown>>;\n\n/**\n * Plain-data namespace entry in a storage block. Every hydrated contract\n * carries at least `id` plus zero or more entity-kind slot maps (`tables`,\n * `collections`, …). Foundation declares only this shape — no IR machinery.\n */\nexport interface StorageNamespace {\n  readonly id: string;\n}\n\n/**\n * Base type for family-specific storage blocks.\n * Family storage types (SqlStorage, MongoStorage, etc.) extend this to carry the\n * storage hash alongside family-specific data (tables, collections, etc.).\n *\n * The `namespaces` map is carried by every hydrated storage block. Serialized\n * envelope shape is target-owned; this types the in-memory contract after\n * `deserializeContract`.\n */\nexport interface StorageBase<THash extends string = string> {\n  readonly storageHash: StorageHashBase<THash>;\n  readonly namespaces: Readonly<Record<string, StorageNamespace>>;\n}\n\nexport interface FieldType {\n  readonly type: string;\n  readonly nullable: boolean;\n  readonly items?: FieldType;\n  readonly properties?: Record<string, FieldType>;\n}\n\nexport type GeneratedValueSpec = {\n  readonly id: string;\n  readonly params?: Record<string, unknown>;\n};\n\nexport type JsonPrimitive = string | number | boolean | null;\n\nexport type JsonValue =\n  | JsonPrimitive\n  | { readonly [key: string]: JsonValue }\n  | readonly JsonValue[];\n\nexport type ColumnDefaultLiteralValue = JsonValue;\n\nexport type ColumnDefaultLiteralInputValue = ColumnDefaultLiteralValue | Date;\n\n/**\n * Runtime predicate for `ColumnDefaultLiteralInputValue`. Authoring layers\n * resolve template values from caller-supplied args (typed `unknown` at the\n * boundary) and need to validate before constructing a `ColumnDefault`.\n * Accepts JSON primitives, plain arrays/objects of JSON values, and `Date`\n * instances. Rejects functions, class instances (other than `Date`),\n * `undefined`, `bigint`, `symbol`, and arrays/objects containing those.\n */\nexport function isColumnDefaultLiteralInputValue(\n  value: unknown,\n): value is ColumnDefaultLiteralInputValue {\n  if (value === null) return true;\n  const t = typeof value;\n  if (t === 'string' || t === 'number' || t === 'boolean') return true;\n  if (value instanceof Date) return true;\n  if (Array.isArray(value)) return value.every(isColumnDefaultLiteralInputValue);\n  if (t === 'object' && Object.getPrototypeOf(value) === Object.prototype) {\n    return Object.values(value as Record<string, unknown>).every(isColumnDefaultLiteralInputValue);\n  }\n  return false;\n}\n\nexport type ColumnDefault =\n  | {\n      readonly kind: 'literal';\n      readonly value: ColumnDefaultLiteralInputValue;\n    }\n  | { readonly kind: 'function'; readonly expression: string };\n\nexport function isColumnDefault(value: unknown): value is ColumnDefault {\n  if (typeof value !== 'object' || value === null) return false;\n  const kind = (value as { kind?: unknown }).kind;\n  if (kind === 'literal') {\n    return 'value' in value;\n  }\n  if (kind === 'function') {\n    return typeof (value as { expression?: unknown }).expression === 'string';\n  }\n  return false;\n}\n\nexport type ExecutionMutationDefaultValue = {\n  readonly kind: 'generator';\n  readonly id: GeneratedValueSpec['id'];\n  readonly params?: Record<string, unknown>;\n};\n\nexport function isExecutionMutationDefaultValue(\n  value: unknown,\n): value is ExecutionMutationDefaultValue {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as {\n    kind?: unknown;\n    id?: unknown;\n    params?: unknown;\n  };\n  if (candidate.kind !== 'generator') return false;\n  if (typeof candidate.id !== 'string') return false;\n  if (\n    candidate.params !== undefined &&\n    (typeof candidate.params !== 'object' ||\n      candidate.params === null ||\n      Array.isArray(candidate.params))\n  ) {\n    return false;\n  }\n  return true;\n}\n\nexport type ExecutionMutationDefault = {\n  readonly ref: { readonly table: string; readonly column: string };\n  readonly onCreate?: ExecutionMutationDefaultValue;\n  readonly onUpdate?: ExecutionMutationDefaultValue;\n};\n\n/**\n * `ExecutionMutationDefault` minus its `ref` — the per-field phases value\n * authoring layers attach to a column before the column ref is known.\n */\nexport type ExecutionMutationDefaultPhases = Omit<ExecutionMutationDefault, 'ref'>;\n\nexport type ExecutionSection<THash extends string = string> = {\n  readonly executionHash: ExecutionHashBase<THash>;\n  readonly mutations: {\n    readonly defaults: ReadonlyArray<ExecutionMutationDefault>;\n  };\n};\n\nexport interface Source {\n  readonly readOnly: boolean;\n  readonly projection: Record<string, FieldType>;\n  readonly origin?: Record<string, unknown>;\n  readonly capabilities?: Record<string, boolean>;\n}\n\n// Document family types\nexport interface DocIndex {\n  readonly name: string;\n  readonly keys: Record<string, 'asc' | 'desc'>;\n  readonly unique?: boolean;\n  readonly where?: Expr;\n}\n\nexport type Expr =\n  | { readonly kind: 'eq'; readonly path: ReadonlyArray<string>; readonly value: unknown }\n  | { readonly kind: 'exists'; readonly path: ReadonlyArray<string> };\n\nexport interface DocCollection {\n  readonly name: string;\n  readonly id?: {\n    readonly strategy: 'auto' | 'client' | 'uuid' | 'objectId';\n  };\n  readonly fields: Record<string, FieldType>;\n  readonly indexes?: ReadonlyArray<DocIndex>;\n  readonly readOnly?: boolean;\n}\n\nexport interface PlanMeta {\n  readonly target: string;\n  readonly targetFamily?: string;\n  readonly storageHash: string;\n  readonly profileHash?: string;\n  readonly lane: string;\n  readonly annotations?: {\n    readonly [key: string]: unknown;\n  };\n}\n\n/**\n * Contract marker record stored in the database.\n * Represents the current contract identity for a database.\n */\nexport interface ContractMarkerRecord {\n  readonly storageHash: string;\n  readonly profileHash: string;\n  readonly contractJson: unknown | null;\n  readonly canonicalVersion: number | null;\n  readonly updatedAt: Date;\n  readonly appTag: string | null;\n  readonly meta: Record<string, unknown>;\n  readonly invariants: readonly string[];\n}\n"],"mappings":";;;;;;;;;;;;;AAmBA,SAAgB,iBACd,aACA,gBACe;CACf,OAAO,eAAe,kBAAkB;AAC1C;;;ACfA,MAAa,uBAAuC,0BAIlC,qBAAK;CACnB,KAAK;CACL,WAAW;CACX,OAAO;AACT,CAAC,CACH;AAEA,MAAM,8BAA8B;AAEpC,SAAgB,SACd,OACA,YAAoB,6BACJ;CAChB,OAAO;EAAE,WAAW,cAAc,SAAS;EAAG;CAAM;AACtD;;;ACxBA,MAAa,8BAA8B;AA2B3C,SAAgB,+BACd,QACA,aACQ;CACR,IAAI,gBAAgB,KAAA,GAAW;EAC7B,IAAI,CAAC,OAAO,OAAO,OAAO,YAAY,WAAW,GAC/C,MAAM,IAAI,+BACR,qBAAqB,YAAY,iCACnC;EAEF,OAAO;CACT;CAEA,MAAM,eAAe,OAAO,KAAK,OAAO,UAAU;CAClD,IAAI,aAAa,WAAW,GAC1B,MAAM,IAAI,+BAA+B,0BAA0B;CAErE,IAAI,aAAa,SAAS,GACxB,MAAM,IAAI,+BACR,gDAAgD,aAAa,OAAO,IAAI,aAAa,KAAK,IAAI,EAAE,EAClG;CAEF,MAAM,CAAC,mBAAmB;CAC1B,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,+BAA+B,0BAA0B;CAErE,OAAO;AACT;AAGA,SAAgB,eACd,UACA,aACS;CACT,MAAM,WAAW,+BAA+B,SAAS,QAAQ,WAAW;CAC5E,MAAM,kBAAkB,SAAS,OAAO,WAAW;CACnD,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,+BACR,qBAAqB,SAAS,iCAChC;CAEF,OAAO,gBAAgB;AACzB;AAEA,SAAgB,qBACd,UACA,aACiD;CACjD,MAAM,WAAW,+BAA+B,SAAS,QAAQ,WAAW;CAC5E,MAAM,kBAAkB,SAAS,OAAO,WAAW;CACnD,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,+BACR,qBAAqB,SAAS,iCAChC;CAEF,OAAO,gBAAgB;AACzB;;;ACvDA,SAAgB,cAAsC,OAAgC;CACpF,OAAO;AACT;AAEA,SAAgB,SAAiC,OAA8B;CAC7E,OAAO;AACT;AASA,SAAgB,YAAoC,OAA8B;CAChF,OAAO;AACT;;;;;;;;;AA+DA,SAAgB,iCACd,OACyC;CACzC,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,IAAI,OAAO;CACjB,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,WAAW,OAAO;CAChE,IAAI,iBAAiB,MAAM,OAAO;CAClC,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,MAAM,gCAAgC;CAC7E,IAAI,MAAM,YAAY,OAAO,eAAe,KAAK,MAAM,OAAO,WAC5D,OAAO,OAAO,OAAO,KAAgC,EAAE,MAAM,gCAAgC;CAE/F,OAAO;AACT;AASA,SAAgB,gBAAgB,OAAwC;CACtE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,OAAQ,MAA6B;CAC3C,IAAI,SAAS,WACX,OAAO,WAAW;CAEpB,IAAI,SAAS,YACX,OAAO,OAAQ,MAAmC,eAAe;CAEnE,OAAO;AACT;AAQA,SAAgB,gCACd,OACwC;CACxC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAKlB,IAAI,UAAU,SAAS,aAAa,OAAO;CAC3C,IAAI,OAAO,UAAU,OAAO,UAAU,OAAO;CAC7C,IACE,UAAU,WAAW,KAAA,MACpB,OAAO,UAAU,WAAW,YAC3B,UAAU,WAAW,QACrB,MAAM,QAAQ,UAAU,MAAM,IAEhC,OAAO;CAET,OAAO;AACT"}
+{"version":3,"file":"types.mjs","names":[],"sources":["../src/control-policy.ts","../src/cross-reference.ts","../src/domain-namespace-access.ts","../src/types.ts"],"sourcesContent":["/**\n * Governance posture for a storage-plane node or for the contract as a whole.\n *\n * - `managed`  — Prisma Next owns the full lifecycle (DDL, migrations, verification).\n * - `tolerated` — node was found in the database but is not schema-managed; Prisma Next\n *   leaves it untouched while tracking its existence.\n * - `external` — node is owned by an external system; Prisma Next never emits DDL for it.\n * - `observed` — read-only access; Prisma Next does not write to or migrate the node.\n */\nexport type ControlPolicy = 'managed' | 'tolerated' | 'external' | 'observed';\n\n/**\n * Resolves the effective control policy for a storage-plane node.\n *\n * Precedence: node-level value → contract default → `'managed'`.\n *\n * Both parameters are optional raw values so this function stays node-type-agnostic\n * and can be called by any consumer (verifier, planner, etc.) without importing IR classes.\n */\nexport function effectiveControlPolicy(\n  nodeControl: ControlPolicy | undefined,\n  defaultControlPolicy: ControlPolicy | undefined,\n): ControlPolicy {\n  return nodeControl ?? defaultControlPolicy ?? 'managed';\n}\n","import { blindCast } from '@prisma-next/utils/casts';\nimport { type Type, type } from 'arktype';\nimport { asNamespaceId, type NamespaceId } from './namespace-id';\n\nexport interface CrossReference {\n  readonly namespace: NamespaceId;\n  readonly model: string;\n}\n\nexport const CrossReferenceSchema = /* @__PURE__ */ blindCast<\n  Type<CrossReference>,\n  'namespace is validated as string at runtime and branded to NamespaceId by asNamespaceId in crossRef(); the schema accepts plain strings but the public type reflects the branded shape'\n>(\n  /* @__PURE__ */ type({\n    '+': 'reject',\n    namespace: 'string',\n    model: 'string',\n  }),\n);\n\nconst DEFAULT_CROSS_REF_NAMESPACE = '__unbound__';\n\nexport function crossRef(\n  model: string,\n  namespace: string = DEFAULT_CROSS_REF_NAMESPACE,\n): CrossReference {\n  return { namespace: asNamespaceId(namespace), model };\n}\n","import { DomainNamespaceResolutionError } from './contract-validation-error';\nimport { soleDomainNamespaceId } from './default-namespace';\nimport type { ApplicationDomain } from './domain-envelope';\nimport type { ContractModelBase, ContractValueObject } from './domain-types';\n\n/**\n * Models map for the contract's single domain namespace. Throws when the\n * contract does not declare exactly one namespace — bare-name access is\n * ambiguous across namespaces and must be qualified explicitly (TML-2550).\n */\nexport function domainModelsAtDefaultNamespace<TModels extends Record<string, ContractModelBase>>(\n  domain: ApplicationDomain<TModels>,\n): TModels {\n  const namespaceId = soleDomainNamespaceId(domain);\n  const domainNamespace = domain.namespaces[namespaceId];\n  if (domainNamespace === undefined) {\n    throw new DomainNamespaceResolutionError(\n      `domain namespace \"${namespaceId}\" is not present on the contract`,\n    );\n  }\n  return domainNamespace.models;\n}\n\n/**\n * Value objects for the contract's single domain namespace, when present.\n * Throws when the contract does not declare exactly one namespace.\n */\nexport function domainValueObjectsAtDefaultNamespace<\n  TModels extends Record<string, ContractModelBase>,\n>(domain: ApplicationDomain<TModels>): Record<string, ContractValueObject> | undefined {\n  return domain.namespaces[soleDomainNamespaceId(domain)]?.valueObjects;\n}\n","/**\n * Unique symbol used as the key for branding types.\n */\nexport const $: unique symbol = Symbol('__prisma_next_brand__');\n\n/**\n * A helper type to brand a given type with a unique identifier.\n *\n * @template TKey Text used as the brand key.\n * @template TValue Optional value associated with the brand key. Defaults to `true`.\n */\nexport type Brand<TKey extends string | number | symbol, TValue = true> = {\n  [$]: {\n    [K in TKey]: TValue;\n  };\n};\n\n/**\n * Base type for storage contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type StorageHash = StorageHashBase<'sha256:abc123...'>`\n */\nexport type StorageHashBase<THash extends string> = THash & Brand<'StorageHash'>;\n\n/**\n * Base type for execution contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type ExecutionHash = ExecutionHashBase<'sha256:def456...'>`\n */\nexport type ExecutionHashBase<THash extends string> = THash & Brand<'ExecutionHash'>;\n\nexport function executionHash<const T extends string>(value: T): ExecutionHashBase<T> {\n  return value as ExecutionHashBase<T>;\n}\n\nexport function coreHash<const T extends string>(value: T): StorageHashBase<T> {\n  return value as StorageHashBase<T>;\n}\n\n/**\n * Base type for profile contract hashes.\n * Emitted contract.d.ts files use this with the hash value as a type parameter:\n * `type ProfileHash = ProfileHashBase<'sha256:def456...'>`\n */\nexport type ProfileHashBase<THash extends string> = THash & Brand<'ProfileHash'>;\n\nexport function profileHash<const T extends string>(value: T): ProfileHashBase<T> {\n  return value as ProfileHashBase<T>;\n}\n\n/**\n * One entity-kind slot in a namespace — a map of entity name to entry.\n * Values are opaque at the foundation layer; family and target concretions\n * refine them to typed IR classes.\n */\nexport type StorageEntitySlot = Readonly<Record<string, unknown>>;\n\n/**\n * Plain-data namespace entry in a storage block. Every hydrated contract\n * carries at least `id` plus entity-kind slot maps under `entries`\n * (`table`, `collection`, …). Foundation declares only this shape — no IR\n * machinery.\n */\nexport interface StorageNamespace {\n  readonly id: string;\n  readonly entries: Readonly<Record<string, StorageEntitySlot>>;\n}\n\n/**\n * Base type for family-specific storage blocks.\n * Family storage types (SqlStorage, MongoStorage, etc.) extend this to carry the\n * storage hash alongside family-specific data (tables, collections, etc.).\n *\n * The `namespaces` map is carried by every hydrated storage block. Serialized\n * envelope shape is target-owned; this types the in-memory contract after\n * `deserializeContract`.\n */\nexport interface StorageBase<THash extends string = string> {\n  readonly storageHash: StorageHashBase<THash>;\n  readonly namespaces: Readonly<Record<string, StorageNamespace>>;\n}\n\nexport interface FieldType {\n  readonly type: string;\n  readonly nullable: boolean;\n  readonly items?: FieldType;\n  readonly properties?: Record<string, FieldType>;\n}\n\nexport type GeneratedValueSpec = {\n  readonly id: string;\n  readonly params?: Record<string, unknown>;\n};\n\nexport type JsonPrimitive = string | number | boolean | null;\n\nexport type JsonValue =\n  | JsonPrimitive\n  | { readonly [key: string]: JsonValue }\n  | readonly JsonValue[];\n\nexport type ColumnDefaultLiteralValue = JsonValue;\n\nexport type ColumnDefaultLiteralInputValue = ColumnDefaultLiteralValue | Date;\n\n/**\n * Runtime predicate for `ColumnDefaultLiteralInputValue`. Authoring layers\n * resolve template values from caller-supplied args (typed `unknown` at the\n * boundary) and need to validate before constructing a `ColumnDefault`.\n * Accepts JSON primitives, plain arrays/objects of JSON values, and `Date`\n * instances. Rejects functions, class instances (other than `Date`),\n * `undefined`, `bigint`, `symbol`, and arrays/objects containing those.\n */\nexport function isColumnDefaultLiteralInputValue(\n  value: unknown,\n): value is ColumnDefaultLiteralInputValue {\n  if (value === null) return true;\n  const t = typeof value;\n  if (t === 'string' || t === 'number' || t === 'boolean') return true;\n  if (value instanceof Date) return true;\n  if (Array.isArray(value)) return value.every(isColumnDefaultLiteralInputValue);\n  if (t === 'object' && Object.getPrototypeOf(value) === Object.prototype) {\n    return Object.values(value as Record<string, unknown>).every(isColumnDefaultLiteralInputValue);\n  }\n  return false;\n}\n\nexport type ColumnDefault =\n  | {\n      readonly kind: 'literal';\n      readonly value: ColumnDefaultLiteralInputValue;\n    }\n  | { readonly kind: 'function'; readonly expression: string };\n\nexport function isColumnDefault(value: unknown): value is ColumnDefault {\n  if (typeof value !== 'object' || value === null) return false;\n  const kind = (value as { kind?: unknown }).kind;\n  if (kind === 'literal') {\n    return 'value' in value;\n  }\n  if (kind === 'function') {\n    return typeof (value as { expression?: unknown }).expression === 'string';\n  }\n  return false;\n}\n\nexport type ExecutionMutationDefaultValue = {\n  readonly kind: 'generator';\n  readonly id: GeneratedValueSpec['id'];\n  readonly params?: Record<string, unknown>;\n};\n\nexport function isExecutionMutationDefaultValue(\n  value: unknown,\n): value is ExecutionMutationDefaultValue {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as {\n    kind?: unknown;\n    id?: unknown;\n    params?: unknown;\n  };\n  if (candidate.kind !== 'generator') return false;\n  if (typeof candidate.id !== 'string') return false;\n  if (\n    candidate.params !== undefined &&\n    (typeof candidate.params !== 'object' ||\n      candidate.params === null ||\n      Array.isArray(candidate.params))\n  ) {\n    return false;\n  }\n  return true;\n}\n\nexport type ExecutionMutationDefault = {\n  readonly ref: { readonly table: string; readonly column: string };\n  readonly onCreate?: ExecutionMutationDefaultValue;\n  readonly onUpdate?: ExecutionMutationDefaultValue;\n};\n\n/**\n * `ExecutionMutationDefault` minus its `ref` — the per-field phases value\n * authoring layers attach to a column before the column ref is known.\n */\nexport type ExecutionMutationDefaultPhases = Omit<ExecutionMutationDefault, 'ref'>;\n\nexport type ExecutionSection<THash extends string = string> = {\n  readonly executionHash: ExecutionHashBase<THash>;\n  readonly mutations: {\n    readonly defaults: ReadonlyArray<ExecutionMutationDefault>;\n  };\n};\n\nexport interface Source {\n  readonly readOnly: boolean;\n  readonly projection: Record<string, FieldType>;\n  readonly origin?: Record<string, unknown>;\n  readonly capabilities?: Record<string, boolean>;\n}\n\n// Document family types\nexport interface DocIndex {\n  readonly name: string;\n  readonly keys: Record<string, 'asc' | 'desc'>;\n  readonly unique?: boolean;\n  readonly where?: Expr;\n}\n\nexport type Expr =\n  | { readonly kind: 'eq'; readonly path: ReadonlyArray<string>; readonly value: unknown }\n  | { readonly kind: 'exists'; readonly path: ReadonlyArray<string> };\n\nexport interface DocCollection {\n  readonly name: string;\n  readonly id?: {\n    readonly strategy: 'auto' | 'client' | 'uuid' | 'objectId';\n  };\n  readonly fields: Record<string, FieldType>;\n  readonly indexes?: ReadonlyArray<DocIndex>;\n  readonly readOnly?: boolean;\n}\n\nexport interface PlanMeta {\n  readonly target: string;\n  readonly targetFamily?: string;\n  readonly storageHash: string;\n  readonly profileHash?: string;\n  readonly lane: string;\n  readonly annotations?: {\n    readonly [key: string]: unknown;\n  };\n}\n\n/**\n * Contract marker record stored in the database.\n * Represents the current contract identity for a database.\n */\nexport interface ContractMarkerRecord {\n  readonly storageHash: string;\n  readonly profileHash: string;\n  readonly contractJson: unknown | null;\n  readonly canonicalVersion: number | null;\n  readonly updatedAt: Date;\n  readonly appTag: string | null;\n  readonly meta: Record<string, unknown>;\n  readonly invariants: readonly string[];\n}\n\n/**\n * One applied migration edge from the per-space ledger journal.\n * Returned by `readLedger` in append (apply) order.\n */\nexport interface LedgerEntryRecord {\n  readonly space: string;\n  readonly migrationName: string;\n  readonly migrationHash: string;\n  readonly from: string | null;\n  readonly to: string;\n  readonly appliedAt: Date;\n  readonly operationCount: number;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,SAAgB,uBACd,aACA,sBACe;CACf,OAAO,eAAe,wBAAwB;AAChD;;;ACfA,MAAa,uBAAuC,0BAIlC,qBAAK;CACnB,KAAK;CACL,WAAW;CACX,OAAO;AACT,CAAC,CACH;AAEA,MAAM,8BAA8B;AAEpC,SAAgB,SACd,OACA,YAAoB,6BACJ;CAChB,OAAO;EAAE,WAAW,cAAc,SAAS;EAAG;CAAM;AACtD;;;;;;;;ACjBA,SAAgB,+BACd,QACS;CACT,MAAM,cAAc,sBAAsB,MAAM;CAChD,MAAM,kBAAkB,OAAO,WAAW;CAC1C,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,+BACR,qBAAqB,YAAY,iCACnC;CAEF,OAAO,gBAAgB;AACzB;;;;;AAMA,SAAgB,qCAEd,QAAqF;CACrF,OAAO,OAAO,WAAW,sBAAsB,MAAM,IAAI;AAC3D;;;ACAA,SAAgB,cAAsC,OAAgC;CACpF,OAAO;AACT;AAEA,SAAgB,SAAiC,OAA8B;CAC7E,OAAO;AACT;AASA,SAAgB,YAAoC,OAA8B;CAChF,OAAO;AACT;;;;;;;;;AAiEA,SAAgB,iCACd,OACyC;CACzC,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,IAAI,OAAO;CACjB,IAAI,MAAM,YAAY,MAAM,YAAY,MAAM,WAAW,OAAO;CAChE,IAAI,iBAAiB,MAAM,OAAO;CAClC,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,MAAM,gCAAgC;CAC7E,IAAI,MAAM,YAAY,OAAO,eAAe,KAAK,MAAM,OAAO,WAC5D,OAAO,OAAO,OAAO,KAAgC,EAAE,MAAM,gCAAgC;CAE/F,OAAO;AACT;AASA,SAAgB,gBAAgB,OAAwC;CACtE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,OAAQ,MAA6B;CAC3C,IAAI,SAAS,WACX,OAAO,WAAW;CAEpB,IAAI,SAAS,YACX,OAAO,OAAQ,MAAmC,eAAe;CAEnE,OAAO;AACT;AAQA,SAAgB,gCACd,OACwC;CACxC,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAKlB,IAAI,UAAU,SAAS,aAAa,OAAO;CAC3C,IAAI,OAAO,UAAU,OAAO,UAAU,OAAO;CAC7C,IACE,UAAU,WAAW,KAAA,MACpB,OAAO,UAAU,WAAW,YAC3B,UAAU,WAAW,QACrB,MAAM,QAAQ,UAAU,MAAM,IAEhC,OAAO;CAET,OAAO;AACT"}

package/dist/validate-domain.d.mts

@@ -1,4 +1,4 @@
-import { T as CrossReference, r as ContractWithDomain } from "./domain-envelope-Cv5OTm8D.mjs";
+import { r as ContractWithDomain, x as CrossReference } from "./domain-envelope-BFYbgufo.mjs";
 
 //#region src/validate-domain.d.ts
 interface DomainModelShape {

package/dist/validate-domain.mjs

@@ -1,5 +1,5 @@
 import { t as ContractValidationError } from "./contract-validation-error-ClZaKqMW.mjs";
-import { t as asNamespaceId } from "./namespace-id-CVpkSFUK.mjs";
+import { t as asNamespaceId } from "./namespace-id-BSCer2Vd.mjs";
 //#region src/validate-domain.ts
 function indexDomainModels(contract) {
 	const index = /* @__PURE__ */ new Map();

package/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@prisma-next/contract",
-  "version": "0.12.0-dev.5",
+  "version": "0.12.0-dev.50",
   "license": "Apache-2.0",
   "type": "module",
   "sideEffects": false,
   "description": "Data contract type definitions and JSON schema for Prisma Next",
   "dependencies": {
-    "@prisma-next/utils": "0.12.0-dev.5",
+    "@prisma-next/utils": "0.12.0-dev.50",
     "@standard-schema/spec": "^1.1.0",
     "arktype": "^2.2.0"
   },
   "devDependencies": {
-    "@prisma-next/tsconfig": "0.12.0-dev.5",
-    "@prisma-next/tsdown": "0.12.0-dev.5",
+    "@prisma-next/tsconfig": "0.12.0-dev.50",
+    "@prisma-next/tsdown": "0.12.0-dev.50",
     "tsdown": "0.22.0",
     "typescript": "5.9.3",
     "vitest": "4.1.6"
@@ -31,9 +31,12 @@
     "schemas"
   ],
   "exports": {
+    "./apply-specifier-default-control-policy": "./dist/apply-specifier-default-control-policy.mjs",
     "./contract-validation-error": "./dist/contract-validation-error.mjs",
+    "./default-namespace": "./dist/default-namespace.mjs",
     "./hashing": "./dist/hashing.mjs",
     "./hashing-utils": "./dist/hashing-utils.mjs",
+    "./resolve-domain-model": "./dist/resolve-domain-model.mjs",
     "./types": "./dist/types.mjs",
     "./validate-domain": "./dist/validate-domain.mjs",
     "./package.json": "./package.json"

package/src/apply-specifier-default-control-policy.ts

@@ -0,0 +1,12 @@
+import type { Contract } from './contract-types';
+import type { ControlPolicy } from './control-policy';
+
+export function applySpecifierDefaultControlPolicy(
+  contract: Contract,
+  specifierDefault: ControlPolicy | undefined,
+): Contract {
+  if (specifierDefault === undefined || contract.defaultControlPolicy !== undefined) {
+    return contract;
+  }
+  return { ...contract, defaultControlPolicy: specifierDefault };
+}

package/src/canonicalization-storage-sort.ts

@@ -11,10 +11,17 @@ function isPlainRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+// Order by UTF-16 code unit, not locale collation: canonicalization feeds
+// storageHash, which must be byte-identical across hosts, and locale
+// collation (localeCompare/Intl) varies by the engine's ICU build.
+function compareCodeUnits(a: string, b: string): number {
+  return a < b ? -1 : a > b ? 1 : 0;
+}
+
 export function compareByNameProperty(a: unknown, b: unknown): number {
   const nameA = isPlainRecord(a) && typeof a['name'] === 'string' ? a['name'] : '';
   const nameB = isPlainRecord(b) && typeof b['name'] === 'string' ? b['name'] : '';
-  return nameA.localeCompare(nameB);
+  return compareCodeUnits(nameA, nameB);
 }
 
 function sortArrayKeysOnRecord(

package/src/canonicalization.ts

@@ -56,6 +56,12 @@ const DOMAIN_MODEL_STORAGE_PATTERN = [
   '*',
   'storage',
 ] as const satisfies PathPattern;
+const STORAGE_NAMESPACE_ENTRIES_PATTERN = [
+  'storage',
+  'namespaces',
+  '*',
+  'entries',
+] as const satisfies PathPattern;
 
 const TOP_LEVEL_ORDER = [
   'schemaVersion',
@@ -69,6 +75,7 @@ const TOP_LEVEL_ORDER = [
   'execution',
   'capabilities',
   'extensionPacks',
+  'defaultControlPolicy',
   'meta',
 ] as const;
 
@@ -121,9 +128,10 @@ function omitDefaults(
         DOMAIN_MODELS_CONTAINER_PATTERN,
       );
       const isRequiredStorageNamespaces = isArrayEqual(currentPath, ['storage', 'namespaces']);
-      const isStorageNamespaceSlot =
-        currentPath.length === 3 &&
-        isArrayEqual([currentPath[0], currentPath[1]], ['storage', 'namespaces']);
+      const isStorageNamespaceEntries = matchesPathPattern(
+        currentPath,
+        STORAGE_NAMESPACE_ENTRIES_PATTERN,
+      );
       const isRequiredRoots = isArrayEqual(currentPath, ['roots']);
       const isRequiredExtensionPacks = isArrayEqual(currentPath, ['extensionPacks']);
       const isRequiredCapabilities = isArrayEqual(currentPath, ['capabilities']);
@@ -146,7 +154,7 @@ function omitDefaults(
         !isDomainNamespaceSlot &&
         !isRequiredDomainModels &&
         !isRequiredStorageNamespaces &&
-        !isStorageNamespaceSlot &&
+        !isStorageNamespaceEntries &&
         !isRequiredRoots &&
         !isRequiredExtensionPacks &&
         !isRequiredCapabilities &&
@@ -255,6 +263,7 @@ export function canonicalizeContractToObject(
     ...ifDefined('execution', serialized['execution']),
     extensionPacks: serialized['extensionPacks'],
     capabilities: serialized['capabilities'],
+    ...ifDefined('defaultControlPolicy', serialized['defaultControlPolicy']),
     meta: serialized['meta'],
   };
   const withDefaultsOmitted = omitDefaults(normalized, [], options.shouldPreserveEmpty) as Record<

package/src/contract-types.ts

@@ -58,13 +58,15 @@ export interface Contract<
   readonly execution?: ContractExecutionSection;
   readonly profileHash: ProfileHashBase<string>;
   readonly meta: Record<string, unknown>;
-  readonly defaultControl?: ControlPolicy;
+  readonly defaultControlPolicy?: ControlPolicy;
 }
 
-export type ContractModelsMap<TContract extends Contract> =
+/** Model definitions union carried on a {@link Contract}'s `TModels` type parameter. */
+export type ContractModelDefinitions<TContract extends Contract> =
   TContract extends Contract<StorageBase, infer TModels> ? TModels : never;
 
-type ExactlyOneKey<T extends Record<string, unknown>> = keyof T extends infer Only extends keyof T
+type ExactlyOneNamespace<T extends Record<string, unknown>> = keyof T extends infer Only extends
+  keyof T
   ? [keyof T] extends [Only]
     ? Only
     : never
@@ -78,10 +80,10 @@ type NamespaceValueObjectsOf<TNamespace> = TNamespace extends {
     : Record<never, never>
   : Record<never, never>;
 
-/** Value-object map for the contract's sole domain namespace (type-level single-namespace projection). */
-export type ContractValueObjectsMap<TContract extends Contract> =
+/** Value-object map when the contract declares exactly one domain namespace. */
+export type ContractValueObjectDefinitions<TContract extends Contract> =
   NamespaceValueObjectsOf<
-    TContract['domain']['namespaces'][ExactlyOneKey<TContract['domain']['namespaces']>]
+    TContract['domain']['namespaces'][ExactlyOneNamespace<TContract['domain']['namespaces']>]
   > extends infer Projected
     ? Projected extends Record<string, ContractValueObject>
       ? Projected

package/src/control-policy.ts

@@ -17,9 +17,9 @@ export type ControlPolicy = 'managed' | 'tolerated' | 'external' | 'observed';
  * Both parameters are optional raw values so this function stays node-type-agnostic
  * and can be called by any consumer (verifier, planner, etc.) without importing IR classes.
  */
-export function effectiveControl(
+export function effectiveControlPolicy(
   nodeControl: ControlPolicy | undefined,
-  defaultControl: ControlPolicy | undefined,
+  defaultControlPolicy: ControlPolicy | undefined,
 ): ControlPolicy {
-  return nodeControl ?? defaultControl ?? 'managed';
+  return nodeControl ?? defaultControlPolicy ?? 'managed';
 }

package/src/default-namespace.ts

@@ -0,0 +1,36 @@
+import { DomainNamespaceResolutionError } from './contract-validation-error';
+
+/**
+ * Reserved sentinel domain namespace id for the late-bound application-domain
+ * slot — the namespace a model lands in when it is authored without an explicit
+ * namespace. This is target-agnostic: targets that allow un-namespaced
+ * authoring (e.g. Mongo, SQLite) declare this id as their default on the target
+ * descriptor; the framework names the sentinel, never a target. Mirrors
+ * storage's `UNBOUND_NAMESPACE_ID` on the domain plane.
+ */
+export const UNBOUND_DOMAIN_NAMESPACE_ID = '__unbound__' as const;
+
+/**
+ * Resolve the single domain namespace of a single-namespace contract.
+ *
+ * Bare-name access (`db.User`) reads "the contract's one namespace". Every
+ * contract in scope today declares exactly one domain namespace, so this is
+ * exact — there is nothing to infer. A contract that declares more than one
+ * namespace is ambiguous for a bare name, so rather than silently pick one this
+ * throws; cross-namespace selection is made explicit (TML-2550).
+ */
+export function soleDomainNamespaceId(domain: {
+  readonly namespaces: Readonly<Record<string, unknown>>;
+}): string {
+  const [soleNamespaceId, ...rest] = Object.keys(domain.namespaces);
+  if (soleNamespaceId === undefined) {
+    throw new DomainNamespaceResolutionError('domain has no namespaces');
+  }
+  if (rest.length > 0) {
+    const all = [soleNamespaceId, ...rest];
+    throw new DomainNamespaceResolutionError(
+      `bare-name resolution requires exactly one domain namespace, found ${all.length} (${all.join(', ')}); select a namespace explicitly`,
+    );
+  }
+  return soleNamespaceId;
+}

package/src/domain-envelope.ts

@@ -1,7 +1,6 @@
-import { DomainNamespaceResolutionError } from './contract-validation-error';
 import type { ContractModelBase, ContractValueObject } from './domain-types';
 
-export const UNBOUND_DOMAIN_NAMESPACE_ID = '__unbound__' as const;
+export { UNBOUND_DOMAIN_NAMESPACE_ID } from './default-namespace';
 
 /**
  * One namespace's application-domain entities — models and optional value
@@ -27,61 +26,3 @@ export interface ApplicationDomain<
 export type ContractWithDomain = {
   readonly domain: ApplicationDomain;
 };
-
-export function resolveSingleDomainNamespaceId(
-  domain: ApplicationDomain,
-  namespaceId?: string,
-): string {
-  if (namespaceId !== undefined) {
-    if (!Object.hasOwn(domain.namespaces, namespaceId)) {
-      throw new DomainNamespaceResolutionError(
-        `domain namespace "${namespaceId}" is not present on the contract`,
-      );
-    }
-    return namespaceId;
-  }
-
-  const namespaceIds = Object.keys(domain.namespaces);
-  if (namespaceIds.length === 0) {
-    throw new DomainNamespaceResolutionError('domain has no namespaces');
-  }
-  if (namespaceIds.length > 1) {
-    throw new DomainNamespaceResolutionError(
-      `expected exactly one domain namespace, found ${namespaceIds.length} (${namespaceIds.join(', ')})`,
-    );
-  }
-  const [soleNamespaceId] = namespaceIds;
-  if (soleNamespaceId === undefined) {
-    throw new DomainNamespaceResolutionError('domain has no namespaces');
-  }
-  return soleNamespaceId;
-}
-
-// Transitional single-namespace projection; pending runtime-qualification slice.
-export function contractModels<TModels extends Record<string, ContractModelBase>>(
-  contract: { readonly domain: ApplicationDomain<TModels> },
-  namespaceId?: string,
-): TModels {
-  const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);
-  const domainNamespace = contract.domain.namespaces[resolved];
-  if (domainNamespace === undefined) {
-    throw new DomainNamespaceResolutionError(
-      `domain namespace "${resolved}" is not present on the contract`,
-    );
-  }
-  return domainNamespace.models;
-}
-
-export function contractValueObjects<TModels extends Record<string, ContractModelBase>>(
-  contract: { readonly domain: ApplicationDomain<TModels> },
-  namespaceId?: string,
-): Record<string, ContractValueObject> | undefined {
-  const resolved = resolveSingleDomainNamespaceId(contract.domain, namespaceId);
-  const domainNamespace = contract.domain.namespaces[resolved];
-  if (domainNamespace === undefined) {
-    throw new DomainNamespaceResolutionError(
-      `domain namespace "${resolved}" is not present on the contract`,
-    );
-  }
-  return domainNamespace.valueObjects;
-}

package/src/domain-namespace-access.ts

@@ -0,0 +1,32 @@
+import { DomainNamespaceResolutionError } from './contract-validation-error';
+import { soleDomainNamespaceId } from './default-namespace';
+import type { ApplicationDomain } from './domain-envelope';
+import type { ContractModelBase, ContractValueObject } from './domain-types';
+
+/**
+ * Models map for the contract's single domain namespace. Throws when the
+ * contract does not declare exactly one namespace — bare-name access is
+ * ambiguous across namespaces and must be qualified explicitly (TML-2550).
+ */
+export function domainModelsAtDefaultNamespace<TModels extends Record<string, ContractModelBase>>(
+  domain: ApplicationDomain<TModels>,
+): TModels {
+  const namespaceId = soleDomainNamespaceId(domain);
+  const domainNamespace = domain.namespaces[namespaceId];
+  if (domainNamespace === undefined) {
+    throw new DomainNamespaceResolutionError(
+      `domain namespace "${namespaceId}" is not present on the contract`,
+    );
+  }
+  return domainNamespace.models;
+}
+
+/**
+ * Value objects for the contract's single domain namespace, when present.
+ * Throws when the contract does not declare exactly one namespace.
+ */
+export function domainValueObjectsAtDefaultNamespace<
+  TModels extends Record<string, ContractModelBase>,
+>(domain: ApplicationDomain<TModels>): Record<string, ContractValueObject> | undefined {
+  return domain.namespaces[soleDomainNamespaceId(domain)]?.valueObjects;
+}

package/src/exports/apply-specifier-default-control-policy.ts

@@ -0,0 +1 @@
+export { applySpecifierDefaultControlPolicy } from '../apply-specifier-default-control-policy';

package/src/exports/default-namespace.ts

@@ -0,0 +1 @@
+export { soleDomainNamespaceId, UNBOUND_DOMAIN_NAMESPACE_ID } from '../default-namespace';

package/src/exports/resolve-domain-model.ts

@@ -0,0 +1 @@
+export { type ResolvedDomainModel, resolveDomainModel } from '../resolve-domain-model';