@prisma-next/migration-tools 0.5.0-dev.1 → 0.5.0-dev.10

package/src/attestation.ts

@@ -1,81 +0,0 @@
-import { createHash } from 'node:crypto';
-import { canonicalizeJson } from './canonicalize-json';
-import { readMigrationPackage } from './io';
-import type { MigrationBundle, MigrationManifest, MigrationOps } from './types';
-
-export interface VerifyResult {
-  readonly ok: boolean;
-  readonly reason?: 'mismatch';
-  readonly storedMigrationId?: string;
-  readonly computedMigrationId?: string;
-}
-
-function sha256Hex(input: string): string {
-  return createHash('sha256').update(input).digest('hex');
-}
-
-/**
- * Content-addressed migration identity over (manifest envelope sans
- * contracts/hints, ops). See ADR 199 "Storage-only migration identity"
- * for the rationale: contracts are anchored separately by the
- * storage-hash bookends inside the envelope; planner hints are advisory
- * and must not affect identity.
- *
- * The `migrationId` field on the manifest is stripped before hashing so
- * the function can be used both at write time (when no id exists yet)
- * and at verify time (rehashing an already-attested manifest).
- */
-export function computeMigrationId(
-  manifest: Omit<MigrationManifest, 'migrationId'> & { readonly migrationId?: string },
-  ops: MigrationOps,
-): string {
-  const {
-    migrationId: _migrationId,
-    signature: _signature,
-    fromContract: _fromContract,
-    toContract: _toContract,
-    hints: _hints,
-    ...strippedMeta
-  } = manifest;
-
-  const canonicalManifest = canonicalizeJson(strippedMeta);
-  const canonicalOps = canonicalizeJson(ops);
-
-  const partHashes = [canonicalManifest, canonicalOps].map(sha256Hex);
-  const hash = sha256Hex(canonicalizeJson(partHashes));
-
-  return `sha256:${hash}`;
-}
-
-/**
- * Re-hash an on-disk migration bundle and compare against the stored
- * `migrationId`. Returns `{ ok: true }` when the package is internally
- * consistent (manifest + ops still produce the recorded id), or
- * `{ ok: false, reason: 'mismatch', stored, computed }` when they do
- * not — typically a sign of FS corruption, partial writes, or a
- * post-emit hand edit.
- */
-export function verifyMigrationBundle(bundle: MigrationBundle): VerifyResult {
-  const computed = computeMigrationId(bundle.manifest, bundle.ops);
-
-  if (bundle.manifest.migrationId === computed) {
-    return {
-      ok: true,
-      storedMigrationId: bundle.manifest.migrationId,
-      computedMigrationId: computed,
-    };
-  }
-
-  return {
-    ok: false,
-    reason: 'mismatch',
-    storedMigrationId: bundle.manifest.migrationId,
-    computedMigrationId: computed,
-  };
-}
-
-/** Convenience wrapper: read the package from disk then verify it. */
-export async function verifyMigration(dir: string): Promise<VerifyResult> {
-  const pkg = await readMigrationPackage(dir);
-  return verifyMigrationBundle(pkg);
-}

package/src/exports/attestation.ts

@@ -1,2 +0,0 @@
-export type { VerifyResult } from '../attestation';
-export { computeMigrationId, verifyMigration, verifyMigrationBundle } from '../attestation';

package/src/exports/types.ts

@@ -1,10 +0,0 @@
-export { MigrationToolsError } from '../errors';
-export type {
-  MigrationBundle,
-  MigrationBundle as MigrationPackage,
-  MigrationChainEntry,
-  MigrationGraph,
-  MigrationHints,
-  MigrationManifest,
-  MigrationOps,
-} from '../types';

package/src/types.ts

@@ -1,66 +0,0 @@
-import type { Contract } from '@prisma-next/contract/types';
-import type { MigrationPlanOperation } from '@prisma-next/framework-components/control';
-
-export interface MigrationHints {
-  readonly used: readonly string[];
-  readonly applied: readonly string[];
-  readonly plannerVersion: string;
-}
-
-/**
- * On-disk migration manifest. Every migration is content-addressed: the
- * `migrationId` is a hash over the manifest envelope plus the operations
- * list, computed at write time. There is no draft state — a migration
- * directory either exists with a fully attested manifest or it does not.
- *
- * When the planner cannot lower an operation because of an unfilled
- * `placeholder(...)` slot, the migration is still written with
- * `migrationId` hashed over `ops: []`. Re-running self-emit after the
- * user fills the placeholder produces a *different* `migrationId`
- * (committed to the real ops); this is intentional.
- */
-export interface MigrationManifest {
-  readonly migrationId: string;
-  readonly from: string;
-  readonly to: string;
-  readonly kind: 'regular' | 'baseline';
-  readonly fromContract: Contract | null;
-  readonly toContract: Contract;
-  readonly hints: MigrationHints;
-  readonly labels: readonly string[];
-  readonly authorship?: { readonly author?: string; readonly email?: string };
-  readonly signature?: { readonly keyId: string; readonly value: string } | null;
-  readonly createdAt: string;
-}
-
-export type MigrationOps = readonly MigrationPlanOperation[];
-
-/**
- * An on-disk migration directory containing a manifest and operations.
- */
-export interface MigrationBundle {
-  readonly dirName: string;
-  readonly dirPath: string;
-  readonly manifest: MigrationManifest;
-  readonly ops: MigrationOps;
-}
-
-/**
- * An entry in the migration graph. All on-disk migrations are attested,
- * so `migrationId` is always a string.
- */
-export interface MigrationChainEntry {
-  readonly from: string;
-  readonly to: string;
-  readonly migrationId: string;
-  readonly dirName: string;
-  readonly createdAt: string;
-  readonly labels: readonly string[];
-}
-
-export interface MigrationGraph {
-  readonly nodes: ReadonlySet<string>;
-  readonly forwardChain: ReadonlyMap<string, readonly MigrationChainEntry[]>;
-  readonly reverseChain: ReadonlyMap<string, readonly MigrationChainEntry[]>;
-  readonly migrationById: ReadonlyMap<string, MigrationChainEntry>;
-}