@prisma-next/sql-runtime 0.5.0-dev.8 → 0.5.0-dev.9

package/README.md

@@ -10,7 +10,7 @@ SQL runtime implementation for Prisma Next.
 
 ## Overview
 
-The SQL runtime package implements the SQL family runtime by composing `@prisma-next/runtime-executor` with SQL-specific adapters, drivers, and codecs. It provides the public runtime API for SQL-based databases, including descriptor-based static context derivation via `SqlStaticContributions` and execution-plane composition via `ExecutionStack`.
+The SQL runtime package implements the SQL family runtime by extending the abstract `RuntimeCore` base class from `@prisma-next/framework-components/runtime` with SQL-specific adapters, drivers, codecs, marker verification, telemetry fingerprinting, and a `beforeCompile` middleware chain. It provides the public runtime API for SQL-based databases, including descriptor-based static context derivation via `SqlStaticContributions` and execution-plane composition via `ExecutionStack`.
 
 ## Purpose
 
@@ -26,13 +26,16 @@ Execute SQL query Plans with deterministic verification, guardrails, and feedbac
 - **SQL Marker Management**: Provide SQL statements for reading/writing contract markers
 - **Codec Encoding/Decoding**: Encode parameters and decode rows using SQL codec registries
 - **Codec Validation**: Validate that codec registries contain all required codecs
-- **SQL Family Adapter**: Implement `RuntimeFamilyAdapter` for SQL contracts
-- **SQL Runtime**: Compose runtime-executor with SQL-specific logic
+- **SQL Family Adapter**: Implement `RuntimeFamilyAdapter` for SQL contracts (defined in `runtime-spi.ts`)
+- **Marker Verification**: Parse contract-marker rows from the database (`marker.ts`) and gate execution on hash equality
+- **Telemetry Fingerprinting**: Compute SQL fingerprints for telemetry events (`fingerprint.ts`)
+- **Raw-SQL Guardrails**: Heuristic safety checks for raw SQL plans (`guardrails/raw.ts`)
+- **`beforeCompile` Chain**: AST-rewrite middleware chain run pre-lowering (`middleware/before-compile-chain.ts`)
+- **SQL Runtime**: `SqlRuntime` extends `RuntimeCore<SqlQueryPlan, SqlExecutionPlan, SqlMiddleware>` and overrides `lower`, `runDriver`, `runBeforeCompile`, and `close` with SQL-specific behaviour
 
 ## Dependencies
 
-- `@prisma-next/framework-components` - Runtime component descriptor types (via `./execution`)
-- `@prisma-next/runtime-executor` - Target-neutral execution engine
+- `@prisma-next/framework-components` - Runtime component descriptor types (`./execution`) and the abstract `RuntimeCore` base class plus `runWithMiddleware` helper (`./runtime`)
 - `@prisma-next/sql-contract` - SQL contract types (via `@prisma-next/sql-contract/types`)
 - `@prisma-next/operations` - Operation registry
 
@@ -44,7 +47,12 @@ import postgresDriver from '@prisma-next/driver-postgres/runtime';
 import pgvector from '@prisma-next/extension-pgvector/runtime';
 import postgresTarget from '@prisma-next/target-postgres/runtime';
 import { instantiateExecutionStack } from '@prisma-next/framework-components/execution';
-import { createExecutionContext, createRuntime, createSqlExecutionStack } from '@prisma-next/sql-runtime';
+import {
+  budgets,
+  createExecutionContext,
+  createRuntime,
+  createSqlExecutionStack,
+} from '@prisma-next/sql-runtime';
 
 const contract = validateContract<Contract>(contractJson);
 const stack = createSqlExecutionStack({
@@ -65,7 +73,7 @@ const runtime = createRuntime({
   context,
   driver,
   verify: { mode: 'onFirstUse', requireMarker: false },
-  plugins: [budgets()],
+  middleware: [budgets()],
 });
 
 for await (const row of runtime.execute(plan)) {
@@ -116,44 +124,44 @@ for await (const row of runtime.execute(plan)) {
 
 - `lowerSqlPlan` - SQL plan lowering via adapter
 
-### Plugins
+### Middleware
 
-- `budgets` - **AST-first budget plugin** (canonical in SQL domain), inspects `plan.ast` when present for row estimation
-- `lints` - **AST-first lint plugin** (canonical in SQL domain), inspects `plan.ast` when present
-- `BudgetsOptions`, `LintsOptions` - Plugin option types
-- `Plugin`, `PluginContext` - Plugin interface types (from runtime-executor)
-- `AfterExecuteResult` - Plugin hook result type
-- `Log` - Log entry type
+- `budgets` - **AST-first budget middleware** (canonical in SQL domain), inspects `plan.ast` when present for row estimation
+- `lints` - **AST-first lint middleware** (canonical in SQL domain), inspects `plan.ast` when present
+- `SqlMiddleware`, `SqlMiddlewareContext` - SQL-family middleware interface and per-execution context
+- `BudgetsOptions`, `LintsOptions` - Middleware option types
+- `AfterExecuteResult` - Middleware `afterExecute` hook result type (re-exported from `@prisma-next/framework-components/runtime`)
+- `Log` - Log entry type (re-exported from `@prisma-next/framework-components/runtime`)
 
-#### Lints plugin (SQL domain)
+#### Lints middleware (SQL domain)
 
-The `lints` plugin operates on `plan.ast` when it is a SQL `QueryAst`:
+The `lints` middleware operates on `plan.ast` when it is a SQL `QueryAst`:
 
 - **DELETE without WHERE** — blocks execution (configurable severity)
 - **UPDATE without WHERE** — blocks execution (configurable severity)
 - **Unbounded SELECT** — warns/errors when `limit` is missing
 - **SELECT \* intent** — warns/errors when `selectAllIntent` is present
 
-When `plan.ast` is missing, the plugin falls back to raw heuristic guardrails (`fallbackWhenAstMissing: 'raw'`) or skips linting (`fallbackWhenAstMissing: 'skip'`). Default is `'raw'`.
+When `plan.ast` is missing, the middleware falls back to raw heuristic guardrails (`fallbackWhenAstMissing: 'raw'`) or skips linting (`fallbackWhenAstMissing: 'skip'`). Default is `'raw'`.
 
 ```typescript
 import { createRuntime, lints } from '@prisma-next/sql-runtime';
 
 const runtime = createRuntime({
   // ...
-  plugins: [lints({ severities: { noLimit: 'error' } })],
+  middleware: [lints({ severities: { noLimit: 'error' } })],
 });
 ```
 
 ## Architecture
 
-The SQL runtime composes runtime-executor with SQL-specific implementations. Descriptors implement `SqlStaticContributions` so `ExecutionContext` can be derived from the descriptors-only stack without instantiation.
+The SQL runtime extends the abstract `RuntimeCore` base class from `@prisma-next/framework-components/runtime` with SQL-specific implementations. Descriptors implement `SqlStaticContributions` so `ExecutionContext` can be derived from the descriptors-only stack without instantiation.
 
 1. **ExecutionStack**: Descriptors-only stack (from `@prisma-next/framework-components/execution`)
 2. **SqlStaticContributions**: Codecs, operation signatures, parameterized codecs, and mutation default generators contributed by each descriptor
 3. **ExecutionContext**: Built from contract + stack descriptors (no instantiation)
 4. **ExecutionStackInstance**: Instantiated components used at runtime for execution
-5. **SqlRuntime**: Wraps `RuntimeCore` and adds SQL-specific encoding/decoding
+5. **SqlRuntime**: `class SqlRuntimeImpl extends RuntimeCore<SqlQueryPlan, SqlExecutionPlan, SqlMiddleware>` — overrides `lower` (with codec param-encoding), `runDriver`, `runBeforeCompile` (delegates to the SQL `beforeCompile` chain), and `close`. The execution path also wraps the `runWithMiddleware` helper from `framework-components/runtime` with codec row-decoding, marker verification (via the `RuntimeFamilyAdapter` defined in `runtime-spi.ts`), and telemetry fingerprinting (via `computeSqlFingerprint` from `fingerprint.ts`).
 6. **SqlMarker**: Provides SQL statements for marker management
 
 ```mermaid
@@ -164,7 +172,7 @@ flowchart LR
   Stack --> AdapterDesc[Adapter Descriptor]
   Stack --> Packs[Extension Packs]
   Context --> Runtime[SqlRuntime]
-  Runtime --> Core[RuntimeCore]
+  Runtime -.extends.-> Core[RuntimeCore]
   DriverDesc --> DriverInst[Driver Instance]
   AdapterDesc --> AdapterInst[Adapter Instance]
   Runtime --> DriverInst

package/dist/{exports-Cssiepsb.mjs → exports-BOHa3Emo.mjs}

@@ -1,11 +1,11 @@
-import { checkMiddlewareCompatibility, isRuntimeError, runtimeError } from "@prisma-next/framework-components/runtime";
+import { AsyncIterableResult, RuntimeCore, checkMiddlewareCompatibility, isRuntimeError, runWithMiddleware, runtimeError } from "@prisma-next/framework-components/runtime";
 import { createCodecRegistry, isQueryAst } from "@prisma-next/sql-relational-core/ast";
-import { AsyncIterableResult, createRuntimeCore, evaluateRawGuardrails, runtimeError as runtimeError$1 } from "@prisma-next/runtime-executor";
 import { ifDefined } from "@prisma-next/utils/defined";
 import { checkContractComponentRequirements } from "@prisma-next/framework-components/components";
 import { createExecutionStack } from "@prisma-next/framework-components/execution";
 import { createSqlOperationRegistry } from "@prisma-next/sql-operations";
 import { type } from "arktype";
+import { createHash } from "node:crypto";
 
 //#region src/codecs/validation.ts
 function extractCodecIds(contract) {
@@ -202,6 +202,95 @@ function budgets(options) {
 	}
 }
 
+//#endregion
+//#region src/guardrails/raw.ts
+const SELECT_STAR_REGEX = /select\s+\*/i;
+const LIMIT_REGEX = /\blimit\b/i;
+const MUTATION_PREFIX_REGEX = /^(insert|update|delete|create|alter|drop|truncate)\b/i;
+const READ_ONLY_INTENTS = new Set([
+	"read",
+	"report",
+	"readonly"
+]);
+function evaluateRawGuardrails(plan, config) {
+	const lints$1 = [];
+	const budgets$1 = [];
+	const normalized = normalizeWhitespace(plan.sql);
+	const statementType = classifyStatement(normalized);
+	if (statementType === "select") {
+		if (SELECT_STAR_REGEX.test(normalized)) lints$1.push(createLint("LINT.SELECT_STAR", "error", "Raw SQL plan selects all columns via *", { sql: snippet(plan.sql) }));
+		if (!LIMIT_REGEX.test(normalized)) {
+			const severity = config?.budgets?.unboundedSelectSeverity ?? "error";
+			lints$1.push(createLint("LINT.NO_LIMIT", "warn", "Raw SQL plan omits LIMIT clause", { sql: snippet(plan.sql) }));
+			budgets$1.push(createBudget("BUDGET.ROWS_EXCEEDED", severity, "Raw SQL plan is unbounded and may exceed row budget", {
+				sql: snippet(plan.sql),
+				...config?.budgets?.estimatedRows !== void 0 ? { estimatedRows: config.budgets.estimatedRows } : {}
+			}));
+		}
+	}
+	if (isMutationStatement(statementType) && isReadOnlyIntent(plan.meta)) lints$1.push(createLint("LINT.READ_ONLY_MUTATION", "error", "Raw SQL plan mutates data despite read-only intent", {
+		sql: snippet(plan.sql),
+		intent: plan.meta.annotations?.["intent"]
+	}));
+	const refs = plan.meta.refs;
+	if (refs) evaluateIndexCoverage(refs, lints$1);
+	return {
+		lints: lints$1,
+		budgets: budgets$1,
+		statement: statementType
+	};
+}
+function evaluateIndexCoverage(refs, lints$1) {
+	const predicateColumns = refs.columns ?? [];
+	if (predicateColumns.length === 0) return;
+	const indexes = refs.indexes ?? [];
+	if (indexes.length === 0) {
+		lints$1.push(createLint("LINT.UNINDEXED_PREDICATE", "warn", "Raw SQL plan predicates lack supporting indexes", { predicates: predicateColumns }));
+		return;
+	}
+	if (!predicateColumns.every((column) => indexes.some((index) => index.table === column.table && index.columns.some((col) => col.toLowerCase() === column.column.toLowerCase())))) lints$1.push(createLint("LINT.UNINDEXED_PREDICATE", "warn", "Raw SQL plan predicates lack supporting indexes", { predicates: predicateColumns }));
+}
+function classifyStatement(sql) {
+	const trimmed = sql.trim();
+	const lower = trimmed.toLowerCase();
+	if (lower.startsWith("with")) {
+		if (lower.includes("select")) return "select";
+	}
+	if (lower.startsWith("select")) return "select";
+	if (MUTATION_PREFIX_REGEX.test(trimmed)) return "mutation";
+	return "other";
+}
+function isMutationStatement(statement) {
+	return statement === "mutation";
+}
+function isReadOnlyIntent(meta) {
+	const annotations = meta.annotations;
+	const intent = typeof annotations?.intent === "string" ? annotations.intent.toLowerCase() : void 0;
+	return intent !== void 0 && READ_ONLY_INTENTS.has(intent);
+}
+function normalizeWhitespace(value) {
+	return value.replace(/\s+/g, " ").trim();
+}
+function snippet(sql) {
+	return normalizeWhitespace(sql).slice(0, 200);
+}
+function createLint(code, severity, message, details) {
+	return {
+		code,
+		severity,
+		message,
+		...details ? { details } : {}
+	};
+}
+function createBudget(code, severity, message, details) {
+	return {
+		code,
+		severity,
+		message,
+		...details ? { details } : {}
+	};
+}
+
 //#endregion
 //#region src/middleware/lints.ts
 function getFromSourceTableDetail(source) {
@@ -635,6 +724,10 @@ function resolveRowCodec(alias, plan, registry) {
 	}
 	return null;
 }
+/**
+* Builds a lookup index from column name → { table, column } ref.
+* Called once per decodeRow invocation to avoid O(aliases × refs) linear scans.
+*/
 function buildColumnRefIndex(plan) {
 	const columns = plan.meta.refs?.columns;
 	if (!columns) return null;
@@ -825,6 +918,68 @@ async function encodeParams(plan, registry) {
 	return Object.freeze(encoded);
 }
 
+//#endregion
+//#region src/fingerprint.ts
+const STRING_LITERAL_REGEX = /'(?:''|[^'])*'/g;
+const NUMERIC_LITERAL_REGEX = /\b\d+(?:\.\d+)?\b/g;
+const WHITESPACE_REGEX = /\s+/g;
+/**
+* Computes a literal-stripped, normalized fingerprint of a SQL statement.
+*
+* The function strips string and numeric literals, collapses whitespace, and
+* lowercases the result before hashing — so two structurally equivalent
+* statements (with different parameter values) produce the same fingerprint.
+* Used by SQL telemetry to group queries.
+*/
+function computeSqlFingerprint(sql) {
+	const normalized = sql.replace(STRING_LITERAL_REGEX, "?").replace(NUMERIC_LITERAL_REGEX, "?").replace(WHITESPACE_REGEX, " ").trim().toLowerCase();
+	return `sha256:${createHash("sha256").update(normalized).digest("hex")}`;
+}
+
+//#endregion
+//#region src/marker.ts
+const MetaSchema = type({ "[string]": "unknown" });
+function parseMeta(meta) {
+	if (meta === null || meta === void 0) return {};
+	let parsed;
+	if (typeof meta === "string") try {
+		parsed = JSON.parse(meta);
+	} catch {
+		return {};
+	}
+	else parsed = meta;
+	const result = MetaSchema(parsed);
+	if (result instanceof type.errors) return {};
+	return result;
+}
+const ContractMarkerRowSchema = type({
+	core_hash: "string",
+	profile_hash: "string",
+	"contract_json?": "unknown | null",
+	"canonical_version?": "number | null",
+	"updated_at?": "Date | string",
+	"app_tag?": "string | null",
+	"meta?": "unknown | null"
+});
+function parseContractMarkerRow(row) {
+	const result = ContractMarkerRowSchema(row);
+	if (result instanceof type.errors) {
+		const messages = result.map((p) => p.message).join("; ");
+		throw new Error(`Invalid contract marker row: ${messages}`);
+	}
+	const validatedRow = result;
+	const updatedAt = validatedRow.updated_at ? validatedRow.updated_at instanceof Date ? validatedRow.updated_at : new Date(validatedRow.updated_at) : /* @__PURE__ */ new Date();
+	return {
+		storageHash: validatedRow.core_hash,
+		profileHash: validatedRow.profile_hash,
+		contractJson: validatedRow.contract_json ?? null,
+		canonicalVersion: validatedRow.canonical_version ?? null,
+		updatedAt,
+		appTag: validatedRow.app_tag ?? null,
+		meta: parseMeta(validatedRow.meta)
+	};
+}
+
 //#endregion
 //#region src/middleware/before-compile-chain.ts
 async function runBeforeCompileChain(middleware, initial, ctx) {
@@ -892,103 +1047,214 @@ var SqlFamilyAdapter = class {
 
 //#endregion
 //#region src/sql-runtime.ts
-var SqlRuntimeImpl = class {
-	core;
+function isExecutionPlan(plan) {
+	return "sql" in plan;
+}
+var SqlRuntimeImpl = class extends RuntimeCore {
 	contract;
 	adapter;
+	driver;
+	familyAdapter;
 	codecRegistry;
 	jsonSchemaValidators;
+	sqlCtx;
+	verify;
 	codecRegistryValidated;
+	verified;
+	startupVerified;
+	_telemetry;
 	constructor(options) {
 		const { context, adapter, driver, verify, middleware, mode, log } = options;
+		if (middleware) for (const mw of middleware) checkMiddlewareCompatibility(mw, "sql", context.contract.target);
+		const sqlCtx = {
+			contract: context.contract,
+			mode: mode ?? "strict",
+			now: () => Date.now(),
+			log: log ?? {
+				info: () => {},
+				warn: () => {},
+				error: () => {}
+			}
+		};
+		super({
+			middleware: middleware ?? [],
+			ctx: sqlCtx
+		});
 		this.contract = context.contract;
 		this.adapter = adapter;
+		this.driver = driver;
+		this.familyAdapter = new SqlFamilyAdapter(context.contract, adapter.profile);
 		this.codecRegistry = context.codecs;
 		this.jsonSchemaValidators = context.jsonSchemaValidators;
+		this.sqlCtx = sqlCtx;
+		this.verify = verify;
 		this.codecRegistryValidated = false;
-		if (middleware) for (const mw of middleware) checkMiddlewareCompatibility(mw, "sql", context.contract.target);
-		this.core = createRuntimeCore({
-			familyAdapter: new SqlFamilyAdapter(context.contract, adapter.profile),
-			driver,
-			verify,
-			...ifDefined("middleware", middleware),
-			...ifDefined("mode", mode),
-			...ifDefined("log", log)
-		});
+		this.verified = verify.mode === "startup" ? false : verify.mode === "always";
+		this.startupVerified = false;
+		this._telemetry = null;
 		if (verify.mode === "startup") {
 			validateCodecRegistryCompleteness(this.codecRegistry, context.contract);
 			this.codecRegistryValidated = true;
 		}
 	}
-	ensureCodecRegistryValidated(contract) {
-		if (!this.codecRegistryValidated) {
-			validateCodecRegistryCompleteness(this.codecRegistry, contract);
-			this.codecRegistryValidated = true;
-		}
+	/**
+	* Lower a `SqlQueryPlan` (AST + meta) into a `SqlExecutionPlan` with
+	* encoded parameters ready for the driver. This is the single point at
+	* which params transition from app-layer values to driver wire-format.
+	*/
+	async lower(plan) {
+		const lowered = lowerSqlPlan(this.adapter, this.contract, plan);
+		return Object.freeze({
+			...lowered,
+			params: await encodeParams(lowered, this.codecRegistry)
+		});
 	}
-	async toExecutionPlan(plan) {
-		const isSqlQueryPlan = (p) => {
-			return "ast" in p && !("sql" in p);
-		};
-		if (!isSqlQueryPlan(plan)) return plan;
-		const rewrittenDraft = await runBeforeCompileChain(this.core.middleware, {
+	/**
+	* Default driver invocation. Production execution paths override the
+	* queryable target (e.g. transaction or connection) by going through
+	* `executeAgainstQueryable`; this implementation supports any caller of
+	* `super.execute(plan)` and the abstract-base contract.
+	*/
+	runDriver(exec) {
+		return this.driver.execute({
+			sql: exec.sql,
+			params: exec.params
+		});
+	}
+	/**
+	* SQL pre-compile hook. Runs the registered middleware `beforeCompile`
+	* chain over the plan's draft (AST + meta) and returns a `SqlQueryPlan`
+	* with the rewritten AST and meta when the chain mutates them. The chain
+	* re-derives `meta.paramDescriptors` from the rewritten AST so descriptors
+	* stay in lockstep with the params the adapter will emit during lowering.
+	*/
+	async runBeforeCompile(plan) {
+		const rewrittenDraft = await runBeforeCompileChain(this.middleware, {
 			ast: plan.ast,
 			meta: plan.meta
-		}, this.core.middlewareContext);
-		const planToLower = rewrittenDraft.ast === plan.ast ? plan : {
+		}, this.sqlCtx);
+		return rewrittenDraft.ast === plan.ast ? plan : {
 			...plan,
 			ast: rewrittenDraft.ast,
 			meta: rewrittenDraft.meta
 		};
-		return lowerSqlPlan(this.adapter, this.contract, planToLower);
+	}
+	execute(plan) {
+		return this.executeAgainstQueryable(plan, this.driver);
 	}
 	executeAgainstQueryable(plan, queryable) {
-		this.ensureCodecRegistryValidated(this.contract);
-		const iterator = async function* (self) {
-			const executablePlan = await self.toExecutionPlan(plan);
-			const encodedParams = await encodeParams(executablePlan, self.codecRegistry);
-			const planWithEncodedParams = {
-				...executablePlan,
-				params: encodedParams
-			};
-			const coreIterator = queryable.execute(planWithEncodedParams);
-			for await (const rawRow of coreIterator) yield await decodeRow(rawRow, executablePlan, self.codecRegistry, self.jsonSchemaValidators);
+		this.ensureCodecRegistryValidated();
+		const self = this;
+		const generator = async function* () {
+			const exec = isExecutionPlan(plan) ? Object.freeze({
+				...plan,
+				params: await encodeParams(plan, self.codecRegistry)
+			}) : await self.lower(await self.runBeforeCompile(plan));
+			self.familyAdapter.validatePlan(exec, self.contract);
+			self._telemetry = null;
+			if (!self.startupVerified && self.verify.mode === "startup") await self.verifyMarker();
+			if (!self.verified && self.verify.mode === "onFirstUse") await self.verifyMarker();
+			const startedAt = Date.now();
+			let outcome = null;
+			try {
+				if (self.verify.mode === "always") await self.verifyMarker();
+				const stream = runWithMiddleware(exec, self.middleware, self.ctx, () => queryable.execute({
+					sql: exec.sql,
+					params: exec.params
+				}));
+				for await (const rawRow of stream) yield await decodeRow(rawRow, exec, self.codecRegistry, self.jsonSchemaValidators);
+				outcome = "success";
+			} catch (error) {
+				outcome = "runtime-error";
+				throw error;
+			} finally {
+				if (outcome !== null) self.recordTelemetry(exec, outcome, Date.now() - startedAt);
+			}
 		};
-		return new AsyncIterableResult(iterator(this));
-	}
-	execute(plan) {
-		return this.executeAgainstQueryable(plan, this.core);
+		return new AsyncIterableResult(generator());
 	}
 	async connection() {
-		const coreConn = await this.core.connection();
+		const driverConn = await this.driver.acquireConnection();
 		const self = this;
 		return {
 			async transaction() {
-				const coreTx = await coreConn.transaction();
-				return {
-					commit: coreTx.commit.bind(coreTx),
-					rollback: coreTx.rollback.bind(coreTx),
-					execute(plan) {
-						return self.executeAgainstQueryable(plan, coreTx);
-					}
-				};
+				const driverTx = await driverConn.beginTransaction();
+				return self.wrapTransaction(driverTx);
+			},
+			async release() {
+				await driverConn.release();
+			},
+			async destroy(reason) {
+				await driverConn.destroy(reason);
+			},
+			execute(plan) {
+				return self.executeAgainstQueryable(plan, driverConn);
+			}
+		};
+	}
+	wrapTransaction(driverTx) {
+		const self = this;
+		return {
+			async commit() {
+				await driverTx.commit();
+			},
+			async rollback() {
+				await driverTx.rollback();
 			},
-			release: coreConn.release.bind(coreConn),
-			destroy: coreConn.destroy.bind(coreConn),
 			execute(plan) {
-				return self.executeAgainstQueryable(plan, coreConn);
+				return self.executeAgainstQueryable(plan, driverTx);
 			}
 		};
 	}
 	telemetry() {
-		return this.core.telemetry();
+		return this._telemetry;
+	}
+	async close() {
+		await this.driver.close();
 	}
-	close() {
-		return this.core.close();
+	ensureCodecRegistryValidated() {
+		if (!this.codecRegistryValidated) {
+			validateCodecRegistryCompleteness(this.codecRegistry, this.contract);
+			this.codecRegistryValidated = true;
+		}
+	}
+	async verifyMarker() {
+		if (this.verify.mode === "always") this.verified = false;
+		if (this.verified) return;
+		const readStatement = this.familyAdapter.markerReader.readMarkerStatement();
+		const result = await this.driver.query(readStatement.sql, readStatement.params);
+		if (result.rows.length === 0) {
+			if (this.verify.requireMarker) throw runtimeError("CONTRACT.MARKER_MISSING", "Contract marker not found in database");
+			this.verified = true;
+			return;
+		}
+		const marker = parseContractMarkerRow(result.rows[0]);
+		const contract = this.contract;
+		if (marker.storageHash !== contract.storage.storageHash) throw runtimeError("CONTRACT.MARKER_MISMATCH", "Database storage hash does not match contract", {
+			expected: contract.storage.storageHash,
+			actual: marker.storageHash
+		});
+		const expectedProfile = contract.profileHash ?? null;
+		if (expectedProfile !== null && marker.profileHash !== expectedProfile) throw runtimeError("CONTRACT.MARKER_MISMATCH", "Database profile hash does not match contract", {
+			expectedProfile,
+			actualProfile: marker.profileHash
+		});
+		this.verified = true;
+		this.startupVerified = true;
+	}
+	recordTelemetry(plan, outcome, durationMs) {
+		const contract = this.contract;
+		this._telemetry = Object.freeze({
+			lane: plan.meta.lane,
+			target: contract.target,
+			fingerprint: computeSqlFingerprint(plan.sql),
+			outcome,
+			...durationMs !== void 0 ? { durationMs } : {}
+		});
 	}
 };
 function transactionClosedError() {
-	return runtimeError$1("RUNTIME.TRANSACTION_CLOSED", "Cannot read from a query result after the transaction has ended. Await the result or call .toArray() inside the transaction callback.", {});
+	return runtimeError("RUNTIME.TRANSACTION_CLOSED", "Cannot read from a query result after the transaction has ended. Await the result or call .toArray() inside the transaction callback.", {});
 }
 async function withTransaction(runtime, fn) {
 	const connection = await runtime.connection();
@@ -1025,7 +1291,7 @@ async function withTransaction(runtime, fn) {
 				await transaction.rollback();
 			} catch (rollbackError) {
 				await destroyConnection(rollbackError);
-				const wrapped = runtimeError$1("RUNTIME.TRANSACTION_ROLLBACK_FAILED", "Transaction rollback failed after callback error", { rollbackError });
+				const wrapped = runtimeError("RUNTIME.TRANSACTION_ROLLBACK_FAILED", "Transaction rollback failed after callback error", { rollbackError });
 				wrapped.cause = error;
 				throw wrapped;
 			}
@@ -1041,7 +1307,7 @@ async function withTransaction(runtime, fn) {
 			} catch {
 				await destroyConnection(commitError);
 			}
-			const wrapped = runtimeError$1("RUNTIME.TRANSACTION_COMMIT_FAILED", "Transaction commit failed", { commitError });
+			const wrapped = runtimeError("RUNTIME.TRANSACTION_COMMIT_FAILED", "Transaction commit failed", { commitError });
 			wrapped.cause = commitError;
 			throw wrapped;
 		}
@@ -1065,4 +1331,4 @@ function createRuntime(options) {
 
 //#endregion
 export { readContractMarker as a, createSqlExecutionStack as c, lowerSqlPlan as d, extractCodecIds as f, ensureTableStatement as i, lints as l, validateContractCodecMappings as m, withTransaction as n, writeContractMarker as o, validateCodecRegistryCompleteness as p, ensureSchemaStatement as r, createExecutionContext as s, createRuntime as t, budgets as u };
-//# sourceMappingURL=exports-Cssiepsb.mjs.map
+//# sourceMappingURL=exports-BOHa3Emo.mjs.map