@prisma-next/target-postgres 0.11.0-dev.65 → 0.11.0-dev.67

package/dist/control.mjs

@@ -41,28 +41,9 @@ var PostgresMigrationRunner = class {
 		this.family = family;
 		this.config = config;
 	}
-	async execute(options) {
-		const driver = options.driver;
-		const destinationCheck = this.ensurePlanMatchesDestinationContract(options.plan.destination, options.destinationContract);
-		if (!destinationCheck.ok) return destinationCheck;
-		const policyCheck = this.enforcePolicyCompatibility(options.policy, options.plan.operations);
-		if (!policyCheck.ok) return policyCheck;
-		await this.beginTransaction(driver);
-		let committed = false;
-		try {
-			const result = await this.executeOnConnection(options);
-			if (!result.ok) return result;
-			await this.commitTransaction(driver);
-			committed = true;
-			return result;
-		} finally {
-			if (!committed) await this.rollbackTransaction(driver);
-		}
-	}
 	/**
 	* Body of the migration runner without transaction management. The
-	* caller (single-space `execute(...)` above, or the multi-space
-	* outer-tx orchestrator at the SQL family level) owns the
+	* caller ({@link PostgresMigrationRunner.execute}) owns the
 	* `BEGIN`/`COMMIT`/`ROLLBACK` lifecycle.
 	*/
 	async executeOnConnection(options) {
@@ -130,7 +111,7 @@ var PostgresMigrationRunner = class {
 			operationsExecuted: applyValue.operationsExecuted
 		});
 	}
-	async executeAcrossSpaces(options) {
+	async execute(options) {
 		const driver = options.driver;
 		const perSpaceOptions = options.perSpaceOptions;
 		if (perSpaceOptions.length === 0) return ok({ perSpaceResults: [] });

package/dist/control.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"control.mjs","names":[],"sources":["../src/core/migrations/runner.ts","../src/core/postgres-schema-verifier.ts","../src/exports/control.ts"],"sourcesContent":["import type { ContractMarkerRecord } from '@prisma-next/contract/types';\nimport type {\n  MigrationOperationPolicy,\n  MultiSpaceRunnerResult,\n  SqlControlFamilyInstance,\n  SqlMigrationPlanContractInfo,\n  SqlMigrationPlanOperation,\n  SqlMigrationPlanOperationStep,\n  SqlMigrationRunner,\n  SqlMigrationRunnerExecuteOptions,\n  SqlMigrationRunnerFailure,\n  SqlMigrationRunnerResult,\n  SqlMigrationRunnerSuccessValue,\n} from '@prisma-next/family-sql/control';\nimport { runnerFailure, runnerSuccess } from '@prisma-next/family-sql/control';\nimport { verifySqlSchema } from '@prisma-next/family-sql/schema-verify';\nimport type { ControlDriverInstance } from '@prisma-next/framework-components/control';\nimport { APP_SPACE_ID } from '@prisma-next/framework-components/control';\nimport { SqlQueryError } from '@prisma-next/sql-errors';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport type { Result } from '@prisma-next/utils/result';\nimport { notOk, ok, okVoid } from '@prisma-next/utils/result';\nimport { parsePostgresDefault } from '../default-normalizer';\nimport { normalizeSchemaNativeType } from '../native-type-normalizer';\nimport { createResolveExistingEnumValues } from './enum-planning';\nimport type { PostgresPlanTargetDetails } from './planner-target-details';\nimport {\n  buildLedgerInsertStatement,\n  buildMergeMarkerStatements,\n  ensureLedgerTableStatement,\n  ensureMarkerTableStatement,\n  ensurePrismaContractSchemaStatement,\n  type SqlStatement,\n} from './statement-builders';\n\ninterface RunnerConfig {\n  readonly defaultSchema: string;\n}\n\ninterface ApplyPlanSuccessValue {\n  readonly operationsExecuted: number;\n  readonly executedOperations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[];\n}\n\nconst DEFAULT_CONFIG: RunnerConfig = {\n  defaultSchema: 'public',\n};\n\nconst LOCK_DOMAIN = 'prisma_next.contract.marker';\n\n/**\n * Deep clones and freezes a record object to prevent mutation.\n * Recursively clones nested objects and arrays to ensure complete isolation.\n */\nfunction cloneAndFreezeRecord<T extends Record<string, unknown>>(value: T): T {\n  const cloned: Record<string, unknown> = {};\n  for (const [key, val] of Object.entries(value)) {\n    if (val === null || val === undefined) {\n      cloned[key] = val;\n    } else if (Array.isArray(val)) {\n      // Clone array (shallow clone of array elements)\n      cloned[key] = Object.freeze([...val]);\n    } else if (typeof val === 'object') {\n      // Recursively clone nested objects\n      cloned[key] = cloneAndFreezeRecord(val as Record<string, unknown>);\n    } else {\n      // Primitives are copied as-is\n      cloned[key] = val;\n    }\n  }\n  return Object.freeze(cloned) as T;\n}\n\nexport function createPostgresMigrationRunner(\n  family: SqlControlFamilyInstance,\n  config: Partial<RunnerConfig> = {},\n): SqlMigrationRunner<PostgresPlanTargetDetails> {\n  return new PostgresMigrationRunner(family, { ...DEFAULT_CONFIG, ...config });\n}\n\nclass PostgresMigrationRunner implements SqlMigrationRunner<PostgresPlanTargetDetails> {\n  constructor(\n    private readonly family: SqlControlFamilyInstance,\n    private readonly config: RunnerConfig,\n  ) {}\n\n  async execute(\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n  ): Promise<SqlMigrationRunnerResult> {\n    const driver = options.driver;\n\n    // Static checks fail fast before any transaction work — no point\n    // burning a BEGIN/ROLLBACK round-trip on a destination-contract\n    // mismatch the caller can fix locally.\n    const destinationCheck = this.ensurePlanMatchesDestinationContract(\n      options.plan.destination,\n      options.destinationContract,\n    );\n    if (!destinationCheck.ok) return destinationCheck;\n\n    const policyCheck = this.enforcePolicyCompatibility(options.policy, options.plan.operations);\n    if (!policyCheck.ok) return policyCheck;\n\n    await this.beginTransaction(driver);\n    let committed = false;\n    try {\n      const result = await this.executeOnConnection(options);\n      if (!result.ok) {\n        return result;\n      }\n      await this.commitTransaction(driver);\n      committed = true;\n      return result;\n    } finally {\n      if (!committed) {\n        await this.rollbackTransaction(driver);\n      }\n    }\n  }\n\n  /**\n   * Body of the migration runner without transaction management. The\n   * caller (single-space `execute(...)` above, or the multi-space\n   * outer-tx orchestrator at the SQL family level) owns the\n   * `BEGIN`/`COMMIT`/`ROLLBACK` lifecycle.\n   */\n  async executeOnConnection(\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n  ): Promise<SqlMigrationRunnerResult> {\n    const schema = options.schemaName ?? this.config.defaultSchema;\n    const driver = options.driver;\n    if (options.space !== undefined && options.space !== options.plan.spaceId) {\n      throw new Error(\n        `SqlMigrationRunner: options.space (${options.space}) does not match plan.spaceId (${options.plan.spaceId})`,\n      );\n    }\n    const space = options.plan.spaceId;\n    const lockKey = `${LOCK_DOMAIN}:${schema}:${space}`;\n\n    // Static checks (idempotent — safe to run again when the caller is\n    // `execute(...)` because the cost is a single object comparison).\n    const destinationCheck = this.ensurePlanMatchesDestinationContract(\n      options.plan.destination,\n      options.destinationContract,\n    );\n    if (!destinationCheck.ok) return destinationCheck;\n\n    const policyCheck = this.enforcePolicyCompatibility(options.policy, options.plan.operations);\n    if (!policyCheck.ok) return policyCheck;\n\n    await this.acquireLock(driver, lockKey);\n    const ensureResult = await this.ensureControlTables(driver);\n    if (!ensureResult.ok) return ensureResult;\n    const existingMarker = await this.family.readMarker({ driver, space });\n\n    const markerCheck = this.ensureMarkerCompatibility(existingMarker, options.plan);\n    if (!markerCheck.ok) return markerCheck;\n\n    const markerAtDestination = this.markerMatchesDestination(existingMarker, options.plan);\n    const isSelfEdge = options.plan.origin?.storageHash === options.plan.destination.storageHash;\n    const skipOperations = markerAtDestination && options.plan.origin != null && !isSelfEdge;\n    let applyValue: ApplyPlanSuccessValue;\n\n    if (skipOperations) {\n      applyValue = { operationsExecuted: 0, executedOperations: [] };\n    } else {\n      const applyResult = await this.applyPlan(driver, options);\n      if (!applyResult.ok) return applyResult;\n      applyValue = applyResult.value;\n    }\n\n    // Schema verification on app-space only — extension spaces don't\n    // own user-facing tables in the live schema, and `verifySqlSchema`\n    // matches the destination contract against the database, which\n    // would flag every app-space table as \"extra\" when called against\n    // an extension contract.\n    if (space === APP_SPACE_ID) {\n      const schemaIR = await this.family.introspect({\n        driver,\n        contract: options.destinationContract,\n      });\n      const schemaVerifyResult = verifySqlSchema({\n        contract: options.destinationContract,\n        schema: schemaIR,\n        strict: options.strictVerification ?? true,\n        context: options.context ?? {},\n        typeMetadataRegistry: this.family.typeMetadataRegistry,\n        frameworkComponents: options.frameworkComponents,\n        normalizeDefault: parsePostgresDefault,\n        normalizeNativeType: normalizeSchemaNativeType,\n        resolveExistingEnumValues: createResolveExistingEnumValues(\n          options.destinationContract.storage,\n        ),\n      });\n      if (!schemaVerifyResult.ok) {\n        return runnerFailure('SCHEMA_VERIFY_FAILED', schemaVerifyResult.summary, {\n          why: 'The resulting database schema does not satisfy the destination contract.',\n          meta: { issues: schemaVerifyResult.schema.issues },\n        });\n      }\n    }\n\n    const incomingInvariants = options.plan.providedInvariants ?? [];\n    const existingInvariants = new Set(existingMarker?.invariants ?? []);\n    const incomingIsSubsetOfExisting = incomingInvariants.every((id) => existingInvariants.has(id));\n    const isSelfEdgeNoOp =\n      isSelfEdge && applyValue.operationsExecuted === 0 && incomingIsSubsetOfExisting;\n\n    if (!isSelfEdgeNoOp) {\n      await this.upsertMarker(driver, options, existingMarker, space);\n      await this.recordLedgerEntry(driver, options, existingMarker, applyValue.executedOperations);\n    }\n\n    return runnerSuccess({\n      operationsPlanned: options.plan.operations.length,\n      operationsExecuted: applyValue.operationsExecuted,\n    });\n  }\n\n  async executeAcrossSpaces(options: {\n    readonly driver: ControlDriverInstance<'sql', string>;\n    readonly perSpaceOptions: ReadonlyArray<\n      SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>\n    >;\n  }): Promise<MultiSpaceRunnerResult> {\n    const driver = options.driver;\n    const perSpaceOptions = options.perSpaceOptions;\n\n    if (perSpaceOptions.length === 0) {\n      return ok({ perSpaceResults: [] });\n    }\n\n    await this.beginTransaction(driver);\n    let committed = false;\n    try {\n      const perSpaceResults: Array<{\n        space: string;\n        value: SqlMigrationRunnerSuccessValue;\n      }> = [];\n      for (const spaceOptions of perSpaceOptions) {\n        const space = spaceOptions.space ?? spaceOptions.plan.spaceId;\n        const result = await this.executeOnConnection({ ...spaceOptions, driver, space });\n        if (!result.ok) {\n          return notOk({ ...result.failure, failingSpace: space });\n        }\n        perSpaceResults.push({ space, value: result.value });\n      }\n\n      await this.commitTransaction(driver);\n      committed = true;\n      return ok({ perSpaceResults });\n    } finally {\n      if (!committed) {\n        await this.rollbackTransaction(driver);\n      }\n    }\n  }\n\n  private async applyPlan(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n  ): Promise<Result<ApplyPlanSuccessValue, SqlMigrationRunnerFailure>> {\n    const checks = options.executionChecks;\n    const runPrechecks = checks?.prechecks !== false; // Default true\n    const runPostchecks = checks?.postchecks !== false; // Default true\n    const runIdempotency = checks?.idempotencyChecks !== false; // Default true\n\n    let operationsExecuted = 0;\n    const executedOperations: Array<SqlMigrationPlanOperation<PostgresPlanTargetDetails>> = [];\n    for (const operation of options.plan.operations) {\n      options.callbacks?.onOperationStart?.(operation);\n      try {\n        // Idempotency probe: only run if both postchecks and idempotency checks are enabled\n        if (runPostchecks && runIdempotency) {\n          const postcheckAlreadySatisfied = await this.expectationsAreSatisfied(\n            driver,\n            operation.postcheck,\n          );\n          if (postcheckAlreadySatisfied) {\n            executedOperations.push(this.createPostcheckPreSatisfiedSkipRecord(operation));\n            continue;\n          }\n        }\n\n        // Prechecks: only run if enabled\n        if (runPrechecks) {\n          const precheckResult = await this.runExpectationSteps(\n            driver,\n            operation.precheck,\n            operation,\n            'precheck',\n          );\n          if (!precheckResult.ok) {\n            return precheckResult;\n          }\n        }\n\n        const executeResult = await this.runExecuteSteps(driver, operation.execute, operation);\n        if (!executeResult.ok) {\n          return executeResult;\n        }\n\n        // Postchecks: only run if enabled\n        if (runPostchecks) {\n          const postcheckResult = await this.runExpectationSteps(\n            driver,\n            operation.postcheck,\n            operation,\n            'postcheck',\n          );\n          if (!postcheckResult.ok) {\n            return postcheckResult;\n          }\n        }\n\n        executedOperations.push(operation);\n        operationsExecuted += 1;\n      } finally {\n        options.callbacks?.onOperationComplete?.(operation);\n      }\n    }\n    return ok({ operationsExecuted, executedOperations });\n  }\n\n  private async ensureControlTables(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    await this.executeStatement(driver, ensurePrismaContractSchemaStatement);\n    // Pre-1.0 zero-range guardrail: detect a pre-cleanup single-row\n    // marker table (no `space` column) and surface a structured failure\n    // rather than silently auto-migrating it to the per-space shape.\n    // See `specs/framework-mechanism.spec.md § 2`.\n    const legacyDetection = await this.detectLegacyMarkerShape(driver);\n    if (!legacyDetection.ok) {\n      return legacyDetection;\n    }\n    await this.executeStatement(driver, ensureMarkerTableStatement);\n    await this.executeStatement(driver, ensureLedgerTableStatement);\n    return okVoid();\n  }\n\n  private async detectLegacyMarkerShape(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    const result = await driver.query<{ column_name: string }>(\n      `select column_name\n         from information_schema.columns\n        where table_schema = 'prisma_contract'\n          and table_name = 'marker'`,\n    );\n    if (result.rows.length === 0) {\n      return okVoid();\n    }\n    const columns = new Set(result.rows.map((row) => row.column_name));\n    if (columns.has('space')) {\n      return okVoid();\n    }\n    return runnerFailure(\n      'LEGACY_MARKER_SHAPE',\n      'Legacy marker-table shape detected on prisma_contract.marker (no `space` column). ' +\n        'Prisma Next is in pre-1.0; the previous transitional auto-migration to the per-space-row schema has been removed. ' +\n        'Drop `prisma_contract.marker` and re-run `dbInit` to reinitialise from a clean baseline.',\n      {\n        meta: {\n          table: 'prisma_contract.marker',\n          columns: [...columns].sort(),\n        },\n      },\n    );\n  }\n\n  private async runExpectationSteps(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n    phase: 'precheck' | 'postcheck',\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    for (const step of steps) {\n      const result = await driver.query(step.sql, step.params ?? []);\n      if (!this.stepResultIsTrue(result.rows)) {\n        const code = phase === 'precheck' ? 'PRECHECK_FAILED' : 'POSTCHECK_FAILED';\n        return runnerFailure(\n          code,\n          `Operation ${operation.id} failed during ${phase}: ${step.description}`,\n          {\n            meta: {\n              operationId: operation.id,\n              phase,\n              stepDescription: step.description,\n            },\n          },\n        );\n      }\n    }\n    return okVoid();\n  }\n\n  private async runExecuteSteps(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    for (const step of steps) {\n      try {\n        await driver.query(step.sql, step.params ?? []);\n      } catch (error: unknown) {\n        if (SqlQueryError.is(error)) {\n          return runnerFailure(\n            'EXECUTION_FAILED',\n            `Operation ${operation.id} failed during execution: ${step.description}`,\n            {\n              why: error.message,\n              meta: {\n                operationId: operation.id,\n                stepDescription: step.description,\n                sql: step.sql,\n                sqlState: error.sqlState,\n                constraint: error.constraint,\n                table: error.table,\n                column: error.column,\n                detail: error.detail,\n              },\n            },\n          );\n        }\n        throw error;\n      }\n    }\n    return okVoid();\n  }\n\n  private stepResultIsTrue(rows: readonly Record<string, unknown>[]): boolean {\n    if (!rows || rows.length === 0) {\n      return false;\n    }\n    const firstRow = rows[0];\n    const firstValue = firstRow ? Object.values(firstRow)[0] : undefined;\n    if (typeof firstValue === 'boolean') {\n      return firstValue;\n    }\n    if (typeof firstValue === 'number') {\n      return firstValue !== 0;\n    }\n    if (typeof firstValue === 'string') {\n      const lower = firstValue.toLowerCase();\n      // PostgreSQL boolean representations: 't'/'f', 'true'/'false', '1'/'0'\n      if (lower === 't' || lower === 'true' || lower === '1') {\n        return true;\n      }\n      if (lower === 'f' || lower === 'false' || lower === '0') {\n        return false;\n      }\n      // For other strings, non-empty is truthy (though this case shouldn't occur for boolean checks)\n      return firstValue.length > 0;\n    }\n    return Boolean(firstValue);\n  }\n\n  private async expectationsAreSatisfied(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n  ): Promise<boolean> {\n    if (steps.length === 0) {\n      return false;\n    }\n    for (const step of steps) {\n      const result = await driver.query(step.sql, step.params ?? []);\n      if (!this.stepResultIsTrue(result.rows)) {\n        return false;\n      }\n    }\n    return true;\n  }\n\n  private createPostcheckPreSatisfiedSkipRecord(\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n  ): SqlMigrationPlanOperation<PostgresPlanTargetDetails> {\n    // Clone and freeze existing meta if present\n    const clonedMeta = operation.meta ? cloneAndFreezeRecord(operation.meta) : undefined;\n\n    // Create frozen runner metadata\n    const runnerMeta = Object.freeze({\n      skipped: true,\n      reason: 'postcheck_pre_satisfied',\n    });\n\n    // Merge and freeze the combined meta\n    const mergedMeta = Object.freeze({\n      ...(clonedMeta ?? {}),\n      runner: runnerMeta,\n    });\n\n    // Clone and freeze arrays to prevent mutation\n    const frozenPostcheck = Object.freeze([...operation.postcheck]);\n\n    return Object.freeze({\n      id: operation.id,\n      label: operation.label,\n      ...ifDefined('summary', operation.summary),\n      operationClass: operation.operationClass,\n      target: operation.target, // Already frozen from plan creation\n      precheck: Object.freeze([]),\n      execute: Object.freeze([]),\n      postcheck: frozenPostcheck,\n      ...ifDefined('meta', operation.meta || mergedMeta ? mergedMeta : undefined),\n    });\n  }\n\n  private markerMatchesDestination(\n    marker: ContractMarkerRecord | null,\n    plan: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['plan'],\n  ): boolean {\n    if (!marker) {\n      return false;\n    }\n    if (marker.storageHash !== plan.destination.storageHash) {\n      return false;\n    }\n    if (plan.destination.profileHash && marker.profileHash !== plan.destination.profileHash) {\n      return false;\n    }\n    return true;\n  }\n\n  private enforcePolicyCompatibility(\n    policy: MigrationOperationPolicy,\n    operations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    const allowedClasses = new Set(policy.allowedOperationClasses);\n    for (const operation of operations) {\n      if (!allowedClasses.has(operation.operationClass)) {\n        return runnerFailure(\n          'POLICY_VIOLATION',\n          `Operation ${operation.id} has class \"${operation.operationClass}\" which is not allowed by policy.`,\n          {\n            why: `Policy only allows: ${policy.allowedOperationClasses.join(', ')}.`,\n            meta: {\n              operationId: operation.id,\n              operationClass: operation.operationClass,\n              allowedClasses: policy.allowedOperationClasses,\n            },\n          },\n        );\n      }\n    }\n    return okVoid();\n  }\n\n  private ensureMarkerCompatibility(\n    marker: ContractMarkerRecord | null,\n    plan: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['plan'],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    const origin = plan.origin ?? null;\n    if (!origin) {\n      // No origin assertion on the plan — the caller does not want origin validation.\n      // This is the case for `db update`, which introspects the live schema and does not\n      // rely on marker continuity. `db init` handles its own marker checks before the runner.\n      return okVoid();\n    }\n\n    if (!marker) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Missing contract marker: expected origin storage hash ${origin.storageHash}.`,\n        {\n          meta: {\n            expectedOriginStorageHash: origin.storageHash,\n          },\n        },\n      );\n    }\n    if (marker.storageHash !== origin.storageHash) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Existing contract marker (${marker.storageHash}) does not match plan origin (${origin.storageHash}).`,\n        {\n          meta: {\n            markerStorageHash: marker.storageHash,\n            expectedOriginStorageHash: origin.storageHash,\n          },\n        },\n      );\n    }\n    if (origin.profileHash && marker.profileHash !== origin.profileHash) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Existing contract marker profile hash (${marker.profileHash}) does not match plan origin profile hash (${origin.profileHash}).`,\n        {\n          meta: {\n            markerProfileHash: marker.profileHash,\n            expectedOriginProfileHash: origin.profileHash,\n          },\n        },\n      );\n    }\n    return okVoid();\n  }\n\n  private ensurePlanMatchesDestinationContract(\n    destination: SqlMigrationPlanContractInfo,\n    contract: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['destinationContract'],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    if (destination.storageHash !== contract.storage.storageHash) {\n      return runnerFailure(\n        'DESTINATION_CONTRACT_MISMATCH',\n        `Plan destination storage hash (${destination.storageHash}) does not match provided contract storage hash (${contract.storage.storageHash}).`,\n        {\n          meta: {\n            planStorageHash: destination.storageHash,\n            contractStorageHash: contract.storage.storageHash,\n          },\n        },\n      );\n    }\n    if (\n      destination.profileHash &&\n      contract.profileHash &&\n      destination.profileHash !== contract.profileHash\n    ) {\n      return runnerFailure(\n        'DESTINATION_CONTRACT_MISMATCH',\n        `Plan destination profile hash (${destination.profileHash}) does not match provided contract profile hash (${contract.profileHash}).`,\n        {\n          meta: {\n            planProfileHash: destination.profileHash,\n            contractProfileHash: contract.profileHash,\n          },\n        },\n      );\n    }\n    return okVoid();\n  }\n\n  private async upsertMarker(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n    existingMarker: ContractMarkerRecord | null,\n    space: string,\n  ): Promise<void> {\n    const incomingInvariants = options.plan.providedInvariants ?? [];\n    const writeStatements = buildMergeMarkerStatements({\n      space,\n      storageHash: options.plan.destination.storageHash,\n      profileHash:\n        options.plan.destination.profileHash ??\n        options.destinationContract.profileHash ??\n        options.plan.destination.storageHash,\n      contractJson: options.destinationContract,\n      canonicalVersion: null,\n      meta: {},\n      invariants: incomingInvariants,\n    });\n    const statement = existingMarker ? writeStatements.update : writeStatements.insert;\n    await this.executeStatement(driver, statement);\n  }\n\n  private async recordLedgerEntry(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n    existingMarker: ContractMarkerRecord | null,\n    executedOperations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[],\n  ): Promise<void> {\n    const ledgerStatement = buildLedgerInsertStatement({\n      originStorageHash: existingMarker?.storageHash ?? null,\n      originProfileHash: existingMarker?.profileHash ?? null,\n      destinationStorageHash: options.plan.destination.storageHash,\n      destinationProfileHash:\n        options.plan.destination.profileHash ??\n        options.destinationContract.profileHash ??\n        options.plan.destination.storageHash,\n      contractJsonBefore: existingMarker?.contractJson ?? null,\n      contractJsonAfter: options.destinationContract,\n      operations: executedOperations,\n    });\n    await this.executeStatement(driver, ledgerStatement);\n  }\n\n  private async acquireLock(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    key: string,\n  ): Promise<void> {\n    await driver.query('select pg_advisory_xact_lock(hashtext($1))', [key]);\n  }\n\n  private async beginTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('BEGIN');\n  }\n\n  private async commitTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('COMMIT');\n  }\n\n  private async rollbackTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('ROLLBACK');\n  }\n\n  private async executeStatement(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    statement: SqlStatement,\n  ): Promise<void> {\n    if (statement.params.length > 0) {\n      await driver.query(statement.sql, statement.params);\n      return;\n    }\n    await driver.query(statement.sql);\n  }\n}\n","import type { Contract } from '@prisma-next/contract/types';\nimport { SqlSchemaVerifierBase } from '@prisma-next/family-sql/ir';\nimport type { SchemaIssue, SchemaVerifyOptions } from '@prisma-next/framework-components/control';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlSchemaIR } from '@prisma-next/sql-schema-ir/types';\n\n/**\n * Postgres target `SchemaVerifier` concretion. Plugs into the\n * SQL-shared verification surface; production verification today still\n * routes through the legacy `verifySqlSchema` entry point, which\n * carries options (codec hooks, normalizers, framework components)\n * that the framework-level `SchemaVerifyOptions` shape does not yet\n * surface.\n *\n * The hooks return the empty list pending the call-site migration that\n * routes the existing verifier behaviour through the SPI — at that\n * point `verifyCommonSqlSchema` will likely lift onto the family base\n * (mirroring `verifyCommonMongoSchema`) and `verifyTargetExtensions`\n * will house Postgres-only kinds (functions, RLS policies in a future\n * project).\n */\nexport class PostgresSchemaVerifier extends SqlSchemaVerifierBase<\n  Contract<SqlStorage>,\n  SqlSchemaIR\n> {\n  protected verifyCommonSqlSchema(\n    _options: SchemaVerifyOptions<Contract<SqlStorage>, SqlSchemaIR>,\n  ): readonly SchemaIssue[] {\n    return [];\n  }\n\n  protected verifyTargetExtensions(\n    _options: SchemaVerifyOptions<Contract<SqlStorage>, SqlSchemaIR>,\n  ): readonly SchemaIssue[] {\n    return [];\n  }\n}\n","import type { ColumnDefault, Contract } from '@prisma-next/contract/types';\nimport type {\n  SqlControlFamilyInstance,\n  SqlControlTargetDescriptor,\n} from '@prisma-next/family-sql/control';\nimport { contractToSchemaIR, extractCodecControlHooks } from '@prisma-next/family-sql/control';\nimport type { TargetBoundComponentDescriptor } from '@prisma-next/framework-components/components';\nimport type {\n  ControlTargetInstance,\n  MigrationRunner,\n} from '@prisma-next/framework-components/control';\nimport type { SqlStorage, StorageColumn } from '@prisma-next/sql-contract/types';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { postgresTargetDescriptorMeta } from '../core/descriptor-meta';\nimport {\n  enumStorageCompoundKey,\n  resolveDdlSchemaForNamespaceStorage,\n} from '../core/migrations/enum-planning';\nimport { createPostgresMigrationPlanner } from '../core/migrations/planner';\nimport { renderDefaultLiteral } from '../core/migrations/planner-ddl-builders';\nimport type { PostgresPlanTargetDetails } from '../core/migrations/planner-target-details';\nimport { createPostgresMigrationRunner } from '../core/migrations/runner';\nimport { PostgresContractSerializer } from '../core/postgres-contract-serializer';\nimport { PostgresSchemaVerifier } from '../core/postgres-schema-verifier';\n\nfunction buildNativeTypeExpander(\n  frameworkComponents?: ReadonlyArray<TargetBoundComponentDescriptor<'sql', 'postgres'>>,\n) {\n  if (!frameworkComponents) {\n    return undefined;\n  }\n  const codecHooks = extractCodecControlHooks(frameworkComponents);\n  return (input: {\n    readonly nativeType: string;\n    readonly codecId?: string;\n    readonly typeParams?: Record<string, unknown>;\n  }) => {\n    if (!input.typeParams) return input.nativeType;\n    // Mirror `renderExpectedNativeType` in verify-sql-schema: when a codec\n    // has no `expandNativeType` hook (e.g. `pg/enum@1`, whose typeParams\n    // describe the value set rather than a DDL suffix), fall back to the\n    // bare native type rather than throwing. Throwing here would reject\n    // every plan involving an enum-/values-typed column as soon as its\n    // `typeRef` resolved to a `StorageTypeInstance` carrying typeParams.\n    if (!input.codecId) return input.nativeType;\n    const hooks = codecHooks.get(input.codecId);\n    if (!hooks?.expandNativeType) return input.nativeType;\n    return hooks.expandNativeType(input);\n  };\n}\n\nexport function postgresRenderDefault(def: ColumnDefault, column: StorageColumn): string {\n  if (def.kind === 'function') {\n    return def.expression;\n  }\n  return renderDefaultLiteral(def.value, column);\n}\n\nconst postgresTargetDescriptor: SqlControlTargetDescriptor<'postgres', PostgresPlanTargetDetails> =\n  {\n    ...postgresTargetDescriptorMeta,\n    contractSerializer: new PostgresContractSerializer(),\n    schemaVerifier: new PostgresSchemaVerifier(),\n    migrations: {\n      createPlanner(_family: SqlControlFamilyInstance) {\n        return createPostgresMigrationPlanner();\n      },\n      createRunner(family) {\n        return createPostgresMigrationRunner(family) as MigrationRunner<'sql', 'postgres'>;\n      },\n      contractToSchema(contract, frameworkComponents) {\n        const expander = buildNativeTypeExpander(frameworkComponents);\n        // Blind cast: the framework SPI signature\n        // (`control-migration-types.ts § contractToSchema`) types\n        // `contract` as the generic `Contract | null`. Inside the\n        // postgres target descriptor we know any contract reaching\n        // this method is SQL-family — the family contract resolver\n        // would have refused to construct a postgres target binding\n        // otherwise — so we narrow the generic to\n        // `Contract<SqlStorage>` for the lowering call.\n        return contractToSchemaIR(contract as unknown as Contract<SqlStorage> | null, {\n          annotationNamespace: 'pg',\n          ...ifDefined('expandNativeType', expander),\n          renderDefault: postgresRenderDefault,\n          // Schema-qualify enum annotation keys so the projected \"from\" IR's\n          // `storageTypes` match `readExistingEnumValues` on the read side\n          // (the contract-to-contract `migration plan` path). The DDL-schema\n          // resolution + compound-key format stay here in the target layer;\n          // the family projector treats the returned string as opaque.\n          // `undefined` schema IR ⇒ the unbound coordinate resolves to the\n          // default `public` landing schema, matching the read-side fallback.\n          resolveEnumStorageKey: (storage, namespaceId, nativeType) =>\n            enumStorageCompoundKey(\n              resolveDdlSchemaForNamespaceStorage(storage, namespaceId, undefined),\n              nativeType,\n            ),\n        });\n      },\n    },\n    create(): ControlTargetInstance<'sql', 'postgres'> {\n      return {\n        familyId: 'sql',\n        targetId: 'postgres',\n      };\n    },\n    /**\n     * Direct method for SQL-specific usage.\n     * @deprecated Use migrations.createPlanner() for CLI compatibility.\n     */\n    createPlanner(_family: SqlControlFamilyInstance) {\n      return createPostgresMigrationPlanner();\n    },\n    /**\n     * Direct method for SQL-specific usage.\n     * @deprecated Use migrations.createRunner() for CLI compatibility.\n     */\n    createRunner(family) {\n      return createPostgresMigrationRunner(family);\n    },\n  };\n\nexport default postgresTargetDescriptor;\n"],"mappings":";;;;;;;;;;;;;;;;AA4CA,MAAM,iBAA+B,EACnC,eAAe,SACjB;AAEA,MAAM,cAAc;;;;;AAMpB,SAAS,qBAAwD,OAAa;CAC5E,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,GAC3C,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GAC1B,OAAO,OAAO;MACT,IAAI,MAAM,QAAQ,GAAG,GAE1B,OAAO,OAAO,OAAO,OAAO,CAAC,GAAG,GAAG,CAAC;MAC/B,IAAI,OAAO,QAAQ,UAExB,OAAO,OAAO,qBAAqB,GAA8B;MAGjE,OAAO,OAAO;CAGlB,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAgB,8BACd,QACA,SAAgC,CAAC,GACc;CAC/C,OAAO,IAAI,wBAAwB,QAAQ;EAAE,GAAG;EAAgB,GAAG;CAAO,CAAC;AAC7E;AAEA,IAAM,0BAAN,MAAuF;CAElE;CACA;CAFnB,YACE,QACA,QACA;EAFiB,KAAA,SAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,QACJ,SACmC;EACnC,MAAM,SAAS,QAAQ;EAKvB,MAAM,mBAAmB,KAAK,qCAC5B,QAAQ,KAAK,aACb,QAAQ,mBACV;EACA,IAAI,CAAC,iBAAiB,IAAI,OAAO;EAEjC,MAAM,cAAc,KAAK,2BAA2B,QAAQ,QAAQ,QAAQ,KAAK,UAAU;EAC3F,IAAI,CAAC,YAAY,IAAI,OAAO;EAE5B,MAAM,KAAK,iBAAiB,MAAM;EAClC,IAAI,YAAY;EAChB,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,oBAAoB,OAAO;GACrD,IAAI,CAAC,OAAO,IACV,OAAO;GAET,MAAM,KAAK,kBAAkB,MAAM;GACnC,YAAY;GACZ,OAAO;EACT,UAAU;GACR,IAAI,CAAC,WACH,MAAM,KAAK,oBAAoB,MAAM;EAEzC;CACF;;;;;;;CAQA,MAAM,oBACJ,SACmC;EACnC,MAAM,SAAS,QAAQ,cAAc,KAAK,OAAO;EACjD,MAAM,SAAS,QAAQ;EACvB,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,QAAQ,KAAK,SAChE,MAAM,IAAI,MACR,sCAAsC,QAAQ,MAAM,iCAAiC,QAAQ,KAAK,QAAQ,EAC5G;EAEF,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG;EAI5C,MAAM,mBAAmB,KAAK,qCAC5B,QAAQ,KAAK,aACb,QAAQ,mBACV;EACA,IAAI,CAAC,iBAAiB,IAAI,OAAO;EAEjC,MAAM,cAAc,KAAK,2BAA2B,QAAQ,QAAQ,QAAQ,KAAK,UAAU;EAC3F,IAAI,CAAC,YAAY,IAAI,OAAO;EAE5B,MAAM,KAAK,YAAY,QAAQ,OAAO;EACtC,MAAM,eAAe,MAAM,KAAK,oBAAoB,MAAM;EAC1D,IAAI,CAAC,aAAa,IAAI,OAAO;EAC7B,MAAM,iBAAiB,MAAM,KAAK,OAAO,WAAW;GAAE;GAAQ;EAAM,CAAC;EAErE,MAAM,cAAc,KAAK,0BAA0B,gBAAgB,QAAQ,IAAI;EAC/E,IAAI,CAAC,YAAY,IAAI,OAAO;EAE5B,MAAM,sBAAsB,KAAK,yBAAyB,gBAAgB,QAAQ,IAAI;EACtF,MAAM,aAAa,QAAQ,KAAK,QAAQ,gBAAgB,QAAQ,KAAK,YAAY;EACjF,MAAM,iBAAiB,uBAAuB,QAAQ,KAAK,UAAU,QAAQ,CAAC;EAC9E,IAAI;EAEJ,IAAI,gBACF,aAAa;GAAE,oBAAoB;GAAG,oBAAoB,CAAC;EAAE;OACxD;GACL,MAAM,cAAc,MAAM,KAAK,UAAU,QAAQ,OAAO;GACxD,IAAI,CAAC,YAAY,IAAI,OAAO;GAC5B,aAAa,YAAY;EAC3B;EAOA,IAAI,UAAU,cAAc;GAC1B,MAAM,WAAW,MAAM,KAAK,OAAO,WAAW;IAC5C;IACA,UAAU,QAAQ;GACpB,CAAC;GACD,MAAM,qBAAqB,gBAAgB;IACzC,UAAU,QAAQ;IAClB,QAAQ;IACR,QAAQ,QAAQ,sBAAsB;IACtC,SAAS,QAAQ,WAAW,CAAC;IAC7B,sBAAsB,KAAK,OAAO;IAClC,qBAAqB,QAAQ;IAC7B,kBAAkB;IAClB,qBAAqB;IACrB,2BAA2B,gCACzB,QAAQ,oBAAoB,OAC9B;GACF,CAAC;GACD,IAAI,CAAC,mBAAmB,IACtB,OAAO,cAAc,wBAAwB,mBAAmB,SAAS;IACvE,KAAK;IACL,MAAM,EAAE,QAAQ,mBAAmB,OAAO,OAAO;GACnD,CAAC;EAEL;EAEA,MAAM,qBAAqB,QAAQ,KAAK,sBAAsB,CAAC;EAC/D,MAAM,qBAAqB,IAAI,IAAI,gBAAgB,cAAc,CAAC,CAAC;EACnE,MAAM,6BAA6B,mBAAmB,OAAO,OAAO,mBAAmB,IAAI,EAAE,CAAC;EAI9F,IAAI,EAFF,cAAc,WAAW,uBAAuB,KAAK,6BAElC;GACnB,MAAM,KAAK,aAAa,QAAQ,SAAS,gBAAgB,KAAK;GAC9D,MAAM,KAAK,kBAAkB,QAAQ,SAAS,gBAAgB,WAAW,kBAAkB;EAC7F;EAEA,OAAO,cAAc;GACnB,mBAAmB,QAAQ,KAAK,WAAW;GAC3C,oBAAoB,WAAW;EACjC,CAAC;CACH;CAEA,MAAM,oBAAoB,SAKU;EAClC,MAAM,SAAS,QAAQ;EACvB,MAAM,kBAAkB,QAAQ;EAEhC,IAAI,gBAAgB,WAAW,GAC7B,OAAO,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;EAGnC,MAAM,KAAK,iBAAiB,MAAM;EAClC,IAAI,YAAY;EAChB,IAAI;GACF,MAAM,kBAGD,CAAC;GACN,KAAK,MAAM,gBAAgB,iBAAiB;IAC1C,MAAM,QAAQ,aAAa,SAAS,aAAa,KAAK;IACtD,MAAM,SAAS,MAAM,KAAK,oBAAoB;KAAE,GAAG;KAAc;KAAQ;IAAM,CAAC;IAChF,IAAI,CAAC,OAAO,IACV,OAAO,MAAM;KAAE,GAAG,OAAO;KAAS,cAAc;IAAM,CAAC;IAEzD,gBAAgB,KAAK;KAAE;KAAO,OAAO,OAAO;IAAM,CAAC;GACrD;GAEA,MAAM,KAAK,kBAAkB,MAAM;GACnC,YAAY;GACZ,OAAO,GAAG,EAAE,gBAAgB,CAAC;EAC/B,UAAU;GACR,IAAI,CAAC,WACH,MAAM,KAAK,oBAAoB,MAAM;EAEzC;CACF;CAEA,MAAc,UACZ,QACA,SACmE;EACnE,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,QAAQ,cAAc;EAC3C,MAAM,gBAAgB,QAAQ,eAAe;EAC7C,MAAM,iBAAiB,QAAQ,sBAAsB;EAErD,IAAI,qBAAqB;EACzB,MAAM,qBAAkF,CAAC;EACzF,KAAK,MAAM,aAAa,QAAQ,KAAK,YAAY;GAC/C,QAAQ,WAAW,mBAAmB,SAAS;GAC/C,IAAI;IAEF,IAAI,iBAAiB;SAKf,MAJoC,KAAK,yBAC3C,QACA,UAAU,SACZ,GAC+B;MAC7B,mBAAmB,KAAK,KAAK,sCAAsC,SAAS,CAAC;MAC7E;KACF;;IAIF,IAAI,cAAc;KAChB,MAAM,iBAAiB,MAAM,KAAK,oBAChC,QACA,UAAU,UACV,WACA,UACF;KACA,IAAI,CAAC,eAAe,IAClB,OAAO;IAEX;IAEA,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,QAAQ,UAAU,SAAS,SAAS;IACrF,IAAI,CAAC,cAAc,IACjB,OAAO;IAIT,IAAI,eAAe;KACjB,MAAM,kBAAkB,MAAM,KAAK,oBACjC,QACA,UAAU,WACV,WACA,WACF;KACA,IAAI,CAAC,gBAAgB,IACnB,OAAO;IAEX;IAEA,mBAAmB,KAAK,SAAS;IACjC,sBAAsB;GACxB,UAAU;IACR,QAAQ,WAAW,sBAAsB,SAAS;GACpD;EACF;EACA,OAAO,GAAG;GAAE;GAAoB;EAAmB,CAAC;CACtD;CAEA,MAAc,oBACZ,QACkD;EAClD,MAAM,KAAK,iBAAiB,QAAQ,mCAAmC;EAKvE,MAAM,kBAAkB,MAAM,KAAK,wBAAwB,MAAM;EACjE,IAAI,CAAC,gBAAgB,IACnB,OAAO;EAET,MAAM,KAAK,iBAAiB,QAAQ,0BAA0B;EAC9D,MAAM,KAAK,iBAAiB,QAAQ,0BAA0B;EAC9D,OAAO,OAAO;CAChB;CAEA,MAAc,wBACZ,QACkD;EAClD,MAAM,SAAS,MAAM,OAAO,MAC1B;;;oCAIF;EACA,IAAI,OAAO,KAAK,WAAW,GACzB,OAAO,OAAO;EAEhB,MAAM,UAAU,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC;EACjE,IAAI,QAAQ,IAAI,OAAO,GACrB,OAAO,OAAO;EAEhB,OAAO,cACL,uBACA,gSAGA,EACE,MAAM;GACJ,OAAO;GACP,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK;EAC7B,EACF,CACF;CACF;CAEA,MAAc,oBACZ,QACA,OACA,WACA,OACkD;EAClD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,SAAS,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;GAC7D,IAAI,CAAC,KAAK,iBAAiB,OAAO,IAAI,GAEpC,OAAO,cADM,UAAU,aAAa,oBAAoB,oBAGtD,aAAa,UAAU,GAAG,iBAAiB,MAAM,IAAI,KAAK,eAC1D,EACE,MAAM;IACJ,aAAa,UAAU;IACvB;IACA,iBAAiB,KAAK;GACxB,EACF,CACF;EAEJ;EACA,OAAO,OAAO;CAChB;CAEA,MAAc,gBACZ,QACA,OACA,WACkD;EAClD,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;EAChD,SAAS,OAAgB;GACvB,IAAI,cAAc,GAAG,KAAK,GACxB,OAAO,cACL,oBACA,aAAa,UAAU,GAAG,4BAA4B,KAAK,eAC3D;IACE,KAAK,MAAM;IACX,MAAM;KACJ,aAAa,UAAU;KACvB,iBAAiB,KAAK;KACtB,KAAK,KAAK;KACV,UAAU,MAAM;KAChB,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,QAAQ,MAAM;KACd,QAAQ,MAAM;IAChB;GACF,CACF;GAEF,MAAM;EACR;EAEF,OAAO,OAAO;CAChB;CAEA,iBAAyB,MAAmD;EAC1E,IAAI,CAAC,QAAQ,KAAK,WAAW,GAC3B,OAAO;EAET,MAAM,WAAW,KAAK;EACtB,MAAM,aAAa,WAAW,OAAO,OAAO,QAAQ,EAAE,KAAK,KAAA;EAC3D,IAAI,OAAO,eAAe,WACxB,OAAO;EAET,IAAI,OAAO,eAAe,UACxB,OAAO,eAAe;EAExB,IAAI,OAAO,eAAe,UAAU;GAClC,MAAM,QAAQ,WAAW,YAAY;GAErC,IAAI,UAAU,OAAO,UAAU,UAAU,UAAU,KACjD,OAAO;GAET,IAAI,UAAU,OAAO,UAAU,WAAW,UAAU,KAClD,OAAO;GAGT,OAAO,WAAW,SAAS;EAC7B;EACA,OAAO,QAAQ,UAAU;CAC3B;CAEA,MAAc,yBACZ,QACA,OACkB;EAClB,IAAI,MAAM,WAAW,GACnB,OAAO;EAET,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,SAAS,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;GAC7D,IAAI,CAAC,KAAK,iBAAiB,OAAO,IAAI,GACpC,OAAO;EAEX;EACA,OAAO;CACT;CAEA,sCACE,WACsD;EAEtD,MAAM,aAAa,UAAU,OAAO,qBAAqB,UAAU,IAAI,IAAI,KAAA;EAG3E,MAAM,aAAa,OAAO,OAAO;GAC/B,SAAS;GACT,QAAQ;EACV,CAAC;EAGD,MAAM,aAAa,OAAO,OAAO;GAC/B,GAAI,cAAc,CAAC;GACnB,QAAQ;EACV,CAAC;EAGD,MAAM,kBAAkB,OAAO,OAAO,CAAC,GAAG,UAAU,SAAS,CAAC;EAE9D,OAAO,OAAO,OAAO;GACnB,IAAI,UAAU;GACd,OAAO,UAAU;GACjB,GAAG,UAAU,WAAW,UAAU,OAAO;GACzC,gBAAgB,UAAU;GAC1B,QAAQ,UAAU;GAClB,UAAU,OAAO,OAAO,CAAC,CAAC;GAC1B,SAAS,OAAO,OAAO,CAAC,CAAC;GACzB,WAAW;GACX,GAAG,UAAU,QAAQ,UAAU,QAAQ,aAAa,aAAa,KAAA,CAAS;EAC5E,CAAC;CACH;CAEA,yBACE,QACA,MACS;EACT,IAAI,CAAC,QACH,OAAO;EAET,IAAI,OAAO,gBAAgB,KAAK,YAAY,aAC1C,OAAO;EAET,IAAI,KAAK,YAAY,eAAe,OAAO,gBAAgB,KAAK,YAAY,aAC1E,OAAO;EAET,OAAO;CACT;CAEA,2BACE,QACA,YACyC;EACzC,MAAM,iBAAiB,IAAI,IAAI,OAAO,uBAAuB;EAC7D,KAAK,MAAM,aAAa,YACtB,IAAI,CAAC,eAAe,IAAI,UAAU,cAAc,GAC9C,OAAO,cACL,oBACA,aAAa,UAAU,GAAG,cAAc,UAAU,eAAe,oCACjE;GACE,KAAK,uBAAuB,OAAO,wBAAwB,KAAK,IAAI,EAAE;GACtE,MAAM;IACJ,aAAa,UAAU;IACvB,gBAAgB,UAAU;IAC1B,gBAAgB,OAAO;GACzB;EACF,CACF;EAGJ,OAAO,OAAO;CAChB;CAEA,0BACE,QACA,MACyC;EACzC,MAAM,SAAS,KAAK,UAAU;EAC9B,IAAI,CAAC,QAIH,OAAO,OAAO;EAGhB,IAAI,CAAC,QACH,OAAO,cACL,0BACA,yDAAyD,OAAO,YAAY,IAC5E,EACE,MAAM,EACJ,2BAA2B,OAAO,YACpC,EACF,CACF;EAEF,IAAI,OAAO,gBAAgB,OAAO,aAChC,OAAO,cACL,0BACA,6BAA6B,OAAO,YAAY,gCAAgC,OAAO,YAAY,KACnG,EACE,MAAM;GACJ,mBAAmB,OAAO;GAC1B,2BAA2B,OAAO;EACpC,EACF,CACF;EAEF,IAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,aACtD,OAAO,cACL,0BACA,0CAA0C,OAAO,YAAY,6CAA6C,OAAO,YAAY,KAC7H,EACE,MAAM;GACJ,mBAAmB,OAAO;GAC1B,2BAA2B,OAAO;EACpC,EACF,CACF;EAEF,OAAO,OAAO;CAChB;CAEA,qCACE,aACA,UACyC;EACzC,IAAI,YAAY,gBAAgB,SAAS,QAAQ,aAC/C,OAAO,cACL,iCACA,kCAAkC,YAAY,YAAY,mDAAmD,SAAS,QAAQ,YAAY,KAC1I,EACE,MAAM;GACJ,iBAAiB,YAAY;GAC7B,qBAAqB,SAAS,QAAQ;EACxC,EACF,CACF;EAEF,IACE,YAAY,eACZ,SAAS,eACT,YAAY,gBAAgB,SAAS,aAErC,OAAO,cACL,iCACA,kCAAkC,YAAY,YAAY,mDAAmD,SAAS,YAAY,KAClI,EACE,MAAM;GACJ,iBAAiB,YAAY;GAC7B,qBAAqB,SAAS;EAChC,EACF,CACF;EAEF,OAAO,OAAO;CAChB;CAEA,MAAc,aACZ,QACA,SACA,gBACA,OACe;EACf,MAAM,qBAAqB,QAAQ,KAAK,sBAAsB,CAAC;EAC/D,MAAM,kBAAkB,2BAA2B;GACjD;GACA,aAAa,QAAQ,KAAK,YAAY;GACtC,aACE,QAAQ,KAAK,YAAY,eACzB,QAAQ,oBAAoB,eAC5B,QAAQ,KAAK,YAAY;GAC3B,cAAc,QAAQ;GACtB,kBAAkB;GAClB,MAAM,CAAC;GACP,YAAY;EACd,CAAC;EACD,MAAM,YAAY,iBAAiB,gBAAgB,SAAS,gBAAgB;EAC5E,MAAM,KAAK,iBAAiB,QAAQ,SAAS;CAC/C;CAEA,MAAc,kBACZ,QACA,SACA,gBACA,oBACe;EACf,MAAM,kBAAkB,2BAA2B;GACjD,mBAAmB,gBAAgB,eAAe;GAClD,mBAAmB,gBAAgB,eAAe;GAClD,wBAAwB,QAAQ,KAAK,YAAY;GACjD,wBACE,QAAQ,KAAK,YAAY,eACzB,QAAQ,oBAAoB,eAC5B,QAAQ,KAAK,YAAY;GAC3B,oBAAoB,gBAAgB,gBAAgB;GACpD,mBAAmB,QAAQ;GAC3B,YAAY;EACd,CAAC;EACD,MAAM,KAAK,iBAAiB,QAAQ,eAAe;CACrD;CAEA,MAAc,YACZ,QACA,KACe;EACf,MAAM,OAAO,MAAM,8CAA8C,CAAC,GAAG,CAAC;CACxE;CAEA,MAAc,iBACZ,QACe;EACf,MAAM,OAAO,MAAM,OAAO;CAC5B;CAEA,MAAc,kBACZ,QACe;EACf,MAAM,OAAO,MAAM,QAAQ;CAC7B;CAEA,MAAc,oBACZ,QACe;EACf,MAAM,OAAO,MAAM,UAAU;CAC/B;CAEA,MAAc,iBACZ,QACA,WACe;EACf,IAAI,UAAU,OAAO,SAAS,GAAG;GAC/B,MAAM,OAAO,MAAM,UAAU,KAAK,UAAU,MAAM;GAClD;EACF;EACA,MAAM,OAAO,MAAM,UAAU,GAAG;CAClC;AACF;;;;;;;;;;;;;;;;;;ACnrBA,IAAa,yBAAb,cAA4C,sBAG1C;CACA,sBACE,UACwB;EACxB,OAAO,CAAC;CACV;CAEA,uBACE,UACwB;EACxB,OAAO,CAAC;CACV;AACF;;;ACXA,SAAS,wBACP,qBACA;CACA,IAAI,CAAC,qBACH;CAEF,MAAM,aAAa,yBAAyB,mBAAmB;CAC/D,QAAQ,UAIF;EACJ,IAAI,CAAC,MAAM,YAAY,OAAO,MAAM;EAOpC,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM;EACjC,MAAM,QAAQ,WAAW,IAAI,MAAM,OAAO;EAC1C,IAAI,CAAC,OAAO,kBAAkB,OAAO,MAAM;EAC3C,OAAO,MAAM,iBAAiB,KAAK;CACrC;AACF;AAEA,SAAgB,sBAAsB,KAAoB,QAA+B;CACvF,IAAI,IAAI,SAAS,YACf,OAAO,IAAI;CAEb,OAAO,qBAAqB,IAAI,OAAO,MAAM;AAC/C;AAEA,MAAM,2BACJ;CACE,GAAG;CACH,oBAAoB,IAAI,2BAA2B;CACnD,gBAAgB,IAAI,uBAAuB;CAC3C,YAAY;EACV,cAAc,SAAmC;GAC/C,OAAO,+BAA+B;EACxC;EACA,aAAa,QAAQ;GACnB,OAAO,8BAA8B,MAAM;EAC7C;EACA,iBAAiB,UAAU,qBAAqB;GAU9C,OAAO,mBAAmB,UAAoD;IAC5E,qBAAqB;IACrB,GAAG,UAAU,oBAXE,wBAAwB,mBAWC,CAAC;IACzC,eAAe;IAQf,wBAAwB,SAAS,aAAa,eAC5C,uBACE,oCAAoC,SAAS,aAAa,KAAA,CAAS,GACnE,UACF;GACJ,CAAC;EACH;CACF;CACA,SAAmD;EACjD,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;;;;;CAKA,cAAc,SAAmC;EAC/C,OAAO,+BAA+B;CACxC;;;;;CAKA,aAAa,QAAQ;EACnB,OAAO,8BAA8B,MAAM;CAC7C;AACF"}
+{"version":3,"file":"control.mjs","names":[],"sources":["../src/core/migrations/runner.ts","../src/core/postgres-schema-verifier.ts","../src/exports/control.ts"],"sourcesContent":["import type { ContractMarkerRecord } from '@prisma-next/contract/types';\nimport type {\n  MigrationOperationPolicy,\n  SqlControlFamilyInstance,\n  SqlMigrationPlanContractInfo,\n  SqlMigrationPlanOperation,\n  SqlMigrationPlanOperationStep,\n  SqlMigrationRunner,\n  SqlMigrationRunnerExecuteOptions,\n  SqlMigrationRunnerFailure,\n  SqlMigrationRunnerResult,\n  SqlMigrationRunnerSuccessValue,\n} from '@prisma-next/family-sql/control';\nimport { runnerFailure, runnerSuccess } from '@prisma-next/family-sql/control';\nimport { verifySqlSchema } from '@prisma-next/family-sql/schema-verify';\nimport type {\n  ControlDriverInstance,\n  MigrationRunnerResult,\n} from '@prisma-next/framework-components/control';\nimport { APP_SPACE_ID } from '@prisma-next/framework-components/control';\nimport { SqlQueryError } from '@prisma-next/sql-errors';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport type { Result } from '@prisma-next/utils/result';\nimport { notOk, ok, okVoid } from '@prisma-next/utils/result';\nimport { parsePostgresDefault } from '../default-normalizer';\nimport { normalizeSchemaNativeType } from '../native-type-normalizer';\nimport { createResolveExistingEnumValues } from './enum-planning';\nimport type { PostgresPlanTargetDetails } from './planner-target-details';\nimport {\n  buildLedgerInsertStatement,\n  buildMergeMarkerStatements,\n  ensureLedgerTableStatement,\n  ensureMarkerTableStatement,\n  ensurePrismaContractSchemaStatement,\n  type SqlStatement,\n} from './statement-builders';\n\ninterface RunnerConfig {\n  readonly defaultSchema: string;\n}\n\ninterface ApplyPlanSuccessValue {\n  readonly operationsExecuted: number;\n  readonly executedOperations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[];\n}\n\nconst DEFAULT_CONFIG: RunnerConfig = {\n  defaultSchema: 'public',\n};\n\nconst LOCK_DOMAIN = 'prisma_next.contract.marker';\n\n/**\n * Deep clones and freezes a record object to prevent mutation.\n * Recursively clones nested objects and arrays to ensure complete isolation.\n */\nfunction cloneAndFreezeRecord<T extends Record<string, unknown>>(value: T): T {\n  const cloned: Record<string, unknown> = {};\n  for (const [key, val] of Object.entries(value)) {\n    if (val === null || val === undefined) {\n      cloned[key] = val;\n    } else if (Array.isArray(val)) {\n      // Clone array (shallow clone of array elements)\n      cloned[key] = Object.freeze([...val]);\n    } else if (typeof val === 'object') {\n      // Recursively clone nested objects\n      cloned[key] = cloneAndFreezeRecord(val as Record<string, unknown>);\n    } else {\n      // Primitives are copied as-is\n      cloned[key] = val;\n    }\n  }\n  return Object.freeze(cloned) as T;\n}\n\nexport function createPostgresMigrationRunner(\n  family: SqlControlFamilyInstance,\n  config: Partial<RunnerConfig> = {},\n): SqlMigrationRunner<PostgresPlanTargetDetails> {\n  return new PostgresMigrationRunner(family, { ...DEFAULT_CONFIG, ...config });\n}\n\nclass PostgresMigrationRunner implements SqlMigrationRunner<PostgresPlanTargetDetails> {\n  constructor(\n    private readonly family: SqlControlFamilyInstance,\n    private readonly config: RunnerConfig,\n  ) {}\n\n  /**\n   * Body of the migration runner without transaction management. The\n   * caller ({@link PostgresMigrationRunner.execute}) owns the\n   * `BEGIN`/`COMMIT`/`ROLLBACK` lifecycle.\n   */\n  async executeOnConnection(\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n  ): Promise<SqlMigrationRunnerResult> {\n    const schema = options.schemaName ?? this.config.defaultSchema;\n    const driver = options.driver;\n    if (options.space !== undefined && options.space !== options.plan.spaceId) {\n      throw new Error(\n        `SqlMigrationRunner: options.space (${options.space}) does not match plan.spaceId (${options.plan.spaceId})`,\n      );\n    }\n    const space = options.plan.spaceId;\n    const lockKey = `${LOCK_DOMAIN}:${schema}:${space}`;\n\n    // Static checks (idempotent — safe to run again when the caller is\n    // `execute(...)` because the cost is a single object comparison).\n    const destinationCheck = this.ensurePlanMatchesDestinationContract(\n      options.plan.destination,\n      options.destinationContract,\n    );\n    if (!destinationCheck.ok) return destinationCheck;\n\n    const policyCheck = this.enforcePolicyCompatibility(options.policy, options.plan.operations);\n    if (!policyCheck.ok) return policyCheck;\n\n    await this.acquireLock(driver, lockKey);\n    const ensureResult = await this.ensureControlTables(driver);\n    if (!ensureResult.ok) return ensureResult;\n    const existingMarker = await this.family.readMarker({ driver, space });\n\n    const markerCheck = this.ensureMarkerCompatibility(existingMarker, options.plan);\n    if (!markerCheck.ok) return markerCheck;\n\n    const markerAtDestination = this.markerMatchesDestination(existingMarker, options.plan);\n    const isSelfEdge = options.plan.origin?.storageHash === options.plan.destination.storageHash;\n    const skipOperations = markerAtDestination && options.plan.origin != null && !isSelfEdge;\n    let applyValue: ApplyPlanSuccessValue;\n\n    if (skipOperations) {\n      applyValue = { operationsExecuted: 0, executedOperations: [] };\n    } else {\n      const applyResult = await this.applyPlan(driver, options);\n      if (!applyResult.ok) return applyResult;\n      applyValue = applyResult.value;\n    }\n\n    // Schema verification on app-space only — extension spaces don't\n    // own user-facing tables in the live schema, and `verifySqlSchema`\n    // matches the destination contract against the database, which\n    // would flag every app-space table as \"extra\" when called against\n    // an extension contract.\n    if (space === APP_SPACE_ID) {\n      const schemaIR = await this.family.introspect({\n        driver,\n        contract: options.destinationContract,\n      });\n      const schemaVerifyResult = verifySqlSchema({\n        contract: options.destinationContract,\n        schema: schemaIR,\n        strict: options.strictVerification ?? true,\n        context: options.context ?? {},\n        typeMetadataRegistry: this.family.typeMetadataRegistry,\n        frameworkComponents: options.frameworkComponents,\n        normalizeDefault: parsePostgresDefault,\n        normalizeNativeType: normalizeSchemaNativeType,\n        resolveExistingEnumValues: createResolveExistingEnumValues(\n          options.destinationContract.storage,\n        ),\n      });\n      if (!schemaVerifyResult.ok) {\n        return runnerFailure('SCHEMA_VERIFY_FAILED', schemaVerifyResult.summary, {\n          why: 'The resulting database schema does not satisfy the destination contract.',\n          meta: { issues: schemaVerifyResult.schema.issues },\n        });\n      }\n    }\n\n    const incomingInvariants = options.plan.providedInvariants ?? [];\n    const existingInvariants = new Set(existingMarker?.invariants ?? []);\n    const incomingIsSubsetOfExisting = incomingInvariants.every((id) => existingInvariants.has(id));\n    const isSelfEdgeNoOp =\n      isSelfEdge && applyValue.operationsExecuted === 0 && incomingIsSubsetOfExisting;\n\n    if (!isSelfEdgeNoOp) {\n      await this.upsertMarker(driver, options, existingMarker, space);\n      await this.recordLedgerEntry(driver, options, existingMarker, applyValue.executedOperations);\n    }\n\n    return runnerSuccess({\n      operationsPlanned: options.plan.operations.length,\n      operationsExecuted: applyValue.operationsExecuted,\n    });\n  }\n\n  async execute(options: {\n    readonly driver: ControlDriverInstance<'sql', string>;\n    readonly perSpaceOptions: ReadonlyArray<\n      SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>\n    >;\n  }): Promise<MigrationRunnerResult> {\n    const driver = options.driver;\n    const perSpaceOptions = options.perSpaceOptions;\n\n    if (perSpaceOptions.length === 0) {\n      return ok({ perSpaceResults: [] });\n    }\n\n    await this.beginTransaction(driver);\n    let committed = false;\n    try {\n      const perSpaceResults: Array<{\n        space: string;\n        value: SqlMigrationRunnerSuccessValue;\n      }> = [];\n      for (const spaceOptions of perSpaceOptions) {\n        const space = spaceOptions.space ?? spaceOptions.plan.spaceId;\n        const result = await this.executeOnConnection({ ...spaceOptions, driver, space });\n        if (!result.ok) {\n          return notOk({ ...result.failure, failingSpace: space });\n        }\n        perSpaceResults.push({ space, value: result.value });\n      }\n\n      await this.commitTransaction(driver);\n      committed = true;\n      return ok({ perSpaceResults });\n    } finally {\n      if (!committed) {\n        await this.rollbackTransaction(driver);\n      }\n    }\n  }\n\n  private async applyPlan(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n  ): Promise<Result<ApplyPlanSuccessValue, SqlMigrationRunnerFailure>> {\n    const checks = options.executionChecks;\n    const runPrechecks = checks?.prechecks !== false; // Default true\n    const runPostchecks = checks?.postchecks !== false; // Default true\n    const runIdempotency = checks?.idempotencyChecks !== false; // Default true\n\n    let operationsExecuted = 0;\n    const executedOperations: Array<SqlMigrationPlanOperation<PostgresPlanTargetDetails>> = [];\n    for (const operation of options.plan.operations) {\n      options.callbacks?.onOperationStart?.(operation);\n      try {\n        // Idempotency probe: only run if both postchecks and idempotency checks are enabled\n        if (runPostchecks && runIdempotency) {\n          const postcheckAlreadySatisfied = await this.expectationsAreSatisfied(\n            driver,\n            operation.postcheck,\n          );\n          if (postcheckAlreadySatisfied) {\n            executedOperations.push(this.createPostcheckPreSatisfiedSkipRecord(operation));\n            continue;\n          }\n        }\n\n        // Prechecks: only run if enabled\n        if (runPrechecks) {\n          const precheckResult = await this.runExpectationSteps(\n            driver,\n            operation.precheck,\n            operation,\n            'precheck',\n          );\n          if (!precheckResult.ok) {\n            return precheckResult;\n          }\n        }\n\n        const executeResult = await this.runExecuteSteps(driver, operation.execute, operation);\n        if (!executeResult.ok) {\n          return executeResult;\n        }\n\n        // Postchecks: only run if enabled\n        if (runPostchecks) {\n          const postcheckResult = await this.runExpectationSteps(\n            driver,\n            operation.postcheck,\n            operation,\n            'postcheck',\n          );\n          if (!postcheckResult.ok) {\n            return postcheckResult;\n          }\n        }\n\n        executedOperations.push(operation);\n        operationsExecuted += 1;\n      } finally {\n        options.callbacks?.onOperationComplete?.(operation);\n      }\n    }\n    return ok({ operationsExecuted, executedOperations });\n  }\n\n  private async ensureControlTables(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    await this.executeStatement(driver, ensurePrismaContractSchemaStatement);\n    // Pre-1.0 zero-range guardrail: detect a pre-cleanup single-row\n    // marker table (no `space` column) and surface a structured failure\n    // rather than silently auto-migrating it to the per-space shape.\n    // See `specs/framework-mechanism.spec.md § 2`.\n    const legacyDetection = await this.detectLegacyMarkerShape(driver);\n    if (!legacyDetection.ok) {\n      return legacyDetection;\n    }\n    await this.executeStatement(driver, ensureMarkerTableStatement);\n    await this.executeStatement(driver, ensureLedgerTableStatement);\n    return okVoid();\n  }\n\n  private async detectLegacyMarkerShape(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    const result = await driver.query<{ column_name: string }>(\n      `select column_name\n         from information_schema.columns\n        where table_schema = 'prisma_contract'\n          and table_name = 'marker'`,\n    );\n    if (result.rows.length === 0) {\n      return okVoid();\n    }\n    const columns = new Set(result.rows.map((row) => row.column_name));\n    if (columns.has('space')) {\n      return okVoid();\n    }\n    return runnerFailure(\n      'LEGACY_MARKER_SHAPE',\n      'Legacy marker-table shape detected on prisma_contract.marker (no `space` column). ' +\n        'Prisma Next is in pre-1.0; the previous transitional auto-migration to the per-space-row schema has been removed. ' +\n        'Drop `prisma_contract.marker` and re-run `dbInit` to reinitialise from a clean baseline.',\n      {\n        meta: {\n          table: 'prisma_contract.marker',\n          columns: [...columns].sort(),\n        },\n      },\n    );\n  }\n\n  private async runExpectationSteps(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n    phase: 'precheck' | 'postcheck',\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    for (const step of steps) {\n      const result = await driver.query(step.sql, step.params ?? []);\n      if (!this.stepResultIsTrue(result.rows)) {\n        const code = phase === 'precheck' ? 'PRECHECK_FAILED' : 'POSTCHECK_FAILED';\n        return runnerFailure(\n          code,\n          `Operation ${operation.id} failed during ${phase}: ${step.description}`,\n          {\n            meta: {\n              operationId: operation.id,\n              phase,\n              stepDescription: step.description,\n            },\n          },\n        );\n      }\n    }\n    return okVoid();\n  }\n\n  private async runExecuteSteps(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n  ): Promise<Result<void, SqlMigrationRunnerFailure>> {\n    for (const step of steps) {\n      try {\n        await driver.query(step.sql, step.params ?? []);\n      } catch (error: unknown) {\n        if (SqlQueryError.is(error)) {\n          return runnerFailure(\n            'EXECUTION_FAILED',\n            `Operation ${operation.id} failed during execution: ${step.description}`,\n            {\n              why: error.message,\n              meta: {\n                operationId: operation.id,\n                stepDescription: step.description,\n                sql: step.sql,\n                sqlState: error.sqlState,\n                constraint: error.constraint,\n                table: error.table,\n                column: error.column,\n                detail: error.detail,\n              },\n            },\n          );\n        }\n        throw error;\n      }\n    }\n    return okVoid();\n  }\n\n  private stepResultIsTrue(rows: readonly Record<string, unknown>[]): boolean {\n    if (!rows || rows.length === 0) {\n      return false;\n    }\n    const firstRow = rows[0];\n    const firstValue = firstRow ? Object.values(firstRow)[0] : undefined;\n    if (typeof firstValue === 'boolean') {\n      return firstValue;\n    }\n    if (typeof firstValue === 'number') {\n      return firstValue !== 0;\n    }\n    if (typeof firstValue === 'string') {\n      const lower = firstValue.toLowerCase();\n      // PostgreSQL boolean representations: 't'/'f', 'true'/'false', '1'/'0'\n      if (lower === 't' || lower === 'true' || lower === '1') {\n        return true;\n      }\n      if (lower === 'f' || lower === 'false' || lower === '0') {\n        return false;\n      }\n      // For other strings, non-empty is truthy (though this case shouldn't occur for boolean checks)\n      return firstValue.length > 0;\n    }\n    return Boolean(firstValue);\n  }\n\n  private async expectationsAreSatisfied(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    steps: readonly SqlMigrationPlanOperationStep[],\n  ): Promise<boolean> {\n    if (steps.length === 0) {\n      return false;\n    }\n    for (const step of steps) {\n      const result = await driver.query(step.sql, step.params ?? []);\n      if (!this.stepResultIsTrue(result.rows)) {\n        return false;\n      }\n    }\n    return true;\n  }\n\n  private createPostcheckPreSatisfiedSkipRecord(\n    operation: SqlMigrationPlanOperation<PostgresPlanTargetDetails>,\n  ): SqlMigrationPlanOperation<PostgresPlanTargetDetails> {\n    // Clone and freeze existing meta if present\n    const clonedMeta = operation.meta ? cloneAndFreezeRecord(operation.meta) : undefined;\n\n    // Create frozen runner metadata\n    const runnerMeta = Object.freeze({\n      skipped: true,\n      reason: 'postcheck_pre_satisfied',\n    });\n\n    // Merge and freeze the combined meta\n    const mergedMeta = Object.freeze({\n      ...(clonedMeta ?? {}),\n      runner: runnerMeta,\n    });\n\n    // Clone and freeze arrays to prevent mutation\n    const frozenPostcheck = Object.freeze([...operation.postcheck]);\n\n    return Object.freeze({\n      id: operation.id,\n      label: operation.label,\n      ...ifDefined('summary', operation.summary),\n      operationClass: operation.operationClass,\n      target: operation.target, // Already frozen from plan creation\n      precheck: Object.freeze([]),\n      execute: Object.freeze([]),\n      postcheck: frozenPostcheck,\n      ...ifDefined('meta', operation.meta || mergedMeta ? mergedMeta : undefined),\n    });\n  }\n\n  private markerMatchesDestination(\n    marker: ContractMarkerRecord | null,\n    plan: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['plan'],\n  ): boolean {\n    if (!marker) {\n      return false;\n    }\n    if (marker.storageHash !== plan.destination.storageHash) {\n      return false;\n    }\n    if (plan.destination.profileHash && marker.profileHash !== plan.destination.profileHash) {\n      return false;\n    }\n    return true;\n  }\n\n  private enforcePolicyCompatibility(\n    policy: MigrationOperationPolicy,\n    operations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    const allowedClasses = new Set(policy.allowedOperationClasses);\n    for (const operation of operations) {\n      if (!allowedClasses.has(operation.operationClass)) {\n        return runnerFailure(\n          'POLICY_VIOLATION',\n          `Operation ${operation.id} has class \"${operation.operationClass}\" which is not allowed by policy.`,\n          {\n            why: `Policy only allows: ${policy.allowedOperationClasses.join(', ')}.`,\n            meta: {\n              operationId: operation.id,\n              operationClass: operation.operationClass,\n              allowedClasses: policy.allowedOperationClasses,\n            },\n          },\n        );\n      }\n    }\n    return okVoid();\n  }\n\n  private ensureMarkerCompatibility(\n    marker: ContractMarkerRecord | null,\n    plan: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['plan'],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    const origin = plan.origin ?? null;\n    if (!origin) {\n      // No origin assertion on the plan — the caller does not want origin validation.\n      // This is the case for `db update`, which introspects the live schema and does not\n      // rely on marker continuity. `db init` handles its own marker checks before the runner.\n      return okVoid();\n    }\n\n    if (!marker) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Missing contract marker: expected origin storage hash ${origin.storageHash}.`,\n        {\n          meta: {\n            expectedOriginStorageHash: origin.storageHash,\n          },\n        },\n      );\n    }\n    if (marker.storageHash !== origin.storageHash) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Existing contract marker (${marker.storageHash}) does not match plan origin (${origin.storageHash}).`,\n        {\n          meta: {\n            markerStorageHash: marker.storageHash,\n            expectedOriginStorageHash: origin.storageHash,\n          },\n        },\n      );\n    }\n    if (origin.profileHash && marker.profileHash !== origin.profileHash) {\n      return runnerFailure(\n        'MARKER_ORIGIN_MISMATCH',\n        `Existing contract marker profile hash (${marker.profileHash}) does not match plan origin profile hash (${origin.profileHash}).`,\n        {\n          meta: {\n            markerProfileHash: marker.profileHash,\n            expectedOriginProfileHash: origin.profileHash,\n          },\n        },\n      );\n    }\n    return okVoid();\n  }\n\n  private ensurePlanMatchesDestinationContract(\n    destination: SqlMigrationPlanContractInfo,\n    contract: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['destinationContract'],\n  ): Result<void, SqlMigrationRunnerFailure> {\n    if (destination.storageHash !== contract.storage.storageHash) {\n      return runnerFailure(\n        'DESTINATION_CONTRACT_MISMATCH',\n        `Plan destination storage hash (${destination.storageHash}) does not match provided contract storage hash (${contract.storage.storageHash}).`,\n        {\n          meta: {\n            planStorageHash: destination.storageHash,\n            contractStorageHash: contract.storage.storageHash,\n          },\n        },\n      );\n    }\n    if (\n      destination.profileHash &&\n      contract.profileHash &&\n      destination.profileHash !== contract.profileHash\n    ) {\n      return runnerFailure(\n        'DESTINATION_CONTRACT_MISMATCH',\n        `Plan destination profile hash (${destination.profileHash}) does not match provided contract profile hash (${contract.profileHash}).`,\n        {\n          meta: {\n            planProfileHash: destination.profileHash,\n            contractProfileHash: contract.profileHash,\n          },\n        },\n      );\n    }\n    return okVoid();\n  }\n\n  private async upsertMarker(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n    existingMarker: ContractMarkerRecord | null,\n    space: string,\n  ): Promise<void> {\n    const incomingInvariants = options.plan.providedInvariants ?? [];\n    const writeStatements = buildMergeMarkerStatements({\n      space,\n      storageHash: options.plan.destination.storageHash,\n      profileHash:\n        options.plan.destination.profileHash ??\n        options.destinationContract.profileHash ??\n        options.plan.destination.storageHash,\n      contractJson: options.destinationContract,\n      canonicalVersion: null,\n      meta: {},\n      invariants: incomingInvariants,\n    });\n    const statement = existingMarker ? writeStatements.update : writeStatements.insert;\n    await this.executeStatement(driver, statement);\n  }\n\n  private async recordLedgerEntry(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,\n    existingMarker: ContractMarkerRecord | null,\n    executedOperations: readonly SqlMigrationPlanOperation<PostgresPlanTargetDetails>[],\n  ): Promise<void> {\n    const ledgerStatement = buildLedgerInsertStatement({\n      originStorageHash: existingMarker?.storageHash ?? null,\n      originProfileHash: existingMarker?.profileHash ?? null,\n      destinationStorageHash: options.plan.destination.storageHash,\n      destinationProfileHash:\n        options.plan.destination.profileHash ??\n        options.destinationContract.profileHash ??\n        options.plan.destination.storageHash,\n      contractJsonBefore: existingMarker?.contractJson ?? null,\n      contractJsonAfter: options.destinationContract,\n      operations: executedOperations,\n    });\n    await this.executeStatement(driver, ledgerStatement);\n  }\n\n  private async acquireLock(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    key: string,\n  ): Promise<void> {\n    await driver.query('select pg_advisory_xact_lock(hashtext($1))', [key]);\n  }\n\n  private async beginTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('BEGIN');\n  }\n\n  private async commitTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('COMMIT');\n  }\n\n  private async rollbackTransaction(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n  ): Promise<void> {\n    await driver.query('ROLLBACK');\n  }\n\n  private async executeStatement(\n    driver: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>['driver'],\n    statement: SqlStatement,\n  ): Promise<void> {\n    if (statement.params.length > 0) {\n      await driver.query(statement.sql, statement.params);\n      return;\n    }\n    await driver.query(statement.sql);\n  }\n}\n","import type { Contract } from '@prisma-next/contract/types';\nimport { SqlSchemaVerifierBase } from '@prisma-next/family-sql/ir';\nimport type { SchemaIssue, SchemaVerifyOptions } from '@prisma-next/framework-components/control';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlSchemaIR } from '@prisma-next/sql-schema-ir/types';\n\n/**\n * Postgres target `SchemaVerifier` concretion. Plugs into the\n * SQL-shared verification surface; production verification today still\n * routes through the legacy `verifySqlSchema` entry point, which\n * carries options (codec hooks, normalizers, framework components)\n * that the framework-level `SchemaVerifyOptions` shape does not yet\n * surface.\n *\n * The hooks return the empty list pending the call-site migration that\n * routes the existing verifier behaviour through the SPI — at that\n * point `verifyCommonSqlSchema` will likely lift onto the family base\n * (mirroring `verifyCommonMongoSchema`) and `verifyTargetExtensions`\n * will house Postgres-only kinds (functions, RLS policies in a future\n * project).\n */\nexport class PostgresSchemaVerifier extends SqlSchemaVerifierBase<\n  Contract<SqlStorage>,\n  SqlSchemaIR\n> {\n  protected verifyCommonSqlSchema(\n    _options: SchemaVerifyOptions<Contract<SqlStorage>, SqlSchemaIR>,\n  ): readonly SchemaIssue[] {\n    return [];\n  }\n\n  protected verifyTargetExtensions(\n    _options: SchemaVerifyOptions<Contract<SqlStorage>, SqlSchemaIR>,\n  ): readonly SchemaIssue[] {\n    return [];\n  }\n}\n","import type { ColumnDefault, Contract } from '@prisma-next/contract/types';\nimport type {\n  SqlControlFamilyInstance,\n  SqlControlTargetDescriptor,\n} from '@prisma-next/family-sql/control';\nimport { contractToSchemaIR, extractCodecControlHooks } from '@prisma-next/family-sql/control';\nimport type { TargetBoundComponentDescriptor } from '@prisma-next/framework-components/components';\nimport type {\n  ControlTargetInstance,\n  MigrationRunner,\n} from '@prisma-next/framework-components/control';\nimport type { SqlStorage, StorageColumn } from '@prisma-next/sql-contract/types';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { postgresTargetDescriptorMeta } from '../core/descriptor-meta';\nimport {\n  enumStorageCompoundKey,\n  resolveDdlSchemaForNamespaceStorage,\n} from '../core/migrations/enum-planning';\nimport { createPostgresMigrationPlanner } from '../core/migrations/planner';\nimport { renderDefaultLiteral } from '../core/migrations/planner-ddl-builders';\nimport type { PostgresPlanTargetDetails } from '../core/migrations/planner-target-details';\nimport { createPostgresMigrationRunner } from '../core/migrations/runner';\nimport { PostgresContractSerializer } from '../core/postgres-contract-serializer';\nimport { PostgresSchemaVerifier } from '../core/postgres-schema-verifier';\n\nfunction buildNativeTypeExpander(\n  frameworkComponents?: ReadonlyArray<TargetBoundComponentDescriptor<'sql', 'postgres'>>,\n) {\n  if (!frameworkComponents) {\n    return undefined;\n  }\n  const codecHooks = extractCodecControlHooks(frameworkComponents);\n  return (input: {\n    readonly nativeType: string;\n    readonly codecId?: string;\n    readonly typeParams?: Record<string, unknown>;\n  }) => {\n    if (!input.typeParams) return input.nativeType;\n    // Mirror `renderExpectedNativeType` in verify-sql-schema: when a codec\n    // has no `expandNativeType` hook (e.g. `pg/enum@1`, whose typeParams\n    // describe the value set rather than a DDL suffix), fall back to the\n    // bare native type rather than throwing. Throwing here would reject\n    // every plan involving an enum-/values-typed column as soon as its\n    // `typeRef` resolved to a `StorageTypeInstance` carrying typeParams.\n    if (!input.codecId) return input.nativeType;\n    const hooks = codecHooks.get(input.codecId);\n    if (!hooks?.expandNativeType) return input.nativeType;\n    return hooks.expandNativeType(input);\n  };\n}\n\nexport function postgresRenderDefault(def: ColumnDefault, column: StorageColumn): string {\n  if (def.kind === 'function') {\n    return def.expression;\n  }\n  return renderDefaultLiteral(def.value, column);\n}\n\nconst postgresTargetDescriptor: SqlControlTargetDescriptor<'postgres', PostgresPlanTargetDetails> =\n  {\n    ...postgresTargetDescriptorMeta,\n    contractSerializer: new PostgresContractSerializer(),\n    schemaVerifier: new PostgresSchemaVerifier(),\n    migrations: {\n      createPlanner(_family: SqlControlFamilyInstance) {\n        return createPostgresMigrationPlanner();\n      },\n      createRunner(family) {\n        return createPostgresMigrationRunner(family) as MigrationRunner<'sql', 'postgres'>;\n      },\n      contractToSchema(contract, frameworkComponents) {\n        const expander = buildNativeTypeExpander(frameworkComponents);\n        // Blind cast: the framework SPI signature\n        // (`control-migration-types.ts § contractToSchema`) types\n        // `contract` as the generic `Contract | null`. Inside the\n        // postgres target descriptor we know any contract reaching\n        // this method is SQL-family — the family contract resolver\n        // would have refused to construct a postgres target binding\n        // otherwise — so we narrow the generic to\n        // `Contract<SqlStorage>` for the lowering call.\n        return contractToSchemaIR(contract as unknown as Contract<SqlStorage> | null, {\n          annotationNamespace: 'pg',\n          ...ifDefined('expandNativeType', expander),\n          renderDefault: postgresRenderDefault,\n          // Schema-qualify enum annotation keys so the projected \"from\" IR's\n          // `storageTypes` match `readExistingEnumValues` on the read side\n          // (the contract-to-contract `migration plan` path). The DDL-schema\n          // resolution + compound-key format stay here in the target layer;\n          // the family projector treats the returned string as opaque.\n          // `undefined` schema IR ⇒ the unbound coordinate resolves to the\n          // default `public` landing schema, matching the read-side fallback.\n          resolveEnumStorageKey: (storage, namespaceId, nativeType) =>\n            enumStorageCompoundKey(\n              resolveDdlSchemaForNamespaceStorage(storage, namespaceId, undefined),\n              nativeType,\n            ),\n        });\n      },\n    },\n    create(): ControlTargetInstance<'sql', 'postgres'> {\n      return {\n        familyId: 'sql',\n        targetId: 'postgres',\n      };\n    },\n    /**\n     * Direct method for SQL-specific usage.\n     * @deprecated Use migrations.createPlanner() for CLI compatibility.\n     */\n    createPlanner(_family: SqlControlFamilyInstance) {\n      return createPostgresMigrationPlanner();\n    },\n    /**\n     * Direct method for SQL-specific usage.\n     * @deprecated Use migrations.createRunner() for CLI compatibility.\n     */\n    createRunner(family) {\n      return createPostgresMigrationRunner(family);\n    },\n  };\n\nexport default postgresTargetDescriptor;\n"],"mappings":";;;;;;;;;;;;;;;;AA8CA,MAAM,iBAA+B,EACnC,eAAe,SACjB;AAEA,MAAM,cAAc;;;;;AAMpB,SAAS,qBAAwD,OAAa;CAC5E,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,KAAK,GAC3C,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GAC1B,OAAO,OAAO;MACT,IAAI,MAAM,QAAQ,GAAG,GAE1B,OAAO,OAAO,OAAO,OAAO,CAAC,GAAG,GAAG,CAAC;MAC/B,IAAI,OAAO,QAAQ,UAExB,OAAO,OAAO,qBAAqB,GAA8B;MAGjE,OAAO,OAAO;CAGlB,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAAgB,8BACd,QACA,SAAgC,CAAC,GACc;CAC/C,OAAO,IAAI,wBAAwB,QAAQ;EAAE,GAAG;EAAgB,GAAG;CAAO,CAAC;AAC7E;AAEA,IAAM,0BAAN,MAAuF;CAElE;CACA;CAFnB,YACE,QACA,QACA;EAFiB,KAAA,SAAA;EACA,KAAA,SAAA;CAChB;;;;;;CAOH,MAAM,oBACJ,SACmC;EACnC,MAAM,SAAS,QAAQ,cAAc,KAAK,OAAO;EACjD,MAAM,SAAS,QAAQ;EACvB,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,QAAQ,KAAK,SAChE,MAAM,IAAI,MACR,sCAAsC,QAAQ,MAAM,iCAAiC,QAAQ,KAAK,QAAQ,EAC5G;EAEF,MAAM,QAAQ,QAAQ,KAAK;EAC3B,MAAM,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG;EAI5C,MAAM,mBAAmB,KAAK,qCAC5B,QAAQ,KAAK,aACb,QAAQ,mBACV;EACA,IAAI,CAAC,iBAAiB,IAAI,OAAO;EAEjC,MAAM,cAAc,KAAK,2BAA2B,QAAQ,QAAQ,QAAQ,KAAK,UAAU;EAC3F,IAAI,CAAC,YAAY,IAAI,OAAO;EAE5B,MAAM,KAAK,YAAY,QAAQ,OAAO;EACtC,MAAM,eAAe,MAAM,KAAK,oBAAoB,MAAM;EAC1D,IAAI,CAAC,aAAa,IAAI,OAAO;EAC7B,MAAM,iBAAiB,MAAM,KAAK,OAAO,WAAW;GAAE;GAAQ;EAAM,CAAC;EAErE,MAAM,cAAc,KAAK,0BAA0B,gBAAgB,QAAQ,IAAI;EAC/E,IAAI,CAAC,YAAY,IAAI,OAAO;EAE5B,MAAM,sBAAsB,KAAK,yBAAyB,gBAAgB,QAAQ,IAAI;EACtF,MAAM,aAAa,QAAQ,KAAK,QAAQ,gBAAgB,QAAQ,KAAK,YAAY;EACjF,MAAM,iBAAiB,uBAAuB,QAAQ,KAAK,UAAU,QAAQ,CAAC;EAC9E,IAAI;EAEJ,IAAI,gBACF,aAAa;GAAE,oBAAoB;GAAG,oBAAoB,CAAC;EAAE;OACxD;GACL,MAAM,cAAc,MAAM,KAAK,UAAU,QAAQ,OAAO;GACxD,IAAI,CAAC,YAAY,IAAI,OAAO;GAC5B,aAAa,YAAY;EAC3B;EAOA,IAAI,UAAU,cAAc;GAC1B,MAAM,WAAW,MAAM,KAAK,OAAO,WAAW;IAC5C;IACA,UAAU,QAAQ;GACpB,CAAC;GACD,MAAM,qBAAqB,gBAAgB;IACzC,UAAU,QAAQ;IAClB,QAAQ;IACR,QAAQ,QAAQ,sBAAsB;IACtC,SAAS,QAAQ,WAAW,CAAC;IAC7B,sBAAsB,KAAK,OAAO;IAClC,qBAAqB,QAAQ;IAC7B,kBAAkB;IAClB,qBAAqB;IACrB,2BAA2B,gCACzB,QAAQ,oBAAoB,OAC9B;GACF,CAAC;GACD,IAAI,CAAC,mBAAmB,IACtB,OAAO,cAAc,wBAAwB,mBAAmB,SAAS;IACvE,KAAK;IACL,MAAM,EAAE,QAAQ,mBAAmB,OAAO,OAAO;GACnD,CAAC;EAEL;EAEA,MAAM,qBAAqB,QAAQ,KAAK,sBAAsB,CAAC;EAC/D,MAAM,qBAAqB,IAAI,IAAI,gBAAgB,cAAc,CAAC,CAAC;EACnE,MAAM,6BAA6B,mBAAmB,OAAO,OAAO,mBAAmB,IAAI,EAAE,CAAC;EAI9F,IAAI,EAFF,cAAc,WAAW,uBAAuB,KAAK,6BAElC;GACnB,MAAM,KAAK,aAAa,QAAQ,SAAS,gBAAgB,KAAK;GAC9D,MAAM,KAAK,kBAAkB,QAAQ,SAAS,gBAAgB,WAAW,kBAAkB;EAC7F;EAEA,OAAO,cAAc;GACnB,mBAAmB,QAAQ,KAAK,WAAW;GAC3C,oBAAoB,WAAW;EACjC,CAAC;CACH;CAEA,MAAM,QAAQ,SAKqB;EACjC,MAAM,SAAS,QAAQ;EACvB,MAAM,kBAAkB,QAAQ;EAEhC,IAAI,gBAAgB,WAAW,GAC7B,OAAO,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;EAGnC,MAAM,KAAK,iBAAiB,MAAM;EAClC,IAAI,YAAY;EAChB,IAAI;GACF,MAAM,kBAGD,CAAC;GACN,KAAK,MAAM,gBAAgB,iBAAiB;IAC1C,MAAM,QAAQ,aAAa,SAAS,aAAa,KAAK;IACtD,MAAM,SAAS,MAAM,KAAK,oBAAoB;KAAE,GAAG;KAAc;KAAQ;IAAM,CAAC;IAChF,IAAI,CAAC,OAAO,IACV,OAAO,MAAM;KAAE,GAAG,OAAO;KAAS,cAAc;IAAM,CAAC;IAEzD,gBAAgB,KAAK;KAAE;KAAO,OAAO,OAAO;IAAM,CAAC;GACrD;GAEA,MAAM,KAAK,kBAAkB,MAAM;GACnC,YAAY;GACZ,OAAO,GAAG,EAAE,gBAAgB,CAAC;EAC/B,UAAU;GACR,IAAI,CAAC,WACH,MAAM,KAAK,oBAAoB,MAAM;EAEzC;CACF;CAEA,MAAc,UACZ,QACA,SACmE;EACnE,MAAM,SAAS,QAAQ;EACvB,MAAM,eAAe,QAAQ,cAAc;EAC3C,MAAM,gBAAgB,QAAQ,eAAe;EAC7C,MAAM,iBAAiB,QAAQ,sBAAsB;EAErD,IAAI,qBAAqB;EACzB,MAAM,qBAAkF,CAAC;EACzF,KAAK,MAAM,aAAa,QAAQ,KAAK,YAAY;GAC/C,QAAQ,WAAW,mBAAmB,SAAS;GAC/C,IAAI;IAEF,IAAI,iBAAiB;SAKf,MAJoC,KAAK,yBAC3C,QACA,UAAU,SACZ,GAC+B;MAC7B,mBAAmB,KAAK,KAAK,sCAAsC,SAAS,CAAC;MAC7E;KACF;;IAIF,IAAI,cAAc;KAChB,MAAM,iBAAiB,MAAM,KAAK,oBAChC,QACA,UAAU,UACV,WACA,UACF;KACA,IAAI,CAAC,eAAe,IAClB,OAAO;IAEX;IAEA,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,QAAQ,UAAU,SAAS,SAAS;IACrF,IAAI,CAAC,cAAc,IACjB,OAAO;IAIT,IAAI,eAAe;KACjB,MAAM,kBAAkB,MAAM,KAAK,oBACjC,QACA,UAAU,WACV,WACA,WACF;KACA,IAAI,CAAC,gBAAgB,IACnB,OAAO;IAEX;IAEA,mBAAmB,KAAK,SAAS;IACjC,sBAAsB;GACxB,UAAU;IACR,QAAQ,WAAW,sBAAsB,SAAS;GACpD;EACF;EACA,OAAO,GAAG;GAAE;GAAoB;EAAmB,CAAC;CACtD;CAEA,MAAc,oBACZ,QACkD;EAClD,MAAM,KAAK,iBAAiB,QAAQ,mCAAmC;EAKvE,MAAM,kBAAkB,MAAM,KAAK,wBAAwB,MAAM;EACjE,IAAI,CAAC,gBAAgB,IACnB,OAAO;EAET,MAAM,KAAK,iBAAiB,QAAQ,0BAA0B;EAC9D,MAAM,KAAK,iBAAiB,QAAQ,0BAA0B;EAC9D,OAAO,OAAO;CAChB;CAEA,MAAc,wBACZ,QACkD;EAClD,MAAM,SAAS,MAAM,OAAO,MAC1B;;;oCAIF;EACA,IAAI,OAAO,KAAK,WAAW,GACzB,OAAO,OAAO;EAEhB,MAAM,UAAU,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC;EACjE,IAAI,QAAQ,IAAI,OAAO,GACrB,OAAO,OAAO;EAEhB,OAAO,cACL,uBACA,gSAGA,EACE,MAAM;GACJ,OAAO;GACP,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK;EAC7B,EACF,CACF;CACF;CAEA,MAAc,oBACZ,QACA,OACA,WACA,OACkD;EAClD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,SAAS,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;GAC7D,IAAI,CAAC,KAAK,iBAAiB,OAAO,IAAI,GAEpC,OAAO,cADM,UAAU,aAAa,oBAAoB,oBAGtD,aAAa,UAAU,GAAG,iBAAiB,MAAM,IAAI,KAAK,eAC1D,EACE,MAAM;IACJ,aAAa,UAAU;IACvB;IACA,iBAAiB,KAAK;GACxB,EACF,CACF;EAEJ;EACA,OAAO,OAAO;CAChB;CAEA,MAAc,gBACZ,QACA,OACA,WACkD;EAClD,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;EAChD,SAAS,OAAgB;GACvB,IAAI,cAAc,GAAG,KAAK,GACxB,OAAO,cACL,oBACA,aAAa,UAAU,GAAG,4BAA4B,KAAK,eAC3D;IACE,KAAK,MAAM;IACX,MAAM;KACJ,aAAa,UAAU;KACvB,iBAAiB,KAAK;KACtB,KAAK,KAAK;KACV,UAAU,MAAM;KAChB,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,QAAQ,MAAM;KACd,QAAQ,MAAM;IAChB;GACF,CACF;GAEF,MAAM;EACR;EAEF,OAAO,OAAO;CAChB;CAEA,iBAAyB,MAAmD;EAC1E,IAAI,CAAC,QAAQ,KAAK,WAAW,GAC3B,OAAO;EAET,MAAM,WAAW,KAAK;EACtB,MAAM,aAAa,WAAW,OAAO,OAAO,QAAQ,EAAE,KAAK,KAAA;EAC3D,IAAI,OAAO,eAAe,WACxB,OAAO;EAET,IAAI,OAAO,eAAe,UACxB,OAAO,eAAe;EAExB,IAAI,OAAO,eAAe,UAAU;GAClC,MAAM,QAAQ,WAAW,YAAY;GAErC,IAAI,UAAU,OAAO,UAAU,UAAU,UAAU,KACjD,OAAO;GAET,IAAI,UAAU,OAAO,UAAU,WAAW,UAAU,KAClD,OAAO;GAGT,OAAO,WAAW,SAAS;EAC7B;EACA,OAAO,QAAQ,UAAU;CAC3B;CAEA,MAAc,yBACZ,QACA,OACkB;EAClB,IAAI,MAAM,WAAW,GACnB,OAAO;EAET,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,SAAS,MAAM,OAAO,MAAM,KAAK,KAAK,KAAK,UAAU,CAAC,CAAC;GAC7D,IAAI,CAAC,KAAK,iBAAiB,OAAO,IAAI,GACpC,OAAO;EAEX;EACA,OAAO;CACT;CAEA,sCACE,WACsD;EAEtD,MAAM,aAAa,UAAU,OAAO,qBAAqB,UAAU,IAAI,IAAI,KAAA;EAG3E,MAAM,aAAa,OAAO,OAAO;GAC/B,SAAS;GACT,QAAQ;EACV,CAAC;EAGD,MAAM,aAAa,OAAO,OAAO;GAC/B,GAAI,cAAc,CAAC;GACnB,QAAQ;EACV,CAAC;EAGD,MAAM,kBAAkB,OAAO,OAAO,CAAC,GAAG,UAAU,SAAS,CAAC;EAE9D,OAAO,OAAO,OAAO;GACnB,IAAI,UAAU;GACd,OAAO,UAAU;GACjB,GAAG,UAAU,WAAW,UAAU,OAAO;GACzC,gBAAgB,UAAU;GAC1B,QAAQ,UAAU;GAClB,UAAU,OAAO,OAAO,CAAC,CAAC;GAC1B,SAAS,OAAO,OAAO,CAAC,CAAC;GACzB,WAAW;GACX,GAAG,UAAU,QAAQ,UAAU,QAAQ,aAAa,aAAa,KAAA,CAAS;EAC5E,CAAC;CACH;CAEA,yBACE,QACA,MACS;EACT,IAAI,CAAC,QACH,OAAO;EAET,IAAI,OAAO,gBAAgB,KAAK,YAAY,aAC1C,OAAO;EAET,IAAI,KAAK,YAAY,eAAe,OAAO,gBAAgB,KAAK,YAAY,aAC1E,OAAO;EAET,OAAO;CACT;CAEA,2BACE,QACA,YACyC;EACzC,MAAM,iBAAiB,IAAI,IAAI,OAAO,uBAAuB;EAC7D,KAAK,MAAM,aAAa,YACtB,IAAI,CAAC,eAAe,IAAI,UAAU,cAAc,GAC9C,OAAO,cACL,oBACA,aAAa,UAAU,GAAG,cAAc,UAAU,eAAe,oCACjE;GACE,KAAK,uBAAuB,OAAO,wBAAwB,KAAK,IAAI,EAAE;GACtE,MAAM;IACJ,aAAa,UAAU;IACvB,gBAAgB,UAAU;IAC1B,gBAAgB,OAAO;GACzB;EACF,CACF;EAGJ,OAAO,OAAO;CAChB;CAEA,0BACE,QACA,MACyC;EACzC,MAAM,SAAS,KAAK,UAAU;EAC9B,IAAI,CAAC,QAIH,OAAO,OAAO;EAGhB,IAAI,CAAC,QACH,OAAO,cACL,0BACA,yDAAyD,OAAO,YAAY,IAC5E,EACE,MAAM,EACJ,2BAA2B,OAAO,YACpC,EACF,CACF;EAEF,IAAI,OAAO,gBAAgB,OAAO,aAChC,OAAO,cACL,0BACA,6BAA6B,OAAO,YAAY,gCAAgC,OAAO,YAAY,KACnG,EACE,MAAM;GACJ,mBAAmB,OAAO;GAC1B,2BAA2B,OAAO;EACpC,EACF,CACF;EAEF,IAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,aACtD,OAAO,cACL,0BACA,0CAA0C,OAAO,YAAY,6CAA6C,OAAO,YAAY,KAC7H,EACE,MAAM;GACJ,mBAAmB,OAAO;GAC1B,2BAA2B,OAAO;EACpC,EACF,CACF;EAEF,OAAO,OAAO;CAChB;CAEA,qCACE,aACA,UACyC;EACzC,IAAI,YAAY,gBAAgB,SAAS,QAAQ,aAC/C,OAAO,cACL,iCACA,kCAAkC,YAAY,YAAY,mDAAmD,SAAS,QAAQ,YAAY,KAC1I,EACE,MAAM;GACJ,iBAAiB,YAAY;GAC7B,qBAAqB,SAAS,QAAQ;EACxC,EACF,CACF;EAEF,IACE,YAAY,eACZ,SAAS,eACT,YAAY,gBAAgB,SAAS,aAErC,OAAO,cACL,iCACA,kCAAkC,YAAY,YAAY,mDAAmD,SAAS,YAAY,KAClI,EACE,MAAM;GACJ,iBAAiB,YAAY;GAC7B,qBAAqB,SAAS;EAChC,EACF,CACF;EAEF,OAAO,OAAO;CAChB;CAEA,MAAc,aACZ,QACA,SACA,gBACA,OACe;EACf,MAAM,qBAAqB,QAAQ,KAAK,sBAAsB,CAAC;EAC/D,MAAM,kBAAkB,2BAA2B;GACjD;GACA,aAAa,QAAQ,KAAK,YAAY;GACtC,aACE,QAAQ,KAAK,YAAY,eACzB,QAAQ,oBAAoB,eAC5B,QAAQ,KAAK,YAAY;GAC3B,cAAc,QAAQ;GACtB,kBAAkB;GAClB,MAAM,CAAC;GACP,YAAY;EACd,CAAC;EACD,MAAM,YAAY,iBAAiB,gBAAgB,SAAS,gBAAgB;EAC5E,MAAM,KAAK,iBAAiB,QAAQ,SAAS;CAC/C;CAEA,MAAc,kBACZ,QACA,SACA,gBACA,oBACe;EACf,MAAM,kBAAkB,2BAA2B;GACjD,mBAAmB,gBAAgB,eAAe;GAClD,mBAAmB,gBAAgB,eAAe;GAClD,wBAAwB,QAAQ,KAAK,YAAY;GACjD,wBACE,QAAQ,KAAK,YAAY,eACzB,QAAQ,oBAAoB,eAC5B,QAAQ,KAAK,YAAY;GAC3B,oBAAoB,gBAAgB,gBAAgB;GACpD,mBAAmB,QAAQ;GAC3B,YAAY;EACd,CAAC;EACD,MAAM,KAAK,iBAAiB,QAAQ,eAAe;CACrD;CAEA,MAAc,YACZ,QACA,KACe;EACf,MAAM,OAAO,MAAM,8CAA8C,CAAC,GAAG,CAAC;CACxE;CAEA,MAAc,iBACZ,QACe;EACf,MAAM,OAAO,MAAM,OAAO;CAC5B;CAEA,MAAc,kBACZ,QACe;EACf,MAAM,OAAO,MAAM,QAAQ;CAC7B;CAEA,MAAc,oBACZ,QACe;EACf,MAAM,OAAO,MAAM,UAAU;CAC/B;CAEA,MAAc,iBACZ,QACA,WACe;EACf,IAAI,UAAU,OAAO,SAAS,GAAG;GAC/B,MAAM,OAAO,MAAM,UAAU,KAAK,UAAU,MAAM;GAClD;EACF;EACA,MAAM,OAAO,MAAM,UAAU,GAAG;CAClC;AACF;;;;;;;;;;;;;;;;;;AClpBA,IAAa,yBAAb,cAA4C,sBAG1C;CACA,sBACE,UACwB;EACxB,OAAO,CAAC;CACV;CAEA,uBACE,UACwB;EACxB,OAAO,CAAC;CACV;AACF;;;ACXA,SAAS,wBACP,qBACA;CACA,IAAI,CAAC,qBACH;CAEF,MAAM,aAAa,yBAAyB,mBAAmB;CAC/D,QAAQ,UAIF;EACJ,IAAI,CAAC,MAAM,YAAY,OAAO,MAAM;EAOpC,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM;EACjC,MAAM,QAAQ,WAAW,IAAI,MAAM,OAAO;EAC1C,IAAI,CAAC,OAAO,kBAAkB,OAAO,MAAM;EAC3C,OAAO,MAAM,iBAAiB,KAAK;CACrC;AACF;AAEA,SAAgB,sBAAsB,KAAoB,QAA+B;CACvF,IAAI,IAAI,SAAS,YACf,OAAO,IAAI;CAEb,OAAO,qBAAqB,IAAI,OAAO,MAAM;AAC/C;AAEA,MAAM,2BACJ;CACE,GAAG;CACH,oBAAoB,IAAI,2BAA2B;CACnD,gBAAgB,IAAI,uBAAuB;CAC3C,YAAY;EACV,cAAc,SAAmC;GAC/C,OAAO,+BAA+B;EACxC;EACA,aAAa,QAAQ;GACnB,OAAO,8BAA8B,MAAM;EAC7C;EACA,iBAAiB,UAAU,qBAAqB;GAU9C,OAAO,mBAAmB,UAAoD;IAC5E,qBAAqB;IACrB,GAAG,UAAU,oBAXE,wBAAwB,mBAWC,CAAC;IACzC,eAAe;IAQf,wBAAwB,SAAS,aAAa,eAC5C,uBACE,oCAAoC,SAAS,aAAa,KAAA,CAAS,GACnE,UACF;GACJ,CAAC;EACH;CACF;CACA,SAAmD;EACjD,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;;;;;CAKA,cAAc,SAAmC;EAC/C,OAAO,+BAA+B;CACxC;;;;;CAKA,aAAa,QAAQ;EACnB,OAAO,8BAA8B,MAAM;CAC7C;AACF"}

package/dist/statement-builders-vImtdfmM.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"statement-builders-vImtdfmM.mjs","names":["APP_SPACE_ID"],"sources":["../src/core/migrations/statement-builders.ts"],"sourcesContent":["import { APP_SPACE_ID } from '@prisma-next/framework-components/control';\n\nexport { APP_SPACE_ID };\n\nexport interface SqlStatement {\n  readonly sql: string;\n  readonly params: readonly unknown[];\n}\n\nexport const ensurePrismaContractSchemaStatement: SqlStatement = {\n  sql: 'create schema if not exists prisma_contract',\n  params: [],\n};\n\n/**\n * Schema for `prisma_contract.marker`. The `space text` primary key\n * supports one row per loaded contract space (`'app'`,\n * `'<extension-id>'`, …); on a brand-new database `CREATE TABLE IF NOT\n * EXISTS` produces this shape directly. The migration runner detects\n * pre-1.0 single-row markers (no `space` column) at boot and fails with\n * a structured `LEGACY_MARKER_SHAPE` error rather than auto-migrating —\n * see `specs/framework-mechanism.spec.md § 2`.\n */\nexport const ensureMarkerTableStatement: SqlStatement = {\n  sql: `create table if not exists prisma_contract.marker (\n    space text not null primary key default '${APP_SPACE_ID}',\n    core_hash text not null,\n    profile_hash text not null,\n    contract_json jsonb,\n    canonical_version int,\n    updated_at timestamptz not null default now(),\n    app_tag text,\n    meta jsonb not null default '{}',\n    invariants text[] not null default '{}'\n  )`,\n  params: [],\n};\n\nexport const ensureLedgerTableStatement: SqlStatement = {\n  sql: `create table if not exists prisma_contract.ledger (\n    id bigserial primary key,\n    created_at timestamptz not null default now(),\n    origin_core_hash text,\n    origin_profile_hash text,\n    destination_core_hash text not null,\n    destination_profile_hash text,\n    contract_json_before jsonb,\n    contract_json_after jsonb,\n    operations jsonb not null\n  )`,\n  params: [],\n};\n\nexport interface MergeMarkerInput {\n  /**\n   * Logical space identifier for this marker row. Required at every\n   * call site so the type system surfaces every place that needs to\n   * thread the value (rather than letting an `?? APP_SPACE_ID`\n   * fall-through silently collapse multi-space markers onto the\n   * `'app'` row). App-plan callers pass {@link APP_SPACE_ID}\n   * (`'app'`); per-extension callers (planner / runner / verifier\n   * extensions over contract spaces) pass the extension's space id.\n   */\n  readonly space: string;\n  readonly storageHash: string;\n  readonly profileHash: string;\n  readonly contractJson?: unknown;\n  readonly canonicalVersion?: number | null;\n  readonly appTag?: string | null;\n  readonly meta?: Record<string, unknown>;\n  /**\n   * Invariants to merge into `marker.invariants`. INSERT writes them as\n   * the initial value (callers are expected to pass a sorted, deduped\n   * array). UPDATE merges them with the existing column server-side via\n   * a single atomic SQL expression.\n   */\n  readonly invariants: readonly string[];\n}\n\nexport function buildMergeMarkerStatements(input: MergeMarkerInput): {\n  readonly insert: SqlStatement;\n  readonly update: SqlStatement;\n} {\n  const params: readonly unknown[] = [\n    input.space,\n    input.storageHash,\n    input.profileHash,\n    jsonParam(input.contractJson),\n    input.canonicalVersion ?? null,\n    input.appTag ?? null,\n    jsonParam(input.meta ?? {}),\n    input.invariants,\n  ];\n\n  return {\n    insert: {\n      sql: `insert into prisma_contract.marker (\n        space,\n        core_hash,\n        profile_hash,\n        contract_json,\n        canonical_version,\n        updated_at,\n        app_tag,\n        meta,\n        invariants\n      ) values (\n        $1,\n        $2,\n        $3,\n        $4::jsonb,\n        $5,\n        now(),\n        $6,\n        $7::jsonb,\n        $8::text[]\n      )`,\n      params,\n    },\n    update: {\n      // `invariants = array(select distinct unnest(invariants || $8::text[]) order by 1)`\n      // reads the current column value under the UPDATE's row lock, unions\n      // with the incoming array, dedupes, and sorts ascending — single\n      // statement, atomic, no read-then-write window.\n      sql: `update prisma_contract.marker set\n        core_hash = $2,\n        profile_hash = $3,\n        contract_json = $4::jsonb,\n        canonical_version = $5,\n        updated_at = now(),\n        app_tag = $6,\n        meta = $7::jsonb,\n        invariants = array(select distinct unnest(invariants || $8::text[]) order by 1)\n      where space = $1`,\n      params,\n    },\n  };\n}\n\nexport interface LedgerInsertInput {\n  readonly originStorageHash?: string | null;\n  readonly originProfileHash?: string | null;\n  readonly destinationStorageHash: string;\n  readonly destinationProfileHash?: string | null;\n  readonly contractJsonBefore?: unknown;\n  readonly contractJsonAfter?: unknown;\n  readonly operations: unknown;\n}\n\nexport function buildLedgerInsertStatement(input: LedgerInsertInput): SqlStatement {\n  return {\n    sql: `insert into prisma_contract.ledger (\n      origin_core_hash,\n      origin_profile_hash,\n      destination_core_hash,\n      destination_profile_hash,\n      contract_json_before,\n      contract_json_after,\n      operations\n    ) values (\n      $1,\n      $2,\n      $3,\n      $4,\n      $5::jsonb,\n      $6::jsonb,\n      $7::jsonb\n    )`,\n    params: [\n      input.originStorageHash ?? null,\n      input.originProfileHash ?? null,\n      input.destinationStorageHash,\n      input.destinationProfileHash ?? null,\n      jsonParam(input.contractJsonBefore),\n      jsonParam(input.contractJsonAfter),\n      jsonParam(input.operations),\n    ],\n  };\n}\n\nfunction jsonParam(value: unknown): string {\n  return JSON.stringify(value ?? null);\n}\n"],"mappings":";;AASA,MAAa,sCAAoD;CAC/D,KAAK;CACL,QAAQ,CAAC;AACX;;;;;;;;;;AAWA,MAAa,6BAA2C;CACtD,KAAK;+CACwCA,eAAa;;;;;;;;;;CAU1D,QAAQ,CAAC;AACX;AAEA,MAAa,6BAA2C;CACtD,KAAK;;;;;;;;;;;CAWL,QAAQ,CAAC;AACX;AA4BA,SAAgB,2BAA2B,OAGzC;CACA,MAAM,SAA6B;EACjC,MAAM;EACN,MAAM;EACN,MAAM;EACN,UAAU,MAAM,YAAY;EAC5B,MAAM,oBAAoB;EAC1B,MAAM,UAAU;EAChB,UAAU,MAAM,QAAQ,CAAC,CAAC;EAC1B,MAAM;CACR;CAEA,OAAO;EACL,QAAQ;GACN,KAAK;;;;;;;;;;;;;;;;;;;;;GAqBL;EACF;EACA,QAAQ;GAKN,KAAK;;;;;;;;;;GAUL;EACF;CACF;AACF;AAYA,SAAgB,2BAA2B,OAAwC;CACjF,OAAO;EACL,KAAK;;;;;;;;;;;;;;;;;EAiBL,QAAQ;GACN,MAAM,qBAAqB;GAC3B,MAAM,qBAAqB;GAC3B,MAAM;GACN,MAAM,0BAA0B;GAChC,UAAU,MAAM,kBAAkB;GAClC,UAAU,MAAM,iBAAiB;GACjC,UAAU,MAAM,UAAU;EAC5B;CACF;AACF;AAEA,SAAS,UAAU,OAAwB;CACzC,OAAO,KAAK,UAAU,SAAS,IAAI;AACrC"}
+{"version":3,"file":"statement-builders-vImtdfmM.mjs","names":["APP_SPACE_ID"],"sources":["../src/core/migrations/statement-builders.ts"],"sourcesContent":["import { APP_SPACE_ID } from '@prisma-next/framework-components/control';\n\nexport { APP_SPACE_ID };\n\nexport interface SqlStatement {\n  readonly sql: string;\n  readonly params: readonly unknown[];\n}\n\nexport const ensurePrismaContractSchemaStatement: SqlStatement = {\n  sql: 'create schema if not exists prisma_contract',\n  params: [],\n};\n\n/**\n * Schema for `prisma_contract.marker`. The `space text` primary key\n * supports one row per loaded contract space (`'app'`,\n * `'<extension-id>'`, …); on a brand-new database `CREATE TABLE IF NOT\n * EXISTS` produces this shape directly. The migration runner detects\n * pre-1.0 single-row markers (no `space` column) at boot and fails with\n * a structured `LEGACY_MARKER_SHAPE` error rather than auto-migrating —\n * see `specs/framework-mechanism.spec.md § 2`.\n */\nexport const ensureMarkerTableStatement: SqlStatement = {\n  sql: `create table if not exists prisma_contract.marker (\n    space text not null primary key default '${APP_SPACE_ID}',\n    core_hash text not null,\n    profile_hash text not null,\n    contract_json jsonb,\n    canonical_version int,\n    updated_at timestamptz not null default now(),\n    app_tag text,\n    meta jsonb not null default '{}',\n    invariants text[] not null default '{}'\n  )`,\n  params: [],\n};\n\nexport const ensureLedgerTableStatement: SqlStatement = {\n  sql: `create table if not exists prisma_contract.ledger (\n    id bigserial primary key,\n    created_at timestamptz not null default now(),\n    origin_core_hash text,\n    origin_profile_hash text,\n    destination_core_hash text not null,\n    destination_profile_hash text,\n    contract_json_before jsonb,\n    contract_json_after jsonb,\n    operations jsonb not null\n  )`,\n  params: [],\n};\n\nexport interface MergeMarkerInput {\n  /**\n   * Logical space identifier for this marker row. Required at every\n   * call site so the type system surfaces every place that needs to\n   * thread the value (rather than letting an `?? APP_SPACE_ID`\n   * fall-through silently collapse per-space markers onto the\n   * `'app'` row). App-plan callers pass {@link APP_SPACE_ID}\n   * (`'app'`); per-extension callers (planner / runner / verifier\n   * extensions over contract spaces) pass the extension's space id.\n   */\n  readonly space: string;\n  readonly storageHash: string;\n  readonly profileHash: string;\n  readonly contractJson?: unknown;\n  readonly canonicalVersion?: number | null;\n  readonly appTag?: string | null;\n  readonly meta?: Record<string, unknown>;\n  /**\n   * Invariants to merge into `marker.invariants`. INSERT writes them as\n   * the initial value (callers are expected to pass a sorted, deduped\n   * array). UPDATE merges them with the existing column server-side via\n   * a single atomic SQL expression.\n   */\n  readonly invariants: readonly string[];\n}\n\nexport function buildMergeMarkerStatements(input: MergeMarkerInput): {\n  readonly insert: SqlStatement;\n  readonly update: SqlStatement;\n} {\n  const params: readonly unknown[] = [\n    input.space,\n    input.storageHash,\n    input.profileHash,\n    jsonParam(input.contractJson),\n    input.canonicalVersion ?? null,\n    input.appTag ?? null,\n    jsonParam(input.meta ?? {}),\n    input.invariants,\n  ];\n\n  return {\n    insert: {\n      sql: `insert into prisma_contract.marker (\n        space,\n        core_hash,\n        profile_hash,\n        contract_json,\n        canonical_version,\n        updated_at,\n        app_tag,\n        meta,\n        invariants\n      ) values (\n        $1,\n        $2,\n        $3,\n        $4::jsonb,\n        $5,\n        now(),\n        $6,\n        $7::jsonb,\n        $8::text[]\n      )`,\n      params,\n    },\n    update: {\n      // `invariants = array(select distinct unnest(invariants || $8::text[]) order by 1)`\n      // reads the current column value under the UPDATE's row lock, unions\n      // with the incoming array, dedupes, and sorts ascending — single\n      // statement, atomic, no read-then-write window.\n      sql: `update prisma_contract.marker set\n        core_hash = $2,\n        profile_hash = $3,\n        contract_json = $4::jsonb,\n        canonical_version = $5,\n        updated_at = now(),\n        app_tag = $6,\n        meta = $7::jsonb,\n        invariants = array(select distinct unnest(invariants || $8::text[]) order by 1)\n      where space = $1`,\n      params,\n    },\n  };\n}\n\nexport interface LedgerInsertInput {\n  readonly originStorageHash?: string | null;\n  readonly originProfileHash?: string | null;\n  readonly destinationStorageHash: string;\n  readonly destinationProfileHash?: string | null;\n  readonly contractJsonBefore?: unknown;\n  readonly contractJsonAfter?: unknown;\n  readonly operations: unknown;\n}\n\nexport function buildLedgerInsertStatement(input: LedgerInsertInput): SqlStatement {\n  return {\n    sql: `insert into prisma_contract.ledger (\n      origin_core_hash,\n      origin_profile_hash,\n      destination_core_hash,\n      destination_profile_hash,\n      contract_json_before,\n      contract_json_after,\n      operations\n    ) values (\n      $1,\n      $2,\n      $3,\n      $4,\n      $5::jsonb,\n      $6::jsonb,\n      $7::jsonb\n    )`,\n    params: [\n      input.originStorageHash ?? null,\n      input.originProfileHash ?? null,\n      input.destinationStorageHash,\n      input.destinationProfileHash ?? null,\n      jsonParam(input.contractJsonBefore),\n      jsonParam(input.contractJsonAfter),\n      jsonParam(input.operations),\n    ],\n  };\n}\n\nfunction jsonParam(value: unknown): string {\n  return JSON.stringify(value ?? null);\n}\n"],"mappings":";;AASA,MAAa,sCAAoD;CAC/D,KAAK;CACL,QAAQ,CAAC;AACX;;;;;;;;;;AAWA,MAAa,6BAA2C;CACtD,KAAK;+CACwCA,eAAa;;;;;;;;;;CAU1D,QAAQ,CAAC;AACX;AAEA,MAAa,6BAA2C;CACtD,KAAK;;;;;;;;;;;CAWL,QAAQ,CAAC;AACX;AA4BA,SAAgB,2BAA2B,OAGzC;CACA,MAAM,SAA6B;EACjC,MAAM;EACN,MAAM;EACN,MAAM;EACN,UAAU,MAAM,YAAY;EAC5B,MAAM,oBAAoB;EAC1B,MAAM,UAAU;EAChB,UAAU,MAAM,QAAQ,CAAC,CAAC;EAC1B,MAAM;CACR;CAEA,OAAO;EACL,QAAQ;GACN,KAAK;;;;;;;;;;;;;;;;;;;;;GAqBL;EACF;EACA,QAAQ;GAKN,KAAK;;;;;;;;;;GAUL;EACF;CACF;AACF;AAYA,SAAgB,2BAA2B,OAAwC;CACjF,OAAO;EACL,KAAK;;;;;;;;;;;;;;;;;EAiBL,QAAQ;GACN,MAAM,qBAAqB;GAC3B,MAAM,qBAAqB;GAC3B,MAAM;GACN,MAAM,0BAA0B;GAChC,UAAU,MAAM,kBAAkB;GAClC,UAAU,MAAM,iBAAiB;GACjC,UAAU,MAAM,UAAU;EAC5B;CACF;AACF;AAEA,SAAS,UAAU,OAAwB;CACzC,OAAO,KAAK,UAAU,SAAS,IAAI;AACrC"}

package/dist/statement-builders.d.mts

@@ -22,7 +22,7 @@ interface MergeMarkerInput {
    * Logical space identifier for this marker row. Required at every
    * call site so the type system surfaces every place that needs to
    * thread the value (rather than letting an `?? APP_SPACE_ID`
-   * fall-through silently collapse multi-space markers onto the
+   * fall-through silently collapse per-space markers onto the
    * `'app'` row). App-plan callers pass {@link APP_SPACE_ID}
    * (`'app'`); per-extension callers (planner / runner / verifier
    * extensions over contract spaces) pass the extension's space id.

package/package.json

@@ -1,32 +1,32 @@
 {
   "name": "@prisma-next/target-postgres",
-  "version": "0.11.0-dev.65",
+  "version": "0.11.0-dev.67",
   "license": "Apache-2.0",
   "type": "module",
   "sideEffects": false,
   "description": "Postgres target pack for Prisma Next",
   "dependencies": {
-    "@prisma-next/cli": "0.11.0-dev.65",
-    "@prisma-next/contract": "0.11.0-dev.65",
-    "@prisma-next/errors": "0.11.0-dev.65",
-    "@prisma-next/family-sql": "0.11.0-dev.65",
-    "@prisma-next/framework-components": "0.11.0-dev.65",
-    "@prisma-next/migration-tools": "0.11.0-dev.65",
-    "@prisma-next/ts-render": "0.11.0-dev.65",
-    "@prisma-next/sql-contract": "0.11.0-dev.65",
-    "@prisma-next/sql-errors": "0.11.0-dev.65",
-    "@prisma-next/sql-operations": "0.11.0-dev.65",
-    "@prisma-next/sql-relational-core": "0.11.0-dev.65",
-    "@prisma-next/sql-schema-ir": "0.11.0-dev.65",
-    "@prisma-next/utils": "0.11.0-dev.65",
+    "@prisma-next/cli": "0.11.0-dev.67",
+    "@prisma-next/contract": "0.11.0-dev.67",
+    "@prisma-next/errors": "0.11.0-dev.67",
+    "@prisma-next/family-sql": "0.11.0-dev.67",
+    "@prisma-next/framework-components": "0.11.0-dev.67",
+    "@prisma-next/migration-tools": "0.11.0-dev.67",
+    "@prisma-next/ts-render": "0.11.0-dev.67",
+    "@prisma-next/sql-contract": "0.11.0-dev.67",
+    "@prisma-next/sql-errors": "0.11.0-dev.67",
+    "@prisma-next/sql-operations": "0.11.0-dev.67",
+    "@prisma-next/sql-relational-core": "0.11.0-dev.67",
+    "@prisma-next/sql-schema-ir": "0.11.0-dev.67",
+    "@prisma-next/utils": "0.11.0-dev.67",
     "@standard-schema/spec": "^1.1.0",
     "arktype": "^2.2.0",
     "pathe": "^2.0.3"
   },
   "devDependencies": {
-    "@prisma-next/test-utils": "0.11.0-dev.65",
-    "@prisma-next/tsconfig": "0.11.0-dev.65",
-    "@prisma-next/tsdown": "0.11.0-dev.65",
+    "@prisma-next/test-utils": "0.11.0-dev.67",
+    "@prisma-next/tsconfig": "0.11.0-dev.67",
+    "@prisma-next/tsdown": "0.11.0-dev.67",
     "tsdown": "0.22.0",
     "typescript": "5.9.3",
     "vitest": "4.1.6"

package/src/core/migrations/runner.ts

@@ -1,7 +1,6 @@
 import type { ContractMarkerRecord } from '@prisma-next/contract/types';
 import type {
   MigrationOperationPolicy,
-  MultiSpaceRunnerResult,
   SqlControlFamilyInstance,
   SqlMigrationPlanContractInfo,
   SqlMigrationPlanOperation,
@@ -14,7 +13,10 @@ import type {
 } from '@prisma-next/family-sql/control';
 import { runnerFailure, runnerSuccess } from '@prisma-next/family-sql/control';
 import { verifySqlSchema } from '@prisma-next/family-sql/schema-verify';
-import type { ControlDriverInstance } from '@prisma-next/framework-components/control';
+import type {
+  ControlDriverInstance,
+  MigrationRunnerResult,
+} from '@prisma-next/framework-components/control';
 import { APP_SPACE_ID } from '@prisma-next/framework-components/control';
 import { SqlQueryError } from '@prisma-next/sql-errors';
 import { ifDefined } from '@prisma-next/utils/defined';
@@ -84,44 +86,9 @@ class PostgresMigrationRunner implements SqlMigrationRunner<PostgresPlanTargetDe
     private readonly config: RunnerConfig,
   ) {}
 
-  async execute(
-    options: SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>,
-  ): Promise<SqlMigrationRunnerResult> {
-    const driver = options.driver;
-
-    // Static checks fail fast before any transaction work — no point
-    // burning a BEGIN/ROLLBACK round-trip on a destination-contract
-    // mismatch the caller can fix locally.
-    const destinationCheck = this.ensurePlanMatchesDestinationContract(
-      options.plan.destination,
-      options.destinationContract,
-    );
-    if (!destinationCheck.ok) return destinationCheck;
-
-    const policyCheck = this.enforcePolicyCompatibility(options.policy, options.plan.operations);
-    if (!policyCheck.ok) return policyCheck;
-
-    await this.beginTransaction(driver);
-    let committed = false;
-    try {
-      const result = await this.executeOnConnection(options);
-      if (!result.ok) {
-        return result;
-      }
-      await this.commitTransaction(driver);
-      committed = true;
-      return result;
-    } finally {
-      if (!committed) {
-        await this.rollbackTransaction(driver);
-      }
-    }
-  }
-
   /**
    * Body of the migration runner without transaction management. The
-   * caller (single-space `execute(...)` above, or the multi-space
-   * outer-tx orchestrator at the SQL family level) owns the
+   * caller ({@link PostgresMigrationRunner.execute}) owns the
    * `BEGIN`/`COMMIT`/`ROLLBACK` lifecycle.
    */
   async executeOnConnection(
@@ -217,12 +184,12 @@ class PostgresMigrationRunner implements SqlMigrationRunner<PostgresPlanTargetDe
     });
   }
 
-  async executeAcrossSpaces(options: {
+  async execute(options: {
     readonly driver: ControlDriverInstance<'sql', string>;
     readonly perSpaceOptions: ReadonlyArray<
       SqlMigrationRunnerExecuteOptions<PostgresPlanTargetDetails>
     >;
-  }): Promise<MultiSpaceRunnerResult> {
+  }): Promise<MigrationRunnerResult> {
     const driver = options.driver;
     const perSpaceOptions = options.perSpaceOptions;
 

package/src/core/migrations/statement-builders.ts

@@ -56,7 +56,7 @@ export interface MergeMarkerInput {
    * Logical space identifier for this marker row. Required at every
    * call site so the type system surfaces every place that needs to
    * thread the value (rather than letting an `?? APP_SPACE_ID`
-   * fall-through silently collapse multi-space markers onto the
+   * fall-through silently collapse per-space markers onto the
    * `'app'` row). App-plan callers pass {@link APP_SPACE_ID}
    * (`'app'`); per-extension callers (planner / runner / verifier
    * extensions over contract spaces) pass the extension's space id.