@prisma/composer-prisma-cloud 0.1.0-dev.1

package/dist/index.mjs

@@ -0,0 +1,182 @@
+import { c as secretName, d as stashSecrets, n as deserialize, o as envSecret, r as deserializeSecrets, t as configKey, u as stash } from "./serializer-DAEWRfnm-D3GW9dOZ.mjs";
+import { i as paramName, o as serviceKeyEnvName, t as envParam } from "./param-DB0B8m15-IvzNq9BM.mjs";
+import { dependency, hydrateSecrets, hydrateSync, number, resource, service, string } from "@prisma/composer";
+import { blindCast } from "@prisma/composer/casts";
+//#region ../../1-prisma-cloud/1-extensions/target/dist/index.mjs
+const reservedParams = { port: number({ default: 3e3 }) };
+/**
+* A Prisma Compute service — declarations only (deps + params + build + the
+* ports it exposes), no descriptor. `params` merges with the reserved
+* `ReservedParams` (`port`); a user param whose name collides with a reserved
+* one fails at authoring, the same way a colliding dependency name does.
+* Returns the extension's runnable/loadable node:
+*   · run(address, boot) — the process controller: deserialize the platform
+*     environment (keyed off `address`, the extension's ONE env read) into a
+*     typed Config, re-emit it under address-free process-local stash keys,
+*     then call boot() to start the app's entry.
+*   · load() / config() — called from inside the app's entry: read the stash;
+*     load() hydrates + memoizes the deps, config() returns the typed params.
+*     Separate accessors so a dep and a param never share a namespace (ADR-0021).
+*
+* `service()`'s underlying node carries `extension: '@prisma/composer-prisma-cloud'` —
+* the control-plane registry key `prisma-composer deploy` resolves through the
+* app's `prisma-composer.config.ts` (ADR-0017). This module loads nothing at
+* deploy time; nodes are pure data.
+*/
+const compute = (def) => {
+	const userParams = def.params ?? blindCast({});
+	for (const reserved of Object.keys(reservedParams)) {
+		if (reserved in def.deps) throw new Error(`compute(): dependency "${reserved}" collides with the reserved service param of the same name — rename the dependency.`);
+		if (reserved in userParams) throw new Error(`compute(): param "${reserved}" collides with the reserved service param of the same name — rename the param.`);
+	}
+	const params = blindCast({
+		...userParams,
+		...reservedParams
+	});
+	const node = service({
+		name: def.name,
+		extension: "@prisma/composer-prisma-cloud",
+		type: "compute",
+		inputs: def.deps,
+		params,
+		...def.secrets !== void 0 ? { secrets: def.secrets } : {},
+		build: def.build,
+		...def.expose !== void 0 ? { expose: def.expose } : {}
+	});
+	let resolved;
+	let loadedDeps;
+	let loadedParams;
+	let loadedSecrets;
+	function processConfig() {
+		if (resolved === void 0) resolved = deserialize(node, "");
+		return resolved;
+	}
+	const runnable = {
+		...node,
+		async run(address, boot) {
+			const config = deserialize(node, address);
+			stash(node, config);
+			stashSecrets(node, address);
+			const accepted = process.env[serviceKeyEnvName(address)];
+			if (accepted !== void 0) process.env[serviceKeyEnvName("")] = accepted;
+			const port = config.service["port"];
+			if (typeof port === "number") process.env["PORT"] = String(port);
+			return boot();
+		},
+		load() {
+			if (loadedDeps === void 0) loadedDeps = blindCast(hydrateSync(node, processConfig()));
+			return loadedDeps;
+		},
+		config() {
+			if (loadedParams === void 0) loadedParams = blindCast(processConfig().service);
+			return loadedParams;
+		},
+		secrets() {
+			if (loadedSecrets === void 0) loadedSecrets = blindCast(hydrateSecrets(node, deserializeSecrets(node, "")));
+			return loadedSecrets;
+		}
+	};
+	return Object.freeze(blindCast(runnable));
+};
+const defaultHttpClient = (cfg) => ({
+	url: cfg.url,
+	fetch: (path, init) => fetch(new URL(path, cfg.url), init)
+});
+/**
+* A service-to-service dependency. Its binding (what `load()` returns) is a
+* derived HttpClient — a thin URL-anchored fetch wrapper (fetch is standard
+* across runtimes — no driver, no runtime coupling). http() is a
+* protocol-owned kind: the framework owns the transport, so the client is
+* kind-canonical and derived from the contract, with no user client in the
+* declaration (ADR-0015). The typed generated client arrives with the
+* interface primitive (a later extension point).
+*/
+const http = (opts) => dependency({
+	name: opts.name,
+	type: "http",
+	connection: {
+		params: { url: string() },
+		hydrate: (v) => defaultHttpClient({ url: v.url })
+	}
+});
+/**
+* The contract a Postgres provides — and the contract its consumers require.
+* `satisfies` compares KIND, not identity: an extension module can be duplicated
+* across a workspace (same rationale as the Symbol.for node brand), and every
+* duplicate's contract must still satisfy. `__cmp` is the connection config a
+* postgres offers; core never inspects it.
+*/
+const postgresContract = Object.freeze({
+	kind: "postgres",
+	__cmp: { url: "" },
+	satisfies: (required) => required.kind === "postgres"
+});
+function postgres(opts) {
+	if (opts?.name !== void 0) return resource({
+		name: opts.name,
+		extension: "@prisma/composer-prisma-cloud",
+		provides: postgresContract
+	});
+	return dependency({
+		type: "postgres",
+		connection: {
+			params: { url: string() },
+			hydrate: (v) => v
+		},
+		required: postgresContract
+	});
+}
+/**
+* The contract the `s3-credentials` resource provides — a minted SigV4 key
+* pair. `satisfies` compares KIND only (mirrors `postgresContract`); `__cmp` is
+* the config the resource offers, which core never inspects.
+*/
+const credentialsContract = Object.freeze({
+	kind: "credentials",
+	__cmp: {
+		accessKeyId: "",
+		secretAccessKey: ""
+	},
+	satisfies: (required) => required.kind === "credentials"
+});
+function s3Credentials(opts) {
+	if (opts?.name !== void 0) return resource({
+		name: opts.name,
+		extension: "@prisma/composer-prisma-cloud",
+		provides: credentialsContract
+	});
+	return dependency({
+		type: "credentials",
+		connection: {
+			params: {
+				accessKeyId: string(),
+				secretAccessKey: string()
+			},
+			hydrate: (v) => v
+		},
+		required: credentialsContract
+	});
+}
+/**
+* The storage service authoring factory — a `compute` service routed to the
+* `s3-store` lowering instead of `compute`'s. It is exactly `compute`'s
+* runnable (run/load/config, deps, params, build, expose) with the routing
+* `type` overridden to `'s3-store'`: nothing at runtime keys off `type` (the
+* serializer keys off the deployment address and each param's owner/name, and
+* `load`/`config` off deps/params), so only the deploy-time descriptor lookup
+* sees the override and routes to the extended-output lowering (§ 5). The
+* return type is compute's exactly (including the reserved `port` param). The
+* storage module (D4b) calls this with its `db`/`credentials` deps, a `bucket`
+* param, and `expose: { store: s3Contract }`.
+*/
+function s3StoreService(def) {
+	const node = compute(def);
+	return Object.freeze(blindCast({
+		...node,
+		type: "s3-store"
+	}));
+}
+//#endregion
+export { compute, configKey, credentialsContract, envParam, envSecret, http, paramName, postgres, postgresContract, s3Credentials, s3StoreService, secretName };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../1-prisma-cloud/1-extensions/target/dist/index.mjs"],"sourcesContent":["import { c as stash, d as secretName, l as stashSecrets, n as deserialize, r as deserializeSecrets, t as configKey, u as envSecret } from \"./serializer-DAEWRfnm.mjs\";\nimport { i as paramName, o as serviceKeyEnvName, t as envParam } from \"./param-DB0B8m15.mjs\";\nimport { dependency, hydrateSecrets, hydrateSync, number, resource, service, string } from \"@internal/core\";\nimport { blindCast } from \"@internal/foundation/casts\";\n//#region src/compute.ts\nconst reservedParams = { port: number({ default: 3e3 }) };\n/**\n* A Prisma Compute service — declarations only (deps + params + build + the\n* ports it exposes), no descriptor. `params` merges with the reserved\n* `ReservedParams` (`port`); a user param whose name collides with a reserved\n* one fails at authoring, the same way a colliding dependency name does.\n* Returns the extension's runnable/loadable node:\n*   · run(address, boot) — the process controller: deserialize the platform\n*     environment (keyed off `address`, the extension's ONE env read) into a\n*     typed Config, re-emit it under address-free process-local stash keys,\n*     then call boot() to start the app's entry.\n*   · load() / config() — called from inside the app's entry: read the stash;\n*     load() hydrates + memoizes the deps, config() returns the typed params.\n*     Separate accessors so a dep and a param never share a namespace (ADR-0021).\n*\n* `service()`'s underlying node carries `extension: '@prisma/composer-prisma-cloud'` —\n* the control-plane registry key `prisma-composer deploy` resolves through the\n* app's `prisma-composer.config.ts` (ADR-0017). This module loads nothing at\n* deploy time; nodes are pure data.\n*/\nconst compute = (def) => {\n\tconst userParams = def.params ?? blindCast({});\n\tfor (const reserved of Object.keys(reservedParams)) {\n\t\tif (reserved in def.deps) throw new Error(`compute(): dependency \"${reserved}\" collides with the reserved service param of the same name — rename the dependency.`);\n\t\tif (reserved in userParams) throw new Error(`compute(): param \"${reserved}\" collides with the reserved service param of the same name — rename the param.`);\n\t}\n\tconst params = blindCast({\n\t\t...userParams,\n\t\t...reservedParams\n\t});\n\tconst node = service({\n\t\tname: def.name,\n\t\textension: \"@prisma/composer-prisma-cloud\",\n\t\ttype: \"compute\",\n\t\tinputs: def.deps,\n\t\tparams,\n\t\t...def.secrets !== void 0 ? { secrets: def.secrets } : {},\n\t\tbuild: def.build,\n\t\t...def.expose !== void 0 ? { expose: def.expose } : {}\n\t});\n\tlet resolved;\n\tlet loadedDeps;\n\tlet loadedParams;\n\tlet loadedSecrets;\n\tfunction processConfig() {\n\t\tif (resolved === void 0) resolved = deserialize(node, \"\");\n\t\treturn resolved;\n\t}\n\tconst runnable = {\n\t\t...node,\n\t\tasync run(address, boot) {\n\t\t\tconst config = deserialize(node, address);\n\t\t\tstash(node, config);\n\t\t\tstashSecrets(node, address);\n\t\t\tconst accepted = process.env[serviceKeyEnvName(address)];\n\t\t\tif (accepted !== void 0) process.env[serviceKeyEnvName(\"\")] = accepted;\n\t\t\tconst port = config.service[\"port\"];\n\t\t\tif (typeof port === \"number\") process.env[\"PORT\"] = String(port);\n\t\t\treturn boot();\n\t\t},\n\t\tload() {\n\t\t\tif (loadedDeps === void 0) loadedDeps = blindCast(hydrateSync(node, processConfig()));\n\t\t\treturn loadedDeps;\n\t\t},\n\t\tconfig() {\n\t\t\tif (loadedParams === void 0) loadedParams = blindCast(processConfig().service);\n\t\t\treturn loadedParams;\n\t\t},\n\t\tsecrets() {\n\t\t\tif (loadedSecrets === void 0) loadedSecrets = blindCast(hydrateSecrets(node, deserializeSecrets(node, \"\")));\n\t\t\treturn loadedSecrets;\n\t\t}\n\t};\n\treturn Object.freeze(blindCast(runnable));\n};\n//#endregion\n//#region src/http.ts\nconst defaultHttpClient = (cfg) => ({\n\turl: cfg.url,\n\tfetch: (path, init) => fetch(new URL(path, cfg.url), init)\n});\n/**\n* A service-to-service dependency. Its binding (what `load()` returns) is a\n* derived HttpClient — a thin URL-anchored fetch wrapper (fetch is standard\n* across runtimes — no driver, no runtime coupling). http() is a\n* protocol-owned kind: the framework owns the transport, so the client is\n* kind-canonical and derived from the contract, with no user client in the\n* declaration (ADR-0015). The typed generated client arrives with the\n* interface primitive (a later extension point).\n*/\nconst http = (opts) => dependency({\n\tname: opts.name,\n\ttype: \"http\",\n\tconnection: {\n\t\tparams: { url: string() },\n\t\thydrate: (v) => defaultHttpClient({ url: v.url })\n\t}\n});\n//#endregion\n//#region src/postgres.ts\n/**\n* The contract a Postgres provides — and the contract its consumers require.\n* `satisfies` compares KIND, not identity: an extension module can be duplicated\n* across a workspace (same rationale as the Symbol.for node brand), and every\n* duplicate's contract must still satisfy. `__cmp` is the connection config a\n* postgres offers; core never inspects it.\n*/\nconst postgresContract = Object.freeze({\n\tkind: \"postgres\",\n\t__cmp: { url: \"\" },\n\tsatisfies: (required) => required.kind === \"postgres\"\n});\nfunction postgres(opts) {\n\tif (opts?.name !== void 0) return resource({\n\t\tname: opts.name,\n\t\textension: \"@prisma/composer-prisma-cloud\",\n\t\tprovides: postgresContract\n\t});\n\treturn dependency({\n\t\ttype: \"postgres\",\n\t\tconnection: {\n\t\t\tparams: { url: string() },\n\t\t\thydrate: (v) => v\n\t\t},\n\t\trequired: postgresContract\n\t});\n}\n//#endregion\n//#region src/s3-credentials.ts\n/**\n* The contract the `s3-credentials` resource provides — a minted SigV4 key\n* pair. `satisfies` compares KIND only (mirrors `postgresContract`); `__cmp` is\n* the config the resource offers, which core never inspects.\n*/\nconst credentialsContract = Object.freeze({\n\tkind: \"credentials\",\n\t__cmp: {\n\t\taccessKeyId: \"\",\n\t\tsecretAccessKey: \"\"\n\t},\n\tsatisfies: (required) => required.kind === \"credentials\"\n});\nfunction s3Credentials(opts) {\n\tif (opts?.name !== void 0) return resource({\n\t\tname: opts.name,\n\t\textension: \"@prisma/composer-prisma-cloud\",\n\t\tprovides: credentialsContract\n\t});\n\treturn dependency({\n\t\ttype: \"credentials\",\n\t\tconnection: {\n\t\t\tparams: {\n\t\t\t\taccessKeyId: string(),\n\t\t\t\tsecretAccessKey: string()\n\t\t\t},\n\t\t\thydrate: (v) => v\n\t\t},\n\t\trequired: credentialsContract\n\t});\n}\n//#endregion\n//#region src/s3-store.ts\n/**\n* The storage service authoring factory — a `compute` service routed to the\n* `s3-store` lowering instead of `compute`'s. It is exactly `compute`'s\n* runnable (run/load/config, deps, params, build, expose) with the routing\n* `type` overridden to `'s3-store'`: nothing at runtime keys off `type` (the\n* serializer keys off the deployment address and each param's owner/name, and\n* `load`/`config` off deps/params), so only the deploy-time descriptor lookup\n* sees the override and routes to the extended-output lowering (§ 5). The\n* return type is compute's exactly (including the reserved `port` param). The\n* storage module (D4b) calls this with its `db`/`credentials` deps, a `bucket`\n* param, and `expose: { store: s3Contract }`.\n*/\nfunction s3StoreService(def) {\n\tconst node = compute(def);\n\treturn Object.freeze(blindCast({\n\t\t...node,\n\t\ttype: \"s3-store\"\n\t}));\n}\n//#endregion\nexport { compute, configKey, credentialsContract, envParam, envSecret, http, paramName, postgres, postgresContract, s3Credentials, s3StoreService, secretName };\n\n//# sourceMappingURL=index.mjs.map"],"mappings":";;;;;AAKA,MAAM,iBAAiB,EAAE,MAAM,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;AAoBxD,MAAM,WAAW,QAAQ;CACxB,MAAM,aAAa,IAAI,UAAU,UAAU,CAAC,CAAC;CAC7C,KAAK,MAAM,YAAY,OAAO,KAAK,cAAc,GAAG;EACnD,IAAI,YAAY,IAAI,MAAM,MAAM,IAAI,MAAM,0BAA0B,SAAS,qFAAqF;EAClK,IAAI,YAAY,YAAY,MAAM,IAAI,MAAM,qBAAqB,SAAS,gFAAgF;CAC3J;CACA,MAAM,SAAS,UAAU;EACxB,GAAG;EACH,GAAG;CACJ,CAAC;CACD,MAAM,OAAO,QAAQ;EACpB,MAAM,IAAI;EACV,WAAW;EACX,MAAM;EACN,QAAQ,IAAI;EACZ;EACA,GAAG,IAAI,YAAY,KAAK,IAAI,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;EACxD,OAAO,IAAI;EACX,GAAG,IAAI,WAAW,KAAK,IAAI,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;CACtD,CAAC;CACD,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,SAAS,gBAAgB;EACxB,IAAI,aAAa,KAAK,GAAG,WAAW,YAAY,MAAM,EAAE;EACxD,OAAO;CACR;CACA,MAAM,WAAW;EAChB,GAAG;EACH,MAAM,IAAI,SAAS,MAAM;GACxB,MAAM,SAAS,YAAY,MAAM,OAAO;GACxC,MAAM,MAAM,MAAM;GAClB,aAAa,MAAM,OAAO;GAC1B,MAAM,WAAW,QAAQ,IAAI,kBAAkB,OAAO;GACtD,IAAI,aAAa,KAAK,GAAG,QAAQ,IAAI,kBAAkB,EAAE,KAAK;GAC9D,MAAM,OAAO,OAAO,QAAQ;GAC5B,IAAI,OAAO,SAAS,UAAU,QAAQ,IAAI,UAAU,OAAO,IAAI;GAC/D,OAAO,KAAK;EACb;EACA,OAAO;GACN,IAAI,eAAe,KAAK,GAAG,aAAa,UAAU,YAAY,MAAM,cAAc,CAAC,CAAC;GACpF,OAAO;EACR;EACA,SAAS;GACR,IAAI,iBAAiB,KAAK,GAAG,eAAe,UAAU,cAAc,CAAC,CAAC,OAAO;GAC7E,OAAO;EACR;EACA,UAAU;GACT,IAAI,kBAAkB,KAAK,GAAG,gBAAgB,UAAU,eAAe,MAAM,mBAAmB,MAAM,EAAE,CAAC,CAAC;GAC1G,OAAO;EACR;CACD;CACA,OAAO,OAAO,OAAO,UAAU,QAAQ,CAAC;AACzC;AAGA,MAAM,qBAAqB,SAAS;CACnC,KAAK,IAAI;CACT,QAAQ,MAAM,SAAS,MAAM,IAAI,IAAI,MAAM,IAAI,GAAG,GAAG,IAAI;AAC1D;;;;;;;;;;AAUA,MAAM,QAAQ,SAAS,WAAW;CACjC,MAAM,KAAK;CACX,MAAM;CACN,YAAY;EACX,QAAQ,EAAE,KAAK,OAAO,EAAE;EACxB,UAAU,MAAM,kBAAkB,EAAE,KAAK,EAAE,IAAI,CAAC;CACjD;AACD,CAAC;;;;;;;;AAUD,MAAM,mBAAmB,OAAO,OAAO;CACtC,MAAM;CACN,OAAO,EAAE,KAAK,GAAG;CACjB,YAAY,aAAa,SAAS,SAAS;AAC5C,CAAC;AACD,SAAS,SAAS,MAAM;CACvB,IAAI,MAAM,SAAS,KAAK,GAAG,OAAO,SAAS;EAC1C,MAAM,KAAK;EACX,WAAW;EACX,UAAU;CACX,CAAC;CACD,OAAO,WAAW;EACjB,MAAM;EACN,YAAY;GACX,QAAQ,EAAE,KAAK,OAAO,EAAE;GACxB,UAAU,MAAM;EACjB;EACA,UAAU;CACX,CAAC;AACF;;;;;;AAQA,MAAM,sBAAsB,OAAO,OAAO;CACzC,MAAM;CACN,OAAO;EACN,aAAa;EACb,iBAAiB;CAClB;CACA,YAAY,aAAa,SAAS,SAAS;AAC5C,CAAC;AACD,SAAS,cAAc,MAAM;CAC5B,IAAI,MAAM,SAAS,KAAK,GAAG,OAAO,SAAS;EAC1C,MAAM,KAAK;EACX,WAAW;EACX,UAAU;CACX,CAAC;CACD,OAAO,WAAW;EACjB,MAAM;EACN,YAAY;GACX,QAAQ;IACP,aAAa,OAAO;IACpB,iBAAiB,OAAO;GACzB;GACA,UAAU,MAAM;EACjB;EACA,UAAU;CACX,CAAC;AACF;;;;;;;;;;;;;AAeA,SAAS,eAAe,KAAK;CAC5B,MAAM,OAAO,QAAQ,GAAG;CACxB,OAAO,OAAO,OAAO,UAAU;EAC9B,GAAG;EACH,MAAM;CACP,CAAC,CAAC;AACH"}

package/dist/param-DB0B8m15-IvzNq9BM.mjs

@@ -0,0 +1,92 @@
+import { t as configKey } from "./serializer-DAEWRfnm-D3GW9dOZ.mjs";
+import { isParamSource, paramSource } from "@prisma/composer";
+import { blindCast } from "@prisma/composer/casts";
+import { RPC_PEER_KEY } from "@prisma/composer/rpc";
+//#region ../../1-prisma-cloud/1-extensions/target/dist/param-DB0B8m15.mjs
+/** Every faceted RPC edge in the graph — scans each dependency edge's consumer-side input for the need. */
+function serviceKeyEdges(graph) {
+	const edges = [];
+	for (const edge of graph.edges) {
+		if (edge.kind !== "dependency") continue;
+		const consumer = graph.nodes.find((n) => n.id === edge.to)?.node;
+		if (consumer === void 0 || consumer.kind !== "service") continue;
+		const slot = consumer.inputs[edge.input];
+		if (slot === void 0) continue;
+		if (slot.connection.params["serviceKey"]?.provision?.brand !== RPC_PEER_KEY) continue;
+		edges.push({
+			edgeId: `${edge.to}.${edge.input}`,
+			consumerAddress: edge.to,
+			input: edge.input,
+			providerAddress: edge.from
+		});
+	}
+	return edges;
+}
+/** The reserved accepted-keys env var: COMPOSER_<addr>_RPC_ACCEPTED_KEYS ("" ↦ @internal/rpc's RPC_ACCEPTED_KEYS_ENV). */
+const serviceKeyEnvName = (address) => configKey(address, {
+	owner: "service",
+	name: "RPC_ACCEPTED_KEYS"
+});
+/**
+* Brands the payload `envParam` builds. Core's `paramSource()` is a public
+* SPI, so a user could bypass `envParam` and bind a raw `paramSource('x')`;
+* the brand lets `paramName` reject such a source (or another target's) with
+* a clear error instead of reading an absent `.name`.
+*/
+const PRISMA_CLOUD_PARAM_SOURCE = blindCast(Symbol.for("prisma:prisma-cloud-param-source"));
+const RESERVED_PARAM_PREFIX = "COMPOSER_";
+const POISONED_PARAM_NAMES = /* @__PURE__ */ new Set(["DATABASE_URL", "DATABASE_URL_POOLED"]);
+/**
+* Binds a param slot to a named Prisma Cloud platform env var — the non-secret
+* sibling of `envSecret` (spec: env-sourced config params). The platform
+* injects the value into the running instance per stage; the param's own
+* schema validates it at boot, unredacted. The name may not use the
+* framework's reserved `COMPOSER_` prefix or the poisoned
+* `DATABASE_URL(_POOLED)` keys — same parity as `envSecret`.
+*/
+function envParam(name) {
+	if (typeof name !== "string" || name.length === 0) throw new Error("envParam() requires a non-empty platform env-var name, e.g. envParam('APP_ORIGIN').");
+	if (name.startsWith(RESERVED_PARAM_PREFIX)) throw new Error(`envParam name "${name}" may not start with "${RESERVED_PARAM_PREFIX}" — that prefix is reserved for the framework's own generated config keys.`);
+	if (POISONED_PARAM_NAMES.has(name)) throw new Error(`envParam name "${name}" is reserved — ${[...POISONED_PARAM_NAMES].join(" and ")} are poisoned at project provision and cannot back a param.`);
+	return paramSource({
+		[PRISMA_CLOUD_PARAM_SOURCE]: true,
+		name
+	});
+}
+/** True only for a payload that `envParam` built — i.e. one carrying the brand. */
+function isEnvParamPayload(payload) {
+	return typeof payload === "object" && payload !== null && blindCast(payload)[PRISMA_CLOUD_PARAM_SOURCE] === true;
+}
+/** True iff a resolved param value is an env-sourced pointer this target built (as opposed to a literal, or a foreign/raw `ParamSource`). */
+function isEnvParamSource(value) {
+	return isParamSource(value) && isEnvParamPayload(value.payload);
+}
+/**
+* Reads the Prisma Cloud env-var name back out of a param binding's opaque
+* source. A source not built by `envParam` (a raw `paramSource(...)` or
+* another target's source) carries no name — reject it here. `paramName` runs
+* in preflight and at serialize before any value ever crosses the wire, so a
+* foreign source fails early and clearly rather than producing a broken
+* deploy with an undefined name.
+*/
+function paramName(binding) {
+	const { binding: bound } = binding;
+	if (!isEnvParamSource(bound)) throw new Error(`param slot "${binding.slot}" of service "${binding.serviceAddress}" is bound to a source not created by envParam() — bind env-sourced params with envParam('NAME') from @prisma/composer-prisma-cloud.`);
+	return bound.payload.name;
+}
+/**
+* Finds the manifest entry for one service param slot. `serialize` calls this
+* only after confirming `buildConfig` resolved the slot to a `ParamSource`
+* (`isParamSource(value)`), so a miss here means `graph.params` and the
+* resolved `Config` have drifted — a Load invariant violation, surfaced
+* loudly rather than producing a pointer row with an undefined name.
+*/
+function paramBindingFor(bindings, serviceAddress, slot) {
+	const binding = bindings.find((b) => b.serviceAddress === serviceAddress && b.slot === slot);
+	if (binding === void 0) throw new Error(`param slot "${slot}" of "${serviceAddress}" resolved to a source but has no bound entry in the manifest — Load should have recorded it.`);
+	return binding;
+}
+//#endregion
+export { serviceKeyEdges as a, paramName as i, isEnvParamSource as n, serviceKeyEnvName as o, paramBindingFor as r, envParam as t };
+
+//# sourceMappingURL=param-DB0B8m15-IvzNq9BM.mjs.map

package/dist/param-DB0B8m15-IvzNq9BM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"param-DB0B8m15-IvzNq9BM.mjs","names":[],"sources":["../../../1-prisma-cloud/1-extensions/target/dist/param-DB0B8m15.mjs"],"sourcesContent":["import { t as configKey } from \"./serializer-DAEWRfnm.mjs\";\nimport { isParamSource, paramSource } from \"@internal/core\";\nimport { blindCast } from \"@internal/foundation/casts\";\nimport { RPC_PEER_KEY } from \"@internal/rpc\";\n//#region src/service-keys.ts\n/** Every faceted RPC edge in the graph — scans each dependency edge's consumer-side input for the need. */\nfunction serviceKeyEdges(graph) {\n\tconst edges = [];\n\tfor (const edge of graph.edges) {\n\t\tif (edge.kind !== \"dependency\") continue;\n\t\tconst consumer = graph.nodes.find((n) => n.id === edge.to)?.node;\n\t\tif (consumer === void 0 || consumer.kind !== \"service\") continue;\n\t\tconst slot = consumer.inputs[edge.input];\n\t\tif (slot === void 0) continue;\n\t\tif (slot.connection.params[\"serviceKey\"]?.provision?.brand !== RPC_PEER_KEY) continue;\n\t\tedges.push({\n\t\t\tedgeId: `${edge.to}.${edge.input}`,\n\t\t\tconsumerAddress: edge.to,\n\t\t\tinput: edge.input,\n\t\t\tproviderAddress: edge.from\n\t\t});\n\t}\n\treturn edges;\n}\n/** The reserved accepted-keys env var: COMPOSER_<addr>_RPC_ACCEPTED_KEYS (\"\" ↦ @internal/rpc's RPC_ACCEPTED_KEYS_ENV). */\nconst serviceKeyEnvName = (address) => configKey(address, {\n\towner: \"service\",\n\tname: \"RPC_ACCEPTED_KEYS\"\n});\n//#endregion\n//#region src/param.ts\n/**\n* Brands the payload `envParam` builds. Core's `paramSource()` is a public\n* SPI, so a user could bypass `envParam` and bind a raw `paramSource('x')`;\n* the brand lets `paramName` reject such a source (or another target's) with\n* a clear error instead of reading an absent `.name`.\n*/\nconst PRISMA_CLOUD_PARAM_SOURCE = blindCast(Symbol.for(\"prisma:prisma-cloud-param-source\"));\nconst RESERVED_PARAM_PREFIX = \"COMPOSER_\";\nconst POISONED_PARAM_NAMES = /* @__PURE__ */ new Set([\"DATABASE_URL\", \"DATABASE_URL_POOLED\"]);\n/**\n* Binds a param slot to a named Prisma Cloud platform env var — the non-secret\n* sibling of `envSecret` (spec: env-sourced config params). The platform\n* injects the value into the running instance per stage; the param's own\n* schema validates it at boot, unredacted. The name may not use the\n* framework's reserved `COMPOSER_` prefix or the poisoned\n* `DATABASE_URL(_POOLED)` keys — same parity as `envSecret`.\n*/\nfunction envParam(name) {\n\tif (typeof name !== \"string\" || name.length === 0) throw new Error(\"envParam() requires a non-empty platform env-var name, e.g. envParam('APP_ORIGIN').\");\n\tif (name.startsWith(RESERVED_PARAM_PREFIX)) throw new Error(`envParam name \"${name}\" may not start with \"${RESERVED_PARAM_PREFIX}\" — that prefix is reserved for the framework's own generated config keys.`);\n\tif (POISONED_PARAM_NAMES.has(name)) throw new Error(`envParam name \"${name}\" is reserved — ${[...POISONED_PARAM_NAMES].join(\" and \")} are poisoned at project provision and cannot back a param.`);\n\treturn paramSource({\n\t\t[PRISMA_CLOUD_PARAM_SOURCE]: true,\n\t\tname\n\t});\n}\n/** True only for a payload that `envParam` built — i.e. one carrying the brand. */\nfunction isEnvParamPayload(payload) {\n\treturn typeof payload === \"object\" && payload !== null && blindCast(payload)[PRISMA_CLOUD_PARAM_SOURCE] === true;\n}\n/** True iff a resolved param value is an env-sourced pointer this target built (as opposed to a literal, or a foreign/raw `ParamSource`). */\nfunction isEnvParamSource(value) {\n\treturn isParamSource(value) && isEnvParamPayload(value.payload);\n}\n/**\n* Reads the Prisma Cloud env-var name back out of a param binding's opaque\n* source. A source not built by `envParam` (a raw `paramSource(...)` or\n* another target's source) carries no name — reject it here. `paramName` runs\n* in preflight and at serialize before any value ever crosses the wire, so a\n* foreign source fails early and clearly rather than producing a broken\n* deploy with an undefined name.\n*/\nfunction paramName(binding) {\n\tconst { binding: bound } = binding;\n\tif (!isEnvParamSource(bound)) throw new Error(`param slot \"${binding.slot}\" of service \"${binding.serviceAddress}\" is bound to a source not created by envParam() — bind env-sourced params with envParam('NAME') from @prisma/composer-prisma-cloud.`);\n\treturn bound.payload.name;\n}\n/**\n* Finds the manifest entry for one service param slot. `serialize` calls this\n* only after confirming `buildConfig` resolved the slot to a `ParamSource`\n* (`isParamSource(value)`), so a miss here means `graph.params` and the\n* resolved `Config` have drifted — a Load invariant violation, surfaced\n* loudly rather than producing a pointer row with an undefined name.\n*/\nfunction paramBindingFor(bindings, serviceAddress, slot) {\n\tconst binding = bindings.find((b) => b.serviceAddress === serviceAddress && b.slot === slot);\n\tif (binding === void 0) throw new Error(`param slot \"${slot}\" of \"${serviceAddress}\" resolved to a source but has no bound entry in the manifest — Load should have recorded it.`);\n\treturn binding;\n}\n//#endregion\nexport { serviceKeyEdges as a, paramName as i, isEnvParamSource as n, serviceKeyEnvName as o, paramBindingFor as r, envParam as t };\n\n//# sourceMappingURL=param-DB0B8m15.mjs.map"],"mappings":";;;;;;AAMA,SAAS,gBAAgB,OAAO;CAC/B,MAAM,QAAQ,CAAC;CACf,KAAK,MAAM,QAAQ,MAAM,OAAO;EAC/B,IAAI,KAAK,SAAS,cAAc;EAChC,MAAM,WAAW,MAAM,MAAM,MAAM,MAAM,EAAE,OAAO,KAAK,EAAE,CAAC,EAAE;EAC5D,IAAI,aAAa,KAAK,KAAK,SAAS,SAAS,WAAW;EACxD,MAAM,OAAO,SAAS,OAAO,KAAK;EAClC,IAAI,SAAS,KAAK,GAAG;EACrB,IAAI,KAAK,WAAW,OAAO,aAAa,EAAE,WAAW,UAAU,cAAc;EAC7E,MAAM,KAAK;GACV,QAAQ,GAAG,KAAK,GAAG,GAAG,KAAK;GAC3B,iBAAiB,KAAK;GACtB,OAAO,KAAK;GACZ,iBAAiB,KAAK;EACvB,CAAC;CACF;CACA,OAAO;AACR;;AAEA,MAAM,qBAAqB,YAAY,UAAU,SAAS;CACzD,OAAO;CACP,MAAM;AACP,CAAC;;;;;;;AASD,MAAM,4BAA4B,UAAU,OAAO,IAAI,kCAAkC,CAAC;AAC1F,MAAM,wBAAwB;AAC9B,MAAM,uCAAuC,IAAI,IAAI,CAAC,gBAAgB,qBAAqB,CAAC;;;;;;;;;AAS5F,SAAS,SAAS,MAAM;CACvB,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,qFAAqF;CACxJ,IAAI,KAAK,WAAW,qBAAqB,GAAG,MAAM,IAAI,MAAM,kBAAkB,KAAK,wBAAwB,sBAAsB,2EAA2E;CAC5M,IAAI,qBAAqB,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM,kBAAkB,KAAK,kBAAkB,CAAC,GAAG,oBAAoB,CAAC,CAAC,KAAK,OAAO,EAAE,4DAA4D;CACjM,OAAO,YAAY;GACjB,4BAA4B;EAC7B;CACD,CAAC;AACF;;AAEA,SAAS,kBAAkB,SAAS;CACnC,OAAO,OAAO,YAAY,YAAY,YAAY,QAAQ,UAAU,OAAO,CAAC,CAAC,+BAA+B;AAC7G;;AAEA,SAAS,iBAAiB,OAAO;CAChC,OAAO,cAAc,KAAK,KAAK,kBAAkB,MAAM,OAAO;AAC/D;;;;;;;;;AASA,SAAS,UAAU,SAAS;CAC3B,MAAM,EAAE,SAAS,UAAU;CAC3B,IAAI,CAAC,iBAAiB,KAAK,GAAG,MAAM,IAAI,MAAM,eAAe,QAAQ,KAAK,gBAAgB,QAAQ,eAAe,qIAAqI;CACtP,OAAO,MAAM,QAAQ;AACtB;;;;;;;;AAQA,SAAS,gBAAgB,UAAU,gBAAgB,MAAM;CACxD,MAAM,UAAU,SAAS,MAAM,MAAM,EAAE,mBAAmB,kBAAkB,EAAE,SAAS,IAAI;CAC3F,IAAI,YAAY,KAAK,GAAG,MAAM,IAAI,MAAM,eAAe,KAAK,QAAQ,eAAe,8FAA8F;CACjL,OAAO;AACR"}

package/dist/prisma-next-COrwlg3N.mjs

@@ -0,0 +1,176 @@
+import { ResourceNodeBase, dependency, freezeNode, string } from "@prisma/composer";
+import { blindCast } from "@prisma/composer/casts";
+import pg from "pg";
+import pnPostgresRuntime from "@prisma-next/postgres/runtime";
+//#region ../../1-prisma-cloud/1-extensions/target/dist/pg-connection.mjs
+/** Connection resilience helpers for Prisma Postgres cold-starts (FT-5226); no heavy imports (no `effect`/`alchemy`/`pg`), so the deploy lowerings, the pnPostgres runtime client, and bun-runnable services (the storage store, via the pure `@internal/prisma-cloud/connection` subpath) all share one implementation. */
+/** Network-level socket failures node-postgres surfaces as `err.code`. */
+const TRANSIENT_CODES = /* @__PURE__ */ new Set([
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ETIMEDOUT",
+	"EPIPE",
+	"ENOTFOUND",
+	"EAI_AGAIN"
+]);
+/** Connection-establishment failure messages (no useful `err.code`). */
+const TRANSIENT_MESSAGE_FRAGMENTS = [
+	"upstream database",
+	"connection terminated",
+	"connection refused",
+	"terminating connection",
+	"server closed the connection",
+	"connection timeout",
+	"timeout expired"
+];
+/** Whether an error is a transient connection failure worth retrying, as opposed to a real query error that must surface at once. */
+function isTransientConnectionError(error) {
+	if (typeof error !== "object" || error === null) return false;
+	const code = "code" in error && typeof error.code === "string" ? error.code : void 0;
+	if (code !== void 0 && TRANSIENT_CODES.has(code)) return true;
+	const message = "message" in error && typeof error.message === "string" ? error.message.toLowerCase() : "";
+	return TRANSIENT_MESSAGE_FRAGMENTS.some((fragment) => message.includes(fragment));
+}
+/**
+* Rewrites a deprecating `sslmode` (`require`/`prefer`/`verify-ca`) to the
+* explicit `verify-full` these already mean, silencing node-postgres's
+* deprecation warning. `disable`/`no-verify`/unset are left untouched.
+*/
+function normalizeSslMode(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return url;
+	}
+	const sslmode = parsed.searchParams.get("sslmode");
+	if (sslmode === "require" || sslmode === "prefer" || sslmode === "verify-ca") {
+		parsed.searchParams.set("sslmode", "verify-full");
+		return parsed.toString();
+	}
+	return url;
+}
+/**
+* Retries an operation past a transient connection failure, bounded (default
+* ~1 min). `shouldRetry` decides what's transient — defaults to retrying
+* everything; the runtime client passes {@link isTransientConnectionError}.
+*/
+async function withConnectionRetry(operation, opts = {}) {
+	const attempts = opts.attempts ?? 12;
+	const delayMs = opts.delayMs ?? 5e3;
+	const sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+	const shouldRetry = opts.shouldRetry ?? (() => true);
+	let lastError;
+	for (let attempt = 1; attempt <= attempts; attempt++) try {
+		return await operation();
+	} catch (error) {
+		if (!shouldRetry(error)) throw error;
+		lastError = error;
+		if (attempt < attempts) await sleep(delayMs);
+	}
+	throw lastError;
+}
+/** Retries acquiring a connection past a transient cold-start; {@link withConnectionRetry} with {@link isTransientConnectionError} fixed as the predicate. */
+function retryTransientConnect(acquire, opts = {}) {
+	return withConnectionRetry(acquire, {
+		...opts,
+		shouldRetry: isTransientConnectionError
+	});
+}
+//#endregion
+//#region ../../1-prisma-cloud/1-extensions/target/dist/prisma-next.mjs
+/**
+* The `prisma-next` resource node: a core Resource node plus `config`, the
+* `prisma-next.config.ts` path the deploy-only migration lowering loads to
+* find the migrations directory — the app build never imports it.
+*/
+var PnPostgresResourceNode = class extends ResourceNodeBase {
+	config;
+	constructor(def) {
+		super({
+			name: def.name,
+			extension: "@prisma/composer-prisma-cloud",
+			provides: def.contract
+		});
+		this.config = def.config;
+		if (def.targetRef !== void 0) this.targetRef = def.targetRef;
+		freezeNode(this);
+	}
+};
+/** Narrows `ctx.node` to a `pnPostgres` resource node so the deploy lowering reads `config` without a bare cast. Structural, never `instanceof`. */
+function isPnPostgresResourceNode(node) {
+	return node.kind === "resource" && node.type === "prisma-next" && "config" in node && typeof node.config === "string";
+}
+function pnContract(contract) {
+	const value = {
+		kind: "prisma-next",
+		__cmp: { contractJson: contract },
+		satisfies: (required) => {
+			const requiredHash = storageHashOf(required);
+			return requiredHash !== void 0 && requiredHash === storageHashOf(value);
+		}
+	};
+	return Object.freeze(value);
+}
+function pnPostgres(arg) {
+	if (!isPnPostgresContract(arg)) return new PnPostgresResourceNode(arg);
+	const contract = arg;
+	return dependency({
+		type: "prisma-next",
+		connection: {
+			params: { url: string() },
+			hydrate: ({ url }) => buildClient(contract, url)
+		},
+		required: contract
+	});
+}
+function isPnPostgresContract(value) {
+	return typeof value === "object" && value !== null && "kind" in value && value.kind === "prisma-next" && "__cmp" in value && "satisfies" in value;
+}
+/**
+* Builds the typed Prisma Next client over a connection pool that rides out
+* a transient cold-start (FT-5226). We pass our own `pg.Pool` rather than a
+* bare `url`: the runtime's bare-`url` connect is a one-shot that fails
+* permanently, but a pool connects lazily on first query, so a bounded retry there suffices.
+*/
+function buildClient(contract, url) {
+	return pnPostgresRuntime({
+		contractJson: contract.__cmp.contractJson,
+		binding: {
+			kind: "pgPool",
+			pool: resilientPool(url)
+		}
+	});
+}
+/**
+* A `pg.Pool` whose connection acquisition retries a transient cold-start
+* (bounded ~1 min). Only `pool.connect()` is wrapped — a real query error
+* still surfaces at once from `client.query()`.
+*/
+function resilientPool(url) {
+	const pool = new pg.Pool({
+		connectionString: normalizeSslMode(url),
+		connectionTimeoutMillis: 2e4,
+		idleTimeoutMillis: 5e3
+	});
+	pool.on("error", (err) => console.error("pg pool idle client error", err));
+	const acquire = pool.connect.bind(pool);
+	pool.connect = blindCast(() => retryTransientConnect(() => acquire()));
+	return pool;
+}
+/** Reads `__cmp.contractJson.storage.storageHash` off a `prisma-next` Contract, defensively — `__cmp` is opaque to core, so nothing guarantees its shape without a runtime check. */
+function storageHashOf(contract) {
+	if (contract === void 0) return void 0;
+	const cmp = contract.__cmp;
+	if (typeof cmp !== "object" || cmp === null || !("contractJson" in cmp)) return void 0;
+	const contractJson = cmp.contractJson;
+	if (typeof contractJson !== "object" || contractJson === null || !("storage" in contractJson)) return;
+	const storage = contractJson.storage;
+	if (typeof storage !== "object" || storage === null || !("storageHash" in storage)) return void 0;
+	const hash = storage.storageHash;
+	return typeof hash === "string" ? hash : void 0;
+}
+//#endregion
+export { normalizeSslMode as a, pnPostgres as i, isPnPostgresResourceNode as n, withConnectionRetry as o, pnContract as r, PnPostgresResourceNode as t };
+
+//# sourceMappingURL=prisma-next-COrwlg3N.mjs.map

package/dist/prisma-next-COrwlg3N.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-next-COrwlg3N.mjs","names":[],"sources":["../../../1-prisma-cloud/1-extensions/target/dist/pg-connection.mjs","../../../1-prisma-cloud/1-extensions/target/dist/prisma-next.mjs"],"sourcesContent":["//#region src/pg-connection.ts\n/** Connection resilience helpers for Prisma Postgres cold-starts (FT-5226); no heavy imports (no `effect`/`alchemy`/`pg`), so the deploy lowerings, the pnPostgres runtime client, and bun-runnable services (the storage store, via the pure `@internal/prisma-cloud/connection` subpath) all share one implementation. */\n/** Network-level socket failures node-postgres surfaces as `err.code`. */\nconst TRANSIENT_CODES = /* @__PURE__ */ new Set([\n\t\"ECONNREFUSED\",\n\t\"ECONNRESET\",\n\t\"ETIMEDOUT\",\n\t\"EPIPE\",\n\t\"ENOTFOUND\",\n\t\"EAI_AGAIN\"\n]);\n/** Connection-establishment failure messages (no useful `err.code`). */\nconst TRANSIENT_MESSAGE_FRAGMENTS = [\n\t\"upstream database\",\n\t\"connection terminated\",\n\t\"connection refused\",\n\t\"terminating connection\",\n\t\"server closed the connection\",\n\t\"connection timeout\",\n\t\"timeout expired\"\n];\n/** Whether an error is a transient connection failure worth retrying, as opposed to a real query error that must surface at once. */\nfunction isTransientConnectionError(error) {\n\tif (typeof error !== \"object\" || error === null) return false;\n\tconst code = \"code\" in error && typeof error.code === \"string\" ? error.code : void 0;\n\tif (code !== void 0 && TRANSIENT_CODES.has(code)) return true;\n\tconst message = \"message\" in error && typeof error.message === \"string\" ? error.message.toLowerCase() : \"\";\n\treturn TRANSIENT_MESSAGE_FRAGMENTS.some((fragment) => message.includes(fragment));\n}\n/**\n* Rewrites a deprecating `sslmode` (`require`/`prefer`/`verify-ca`) to the\n* explicit `verify-full` these already mean, silencing node-postgres's\n* deprecation warning. `disable`/`no-verify`/unset are left untouched.\n*/\nfunction normalizeSslMode(url) {\n\tlet parsed;\n\ttry {\n\t\tparsed = new URL(url);\n\t} catch {\n\t\treturn url;\n\t}\n\tconst sslmode = parsed.searchParams.get(\"sslmode\");\n\tif (sslmode === \"require\" || sslmode === \"prefer\" || sslmode === \"verify-ca\") {\n\t\tparsed.searchParams.set(\"sslmode\", \"verify-full\");\n\t\treturn parsed.toString();\n\t}\n\treturn url;\n}\n/**\n* Retries an operation past a transient connection failure, bounded (default\n* ~1 min). `shouldRetry` decides what's transient — defaults to retrying\n* everything; the runtime client passes {@link isTransientConnectionError}.\n*/\nasync function withConnectionRetry(operation, opts = {}) {\n\tconst attempts = opts.attempts ?? 12;\n\tconst delayMs = opts.delayMs ?? 5e3;\n\tconst sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));\n\tconst shouldRetry = opts.shouldRetry ?? (() => true);\n\tlet lastError;\n\tfor (let attempt = 1; attempt <= attempts; attempt++) try {\n\t\treturn await operation();\n\t} catch (error) {\n\t\tif (!shouldRetry(error)) throw error;\n\t\tlastError = error;\n\t\tif (attempt < attempts) await sleep(delayMs);\n\t}\n\tthrow lastError;\n}\n/** Retries acquiring a connection past a transient cold-start; {@link withConnectionRetry} with {@link isTransientConnectionError} fixed as the predicate. */\nfunction retryTransientConnect(acquire, opts = {}) {\n\treturn withConnectionRetry(acquire, {\n\t\t...opts,\n\t\tshouldRetry: isTransientConnectionError\n\t});\n}\n//#endregion\nexport { isTransientConnectionError, normalizeSslMode, retryTransientConnect, withConnectionRetry };\n\n//# sourceMappingURL=pg-connection.mjs.map","import { normalizeSslMode, retryTransientConnect } from \"./pg-connection.mjs\";\nimport { ResourceNodeBase, dependency, freezeNode, string } from \"@internal/core\";\nimport { blindCast } from \"@internal/foundation/casts\";\nimport pg from \"pg\";\nimport pnPostgresRuntime from \"@prisma-next/postgres/runtime\";\n//#region src/prisma-next.ts\n/**\n* The `prisma-next` resource node: a core Resource node plus `config`, the\n* `prisma-next.config.ts` path the deploy-only migration lowering loads to\n* find the migrations directory — the app build never imports it.\n*/\nvar PnPostgresResourceNode = class extends ResourceNodeBase {\n\tconfig;\n\tconstructor(def) {\n\t\tsuper({\n\t\t\tname: def.name,\n\t\t\textension: \"@prisma/composer-prisma-cloud\",\n\t\t\tprovides: def.contract\n\t\t});\n\t\tthis.config = def.config;\n\t\tif (def.targetRef !== void 0) this.targetRef = def.targetRef;\n\t\tfreezeNode(this);\n\t}\n};\n/** Narrows `ctx.node` to a `pnPostgres` resource node so the deploy lowering reads `config` without a bare cast. Structural, never `instanceof`. */\nfunction isPnPostgresResourceNode(node) {\n\treturn node.kind === \"resource\" && node.type === \"prisma-next\" && \"config\" in node && typeof node.config === \"string\";\n}\nfunction pnContract(contract) {\n\tconst value = {\n\t\tkind: \"prisma-next\",\n\t\t__cmp: { contractJson: contract },\n\t\tsatisfies: (required) => {\n\t\t\tconst requiredHash = storageHashOf(required);\n\t\t\treturn requiredHash !== void 0 && requiredHash === storageHashOf(value);\n\t\t}\n\t};\n\treturn Object.freeze(value);\n}\nfunction pnPostgres(arg) {\n\tif (!isPnPostgresContract(arg)) return new PnPostgresResourceNode(arg);\n\tconst contract = arg;\n\treturn dependency({\n\t\ttype: \"prisma-next\",\n\t\tconnection: {\n\t\t\tparams: { url: string() },\n\t\t\thydrate: ({ url }) => buildClient(contract, url)\n\t\t},\n\t\trequired: contract\n\t});\n}\nfunction isPnPostgresContract(value) {\n\treturn typeof value === \"object\" && value !== null && \"kind\" in value && value.kind === \"prisma-next\" && \"__cmp\" in value && \"satisfies\" in value;\n}\n/**\n* Builds the typed Prisma Next client over a connection pool that rides out\n* a transient cold-start (FT-5226). We pass our own `pg.Pool` rather than a\n* bare `url`: the runtime's bare-`url` connect is a one-shot that fails\n* permanently, but a pool connects lazily on first query, so a bounded retry there suffices.\n*/\nfunction buildClient(contract, url) {\n\treturn pnPostgresRuntime({\n\t\tcontractJson: contract.__cmp.contractJson,\n\t\tbinding: {\n\t\t\tkind: \"pgPool\",\n\t\t\tpool: resilientPool(url)\n\t\t}\n\t});\n}\n/**\n* A `pg.Pool` whose connection acquisition retries a transient cold-start\n* (bounded ~1 min). Only `pool.connect()` is wrapped — a real query error\n* still surfaces at once from `client.query()`.\n*/\nfunction resilientPool(url) {\n\tconst pool = new pg.Pool({\n\t\tconnectionString: normalizeSslMode(url),\n\t\tconnectionTimeoutMillis: 2e4,\n\t\tidleTimeoutMillis: 5e3\n\t});\n\tpool.on(\"error\", (err) => console.error(\"pg pool idle client error\", err));\n\tconst acquire = pool.connect.bind(pool);\n\tpool.connect = blindCast(() => retryTransientConnect(() => acquire()));\n\treturn pool;\n}\n/** Reads `__cmp.contractJson.storage.storageHash` off a `prisma-next` Contract, defensively — `__cmp` is opaque to core, so nothing guarantees its shape without a runtime check. */\nfunction storageHashOf(contract) {\n\tif (contract === void 0) return void 0;\n\tconst cmp = contract.__cmp;\n\tif (typeof cmp !== \"object\" || cmp === null || !(\"contractJson\" in cmp)) return void 0;\n\tconst contractJson = cmp.contractJson;\n\tif (typeof contractJson !== \"object\" || contractJson === null || !(\"storage\" in contractJson)) return;\n\tconst storage = contractJson.storage;\n\tif (typeof storage !== \"object\" || storage === null || !(\"storageHash\" in storage)) return void 0;\n\tconst hash = storage.storageHash;\n\treturn typeof hash === \"string\" ? hash : void 0;\n}\n//#endregion\nexport { PnPostgresResourceNode, isPnPostgresResourceNode, pnContract, pnPostgres };\n\n//# sourceMappingURL=prisma-next.mjs.map"],"mappings":";;;;;;;AAGA,MAAM,kCAAkC,IAAI,IAAI;CAC/C;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;;AAED,MAAM,8BAA8B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;AACD;;AAEA,SAAS,2BAA2B,OAAO;CAC1C,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAK;CACnF,IAAI,SAAS,KAAK,KAAK,gBAAgB,IAAI,IAAI,GAAG,OAAO;CACzD,MAAM,UAAU,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,QAAQ,YAAY,IAAI;CACxG,OAAO,4BAA4B,MAAM,aAAa,QAAQ,SAAS,QAAQ,CAAC;AACjF;;;;;;AAMA,SAAS,iBAAiB,KAAK;CAC9B,IAAI;CACJ,IAAI;EACH,SAAS,IAAI,IAAI,GAAG;CACrB,QAAQ;EACP,OAAO;CACR;CACA,MAAM,UAAU,OAAO,aAAa,IAAI,SAAS;CACjD,IAAI,YAAY,aAAa,YAAY,YAAY,YAAY,aAAa;EAC7E,OAAO,aAAa,IAAI,WAAW,aAAa;EAChD,OAAO,OAAO,SAAS;CACxB;CACA,OAAO;AACR;;;;;;AAMA,eAAe,oBAAoB,WAAW,OAAO,CAAC,GAAG;CACxD,MAAM,WAAW,KAAK,YAAY;CAClC,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,QAAQ,KAAK,WAAW,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;CACrF,MAAM,cAAc,KAAK,sBAAsB;CAC/C,IAAI;CACJ,KAAK,IAAI,UAAU,GAAG,WAAW,UAAU,WAAW,IAAI;EACzD,OAAO,MAAM,UAAU;CACxB,SAAS,OAAO;EACf,IAAI,CAAC,YAAY,KAAK,GAAG,MAAM;EAC/B,YAAY;EACZ,IAAI,UAAU,UAAU,MAAM,MAAM,OAAO;CAC5C;CACA,MAAM;AACP;;AAEA,SAAS,sBAAsB,SAAS,OAAO,CAAC,GAAG;CAClD,OAAO,oBAAoB,SAAS;EACnC,GAAG;EACH,aAAa;CACd,CAAC;AACF;;;;;;;;AC/DA,IAAI,yBAAyB,cAAc,iBAAiB;CAC3D;CACA,YAAY,KAAK;EAChB,MAAM;GACL,MAAM,IAAI;GACV,WAAW;GACX,UAAU,IAAI;EACf,CAAC;EACD,KAAK,SAAS,IAAI;EAClB,IAAI,IAAI,cAAc,KAAK,GAAG,KAAK,YAAY,IAAI;EACnD,WAAW,IAAI;CAChB;AACD;;AAEA,SAAS,yBAAyB,MAAM;CACvC,OAAO,KAAK,SAAS,cAAc,KAAK,SAAS,iBAAiB,YAAY,QAAQ,OAAO,KAAK,WAAW;AAC9G;AACA,SAAS,WAAW,UAAU;CAC7B,MAAM,QAAQ;EACb,MAAM;EACN,OAAO,EAAE,cAAc,SAAS;EAChC,YAAY,aAAa;GACxB,MAAM,eAAe,cAAc,QAAQ;GAC3C,OAAO,iBAAiB,KAAK,KAAK,iBAAiB,cAAc,KAAK;EACvE;CACD;CACA,OAAO,OAAO,OAAO,KAAK;AAC3B;AACA,SAAS,WAAW,KAAK;CACxB,IAAI,CAAC,qBAAqB,GAAG,GAAG,OAAO,IAAI,uBAAuB,GAAG;CACrE,MAAM,WAAW;CACjB,OAAO,WAAW;EACjB,MAAM;EACN,YAAY;GACX,QAAQ,EAAE,KAAK,OAAO,EAAE;GACxB,UAAU,EAAE,UAAU,YAAY,UAAU,GAAG;EAChD;EACA,UAAU;CACX,CAAC;AACF;AACA,SAAS,qBAAqB,OAAO;CACpC,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,SAAS,MAAM,SAAS,iBAAiB,WAAW,SAAS,eAAe;AAC7I;;;;;;;AAOA,SAAS,YAAY,UAAU,KAAK;CACnC,OAAO,kBAAkB;EACxB,cAAc,SAAS,MAAM;EAC7B,SAAS;GACR,MAAM;GACN,MAAM,cAAc,GAAG;EACxB;CACD,CAAC;AACF;;;;;;AAMA,SAAS,cAAc,KAAK;CAC3B,MAAM,OAAO,IAAI,GAAG,KAAK;EACxB,kBAAkB,iBAAiB,GAAG;EACtC,yBAAyB;EACzB,mBAAmB;CACpB,CAAC;CACD,KAAK,GAAG,UAAU,QAAQ,QAAQ,MAAM,6BAA6B,GAAG,CAAC;CACzE,MAAM,UAAU,KAAK,QAAQ,KAAK,IAAI;CACtC,KAAK,UAAU,gBAAgB,4BAA4B,QAAQ,CAAC,CAAC;CACrE,OAAO;AACR;;AAEA,SAAS,cAAc,UAAU;CAChC,IAAI,aAAa,KAAK,GAAG,OAAO,KAAK;CACrC,MAAM,MAAM,SAAS;CACrB,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,EAAE,kBAAkB,MAAM,OAAO,KAAK;CACrF,MAAM,eAAe,IAAI;CACzB,IAAI,OAAO,iBAAiB,YAAY,iBAAiB,QAAQ,EAAE,aAAa,eAAe;CAC/F,MAAM,UAAU,aAAa;CAC7B,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,EAAE,iBAAiB,UAAU,OAAO,KAAK;CAChG,MAAM,OAAO,QAAQ;CACrB,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK;AAC/C"}

package/dist/prisma-next.d.mts

@@ -0,0 +1,71 @@
+import { Contract, DependencyEnd, ResourceNode, ResourceNodeBase, ServiceNode } from "@prisma/composer";
+import { PostgresClient } from "@prisma-next/postgres/runtime";
+import { SqlStorage } from "@prisma-next/sql-contract/types";
+//#region ../../1-prisma-cloud/1-extensions/target/dist/prisma-next.d.mts
+//#region src/prisma-next.d.ts
+/**
+ * Any Prisma Next contract this primitive can carry — the bound both
+ * authoring modes (TS no-emit `defineContract()`, or PSL/emitted
+ * `contract.d.ts`) satisfy.
+ */
+type AnyPnContract = import('@prisma-next/contract/types').Contract<SqlStorage>;
+/**
+ * The comparison payload behind a `prisma-next` Contract. `_contract` is a
+ * type-only anchor so plain assignability between two `PnCmp`s means the
+ * branded `storageHash` literals match.
+ */
+interface PnCmp<C extends AnyPnContract = AnyPnContract> {
+  readonly contractJson: unknown;
+  readonly _contract?: C;
+}
+/** The `prisma-next` kind: a Contract whose `Cmp` is `PnCmp`. */
+type PnPostgresContract<C extends AnyPnContract = AnyPnContract> = Contract<'prisma-next', PnCmp<C>>;
+/** Recovers the emitted contract type `C` a `prisma-next` Contract carries. */
+type PnContractOf<Ct> = Ct extends PnPostgresContract<infer C> ? C : never;
+/** The typed client a consumer's `pnPostgres(contract)` dependency hydrates to. */
+type Client<Ct> = PostgresClient<PnContractOf<Ct>>;
+/**
+ * The `prisma-next` resource node: a core Resource node plus `config`, the
+ * `prisma-next.config.ts` path the deploy-only migration lowering loads to
+ * find the migrations directory — the app build never imports it.
+ */
+declare class PnPostgresResourceNode<C extends PnPostgresContract = PnPostgresContract> extends ResourceNodeBase<C> {
+  readonly config: string;
+  /** Optional target ref NAME (`migrations/app/refs/<name>.json`) — see `pnPostgres`. */
+  readonly targetRef?: string;
+  constructor(def: {
+    name: string;
+    contract: C;
+    config: string;
+    targetRef?: string;
+  });
+}
+/** Narrows `ctx.node` to a `pnPostgres` resource node so the deploy lowering reads `config` without a bare cast. Structural, never `instanceof`. */
+declare function isPnPostgresResourceNode(node: ServiceNode | ResourceNode): node is PnPostgresResourceNode;
+/**
+ * Wraps a resolved Prisma Next contract value into the framework's
+ * `prisma-next` Contract kind. Two overloads: TS-authored (`C` inferred) vs.
+ * emitted JSON (`C` passed explicitly, e.g. `pnContract<Contract>(contractJson)`).
+ */
+declare function pnContract<const C extends AnyPnContract>(contract: C): PnPostgresContract<C>;
+declare function pnContract<C extends AnyPnContract>(contractJson: unknown): PnPostgresContract<C>;
+/**
+ * `{ name, contract, config, targetRef? }` — the resource identity a module
+ * provisions. `config` is the deploy-only `prisma-next.config.ts` path;
+ * `targetRef` optionally names a ref as the migration target.
+ */
+declare function pnPostgres<C extends PnPostgresContract>(opts: {
+  name: string;
+  contract: C;
+  config: string;
+  targetRef?: string;
+}): PnPostgresResourceNode<C>;
+/**
+ * `pnPostgres(contract)` — a service's dependency on a Prisma Next-typed
+ * Postgres. Its binding is the typed Prisma Next client, constructed by the
+ * framework in hydrate from the contract plus the injected connection URL.
+ */
+declare function pnPostgres<C extends PnPostgresContract>(contract: C): DependencyEnd<Client<C>, C>;
+//#endregion
+export { AnyPnContract, Client, PnCmp, PnContractOf, PnPostgresContract, PnPostgresResourceNode, isPnPostgresResourceNode, pnContract, pnPostgres };
+//# sourceMappingURL=prisma-next.d.mts.map

package/dist/prisma-next.mjs

@@ -0,0 +1,2 @@
+import { i as pnPostgres, n as isPnPostgresResourceNode, r as pnContract, t as PnPostgresResourceNode } from "./prisma-next-COrwlg3N.mjs";
+export { PnPostgresResourceNode, isPnPostgresResourceNode, pnContract, pnPostgres };