@prisma/composer-prisma-cloud 0.5.0-dev.2 → 0.5.0-dev.3

package/dist/control.mjs

@@ -2,7 +2,7 @@ import { o as paramBindingFor, s as paramName } from "./secret-Doubjztg-CWHCDiuX
 import { a as encodeParamPointer, i as encode, l as serializeInput, n as configKey, o as paramEntries } from "./serializer-Ch1Tmx-2-D7cNhkEp.mjs";
 import { a as provisionedEdges, n as SELF_ORIGIN, r as STREAMS_API_KEY, t as RESERVED_PROVIDER_PARAMS } from "./provisioned-edges-COr17uxy-DymAGn_V.mjs";
 import { n as requiredPackHeadOf } from "./required-pack-head-BrrJarzc-DeP50pBu.mjs";
-import { A as packageComputeArtifact, D as EnvironmentVariable, E as Deployment, F as call, I as callVoid, L as fromEnv, M as BucketKey, N as ManagementClient, O as ServiceKey, P as PrismaApiError, R as layer, S as Database, T as ComputeService, _ as resolveTargetRef, a as PgWarmProvider, b as providers, d as collectPreflightNames, f as containerDescriptor, g as resolvePrismaNextConfig, h as prismaCloudContainerOf, i as PgWarm, j as Bucket, k as ServiceKeyProvider, l as S3Credentials, m as packHeadRefHashes, n as GeneratedParamProvider, o as PnMigration, r as PRISMA_CLOUD_EXTENSION_ID, s as PnMigrationProvider, t as GeneratedParam, u as S3CredentialsProvider, w as COMPUTE_REGIONS, x as Connection } from "./s3-credentials-resource-tfirOJBj-BCRHDuEl.mjs";
+import { A as packageComputeArtifact, B as layer, D as EnvironmentVariable, E as Deployment, F as ManagementClient, I as PrismaApiError, L as call, M as BucketKey, N as collectPages, O as ServiceKey, P as resolveDefaultBranchId, R as callVoid, S as Database, T as ComputeService, _ as resolveTargetRef, a as PgWarmProvider, b as providers, d as collectPreflightNames, f as containerDescriptor, g as resolvePrismaNextConfig, h as prismaCloudContainerOf, i as PgWarm, j as Bucket, k as ServiceKeyProvider, l as S3Credentials, m as packHeadRefHashes, n as GeneratedParamProvider, o as PnMigration, r as PRISMA_CLOUD_EXTENSION_ID, s as PnMigrationProvider, t as GeneratedParam, u as S3CredentialsProvider, w as COMPUTE_REGIONS, x as Connection, z as fromEnv } from "./s3-credentials-resource-BMsm9nho-C0Bg1909.mjs";
 import { n as isPnPostgresResourceNode } from "./prisma-next-DmPGOIm2-3V7kdn8T.mjs";
 import { isParamSource } from "@prisma/composer";
 import { blindCast } from "@prisma/composer/casts";
@@ -21,62 +21,24 @@ import * as Output from "alchemy/Output";
 const STATE_DATABASE_NAME = "prisma-composer-state";
 /** Every connection created against a state database carries this prefix — see `cleanupAgedConnections`. */
 const CONNECTION_NAME_PREFIX = "prisma-composer-state-";
-const listAllBranches = (client, projectId) => Effect.gen(function* () {
-	const branches = [];
-	let cursor;
-	for (;;) {
-		const query = cursor === void 0 ? {} : { cursor };
-		const page = yield* call(() => client.GET("/v1/projects/{projectId}/branches", { params: {
-			path: { projectId },
-			query
-		} }));
-		branches.push(...page.data);
-		if (!page.pagination.hasMore || page.pagination.nextCursor === null) break;
-		cursor = page.pagination.nextCursor;
-	}
-	return branches;
-});
-/**
-* The project's implicit default Branch — every live Project owns exactly
-* one (a platform invariant). The list endpoint has no `isDefault` filter, so
-* this pages through every Branch and picks it out client-side. Never creates
-* one: its absence means the platform's invariant is broken, which is not
-* something a deploy can repair.
-*/
-const resolveDefaultBranchId = (client, projectId) => Effect.gen(function* () {
-	const found = (yield* listAllBranches(client, projectId)).find((b) => b.isDefault);
-	if (found !== void 0) return found.id;
-	return yield* Effect.fail(new PrismaApiError({
-		status: 0,
-		message: `project ${projectId} has no default Branch — the platform guarantees every live Project owns one; contact support.`
-	}));
-});
-/** A named stage carries its `branchId`; production omits it, and its state lives on the Project's default Branch. */
-const resolveBranchId = (client, container) => container.branchId !== void 0 ? Effect.succeed(container.branchId) : resolveDefaultBranchId(client, container.projectId);
+/** A named stage carries its `branchId`; production carries `defaultBranchId` (its state lives on the Project's default Branch) — re-resolved only when neither is present. */
+const resolveBranchId = (client, container) => {
+	const known = container.branchId ?? container.defaultBranchId;
+	return known !== void 0 ? Effect.succeed(known) : resolveDefaultBranchId(client, container.projectId);
+};
 /**
-* Every database on this Branch. Uses the flat `GET /v1/databases`, which
-* accepts `projectId` and `branchId` together — the project-scoped listing
-* has no branch filter at all.
+* Every database on this Branch (bounded — drivePages). Uses the flat
+* `GET /v1/databases`, which accepts `projectId` and `branchId` together —
+* the project-scoped listing has no branch filter at all.
 */
-const listAllDatabasesOnBranch = (client, projectId, branchId) => Effect.gen(function* () {
-	const databases = [];
-	let cursor;
-	for (;;) {
-		const query = cursor === void 0 ? {
-			projectId,
-			branchId
-		} : {
-			projectId,
-			branchId,
-			cursor
-		};
-		const page = yield* call(() => client.GET("/v1/databases", { params: { query } }));
-		databases.push(...page.data);
-		if (!page.pagination.hasMore || page.pagination.nextCursor === null) break;
-		cursor = page.pagination.nextCursor;
-	}
-	return databases;
-});
+const listAllDatabasesOnBranch = (client, projectId, branchId) => collectPages(`databases on branch ${branchId}`, (cursor) => call(() => client.GET("/v1/databases", { params: { query: cursor === void 0 ? {
+	projectId,
+	branchId
+} : {
+	projectId,
+	branchId,
+	cursor
+} } })));
 /**
 * Databases on this Branch named `prisma-composer-state`, oldest first,
 * excluding the Branch's own default database. The default database is always
@@ -347,6 +309,7 @@ const bootstrapStateConnectionWith = (container, verify) => Effect.gen(function*
 	yield* cleanupAgedConnections(client, database.id);
 	return {
 		projectId: container.projectId,
+		branchId,
 		databaseId: database.id,
 		connectionString
 	};
@@ -371,6 +334,50 @@ const deleteStateDatabaseWith = (container, verify) => Effect.gen(function* () {
 		console.error(`hosted state: removed state database ${candidate.id} from branch ${branchId}`);
 	}
 });
+/** Whether the (stack, stage) scope holds any rows in either state table. */
+const scopeOccupied = (sql, stack, stage) => Effect.tryPromise({
+	try: async () => {
+		return (await sql`
+        select
+          exists (select 1 from alchemy_resource_state where stack = ${stack} and stage = ${stage})
+          or exists (select 1 from alchemy_stack_output where stack = ${stack} and stage = ${stage})
+          as occupied
+      `)[0]?.occupied === true;
+	},
+	catch: toStateStoreError
+});
+const listAppsOnBranch = (client, projectId, branchId) => collectPages(`apps on branch ${branchId}`, (cursor) => call(() => client.GET("/v1/apps", { params: { query: cursor === void 0 ? {
+	projectId,
+	branchId
+} : {
+	projectId,
+	branchId,
+	cursor
+} } })));
+/**
+* The empty-scope-with-live-apps case: the branch-id scope holds no rows
+* while the platform already runs Compute apps on the target Branch. Either
+* this is a pre-branch-id deployment whose rows still sit under a legacy
+* scope (`dev_$USER`, `unknown`, or the old stage name — there is no
+* automatic migration; operator decision TML-3157), or the deploy targets a
+* project that already runs apps. Deploying would recreate every resource
+* and die in per-resource `already_exists` failures — so fail once, up
+* front, naming the empty scope and what exists. Any app on the Branch is
+* this deploy's concern: the Project is app-scoped and the Branch is the
+* deploy's own target. A genuinely fresh deploy sees an empty Branch and
+* passes. Local dev never reaches this — the dev stack pins
+* `state: localState()` (generate-dev-stack.ts).
+*/
+const failOnEmptyScopeWithLiveApps = (projectId, branchId, stack, stage) => Effect.gen(function* () {
+	const client = yield* ManagementClient;
+	const apps = yield* listAppsOnBranch(client, projectId, branchId);
+	if (apps.length === 0) return;
+	const names = apps.map((app) => `"${app.name}"`).join(", ");
+	return yield* Effect.fail(new PrismaApiError({
+		status: 0,
+		message: `the deploy state scope "${stage}" is empty, but the platform already runs ${String(apps.length)} app(s) on the target branch ${branchId}: ${names}. With no state, a deploy would recreate every resource and fail with already_exists, and a destroy would remove nothing. If those apps are a deployment from before the branch-id state scope, UPDATE the stage column of alchemy_resource_state and alchemy_stack_output to '${stage}' WHERE stack = '${stack}' (the same database can hold other stacks' rows) in this branch's prisma-composer-state database — or delete the apps in the Prisma Console (or via the Management API) and redeploy fresh. If they are another deployment's, remove them or deploy into a different project. Then retry.`
+	}));
+});
 /** Codes for "can't reach the host yet" — DNS/refusal, not a mid-session drop. */
 const ESTABLISHMENT_CODES = /* @__PURE__ */ new Set([
 	"ECONNREFUSED",
@@ -662,14 +669,15 @@ const guardStateService = (service, checkLive, now = Date.now) => {
 * state store is `Effect.die` in `Stack.make`).
 */
 const prismaStateLayer = (ids) => {
-	const { projectId, branchId } = ids;
+	const { projectId, branchId, defaultBranchId } = ids;
 	return Layer.effect(State, Effect.gen(function* () {
 		const stack = yield* Stack;
 		const container = branchId === void 0 ? projectId : `${projectId}/${branchId}`;
 		const bootstrapError = (step) => (cause) => hostedStateBootstrapError(container, step, cause);
-		const { connectionString } = yield* bootstrapStateConnection(branchId === void 0 ? { projectId } : {
+		const { connectionString, branchId: stateBranchId } = yield* bootstrapStateConnection({
 			projectId,
-			branchId
+			...branchId !== void 0 ? { branchId } : {},
+			...defaultBranchId !== void 0 ? { defaultBranchId } : {}
 		}).pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))), Effect.mapError(bootstrapError("resolving the state database on the stage branch")));
 		const sql = postgres(Redacted.value(connectionString), {
 			max: 5,
@@ -679,6 +687,7 @@ const prismaStateLayer = (ids) => {
 		yield* migratePrismaState(sql).pipe(Effect.retry(Schedule.both(Schedule.spaced("5 seconds"), Schedule.during("2 minutes"))), Effect.mapError(bootstrapError("schema migration")));
 		const lock = yield* acquireStateLock(sql, stack.name, stack.stage).pipe(Effect.mapError(bootstrapError("lock acquisition")));
 		yield* Effect.addFinalizer(() => Effect.promise(() => lock.release()));
+		if (!(yield* scopeOccupied(sql, stack.name, stack.stage).pipe(Effect.mapError(bootstrapError("probing the deploy state scope"))))) yield* failOnEmptyScopeWithLiveApps(projectId, stateBranchId, stack.name, stack.stage).pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))), Effect.mapError(bootstrapError("checking the empty deploy state scope")));
 		const service = guardStateService(makePrismaStateService(sql), lock.checkLive);
 		return Effect.succeed(service);
 	})).pipe(Layer.orDie);
@@ -1247,11 +1256,12 @@ const selfOriginValue = (provisioned, address) => Output.map(provisioned.endpoin
 const prismaState = () => ({
 	extension: PRISMA_CLOUD_EXTENSION_ID,
 	create: (container) => {
-		const { projectId, branchId } = prismaCloudContainerOf(container);
-		return prismaStateLayer(branchId !== void 0 ? {
+		const { projectId, branchId, defaultBranchId } = prismaCloudContainerOf(container);
+		return prismaStateLayer({
 			projectId,
-			branchId
-		} : { projectId });
+			...branchId !== void 0 ? { branchId } : {},
+			...defaultBranchId !== void 0 ? { defaultBranchId } : {}
+		});
 	}
 });
 const KNOWN_REGION_SET = new Set(COMPUTE_REGIONS);