@prisma/composer-prisma-cloud 0.5.0 → 0.6.0-dev.1

package/dist/{s3-credentials-resource-tfirOJBj-79G9R_h8.mjs → s3-credentials-resource-BMsm9nho-C0Bg1909.mjs}

@@ -63,6 +63,169 @@ const callOptional = (f) => attempt(f).pipe(Effect.flatMap((r) => r.response.sta
 /** Fire-and-forget a call, tolerating a 404 (already deleted). */
 const callVoid = (f) => attempt(f).pipe(Effect.flatMap((r) => r.response.status === 404 || r.error === void 0 ? Effect.void : fail(r)));
 //#endregion
+//#region ../../1-prisma-cloud/0-lowering/lowering/dist/container-DW3Yak_S.mjs
+/** Far beyond any real collection size per listing; hitting it means the API's pagination is broken. */
+const MAX_PAGES = 1e3;
+const brokenPaginationError = (description, reason) => new PrismaApiError({
+	status: 0,
+	message: `listing ${description} ${reason} — the Management API pagination appears broken; refusing to continue with a possibly incomplete listing.`
+});
+/** {@link drivePages} in its most common shape: every page's rows, accumulated. */
+const collectPages = (description, fetchPage) => Effect.gen(function* () {
+	const rows = [];
+	yield* drivePages(description, fetchPage, (data) => {
+		rows.push(...data);
+		return false;
+	});
+	return rows;
+});
+/**
+* Drives a cursor-paginated Management API listing with a guard against
+* broken pagination: a cursor that does not advance, or more than
+* {@link MAX_PAGES} pages, FAILS instead of hanging forever or returning a
+* listing known to be incomplete. `onPage` receives each page's rows as they
+* arrive; returning `true` stops early (the caller found what it wanted).
+*/
+const drivePages = (description, fetchPage, onPage) => Effect.gen(function* () {
+	let cursor;
+	for (let pageCount = 0;; pageCount++) {
+		if (pageCount >= MAX_PAGES) return yield* Effect.fail(brokenPaginationError(description, `did not finish within ${String(MAX_PAGES)} pages`));
+		const page = yield* fetchPage(cursor);
+		if (onPage(page.data)) return;
+		const next = page.pagination.nextCursor;
+		if (!page.pagination.hasMore || next === null) return;
+		if (next === cursor) return yield* Effect.fail(brokenPaginationError(description, "returned a non-advancing cursor"));
+		cursor = next;
+	}
+});
+/** Raised with `ensure: false` when the app's Project (or a named stage's Branch) doesn't exist. */
+var ContainerNotFoundError = class extends Data.TaggedError("ContainerNotFoundError") {};
+const listAllProjects = (client) => Effect.gen(function* () {
+	const projects = [];
+	let cursor;
+	for (;;) {
+		const query = cursor === void 0 ? {} : { cursor };
+		const page = yield* call(() => client.GET("/v1/projects", { params: { query } }));
+		projects.push(...page.data);
+		if (!page.pagination.hasMore || page.pagination.nextCursor === null) break;
+		cursor = page.pagination.nextCursor;
+	}
+	return projects;
+});
+/**
+* Workspace ids circulate in two shapes: `wksp_`-prefixed and bare. Compare
+* bare-to-bare so a `wksp_`-prefixed API id still matches a bare configured
+* one (the same normalization `state/bootstrap.ts` applies to the same
+* `/v1/projects` listing).
+*/
+const bareWorkspaceId = (id) => id.startsWith("wksp_") ? id.slice(5) : id;
+/**
+* Finds the app's Project by name in the workspace — PDP allows duplicate
+* project names, so more than one can match; the oldest wins. Creates one
+* if none match, unless `ensure` is `false` (find-only — `destroy`), in
+* which case an absent Project fails with `ContainerNotFoundError`. No
+* ownership marker and no `--project` override (both deferred — see
+* ADR-0019).
+*/
+const resolveProject = (client, workspaceId, appName, ensure) => Effect.gen(function* () {
+	const oldest = (yield* listAllProjects(client)).filter((p) => bareWorkspaceId(p.workspace.id) === bareWorkspaceId(workspaceId) && p.name === appName).sort((a, b) => a.createdAt.localeCompare(b.createdAt))[0];
+	if (oldest !== void 0) return oldest.id;
+	if (!ensure) return yield* Effect.fail(new ContainerNotFoundError({ appName }));
+	return (yield* call(() => client.POST("/v1/projects", { body: {
+		name: appName,
+		workspaceId,
+		createDatabase: false
+	} }))).data.id;
+});
+/**
+* The project's implicit default Branch — every live Project owns exactly
+* one (a platform invariant). The list endpoint has no `isDefault` filter,
+* so this pages through the Branches (bounded — drivePages) and returns as
+* soon as a page contains it. Never creates one: its absence means the
+* platform's invariant is broken, which is not something a deploy can
+* repair.
+*/
+const resolveDefaultBranchId = (client, projectId) => Effect.gen(function* () {
+	let found;
+	yield* drivePages(`branches of project ${projectId}`, (cursor) => call(() => client.GET("/v1/projects/{projectId}/branches", { params: {
+		path: { projectId },
+		query: cursor === void 0 ? {} : { cursor }
+	} })), (data) => {
+		found = data.find((b) => b.isDefault)?.id;
+		return found !== void 0;
+	});
+	if (found !== void 0) return found;
+	return yield* Effect.fail(new PrismaApiError({
+		status: 0,
+		message: `project ${projectId} has no default Branch — the platform guarantees every live Project owns one; contact support.`
+	}));
+});
+const findBranchId = (client, projectId, gitName) => call(() => client.GET("/v1/projects/{projectId}/branches", { params: {
+	path: { projectId },
+	query: { gitName }
+} })).pipe(Effect.map((page) => page.data[0]?.id));
+/**
+* Finds the stage's Branch by its exact `gitName`, creating it if absent
+* unless `ensure` is `false` (find-only — `destroy`), in which case an
+* absent Branch fails with `ContainerNotFoundError`. The Management API has
+* no server-side "create-or-return" idempotency (`POST
+* /v1/projects/:id/branches` 409s on a duplicate `gitName`, with no request
+* field to make that a no-op), so idempotency is client-side: observe
+* first, and on a racing 409 from create, re-observe rather than fail.
+*/
+const resolveBranch = (client, projectId, gitName, appName, ensure) => Effect.gen(function* () {
+	const existing = yield* findBranchId(client, projectId, gitName);
+	if (existing !== void 0) return existing;
+	if (!ensure) return yield* Effect.fail(new ContainerNotFoundError({
+		appName,
+		stage: gitName
+	}));
+	return yield* call(() => client.POST("/v1/projects/{projectId}/branches", {
+		params: { path: { projectId } },
+		body: { gitName }
+	})).pipe(Effect.map((r) => r.data.id), Effect.catch((err) => err.status === 409 ? findBranchId(client, projectId, gitName).pipe(Effect.flatMap((id) => id === void 0 ? Effect.fail(err) : Effect.succeed(id))) : Effect.fail(err)));
+});
+/**
+* Resolves the two containers a stage's deploy runs into (ADR-0019): the
+* app's **Project**, found-or-created by name, and — for a named stage
+* only — its **Branch**, found-or-created by `gitName`. The default stage
+* (no `stage`) creates no Branch; `branchId` is omitted, and the project's
+* default Branch's id is read into `defaultBranchId` instead. With `ensure:
+* false` (`destroy`), nothing is created — an absent Project or Branch
+* fails with `ContainerNotFoundError` instead.
+*/
+const resolveContainer = (opts) => Effect.gen(function* () {
+	const client = yield* ManagementClient;
+	const ensure = opts.ensure ?? true;
+	const projectId = yield* resolveProject(client, opts.workspaceId, opts.appName, ensure);
+	if (opts.stage === void 0) return {
+		projectId,
+		defaultBranchId: yield* resolveDefaultBranchId(client, projectId)
+	};
+	return {
+		projectId,
+		branchId: yield* resolveBranch(client, projectId, opts.stage, opts.appName, ensure)
+	};
+});
+/**
+* Soft-deletes a Branch. Tolerates a 404 (already gone). The API refuses if
+* the Branch still has live members or is the production/default Branch —
+* that surfaces as a `PrismaApiError`.
+*/
+const deleteBranch = (branchId) => Effect.gen(function* () {
+	const client = yield* ManagementClient;
+	yield* callVoid(() => client.DELETE("/v1/branches/{branchId}", { params: { path: { branchId } } }));
+});
+/**
+* Deletes a Project. Tolerates a 404 (already gone). The API refuses with a
+* 400 if the Project still has live dependencies (e.g. another stage's
+* Branch/resources) — that surfaces as a `PrismaApiError`.
+*/
+const deleteProject = (projectId) => Effect.gen(function* () {
+	const client = yield* ManagementClient;
+	yield* callVoid(() => client.DELETE("/v1/projects/{id}", { params: { path: { id: projectId } } }));
+});
+//#endregion
 //#region ../../1-prisma-cloud/0-lowering/lowering/dist/buckets.mjs
 /** A Prisma **Object Store bucket** inside a project. */
 const Bucket = Resource("Prisma.Bucket");
@@ -620,105 +783,6 @@ const ProjectProvider = () => Provider.effect(Project, Effect.gen(function* () {
 }));
 //#endregion
 //#region ../../1-prisma-cloud/0-lowering/lowering/dist/index.mjs
-/** Raised with `ensure: false` when the app's Project (or a named stage's Branch) doesn't exist. */
-var ContainerNotFoundError = class extends Data.TaggedError("ContainerNotFoundError") {};
-const listAllProjects = (client) => Effect.gen(function* () {
-	const projects = [];
-	let cursor;
-	for (;;) {
-		const query = cursor === void 0 ? {} : { cursor };
-		const page = yield* call(() => client.GET("/v1/projects", { params: { query } }));
-		projects.push(...page.data);
-		if (!page.pagination.hasMore || page.pagination.nextCursor === null) break;
-		cursor = page.pagination.nextCursor;
-	}
-	return projects;
-});
-/**
-* Workspace ids circulate in two shapes: `wksp_`-prefixed and bare. Compare
-* bare-to-bare so a `wksp_`-prefixed API id still matches a bare configured
-* one (the same normalization `state/bootstrap.ts` applies to the same
-* `/v1/projects` listing).
-*/
-const bareWorkspaceId = (id) => id.startsWith("wksp_") ? id.slice(5) : id;
-/**
-* Finds the app's Project by name in the workspace — PDP allows duplicate
-* project names, so more than one can match; the oldest wins. Creates one
-* if none match, unless `ensure` is `false` (find-only — `destroy`), in
-* which case an absent Project fails with `ContainerNotFoundError`. No
-* ownership marker and no `--project` override (both deferred — see
-* ADR-0019).
-*/
-const resolveProject = (client, workspaceId, appName, ensure) => Effect.gen(function* () {
-	const oldest = (yield* listAllProjects(client)).filter((p) => bareWorkspaceId(p.workspace.id) === bareWorkspaceId(workspaceId) && p.name === appName).sort((a, b) => a.createdAt.localeCompare(b.createdAt))[0];
-	if (oldest !== void 0) return oldest.id;
-	if (!ensure) return yield* Effect.fail(new ContainerNotFoundError({ appName }));
-	return (yield* call(() => client.POST("/v1/projects", { body: {
-		name: appName,
-		workspaceId
-	} }))).data.id;
-});
-const findBranchId = (client, projectId, gitName) => call(() => client.GET("/v1/projects/{projectId}/branches", { params: {
-	path: { projectId },
-	query: { gitName }
-} })).pipe(Effect.map((page) => page.data[0]?.id));
-/**
-* Finds the stage's Branch by its exact `gitName`, creating it if absent
-* unless `ensure` is `false` (find-only — `destroy`), in which case an
-* absent Branch fails with `ContainerNotFoundError`. The Management API has
-* no server-side "create-or-return" idempotency (`POST
-* /v1/projects/:id/branches` 409s on a duplicate `gitName`, with no request
-* field to make that a no-op), so idempotency is client-side: observe
-* first, and on a racing 409 from create, re-observe rather than fail.
-*/
-const resolveBranch = (client, projectId, gitName, appName, ensure) => Effect.gen(function* () {
-	const existing = yield* findBranchId(client, projectId, gitName);
-	if (existing !== void 0) return existing;
-	if (!ensure) return yield* Effect.fail(new ContainerNotFoundError({
-		appName,
-		stage: gitName
-	}));
-	return yield* call(() => client.POST("/v1/projects/{projectId}/branches", {
-		params: { path: { projectId } },
-		body: { gitName }
-	})).pipe(Effect.map((r) => r.data.id), Effect.catch((err) => err.status === 409 ? findBranchId(client, projectId, gitName).pipe(Effect.flatMap((id) => id === void 0 ? Effect.fail(err) : Effect.succeed(id))) : Effect.fail(err)));
-});
-/**
-* Resolves the two containers a stage's deploy runs into (ADR-0019): the
-* app's **Project**, found-or-created by name, and — for a named stage
-* only — its **Branch**, found-or-created by `gitName`. The default stage
-* (no `stage`) creates no Branch; `branchId` is omitted. With `ensure:
-* false` (`destroy`), nothing is created — an absent Project or Branch
-* fails with `ContainerNotFoundError` instead.
-*/
-const resolveContainer = (opts) => Effect.gen(function* () {
-	const client = yield* ManagementClient;
-	const ensure = opts.ensure ?? true;
-	const projectId = yield* resolveProject(client, opts.workspaceId, opts.appName, ensure);
-	if (opts.stage === void 0) return { projectId };
-	return {
-		projectId,
-		branchId: yield* resolveBranch(client, projectId, opts.stage, opts.appName, ensure)
-	};
-});
-/**
-* Soft-deletes a Branch. Tolerates a 404 (already gone). The API refuses if
-* the Branch still has live members or is the production/default Branch —
-* that surfaces as a `PrismaApiError`.
-*/
-const deleteBranch = (branchId) => Effect.gen(function* () {
-	const client = yield* ManagementClient;
-	yield* callVoid(() => client.DELETE("/v1/branches/{branchId}", { params: { path: { branchId } } }));
-});
-/**
-* Deletes a Project. Tolerates a 404 (already gone). The API refuses with a
-* 400 if the Project still has live dependencies (e.g. another stage's
-* Branch/resources) — that surfaces as a `PrismaApiError`.
-*/
-const deleteProject = (projectId) => Effect.gen(function* () {
-	const client = yield* ManagementClient;
-	yield* callVoid(() => client.DELETE("/v1/projects/{id}", { params: { path: { id: projectId } } }));
-});
 /** The collection of Prisma resource providers. */
 var Providers = class extends Provider.ProviderCollection()("Prisma") {};
 /**
@@ -763,22 +827,35 @@ function mintKeyPair() {
 	};
 }
 //#endregion
-//#region ../../1-prisma-cloud/1-extensions/target/dist/s3-credentials-resource-tfirOJBj.mjs
+//#region ../../1-prisma-cloud/1-extensions/target/dist/s3-credentials-resource-BMsm9nho.mjs
 const PRISMA_CLOUD_EXTENSION_ID = "@prisma/composer-prisma-cloud";
+/** Accepts exactly what Alchemy's own `--stage` validation accepts (pinned 2.0.0-beta.59, `Cli/commands/_shared.ts`), rewritten without overlapping quantifiers so it cannot backtrack catastrophically. Asserted before a Branch id is exposed as a stage. */
+const ALCHEMY_STAGE_PATTERN = /^[a-z0-9][-_a-z0-9]*$/i;
+function invalidAlchemyStageError(branchId) {
+	return /* @__PURE__ */ new Error(`${PRISMA_CLOUD_EXTENSION_ID}: the resolved Branch id "${branchId}" does not match Alchemy's stage pattern ^[a-z0-9][-_a-z0-9]*\$ (case-insensitive) — it cannot scope the deploy state. The platform should never return such an id; contact support.`);
+}
 var PrismaCloudContainer = class {
 	input;
 	projectId;
 	branchId;
-	constructor(input, projectId, branchId) {
+	defaultBranchId;
+	/** The deterministic Alchemy stage (ContainerInstance SPI): the stage Branch's id, or the default Branch's id for the default stage. Absent only for the dev container, which resolves no Branch. */
+	alchemyStage;
+	constructor(input, projectId, branchId, defaultBranchId) {
 		this.input = input;
 		this.projectId = projectId;
 		this.branchId = branchId;
+		this.defaultBranchId = defaultBranchId;
+		const stageBranchId = branchId ?? defaultBranchId;
+		if (stageBranchId !== void 0 && !ALCHEMY_STAGE_PATTERN.test(stageBranchId)) throw invalidAlchemyStageError(stageBranchId);
+		this.alchemyStage = stageBranchId;
 	}
 	serialize() {
 		return JSON.stringify({
 			input: this.input,
 			projectId: this.projectId,
-			...this.branchId !== void 0 ? { branchId: this.branchId } : {}
+			...this.branchId !== void 0 ? { branchId: this.branchId } : {},
+			...this.defaultBranchId !== void 0 ? { defaultBranchId: this.defaultBranchId } : {}
 		});
 	}
 };
@@ -821,10 +898,12 @@ function deserialize(serialized) {
 	if (typeof projectId !== "string") throw invalidPayloadError("\"projectId\" is not a string");
 	const branchId = parsed["branchId"];
 	if (branchId !== void 0 && typeof branchId !== "string") throw invalidPayloadError("\"branchId\" is not a string or absent");
+	const defaultBranchId = parsed["defaultBranchId"];
+	if (defaultBranchId !== void 0 && typeof defaultBranchId !== "string") throw invalidPayloadError("\"defaultBranchId\" is not a string or absent");
 	return new PrismaCloudContainer({
 		appName,
 		stage
-	}, projectId, branchId);
+	}, projectId, branchId, defaultBranchId);
 }
 const workspaceRequiredError = () => /* @__PURE__ */ new Error("environment variable PRISMA_WORKSPACE_ID is required.");
 const tokenRequiredError = () => /* @__PURE__ */ new Error("environment variable PRISMA_SERVICE_TOKEN is required.");
@@ -854,7 +933,7 @@ async function ensureContainer(input, deps) {
 	const provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))));
 	const outcome = await Effect.runPromise(provided);
 	if (!outcome.ok) throw new Error(outcome.message);
-	return new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId);
+	return new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId, outcome.container.defaultBranchId);
 }
 async function locateContainer(input, deps) {
 	const workspaceId = requireWorkspaceId();
@@ -871,7 +950,7 @@ async function locateContainer(input, deps) {
 	const provided = deps?.client !== void 0 ? program.pipe(Effect.provideService(ManagementClient, deps.client)) : program.pipe(Effect.provide(layer().pipe(Layer.provide(fromEnv()))));
 	const outcome = await Effect.runPromise(provided);
 	if (!outcome.ok) return void 0;
-	return new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId);
+	return new PrismaCloudContainer(input, outcome.container.projectId, outcome.container.branchId, outcome.container.defaultBranchId);
 }
 /**
 * Soft-deletes a named stage's Branch after a successful `alchemy destroy`
@@ -1350,6 +1429,6 @@ const s3CredentialsProviderService = {
 /** The `S3Credentials` provider layer — merged into the extension descriptor's `providers()`. */
 const S3CredentialsProvider = () => Provider.effect(S3Credentials, Effect.succeed(s3CredentialsProviderService));
 //#endregion
-export { packageComputeArtifact as A, Project as C, EnvironmentVariable as D, Deployment as E, call as F, callVoid as I, fromEnv as L, BucketKey as M, ManagementClient as N, ServiceKey as O, PrismaApiError as P, layer as R, Database as S, ComputeService as T, resolveTargetRef as _, PgWarmProvider as a, providers as b, PrismaCloudContainer as c, collectPreflightNames as d, containerDescriptor as f, resolvePrismaNextConfig as g, prismaCloudContainerOf as h, PgWarm as i, Bucket as j, ServiceKeyProvider as k, S3Credentials as l, packHeadRefHashes as m, GeneratedParamProvider as n, PnMigration as o, deserialize as p, PRISMA_CLOUD_EXTENSION_ID as r, PnMigrationProvider as s, GeneratedParam as t, S3CredentialsProvider as u, mintKeyPair as v, COMPUTE_REGIONS as w, Connection as x, Providers as y };
+export { packageComputeArtifact as A, layer as B, Project as C, EnvironmentVariable as D, Deployment as E, ManagementClient as F, PrismaApiError as I, call as L, BucketKey as M, collectPages as N, ServiceKey as O, resolveDefaultBranchId as P, callVoid as R, Database as S, ComputeService as T, resolveTargetRef as _, PgWarmProvider as a, providers as b, PrismaCloudContainer as c, collectPreflightNames as d, containerDescriptor as f, resolvePrismaNextConfig as g, prismaCloudContainerOf as h, PgWarm as i, Bucket as j, ServiceKeyProvider as k, S3Credentials as l, packHeadRefHashes as m, GeneratedParamProvider as n, PnMigration as o, deserialize as p, PRISMA_CLOUD_EXTENSION_ID as r, PnMigrationProvider as s, GeneratedParam as t, S3CredentialsProvider as u, mintKeyPair as v, COMPUTE_REGIONS as w, Connection as x, Providers as y, fromEnv as z };
 
-//# sourceMappingURL=s3-credentials-resource-tfirOJBj-79G9R_h8.mjs.map
+//# sourceMappingURL=s3-credentials-resource-BMsm9nho-C0Bg1909.mjs.map