@prisma/composer 0.23.0-dev.2 → 0.23.0-dev.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prisma/composer",
-  "version": "0.23.0-dev.2",
+  "version": "0.23.0-dev.4",
   "type": "module",
   "description": "Prisma Composer — build a Prisma App by composing Modules. Core authoring, deploy pipeline, and the service-rpc/node/nextjs authoring surfaces. The `prisma-composer` CLI lives in @prisma/composer-cli.",
   "exports": {
@@ -37,18 +37,18 @@
     "cross-spawn": "^7.0.6",
     "effect": "4.0.0-rc.115",
     "esbuild": "^0.28.1",
-    "@prisma/management-api-sdk": "^1.79.0"
+    "@prisma/management-api-sdk": "^1.80.0"
   },
   "devDependencies": {
-    "@internal/assemble": "0.23.0-dev.2",
-    "@internal/cli": "0.23.0-dev.2",
-    "@internal/core": "0.23.0-dev.2",
-    "@internal/foundation": "0.23.0-dev.2",
-    "@internal/lowering": "0.23.0-dev.2",
-    "@internal/nextjs": "0.23.0-dev.2",
-    "@internal/node": "0.23.0-dev.2",
-    "@internal/service-rpc": "0.23.0-dev.2",
-    "@internal/tsdown-config": "0.23.0-dev.2",
+    "@internal/assemble": "0.23.0-dev.4",
+    "@internal/cli": "0.23.0-dev.4",
+    "@internal/core": "0.23.0-dev.4",
+    "@internal/foundation": "0.23.0-dev.4",
+    "@internal/lowering": "0.23.0-dev.4",
+    "@internal/nextjs": "0.23.0-dev.4",
+    "@internal/node": "0.23.0-dev.4",
+    "@internal/service-rpc": "0.23.0-dev.4",
+    "@internal/tsdown-config": "0.23.0-dev.4",
     "@types/node": "^26.0.1",
     "tsdown": "^0.22.7",
     "typescript": "^6.0.3"

package/skills/prisma-composer-core-concepts/SKILL.md

@@ -2,7 +2,7 @@
 name: prisma-composer-core-concepts
 metadata:
   library: "@prisma/composer"
-  library_version: "0.23.0-dev.2"
+  library_version: "0.23.0-dev.4"
   version: 2026.9.1
 description: >-
   Use when deploying or managing an app that uses Prisma Composer

package/dist/dist-D1TA1xGC.mjs

@@ -1,70 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-//#region ../../0-framework/2-authoring/bundle-paths/dist/index.mjs
-/**
-* The path-containment predicate and bundle-link validation shared by every
-* assembly and packaging seam (node/nextjs adapters, the compute artifact
-* writer, the local extractor). This predicate is the enforcement point of
-* ADR-0047's boundary — a symlink may be preserved only while its target
-* stays inside the assembled bundle — so it exists exactly once.
-*/
-/** Restores directory-link metadata lost by `fs.cp` on Windows. */
-async function repairWindowsDirectorySymlinks(root) {
-	if (process.platform !== "win32") return;
-	const visit = async (directory) => {
-		for (const entry of await fs.promises.readdir(directory, { withFileTypes: true })) {
-			const full = path.join(directory, entry.name);
-			if (entry.isSymbolicLink()) {
-				const target = await fs.promises.readlink(full);
-				const resolvedTarget = path.resolve(path.dirname(full), target);
-				try {
-					if (!(await fs.promises.stat(resolvedTarget)).isDirectory()) continue;
-				} catch {
-					continue;
-				}
-				await fs.promises.unlink(full);
-				await fs.promises.symlink(target, full, "dir");
-			} else if (entry.isDirectory()) await visit(full);
-		}
-	};
-	await visit(root);
-}
-async function copyTreeVerbatim(source, destination) {
-	await fs.promises.cp(source, destination, {
-		recursive: true,
-		verbatimSymlinks: true
-	});
-	await repairWindowsDirectorySymlinks(destination);
-}
-/** Lexical containment: `candidate` is `root` itself or below it. Both paths
-* must already be absolute or share a resolution base; no filesystem access. */
-function isWithin(root, candidate) {
-	const relative = path.relative(root, candidate);
-	return relative === "" || !relative.startsWith(`..${path.sep}`) && relative !== ".." && !path.isAbsolute(relative);
-}
-/** Walks the assembled bundle and rejects a dangling symlink or one whose
-* resolved target escapes the bundle root. Symlinked directories are not
-* descended: their targets are validated, and their contents belong to the
-* target's own location. */
-async function assertBundleSymlinksStayInside(bundleDir) {
-	const realRoot = await fs.promises.realpath(bundleDir);
-	const walk = async (directory) => {
-		for (const entry of await fs.promises.readdir(directory, { withFileTypes: true })) {
-			const full = path.join(directory, entry.name);
-			if (entry.isSymbolicLink()) {
-				let realTarget;
-				try {
-					realTarget = await fs.promises.realpath(full);
-				} catch {
-					throw new Error(`the assembled bundle contains a dangling symlink: ${full}`);
-				}
-				if (!isWithin(realRoot, realTarget)) throw new Error(`the assembled bundle contains a symlink whose target escapes the bundle: ${full} -> ${await fs.promises.readlink(full)}`);
-			} else if (entry.isDirectory()) await walk(full);
-		}
-	};
-	await walk(bundleDir);
-}
-//#endregion
-export { repairWindowsDirectorySymlinks as i, copyTreeVerbatim as n, isWithin as r, assertBundleSymlinksStayInside as t };
-
-//# sourceMappingURL=dist-D1TA1xGC.mjs.map

package/dist/dist-D1TA1xGC.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"dist-D1TA1xGC.mjs","names":[],"sources":["../../../0-framework/2-authoring/bundle-paths/dist/index.mjs"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\n//#region src/bundle-paths.ts\n/**\n* The path-containment predicate and bundle-link validation shared by every\n* assembly and packaging seam (node/nextjs adapters, the compute artifact\n* writer, the local extractor). This predicate is the enforcement point of\n* ADR-0047's boundary — a symlink may be preserved only while its target\n* stays inside the assembled bundle — so it exists exactly once.\n*/\n/** Restores directory-link metadata lost by `fs.cp` on Windows. */\nasync function repairWindowsDirectorySymlinks(root) {\n\tif (process.platform !== \"win32\") return;\n\tconst visit = async (directory) => {\n\t\tfor (const entry of await fs.promises.readdir(directory, { withFileTypes: true })) {\n\t\t\tconst full = path.join(directory, entry.name);\n\t\t\tif (entry.isSymbolicLink()) {\n\t\t\t\tconst target = await fs.promises.readlink(full);\n\t\t\t\tconst resolvedTarget = path.resolve(path.dirname(full), target);\n\t\t\t\ttry {\n\t\t\t\t\tif (!(await fs.promises.stat(resolvedTarget)).isDirectory()) continue;\n\t\t\t\t} catch {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tawait fs.promises.unlink(full);\n\t\t\t\tawait fs.promises.symlink(target, full, \"dir\");\n\t\t\t} else if (entry.isDirectory()) await visit(full);\n\t\t}\n\t};\n\tawait visit(root);\n}\nasync function copyTreeVerbatim(source, destination) {\n\tawait fs.promises.cp(source, destination, {\n\t\trecursive: true,\n\t\tverbatimSymlinks: true\n\t});\n\tawait repairWindowsDirectorySymlinks(destination);\n}\n/** Lexical containment: `candidate` is `root` itself or below it. Both paths\n* must already be absolute or share a resolution base; no filesystem access. */\nfunction isWithin(root, candidate) {\n\tconst relative = path.relative(root, candidate);\n\treturn relative === \"\" || !relative.startsWith(`..${path.sep}`) && relative !== \"..\" && !path.isAbsolute(relative);\n}\n/** Walks the assembled bundle and rejects a dangling symlink or one whose\n* resolved target escapes the bundle root. Symlinked directories are not\n* descended: their targets are validated, and their contents belong to the\n* target's own location. */\nasync function assertBundleSymlinksStayInside(bundleDir) {\n\tconst realRoot = await fs.promises.realpath(bundleDir);\n\tconst walk = async (directory) => {\n\t\tfor (const entry of await fs.promises.readdir(directory, { withFileTypes: true })) {\n\t\t\tconst full = path.join(directory, entry.name);\n\t\t\tif (entry.isSymbolicLink()) {\n\t\t\t\tlet realTarget;\n\t\t\t\ttry {\n\t\t\t\t\trealTarget = await fs.promises.realpath(full);\n\t\t\t\t} catch {\n\t\t\t\t\tthrow new Error(`the assembled bundle contains a dangling symlink: ${full}`);\n\t\t\t\t}\n\t\t\t\tif (!isWithin(realRoot, realTarget)) throw new Error(`the assembled bundle contains a symlink whose target escapes the bundle: ${full} -> ${await fs.promises.readlink(full)}`);\n\t\t\t} else if (entry.isDirectory()) await walk(full);\n\t\t}\n\t};\n\tawait walk(bundleDir);\n}\n//#endregion\nexport { assertBundleSymlinksStayInside, copyTreeVerbatim, isWithin, repairWindowsDirectorySymlinks };\n\n//# sourceMappingURL=index.mjs.map"],"mappings":";;;;;;;;;;;AAWA,eAAe,+BAA+B,MAAM;CACnD,IAAI,QAAQ,aAAa,SAAS;CAClC,MAAM,QAAQ,OAAO,cAAc;EAClC,KAAK,MAAM,SAAS,MAAM,GAAG,SAAS,QAAQ,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG;GAClF,MAAM,OAAO,KAAK,KAAK,WAAW,MAAM,IAAI;GAC5C,IAAI,MAAM,eAAe,GAAG;IAC3B,MAAM,SAAS,MAAM,GAAG,SAAS,SAAS,IAAI;IAC9C,MAAM,iBAAiB,KAAK,QAAQ,KAAK,QAAQ,IAAI,GAAG,MAAM;IAC9D,IAAI;KACH,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,cAAc,EAAA,CAAG,YAAY,GAAG;IAC9D,QAAQ;KACP;IACD;IACA,MAAM,GAAG,SAAS,OAAO,IAAI;IAC7B,MAAM,GAAG,SAAS,QAAQ,QAAQ,MAAM,KAAK;GAC9C,OAAO,IAAI,MAAM,YAAY,GAAG,MAAM,MAAM,IAAI;EACjD;CACD;CACA,MAAM,MAAM,IAAI;AACjB;AACA,eAAe,iBAAiB,QAAQ,aAAa;CACpD,MAAM,GAAG,SAAS,GAAG,QAAQ,aAAa;EACzC,WAAW;EACX,kBAAkB;CACnB,CAAC;CACD,MAAM,+BAA+B,WAAW;AACjD;;;AAGA,SAAS,SAAS,MAAM,WAAW;CAClC,MAAM,WAAW,KAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAM,CAAC,SAAS,WAAW,KAAK,KAAK,KAAK,KAAK,aAAa,QAAQ,CAAC,KAAK,WAAW,QAAQ;AAClH;;;;;AAKA,eAAe,+BAA+B,WAAW;CACxD,MAAM,WAAW,MAAM,GAAG,SAAS,SAAS,SAAS;CACrD,MAAM,OAAO,OAAO,cAAc;EACjC,KAAK,MAAM,SAAS,MAAM,GAAG,SAAS,QAAQ,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG;GAClF,MAAM,OAAO,KAAK,KAAK,WAAW,MAAM,IAAI;GAC5C,IAAI,MAAM,eAAe,GAAG;IAC3B,IAAI;IACJ,IAAI;KACH,aAAa,MAAM,GAAG,SAAS,SAAS,IAAI;IAC7C,QAAQ;KACP,MAAM,IAAI,MAAM,qDAAqD,MAAM;IAC5E;IACA,IAAI,CAAC,SAAS,UAAU,UAAU,GAAG,MAAM,IAAI,MAAM,4EAA4E,KAAK,MAAM,MAAM,GAAG,SAAS,SAAS,IAAI,GAAG;GAC/K,OAAO,IAAI,MAAM,YAAY,GAAG,MAAM,KAAK,IAAI;EAChD;CACD;CACA,MAAM,KAAK,SAAS;AACrB"}