@prisma/composer 0.25.0 → 0.26.0-dev.1

package/dist/deployment-summary-37e6WEuh-BOTJynIi.mjs

@@ -0,0 +1,168 @@
+import { t as blindCast } from "./casts-DpaahrlC-C5XMnP9S.mjs";
+import * as fs$1 from "node:fs";
+import { format, stripVTControlCharacters } from "node:util";
+//#region ../../0-framework/3-tooling/cli/dist/deployment-summary-37e6WEuh.mjs
+/**
+* The deploy result's cross-process protocol, whole in one place: the
+* serializable shape, the env var that names the carrier file, the writer the
+* report hook calls from inside the alchemy child, and the reader the deploy
+* operation runs after the child exits. `DeploymentResult` itself cannot
+* cross the boundary — its `DeployedNode` entries hold live graph-node
+* references (ADR-0033) — so the writer projects it down to what CAN.
+*
+* The summary is best-effort by contract: the writer never fails the child
+* over it, and the reader maps absent or malformed to `undefined`. So is the
+* failure cause the child leaves beside it when it exits non-zero.
+*/
+/** Env var the deploy operation sets on the alchemy child: when present,
+* the report hook also writes the JSON DeploymentSummary there. */
+const DEPLOYMENT_RESULT_FILE_ENV = "PRISMA_COMPOSER_DEPLOYMENT_RESULT_FILE";
+/** Pure projection: keeps app + each node's address/entities, drops the in-process `node`. */
+function toDeploymentSummary(result) {
+	return {
+		app: result.app,
+		nodes: result.nodes.map((node) => ({
+			address: node.address,
+			entities: node.entities
+		}))
+	};
+}
+/**
+* Writer half, called by the report hook inside the alchemy child: when the
+* env var names a file, write the summary there. Best-effort — a write
+* failure must not fail a deploy that already converged, so it is swallowed.
+*/
+function writeDeploymentSummaryFile(result) {
+	const file = process.env[DEPLOYMENT_RESULT_FILE_ENV];
+	if (file === void 0 || file.length === 0) return;
+	try {
+		fs$1.writeFileSync(file, JSON.stringify(toDeploymentSummary(result)));
+	} catch {}
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+/**
+* Reader half, run by the deploy operation after the child exits. Absent or
+* malformed → undefined — the summary is best-effort, never a deploy failure.
+*/
+function readDeploymentSummary(resultFilePath) {
+	let raw;
+	try {
+		raw = fs$1.readFileSync(resultFilePath, "utf8");
+	} catch {
+		return;
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return;
+	}
+	if (!isRecord(parsed) || typeof parsed["app"] !== "string" || !Array.isArray(parsed["nodes"])) return;
+	for (const node of parsed["nodes"]) {
+		if (!isRecord(node) || typeof node["address"] !== "string" || !Array.isArray(node["entities"])) return;
+		for (const entity of node["entities"]) if (!isRecord(entity) || typeof entity["kind"] !== "string" || typeof entity["id"] !== "string") return;
+	}
+	return blindCast(parsed);
+}
+/** The child's failure cause rides beside the result file, so the one env var names both and the parent's cleanup removes both. */
+function engineFailureFilePath(resultFilePath) {
+	return `${resultFilePath}.failure.txt`;
+}
+/** Fits the platform's 5000-character build `errorMessage` with room for the exit-status prefix. */
+const ENGINE_FAILURE_CAUSE_LIMIT = 1e3;
+/**
+* Child half of the failure protocol, called by the generated stack file.
+* Keeps a bounded tail of everything this process logs through `console`,
+* passing every call through untouched, and on a non-zero exit writes the
+* redacted cause beside the result file. `console`, not the output streams:
+* alchemy's logger and its error reporting both go through it, and under Bun
+* `console` does not reach `process.stdout.write`.
+*/
+function captureEngineFailure() {
+	const resultFile = process.env[DEPLOYMENT_RESULT_FILE_ENV];
+	if (resultFile === void 0 || resultFile.length === 0) return;
+	let tail = "";
+	for (const method of [
+		"log",
+		"info",
+		"warn",
+		"error",
+		"debug"
+	]) {
+		const original = console[method];
+		console[method] = (...args) => {
+			tail = `${tail}${redactSecrets(format(...args), process.env)}\n`.slice(-65536);
+			original.apply(console, args);
+		};
+	}
+	process.once("exit", (code) => {
+		if (code === 0) return;
+		const cause = engineFailureCause(tail, process.env);
+		if (cause === void 0) return;
+		try {
+			fs$1.writeFileSync(engineFailureFilePath(resultFile), cause);
+		} catch {}
+	});
+}
+/** Parent half: the cause the child recorded, or undefined when it recorded none. */
+function readEngineFailureCause(resultFilePath) {
+	try {
+		const cause = fs$1.readFileSync(engineFailureFilePath(resultFilePath), "utf8");
+		return cause.length > 0 ? cause : void 0;
+	} catch {
+		return;
+	}
+}
+/** Effect's pretty log prefix, e.g. `[10:29:16.556] INFO (#53): `. */
+const LOG_PREFIX = /^\[[\d:.]+\] ([A-Z]+) \(#\d+\): ?/;
+/** Alchemy's per-resource failure row, e.g. `[web] fail — UnknownError: …`. */
+const RESOURCE_FAIL_ROW = /^\[[^\]]+\] fail\b/;
+const STACK_FRAME = /^\s*at /;
+/**
+* The failure the output describes: every line from the first failure line
+* (a failed resource row, an ERROR log, or an `error:` line) to the end, minus
+* blank lines, stack frames and info logs; the last five lines when there is no
+* failure line. Redacted, then capped.
+*/
+function engineFailureCause(output, env) {
+	const lines = [];
+	for (const raw of stripVTControlCharacters(output).split(/\r\n|\r|\n/)) {
+		const clean = raw.replace(/(?![\t])\p{Cc}/gu, "").trimEnd();
+		const prefix = LOG_PREFIX.exec(clean);
+		const text = (prefix === null ? clean : clean.slice(prefix[0].length)).trim();
+		if (text.length === 0 || text === "{" || text === "}" || STACK_FRAME.test(text)) continue;
+		const level = prefix?.[1];
+		const failure = level === "ERROR" || level === "FATAL" || RESOURCE_FAIL_ROW.test(text) || /^\W*error:/i.test(text);
+		lines.push({
+			text,
+			failure,
+			info: !failure && level !== void 0
+		});
+	}
+	const start = lines.findIndex((line) => line.failure);
+	const kept = start === -1 ? lines.slice(-5) : lines.slice(start).filter((line) => !line.info);
+	if (kept.length === 0) return void 0;
+	const cause = redactSecrets(kept.map((line) => line.text).join("\n"), env);
+	return cause.length <= ENGINE_FAILURE_CAUSE_LIMIT ? cause : `${cause.slice(0, ENGINE_FAILURE_CAUSE_LIMIT - 1)}…`;
+}
+/** Env var names whose values are credentials: the service token, preflight payloads, and the usual secret spellings. */
+const SECRET_ENV_NAME = /TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE|CREDENTIAL|AUTH|API_?KEY|ACCESS_?KEY|_KEY$|DATABASE_URL|_DSN$|^PRISMA_COMPOSER_PREFLIGHT_/i;
+const REDACTED = "[redacted]";
+/**
+* Removes credentials from text that is about to leave the machine: the value
+* of every secret-named env var, bearer/basic tokens, JWTs, the password in a
+* URL, and `token=…`-style pairs. Values shorter than 8 characters are left,
+* so a one-letter placeholder does not blank every matching letter.
+*/
+function redactSecrets(text, env) {
+	const values = Object.entries(env).filter(([name, value]) => SECRET_ENV_NAME.test(name) && (value ?? "").length >= 8).map(([, value]) => value ?? "").sort((a, b) => b.length - a.length);
+	let redacted = text;
+	for (const value of values) redacted = redacted.replaceAll(value, REDACTED);
+	return redacted.replace(/\b(Bearer|Basic)\s+[\w.~+/=-]+/gi, `$1 ${REDACTED}`).replace(/\beyJ[\w-]+\.[\w-]+\.[\w-]*/g, REDACTED).replace(/(\b[a-z][\w+.-]*:\/\/[^\s:/@]*:)[^\s/@]+@/gi, `$1${REDACTED}@`).replace(/\b((?:[\w-]*[_-])?(?:token|secret|password|passwd|api[_-]?key|access[_-]?key|private[_-]?key)["']?\s*[:=]\s*["']?)[^\s"',;&]+/gi, `$1${REDACTED}`);
+}
+//#endregion
+export { readEngineFailureCause as a, readDeploymentSummary as i, captureEngineFailure as n, writeDeploymentSummaryFile as o, engineFailureFilePath as r, DEPLOYMENT_RESULT_FILE_ENV as t };
+
+//# sourceMappingURL=deployment-summary-37e6WEuh-BOTJynIi.mjs.map

package/dist/deployment-summary-37e6WEuh-BOTJynIi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-summary-37e6WEuh-BOTJynIi.mjs","names":["fs"],"sources":["../../../0-framework/3-tooling/cli/dist/deployment-summary-37e6WEuh.mjs"],"sourcesContent":["import * as fs from \"node:fs\";\nimport { format, stripVTControlCharacters } from \"node:util\";\nimport { blindCast } from \"@internal/foundation/casts\";\n//#region src/deployment-summary.ts\n/**\n* The deploy result's cross-process protocol, whole in one place: the\n* serializable shape, the env var that names the carrier file, the writer the\n* report hook calls from inside the alchemy child, and the reader the deploy\n* operation runs after the child exits. `DeploymentResult` itself cannot\n* cross the boundary — its `DeployedNode` entries hold live graph-node\n* references (ADR-0033) — so the writer projects it down to what CAN.\n*\n* The summary is best-effort by contract: the writer never fails the child\n* over it, and the reader maps absent or malformed to `undefined`. So is the\n* failure cause the child leaves beside it when it exits non-zero.\n*/\n/** Env var the deploy operation sets on the alchemy child: when present,\n* the report hook also writes the JSON DeploymentSummary there. */\nconst DEPLOYMENT_RESULT_FILE_ENV = \"PRISMA_COMPOSER_DEPLOYMENT_RESULT_FILE\";\n/** Pure projection: keeps app + each node's address/entities, drops the in-process `node`. */\nfunction toDeploymentSummary(result) {\n\treturn {\n\t\tapp: result.app,\n\t\tnodes: result.nodes.map((node) => ({\n\t\t\taddress: node.address,\n\t\t\tentities: node.entities\n\t\t}))\n\t};\n}\n/**\n* Writer half, called by the report hook inside the alchemy child: when the\n* env var names a file, write the summary there. Best-effort — a write\n* failure must not fail a deploy that already converged, so it is swallowed.\n*/\nfunction writeDeploymentSummaryFile(result) {\n\tconst file = process.env[DEPLOYMENT_RESULT_FILE_ENV];\n\tif (file === void 0 || file.length === 0) return;\n\ttry {\n\t\tfs.writeFileSync(file, JSON.stringify(toDeploymentSummary(result)));\n\t} catch {}\n}\nfunction isRecord(value) {\n\treturn typeof value === \"object\" && value !== null;\n}\n/**\n* Reader half, run by the deploy operation after the child exits. Absent or\n* malformed → undefined — the summary is best-effort, never a deploy failure.\n*/\nfunction readDeploymentSummary(resultFilePath) {\n\tlet raw;\n\ttry {\n\t\traw = fs.readFileSync(resultFilePath, \"utf8\");\n\t} catch {\n\t\treturn;\n\t}\n\tlet parsed;\n\ttry {\n\t\tparsed = JSON.parse(raw);\n\t} catch {\n\t\treturn;\n\t}\n\tif (!isRecord(parsed) || typeof parsed[\"app\"] !== \"string\" || !Array.isArray(parsed[\"nodes\"])) return;\n\tfor (const node of parsed[\"nodes\"]) {\n\t\tif (!isRecord(node) || typeof node[\"address\"] !== \"string\" || !Array.isArray(node[\"entities\"])) return;\n\t\tfor (const entity of node[\"entities\"]) if (!isRecord(entity) || typeof entity[\"kind\"] !== \"string\" || typeof entity[\"id\"] !== \"string\") return;\n\t}\n\treturn blindCast(parsed);\n}\n/** The child's failure cause rides beside the result file, so the one env var names both and the parent's cleanup removes both. */\nfunction engineFailureFilePath(resultFilePath) {\n\treturn `${resultFilePath}.failure.txt`;\n}\n/** Fits the platform's 5000-character build `errorMessage` with room for the exit-status prefix. */\nconst ENGINE_FAILURE_CAUSE_LIMIT = 1e3;\n/**\n* Child half of the failure protocol, called by the generated stack file.\n* Keeps a bounded tail of everything this process logs through `console`,\n* passing every call through untouched, and on a non-zero exit writes the\n* redacted cause beside the result file. `console`, not the output streams:\n* alchemy's logger and its error reporting both go through it, and under Bun\n* `console` does not reach `process.stdout.write`.\n*/\nfunction captureEngineFailure() {\n\tconst resultFile = process.env[DEPLOYMENT_RESULT_FILE_ENV];\n\tif (resultFile === void 0 || resultFile.length === 0) return;\n\tlet tail = \"\";\n\tfor (const method of [\n\t\t\"log\",\n\t\t\"info\",\n\t\t\"warn\",\n\t\t\"error\",\n\t\t\"debug\"\n\t]) {\n\t\tconst original = console[method];\n\t\tconsole[method] = (...args) => {\n\t\t\ttail = `${tail}${redactSecrets(format(...args), process.env)}\\n`.slice(-65536);\n\t\t\toriginal.apply(console, args);\n\t\t};\n\t}\n\tprocess.once(\"exit\", (code) => {\n\t\tif (code === 0) return;\n\t\tconst cause = engineFailureCause(tail, process.env);\n\t\tif (cause === void 0) return;\n\t\ttry {\n\t\t\tfs.writeFileSync(engineFailureFilePath(resultFile), cause);\n\t\t} catch {}\n\t});\n}\n/** Parent half: the cause the child recorded, or undefined when it recorded none. */\nfunction readEngineFailureCause(resultFilePath) {\n\ttry {\n\t\tconst cause = fs.readFileSync(engineFailureFilePath(resultFilePath), \"utf8\");\n\t\treturn cause.length > 0 ? cause : void 0;\n\t} catch {\n\t\treturn;\n\t}\n}\n/** Effect's pretty log prefix, e.g. `[10:29:16.556] INFO (#53): `. */\nconst LOG_PREFIX = /^\\[[\\d:.]+\\] ([A-Z]+) \\(#\\d+\\): ?/;\n/** Alchemy's per-resource failure row, e.g. `[web] fail — UnknownError: …`. */\nconst RESOURCE_FAIL_ROW = /^\\[[^\\]]+\\] fail\\b/;\nconst STACK_FRAME = /^\\s*at /;\n/**\n* The failure the output describes: every line from the first failure line\n* (a failed resource row, an ERROR log, or an `error:` line) to the end, minus\n* blank lines, stack frames and info logs; the last five lines when there is no\n* failure line. Redacted, then capped.\n*/\nfunction engineFailureCause(output, env) {\n\tconst lines = [];\n\tfor (const raw of stripVTControlCharacters(output).split(/\\r\\n|\\r|\\n/)) {\n\t\tconst clean = raw.replace(/(?![\\t])\\p{Cc}/gu, \"\").trimEnd();\n\t\tconst prefix = LOG_PREFIX.exec(clean);\n\t\tconst text = (prefix === null ? clean : clean.slice(prefix[0].length)).trim();\n\t\tif (text.length === 0 || text === \"{\" || text === \"}\" || STACK_FRAME.test(text)) continue;\n\t\tconst level = prefix?.[1];\n\t\tconst failure = level === \"ERROR\" || level === \"FATAL\" || RESOURCE_FAIL_ROW.test(text) || /^\\W*error:/i.test(text);\n\t\tlines.push({\n\t\t\ttext,\n\t\t\tfailure,\n\t\t\tinfo: !failure && level !== void 0\n\t\t});\n\t}\n\tconst start = lines.findIndex((line) => line.failure);\n\tconst kept = start === -1 ? lines.slice(-5) : lines.slice(start).filter((line) => !line.info);\n\tif (kept.length === 0) return void 0;\n\tconst cause = redactSecrets(kept.map((line) => line.text).join(\"\\n\"), env);\n\treturn cause.length <= ENGINE_FAILURE_CAUSE_LIMIT ? cause : `${cause.slice(0, ENGINE_FAILURE_CAUSE_LIMIT - 1)}…`;\n}\n/** Env var names whose values are credentials: the service token, preflight payloads, and the usual secret spellings. */\nconst SECRET_ENV_NAME = /TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE|CREDENTIAL|AUTH|API_?KEY|ACCESS_?KEY|_KEY$|DATABASE_URL|_DSN$|^PRISMA_COMPOSER_PREFLIGHT_/i;\nconst REDACTED = \"[redacted]\";\n/**\n* Removes credentials from text that is about to leave the machine: the value\n* of every secret-named env var, bearer/basic tokens, JWTs, the password in a\n* URL, and `token=…`-style pairs. Values shorter than 8 characters are left,\n* so a one-letter placeholder does not blank every matching letter.\n*/\nfunction redactSecrets(text, env) {\n\tconst values = Object.entries(env).filter(([name, value]) => SECRET_ENV_NAME.test(name) && (value ?? \"\").length >= 8).map(([, value]) => value ?? \"\").sort((a, b) => b.length - a.length);\n\tlet redacted = text;\n\tfor (const value of values) redacted = redacted.replaceAll(value, REDACTED);\n\treturn redacted.replace(/\\b(Bearer|Basic)\\s+[\\w.~+/=-]+/gi, `$1 ${REDACTED}`).replace(/\\beyJ[\\w-]+\\.[\\w-]+\\.[\\w-]*/g, REDACTED).replace(/(\\b[a-z][\\w+.-]*:\\/\\/[^\\s:/@]*:)[^\\s/@]+@/gi, `$1${REDACTED}@`).replace(/\\b((?:[\\w-]*[_-])?(?:token|secret|password|passwd|api[_-]?key|access[_-]?key|private[_-]?key)[\"']?\\s*[:=]\\s*[\"']?)[^\\s\"',;&]+/gi, `$1${REDACTED}`);\n}\n//#endregion\nexport { readEngineFailureCause as a, readDeploymentSummary as i, captureEngineFailure as n, writeDeploymentSummaryFile as o, engineFailureFilePath as r, DEPLOYMENT_RESULT_FILE_ENV as t };\n\n//# sourceMappingURL=deployment-summary-37e6WEuh.mjs.map"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAM,6BAA6B;;AAEnC,SAAS,oBAAoB,QAAQ;CACpC,OAAO;EACN,KAAK,OAAO;EACZ,OAAO,OAAO,MAAM,KAAK,UAAU;GAClC,SAAS,KAAK;GACd,UAAU,KAAK;EAChB,EAAE;CACH;AACD;;;;;;AAMA,SAAS,2BAA2B,QAAQ;CAC3C,MAAM,OAAO,QAAQ,IAAI;CACzB,IAAI,SAAS,KAAK,KAAK,KAAK,WAAW,GAAG;CAC1C,IAAI;EACH,KAAG,cAAc,MAAM,KAAK,UAAU,oBAAoB,MAAM,CAAC,CAAC;CACnE,QAAQ,CAAC;AACV;AACA,SAAS,SAAS,OAAO;CACxB,OAAO,OAAO,UAAU,YAAY,UAAU;AAC/C;;;;;AAKA,SAAS,sBAAsB,gBAAgB;CAC9C,IAAI;CACJ,IAAI;EACH,MAAMA,KAAG,aAAa,gBAAgB,MAAM;CAC7C,QAAQ;EACP;CACD;CACA,IAAI;CACJ,IAAI;EACH,SAAS,KAAK,MAAM,GAAG;CACxB,QAAQ;EACP;CACD;CACA,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,QAAQ,GAAG;CAC/F,KAAK,MAAM,QAAQ,OAAO,UAAU;EACnC,IAAI,CAAC,SAAS,IAAI,KAAK,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;EAChG,KAAK,MAAM,UAAU,KAAK,aAAa,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,YAAY,YAAY,OAAO,OAAO,UAAU,UAAU;CACzI;CACA,OAAO,UAAU,MAAM;AACxB;;AAEA,SAAS,sBAAsB,gBAAgB;CAC9C,OAAO,GAAG,eAAe;AAC1B;;AAEA,MAAM,6BAA6B;;;;;;;;;AASnC,SAAS,uBAAuB;CAC/B,MAAM,aAAa,QAAQ,IAAI;CAC/B,IAAI,eAAe,KAAK,KAAK,WAAW,WAAW,GAAG;CACtD,IAAI,OAAO;CACX,KAAK,MAAM,UAAU;EACpB;EACA;EACA;EACA;EACA;CACD,GAAG;EACF,MAAM,WAAW,QAAQ;EACzB,QAAQ,WAAW,GAAG,SAAS;GAC9B,OAAO,GAAG,OAAO,cAAc,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,EAAE,IAAI,MAAM,MAAM;GAC7E,SAAS,MAAM,SAAS,IAAI;EAC7B;CACD;CACA,QAAQ,KAAK,SAAS,SAAS;EAC9B,IAAI,SAAS,GAAG;EAChB,MAAM,QAAQ,mBAAmB,MAAM,QAAQ,GAAG;EAClD,IAAI,UAAU,KAAK,GAAG;EACtB,IAAI;GACH,KAAG,cAAc,sBAAsB,UAAU,GAAG,KAAK;EAC1D,QAAQ,CAAC;CACV,CAAC;AACF;;AAEA,SAAS,uBAAuB,gBAAgB;CAC/C,IAAI;EACH,MAAM,QAAQA,KAAG,aAAa,sBAAsB,cAAc,GAAG,MAAM;EAC3E,OAAO,MAAM,SAAS,IAAI,QAAQ,KAAK;CACxC,QAAQ;EACP;CACD;AACD;;AAEA,MAAM,aAAa;;AAEnB,MAAM,oBAAoB;AAC1B,MAAM,cAAc;;;;;;;AAOpB,SAAS,mBAAmB,QAAQ,KAAK;CACxC,MAAM,QAAQ,CAAC;CACf,KAAK,MAAM,OAAO,yBAAyB,MAAM,CAAC,CAAC,MAAM,YAAY,GAAG;EACvE,MAAM,QAAQ,IAAI,QAAQ,oBAAoB,EAAE,CAAC,CAAC,QAAQ;EAC1D,MAAM,SAAS,WAAW,KAAK,KAAK;EACpC,MAAM,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,OAAO,EAAE,CAAC,MAAM,EAAA,CAAG,KAAK;EAC5E,IAAI,KAAK,WAAW,KAAK,SAAS,OAAO,SAAS,OAAO,YAAY,KAAK,IAAI,GAAG;EACjF,MAAM,QAAQ,SAAS;EACvB,MAAM,UAAU,UAAU,WAAW,UAAU,WAAW,kBAAkB,KAAK,IAAI,KAAK,cAAc,KAAK,IAAI;EACjH,MAAM,KAAK;GACV;GACA;GACA,MAAM,CAAC,WAAW,UAAU,KAAK;EAClC,CAAC;CACF;CACA,MAAM,QAAQ,MAAM,WAAW,SAAS,KAAK,OAAO;CACpD,MAAM,OAAO,UAAU,KAAK,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM,KAAK,CAAC,CAAC,QAAQ,SAAS,CAAC,KAAK,IAAI;CAC5F,IAAI,KAAK,WAAW,GAAG,OAAO,KAAK;CACnC,MAAM,QAAQ,cAAc,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,GAAG;CACzE,OAAO,MAAM,UAAU,6BAA6B,QAAQ,GAAG,MAAM,MAAM,GAAG,6BAA6B,CAAC,EAAE;AAC/G;;AAEA,MAAM,kBAAkB;AACxB,MAAM,WAAW;;;;;;;AAOjB,SAAS,cAAc,MAAM,KAAK;CACjC,MAAM,SAAS,OAAO,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,WAAW,gBAAgB,KAAK,IAAI,MAAM,SAAS,GAAA,CAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,WAAW,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;CACxL,IAAI,WAAW;CACf,KAAK,MAAM,SAAS,QAAQ,WAAW,SAAS,WAAW,OAAO,QAAQ;CAC1E,OAAO,SAAS,QAAQ,oCAAoC,MAAM,UAAU,CAAC,CAAC,QAAQ,gCAAgC,QAAQ,CAAC,CAAC,QAAQ,+CAA+C,KAAK,SAAS,EAAE,CAAC,CAAC,QAAQ,mIAAmI,KAAK,UAAU;AACpW"}

package/dist/deployment-summary-CU-eVvJM-c3AqO52N.d.mts

@@ -0,0 +1,26 @@
+import { u as DeployedEntity } from "./app-config-DyCMnkDr-CguUhanl.mjs";
+import "./deploy-i9yR7YWi.mjs";
+//#region ../../0-framework/3-tooling/cli/dist/deployment-summary-CU-eVvJM.d.mts
+//#region src/deployment-summary.d.ts
+/** The serializable projection of DeploymentResult — what CAN cross the process
+ * boundary. Writer (report hook) and reader (deploy operation) share this shape. */
+interface DeployedNodeSummary {
+  readonly address: string;
+  readonly entities: readonly DeployedEntity[];
+}
+interface DeploymentSummary {
+  readonly app: string;
+  readonly nodes: readonly DeployedNodeSummary[];
+}
+/**
+ * Child half of the failure protocol, called by the generated stack file.
+ * Keeps a bounded tail of everything this process logs through `console`,
+ * passing every call through untouched, and on a non-zero exit writes the
+ * redacted cause beside the result file. `console`, not the output streams:
+ * alchemy's logger and its error reporting both go through it, and under Bun
+ * `console` does not reach `process.stdout.write`.
+ */
+declare function captureEngineFailure(): void;
+//#endregion
+export { DeploymentSummary as n, captureEngineFailure as r, DeployedNodeSummary as t };
+//# sourceMappingURL=deployment-summary-CU-eVvJM-c3AqO52N.d.mts.map

package/dist/deployment-summary-CU-eVvJM-c3AqO52N.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-summary-CU-eVvJM-c3AqO52N.d.mts","names":[],"sources":["../../../0-framework/3-tooling/cli/dist/deployment-summary-CU-eVvJM.d.mts"],"mappings":";;;;;;UAIU;WACC;WACA,mBAAmB;;UAEpB;WACC;WACA,gBAAgB;;;;;;;;;;iBAUV"}

package/dist/dev-Bmq-eLnv-DsenQNJM.mjs

@@ -0,0 +1,154 @@
+import { t as blindCast } from "./casts-DpaahrlC-C5XMnP9S.mjs";
+import { t as InternalError } from "./internal-error-Dfur7Zqt-D96dWHZK.mjs";
+import { t as CliStructuredError } from "./errors-0e8IVwzi.mjs";
+//#region ../../0-framework/0-foundation/foundation/dist/result.mjs
+/**
+* Generic Result type for representing success or failure outcomes.
+*
+* This is the standard way to return "expected failures" as values rather than
+* throwing exceptions. See docs/Error Handling.md for the full taxonomy.
+*
+* Naming rationale:
+* - `Ok<T>` / `NotOk<F>` mirror the `ok: true/false` discriminator
+* - `NotOk` avoids collision with domain types like "Failure" or "Error"
+* - `failure` property distinguishes from JS Error semantics
+*/
+/**
+* Result class that implements both Ok and NotOk variants.
+*/
+var ResultImpl = class ResultImpl {
+	ok;
+	_value;
+	_failure;
+	constructor(ok, valueOrFailure) {
+		this.ok = ok;
+		if (ok) this._value = blindCast(valueOrFailure);
+		else this._failure = blindCast(valueOrFailure);
+		Object.freeze(this);
+	}
+	get value() {
+		if (!this.ok) throw new InternalError("Cannot access value on NotOk result");
+		return this._value;
+	}
+	get failure() {
+		if (this.ok) throw new InternalError("Cannot access failure on Ok result");
+		return this._failure;
+	}
+	/**
+	* Creates a successful result.
+	*/
+	static ok(value) {
+		return blindCast(new ResultImpl(true, value));
+	}
+	/**
+	* Creates an unsuccessful result.
+	*/
+	static notOk(failure) {
+		return blindCast(new ResultImpl(false, failure));
+	}
+	/**
+	* Asserts that this result is Ok and returns the value.
+	* Throws if the result is NotOk.
+	*/
+	assertOk() {
+		if (!this.ok) throw new InternalError("Expected Ok result but got NotOk");
+		return this.value;
+	}
+	/**
+	* Asserts that this result is NotOk and returns the failure.
+	* Throws if the result is Ok.
+	*/
+	assertNotOk() {
+		if (this.ok) throw new InternalError("Expected NotOk result but got Ok");
+		return this.failure;
+	}
+};
+/**
+* Creates a successful result.
+*/
+function ok(value) {
+	return ResultImpl.ok(value);
+}
+/**
+* Creates an unsuccessful result.
+*/
+function notOk(failure) {
+	return ResultImpl.notOk(failure);
+}
+/**
+* Singleton for void success results.
+* Use this for validation checks that don't produce a value.
+*/
+const OK_VOID = ResultImpl.ok(void 0);
+/**
+* Returns a successful void result.
+* Use this for validation checks that don't produce a value.
+*/
+function okVoid() {
+	return OK_VOID;
+}
+//#endregion
+//#region ../../0-framework/3-tooling/cli/dist/dev-Bmq-eLnv.mjs
+/**
+* Reads the execution diagnostics an engine-failure error carries in
+* `meta.diagnostics`; undefined for every other failure.
+*/
+function executionDiagnostics(f) {
+	const diagnostics = f.meta?.["diagnostics"];
+	if (typeof diagnostics !== "object" || diagnostics === null) return void 0;
+	const candidate = blindCast(diagnostics);
+	if (candidate["exitCode"] !== void 0 && typeof candidate["exitCode"] !== "number" || candidate["signal"] !== void 0 && typeof candidate["signal"] !== "string" || typeof candidate["stackFilePath"] !== "string" || typeof candidate["reproduceCommand"] !== "string" || typeof candidate["cwd"] !== "string") return;
+	return blindCast(diagnostics);
+}
+/**
+* Site-specific wrap for foreign extension/environment causes — passthrough
+* when already structured; never a boundary fallback (base-type rule 6(ii)).
+*/
+function toStructured(code, error) {
+	return CliStructuredError.is(error) ? error : new CliStructuredError(code, error instanceof Error ? error.message : String(error), { cause: error });
+}
+/** A failed executor import: an environmental failure of the consumer's
+* installed tree, not a bug here. The import error rides as the cause. */
+function executorLoadFailure(operation, error) {
+	return new CliStructuredError("DEPS.EXECUTOR_UNLOADABLE", `Could not load the ${operation} executor: ${error instanceof Error ? error.message : String(error)}`, {
+		why: `The ${operation} operation's executor imports the deploy engine's provider tree from your app's installed dependencies, and that import failed.`,
+		fix: "Reinstall your dependencies, and check that `alchemy` is installed and loadable from your app.",
+		cause: error
+	});
+}
+async function deploy(input) {
+	return deployWithDeps(input, {});
+}
+/** In-package variant threading the injection seam, which the family's
+* commands and the unit tests use. Deliberately NOT re-exported through `./control` — the seam mirrors
+* internal types and is not part of the published surface. */
+async function deployWithDeps(input, deps) {
+	const cwd = input.cwd ?? process.cwd();
+	let executor;
+	try {
+		executor = await import("./execute-deploy-destroy-c0eko3AO-BoK0-r1U.mjs");
+	} catch (error) {
+		return notOk(executorLoadFailure("deploy", error));
+	}
+	return executor.executeDeploy(input, deps, cwd);
+}
+async function dev(input) {
+	return devWithDeps(input, {});
+}
+/** In-package variant threading the injection seam, which the family's
+* commands and the unit tests use. Deliberately NOT re-exported through `./control` — the seam mirrors
+* internal types and is not part of the published surface. */
+async function devWithDeps(input, deps) {
+	const cwd = input.cwd ?? process.cwd();
+	let executor;
+	try {
+		executor = await import("./execute-dev-BICPaq1g-DQccw8kr.mjs");
+	} catch (error) {
+		return notOk(executorLoadFailure("dev", error));
+	}
+	return executor.executeDev(input, deps, cwd);
+}
+//#endregion
+export { toStructured as a, okVoid as c, executorLoadFailure as i, dev as n, notOk as o, executionDiagnostics as r, ok as s, deploy as t };
+
+//# sourceMappingURL=dev-Bmq-eLnv-DsenQNJM.mjs.map

package/dist/dev-Bmq-eLnv-DsenQNJM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-Bmq-eLnv-DsenQNJM.mjs","names":[],"sources":["../../../0-framework/0-foundation/foundation/dist/result.mjs","../../../0-framework/3-tooling/cli/dist/dev-Bmq-eLnv.mjs"],"sourcesContent":["import { t as blindCast } from \"./casts-DpaahrlC.mjs\";\nimport { t as InternalError } from \"./internal-error-Dfur7Zqt.mjs\";\n//#region src/result.ts\n/**\n* Generic Result type for representing success or failure outcomes.\n*\n* This is the standard way to return \"expected failures\" as values rather than\n* throwing exceptions. See docs/Error Handling.md for the full taxonomy.\n*\n* Naming rationale:\n* - `Ok<T>` / `NotOk<F>` mirror the `ok: true/false` discriminator\n* - `NotOk` avoids collision with domain types like \"Failure\" or \"Error\"\n* - `failure` property distinguishes from JS Error semantics\n*/\n/**\n* Result class that implements both Ok and NotOk variants.\n*/\nvar ResultImpl = class ResultImpl {\n\tok;\n\t_value;\n\t_failure;\n\tconstructor(ok, valueOrFailure) {\n\t\tthis.ok = ok;\n\t\tif (ok) this._value = blindCast(valueOrFailure);\n\t\telse this._failure = blindCast(valueOrFailure);\n\t\tObject.freeze(this);\n\t}\n\tget value() {\n\t\tif (!this.ok) throw new InternalError(\"Cannot access value on NotOk result\");\n\t\treturn this._value;\n\t}\n\tget failure() {\n\t\tif (this.ok) throw new InternalError(\"Cannot access failure on Ok result\");\n\t\treturn this._failure;\n\t}\n\t/**\n\t* Creates a successful result.\n\t*/\n\tstatic ok(value) {\n\t\treturn blindCast(new ResultImpl(true, value));\n\t}\n\t/**\n\t* Creates an unsuccessful result.\n\t*/\n\tstatic notOk(failure) {\n\t\treturn blindCast(new ResultImpl(false, failure));\n\t}\n\t/**\n\t* Asserts that this result is Ok and returns the value.\n\t* Throws if the result is NotOk.\n\t*/\n\tassertOk() {\n\t\tif (!this.ok) throw new InternalError(\"Expected Ok result but got NotOk\");\n\t\treturn this.value;\n\t}\n\t/**\n\t* Asserts that this result is NotOk and returns the failure.\n\t* Throws if the result is Ok.\n\t*/\n\tassertNotOk() {\n\t\tif (this.ok) throw new InternalError(\"Expected NotOk result but got Ok\");\n\t\treturn this.failure;\n\t}\n};\n/**\n* Creates a successful result.\n*/\nfunction ok(value) {\n\treturn ResultImpl.ok(value);\n}\n/**\n* Creates an unsuccessful result.\n*/\nfunction notOk(failure) {\n\treturn ResultImpl.notOk(failure);\n}\n/**\n* Singleton for void success results.\n* Use this for validation checks that don't produce a value.\n*/\nconst OK_VOID = ResultImpl.ok(void 0);\n/**\n* Returns a successful void result.\n* Use this for validation checks that don't produce a value.\n*/\nfunction okVoid() {\n\treturn OK_VOID;\n}\n//#endregion\nexport { notOk, ok, okVoid };\n\n//# sourceMappingURL=result.mjs.map","import { blindCast } from \"@internal/foundation/casts\";\nimport { notOk } from \"@internal/foundation/result\";\nimport { CliStructuredError } from \"@internal/foundation/errors\";\n//#region src/operations/shared.ts\n/**\n* Reads the execution diagnostics an engine-failure error carries in\n* `meta.diagnostics`; undefined for every other failure.\n*/\nfunction executionDiagnostics(f) {\n\tconst diagnostics = f.meta?.[\"diagnostics\"];\n\tif (typeof diagnostics !== \"object\" || diagnostics === null) return void 0;\n\tconst candidate = blindCast(diagnostics);\n\tif (candidate[\"exitCode\"] !== void 0 && typeof candidate[\"exitCode\"] !== \"number\" || candidate[\"signal\"] !== void 0 && typeof candidate[\"signal\"] !== \"string\" || typeof candidate[\"stackFilePath\"] !== \"string\" || typeof candidate[\"reproduceCommand\"] !== \"string\" || typeof candidate[\"cwd\"] !== \"string\") return;\n\treturn blindCast(diagnostics);\n}\n/**\n* Site-specific wrap for foreign extension/environment causes — passthrough\n* when already structured; never a boundary fallback (base-type rule 6(ii)).\n*/\nfunction toStructured(code, error) {\n\treturn CliStructuredError.is(error) ? error : new CliStructuredError(code, error instanceof Error ? error.message : String(error), { cause: error });\n}\n/** A failed executor import: an environmental failure of the consumer's\n* installed tree, not a bug here. The import error rides as the cause. */\nfunction executorLoadFailure(operation, error) {\n\treturn new CliStructuredError(\"DEPS.EXECUTOR_UNLOADABLE\", `Could not load the ${operation} executor: ${error instanceof Error ? error.message : String(error)}`, {\n\t\twhy: `The ${operation} operation's executor imports the deploy engine's provider tree from your app's installed dependencies, and that import failed.`,\n\t\tfix: \"Reinstall your dependencies, and check that `alchemy` is installed and loadable from your app.\",\n\t\tcause: error\n\t});\n}\n//#endregion\n//#region src/operations/deploy.ts\nasync function deploy(input) {\n\treturn deployWithDeps(input, {});\n}\n/** In-package variant threading the injection seam, which the family's\n* commands and the unit tests use. Deliberately NOT re-exported through `./control` — the seam mirrors\n* internal types and is not part of the published surface. */\nasync function deployWithDeps(input, deps) {\n\tconst cwd = input.cwd ?? process.cwd();\n\tlet executor;\n\ttry {\n\t\texecutor = await import(\"./execute-deploy-destroy-c0eko3AO.mjs\");\n\t} catch (error) {\n\t\treturn notOk(executorLoadFailure(\"deploy\", error));\n\t}\n\treturn executor.executeDeploy(input, deps, cwd);\n}\n//#endregion\n//#region src/operations/dev.ts\nasync function dev(input) {\n\treturn devWithDeps(input, {});\n}\n/** In-package variant threading the injection seam, which the family's\n* commands and the unit tests use. Deliberately NOT re-exported through `./control` — the seam mirrors\n* internal types and is not part of the published surface. */\nasync function devWithDeps(input, deps) {\n\tconst cwd = input.cwd ?? process.cwd();\n\tlet executor;\n\ttry {\n\t\texecutor = await import(\"./execute-dev-BICPaq1g.mjs\");\n\t} catch (error) {\n\t\treturn notOk(executorLoadFailure(\"dev\", error));\n\t}\n\treturn executor.executeDev(input, deps, cwd);\n}\n//#endregion\nexport { executionDiagnostics as a, deployWithDeps as i, devWithDeps as n, executorLoadFailure as o, deploy as r, toStructured as s, dev as t };\n\n//# sourceMappingURL=dev-Bmq-eLnv.mjs.map"],"mappings":";;;;;;;;;;;;;;;;;;AAiBA,IAAI,aAAa,MAAM,WAAW;CACjC;CACA;CACA;CACA,YAAY,IAAI,gBAAgB;EAC/B,KAAK,KAAK;EACV,IAAI,IAAI,KAAK,SAAS,UAAU,cAAc;OACzC,KAAK,WAAW,UAAU,cAAc;EAC7C,OAAO,OAAO,IAAI;CACnB;CACA,IAAI,QAAQ;EACX,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,cAAc,qCAAqC;EAC3E,OAAO,KAAK;CACb;CACA,IAAI,UAAU;EACb,IAAI,KAAK,IAAI,MAAM,IAAI,cAAc,oCAAoC;EACzE,OAAO,KAAK;CACb;;;;CAIA,OAAO,GAAG,OAAO;EAChB,OAAO,UAAU,IAAI,WAAW,MAAM,KAAK,CAAC;CAC7C;;;;CAIA,OAAO,MAAM,SAAS;EACrB,OAAO,UAAU,IAAI,WAAW,OAAO,OAAO,CAAC;CAChD;;;;;CAKA,WAAW;EACV,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,cAAc,kCAAkC;EACxE,OAAO,KAAK;CACb;;;;;CAKA,cAAc;EACb,IAAI,KAAK,IAAI,MAAM,IAAI,cAAc,kCAAkC;EACvE,OAAO,KAAK;CACb;AACD;;;;AAIA,SAAS,GAAG,OAAO;CAClB,OAAO,WAAW,GAAG,KAAK;AAC3B;;;;AAIA,SAAS,MAAM,SAAS;CACvB,OAAO,WAAW,MAAM,OAAO;AAChC;;;;;AAKA,MAAM,UAAU,WAAW,GAAG,KAAK,CAAC;;;;;AAKpC,SAAS,SAAS;CACjB,OAAO;AACR;;;;;;;AC/EA,SAAS,qBAAqB,GAAG;CAChC,MAAM,cAAc,EAAE,OAAO;CAC7B,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,MAAM,OAAO,KAAK;CACzE,MAAM,YAAY,UAAU,WAAW;CACvC,IAAI,UAAU,gBAAgB,KAAK,KAAK,OAAO,UAAU,gBAAgB,YAAY,UAAU,cAAc,KAAK,KAAK,OAAO,UAAU,cAAc,YAAY,OAAO,UAAU,qBAAqB,YAAY,OAAO,UAAU,wBAAwB,YAAY,OAAO,UAAU,WAAW,UAAU;CAC/S,OAAO,UAAU,WAAW;AAC7B;;;;;AAKA,SAAS,aAAa,MAAM,OAAO;CAClC,OAAO,mBAAmB,GAAG,KAAK,IAAI,QAAQ,IAAI,mBAAmB,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,EAAE,OAAO,MAAM,CAAC;AACpJ;;;AAGA,SAAS,oBAAoB,WAAW,OAAO;CAC9C,OAAO,IAAI,mBAAmB,4BAA4B,sBAAsB,UAAU,aAAa,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,KAAK;EAChK,KAAK,OAAO,UAAU;EACtB,KAAK;EACL,OAAO;CACR,CAAC;AACF;AAGA,eAAe,OAAO,OAAO;CAC5B,OAAO,eAAe,OAAO,CAAC,CAAC;AAChC;;;;AAIA,eAAe,eAAe,OAAO,MAAM;CAC1C,MAAM,MAAM,MAAM,OAAO,QAAQ,IAAI;CACrC,IAAI;CACJ,IAAI;EACH,WAAW,MAAM,OAAO;CACzB,SAAS,OAAO;EACf,OAAO,MAAM,oBAAoB,UAAU,KAAK,CAAC;CAClD;CACA,OAAO,SAAS,cAAc,OAAO,MAAM,GAAG;AAC/C;AAGA,eAAe,IAAI,OAAO;CACzB,OAAO,YAAY,OAAO,CAAC,CAAC;AAC7B;;;;AAIA,eAAe,YAAY,OAAO,MAAM;CACvC,MAAM,MAAM,MAAM,OAAO,QAAQ,IAAI;CACrC,IAAI;CACJ,IAAI;EACH,WAAW,MAAM,OAAO;CACzB,SAAS,OAAO;EACf,OAAO,MAAM,oBAAoB,OAAO,KAAK,CAAC;CAC/C;CACA,OAAO,SAAS,WAAW,OAAO,MAAM,GAAG;AAC5C"}

package/dist/{execute-deploy-destroy-CvKCwVkD-Di3Ooeip.mjs → execute-deploy-destroy-c0eko3AO-BoK0-r1U.mjs}

@@ -1,16 +1,16 @@
 import { t as CliStructuredError } from "./errors-0e8IVwzi.mjs";
 import { t as containerEnv } from "./container-transport-HcvNOGZL-twPi2TIv.mjs";
 import { n as preflightEnvVarName, t as preflightEnv } from "./config-CdxvLFzg.mjs";
-import { n as ok, r as okVoid, s as toStructured, t as notOk } from "./result-CQIOBgdW.mjs";
+import { a as toStructured, c as okVoid, o as notOk, s as ok } from "./dev-Bmq-eLnv-DsenQNJM.mjs";
 import { a as writeRunReport, i as toRunReport, r as resolveRunReportPath, t as RUN_REPORT_FILE_ENV } from "./run-report-C2o98uD--AX8kpz4Q.mjs";
-import { n as readDeploymentSummary, t as DEPLOYMENT_RESULT_FILE_ENV } from "./deployment-summary-DswOl_9E-B9MhYYDt.mjs";
-import { n as spawnAlchemy, t as alchemyInvocation } from "./run-alchemy-pANK8XNX-CgCpXLkG.mjs";
-import { n as runPipeline } from "./pipeline-C7gNjMzJ-CzM8DNS_.mjs";
+import { a as readEngineFailureCause, i as readDeploymentSummary, r as engineFailureFilePath, t as DEPLOYMENT_RESULT_FILE_ENV } from "./deployment-summary-37e6WEuh-BOTJynIi.mjs";
+import { n as spawnAlchemy, t as alchemyInvocation } from "./run-alchemy-BEvB2sYQ-Cy2fhbcu.mjs";
+import { n as runPipeline, r as noComposerExportMessage } from "./pipeline-DYvl561J-DDtnkFPh.mjs";
 import * as fs$1 from "node:fs";
 import * as path$1 from "node:path";
 import { randomUUID } from "node:crypto";
 import { spawnSync } from "node:child_process";
-//#region ../../0-framework/3-tooling/cli/dist/generate-stack-DLu6b7YM.mjs
+//#region ../../0-framework/3-tooling/cli/dist/execute-deploy-destroy-c0eko3AO.mjs
 /** Pipeline step 6: writes a regenerated-every-run, independently runnable stack module at `.prisma-composer/alchemy.run.ts`. */
 const GENERATED_DIR = ".prisma-composer";
 const GENERATED_FILE = "alchemy.run.ts";
@@ -31,15 +31,15 @@ function renderOptions(input) {
 	lines.push("  bundles: {");
 	for (const [id, bundle] of Object.entries(input.assembled.bundles)) lines.push(`    ${quote(id)}: ${renderBundle(bundle)},`);
 	lines.push("  },");
-	lines.push("  report: deploymentReport,");
+	lines.push("  report: report.deploymentReport,");
 	return lines.join("\n");
 }
 /** Renders the stack module's source (tests assert on it without touching disk) — uses `//` headers, not a block comment, since a cwd path with a star-slash could close one early. */
 function renderStackFile(input) {
 	const generatedDir = path$1.join(input.cwd, GENERATED_DIR);
 	const appImport = relativeImportSpecifier(generatedDir, input.entryPath);
-	const configImport = relativeImportSpecifier(generatedDir, input.configPath);
-	return `// Generated by \`prisma-composer deploy\`/\`prisma-composer destroy\` — overwritten on every
+	const configImport = relativeImportSpecifier(generatedDir, input.configFile);
+	return `// Generated by Composer's deploy and destroy operations — overwritten on every
 // run; do not edit by hand. Runnable from ${quote(input.cwd)} WITH the env the
 // CLI passes its child (the PRISMA_COMPOSER_CONTAINER_*/_PREFLIGHT_* vars —
 // without them lower() refuses because no container is resolved):
@@ -48,10 +48,18 @@ function renderStackFile(input) {
 //
 // bisects a CLI bug from an Alchemy bug (deploy-cli.md § Implementation decisions).
 import { lower } from '@prisma/composer/deploy';
-import { deploymentReport } from '@prisma/composer/report';
-import config from ${quote(configImport)};
+import * as report from '@prisma/composer/report';
+import prismaConfig from ${quote(configImport)};
 import app from ${quote(appImport)};
 
+const config = prismaConfig.composer;
+if (config === undefined) {
+  throw new Error(${quote(noComposerExportMessage(input.configFile))});
+}
+
+// The app's own @prisma/composer may predate the failure recorder.
+report.captureEngineFailure?.();
+
 export default lower(app, config, {
 ${renderOptions(input)}
 });
@@ -66,8 +74,6 @@ function writeStackFile(input) {
 	return filePath;
 }
 const GENERATED_STACK_RELATIVE_PATH = path$1.join(GENERATED_DIR, GENERATED_FILE);
-//#endregion
-//#region ../../0-framework/3-tooling/cli/dist/execute-deploy-destroy-CvKCwVkD.mjs
 /** A stage name must be a valid git ref (deploy-cli.md) — checked via `git check-ref-format`, never silently normalized. Runs before anything platform-specific. */
 function validateStageName(stage) {
 	const result = spawnSync("git", ["check-ref-format", `refs/heads/${stage}`], { stdio: "ignore" });
@@ -90,6 +96,7 @@ function hasNoLocalDeployState(cwd) {
 async function executeDeploy(input, deps, cwd) {
 	const outcome = await runStackPipeline("deploy", {
 		entry: input.entry,
+		config: input.config,
 		name: input.name,
 		stage: input.stage,
 		cwd,
@@ -112,6 +119,7 @@ async function executeDeploy(input, deps, cwd) {
 async function executeDestroy(input, deps, cwd) {
 	const outcome = await runStackPipeline("destroy", {
 		entry: input.entry,
+		config: input.config,
 		name: input.name,
 		stage: input.target.kind === "stage" ? input.target.stage : void 0,
 		cwd,
@@ -233,7 +241,7 @@ async function runStackPipeline(action, opts) {
 * write the stack file, run alchemy against it, then the destroy-only
 * teardown/removal suffix. The value is only ever a summary for deploy. */
 async function runStackPipelineInner(action, opts, reporters) {
-	const { entry, name, stage, cwd, onEvent, deps } = opts;
+	const { entry, config: composerConfig, name, stage, cwd, onEvent, deps } = opts;
 	if (stage !== void 0) try {
 		validateStageName(stage);
 	} catch (error) {
@@ -250,16 +258,13 @@ async function runStackPipelineInner(action, opts, reporters) {
 	const preflightPayloads = /* @__PURE__ */ new Map();
 	let preflightTransportEnv = {};
 	try {
-		pipeline = await runPipeline(entry, name, cwd, {
-			runAssembler: deps.runAssembler,
-			config: deps.config,
-			configPath: deps.configPath
-		}, action === "destroy" ? (error) => new CliStructuredError("DEPLOY.BUILD_REQUIRED", error.message, {
+		pipeline = await runPipeline(entry, name, cwd, composerConfig, { runAssembler: deps.runAssembler }, action === "destroy" ? (error) => new CliStructuredError("DEPLOY.BUILD_REQUIRED", error.message, {
 			why: "destroy evaluates the same stack program as deploy, which packages the built artifacts — so the app must be built first.",
 			fix: "Run the build, then retry the destroy.",
 			cause: error
 		}) : void 0);
-		const { config, graph, name: resolvedName } = pipeline;
+		const { graph, name: resolvedName } = pipeline;
+		const config = pipeline.configSource.value;
 		if (action === "deploy") reporters.push(...await beginReporters(config.extensions, {
 			appName: resolvedName,
 			graph,
@@ -290,7 +295,7 @@ async function runStackPipelineInner(action, opts, reporters) {
 		}
 		await attachReporters(reporters, containers);
 		const pinnedStage = containers.get(config.state.extension)?.alchemyStage ?? stage;
-		if (pinnedStage === void 0) throw new CliStructuredError("DEPLOY.SCOPE_MISSING", "The configured deploy target supplied no deploy scope (its container defines no alchemyStage), so Alchemy has no stage to run under.", { fix: action === "deploy" ? "Pass --stage <name> to choose the deploy scope explicitly." : "destroy --production needs a target whose container supplies the production deploy scope." });
+		if (pinnedStage === void 0) throw new CliStructuredError("DEPLOY.SCOPE_MISSING", "The configured deploy target supplied no deploy scope (its container defines no alchemyStage), so Alchemy has no stage to run under.", { fix: action === "deploy" ? "Pass --stage <name> to choose the deploy scope explicitly." : "Destroying production needs a target whose container supplies the production deploy scope." });
 		alchemyStage = pinnedStage;
 		if (action === "deploy") {
 			for (const extension of config.extensions) {
@@ -325,7 +330,7 @@ async function runStackPipelineInner(action, opts, reporters) {
 			stackPath = writeStackFile({
 				entryPath: pipeline.entryModule.path,
 				cwd,
-				configPath: pipeline.configPath,
+				configFile: pipeline.configSource.file,
 				name: pipeline.name,
 				assembled: pipeline.assembled
 			});
@@ -370,18 +375,23 @@ async function runStackPipelineInner(action, opts, reporters) {
 			}
 		} }));
 		const status = outcome.exitCode ?? 1;
-		if (status !== 0) return notOk(new CliStructuredError("DEPLOY.ENGINE_FAILED", `alchemy ${action} exited with status ${status}.`, { meta: {
-			exitCode: status,
-			diagnostics: {
+		if (status !== 0) {
+			const engineCause = readEngineFailureCause(resultFilePath);
+			const withCause = (sentence) => engineCause === void 0 ? sentence : `${sentence}\n${engineCause}`;
+			return notOk(new CliStructuredError("DEPLOY.ENGINE_FAILED", withCause(`alchemy ${action} exited with status ${status}.`), { meta: {
 				exitCode: status,
-				stackFilePath: stackPath,
-				reproduceCommand,
-				cwd
-			}
-		} }));
+				...engineCause !== void 0 ? { engineCause } : {},
+				diagnostics: {
+					exitCode: status,
+					stackFilePath: stackPath,
+					reproduceCommand,
+					cwd
+				}
+			} }));
+		}
 		try {
 			if (action === "destroy") {
-				for (const extension of pipeline.config.extensions) {
+				for (const extension of pipeline.configSource.value.extensions) {
 					if (extension.teardown === void 0) continue;
 					try {
 						await extension.teardown({
@@ -392,7 +402,7 @@ async function runStackPipelineInner(action, opts, reporters) {
 						throw toStructured("DEPLOY.TEARDOWN_FAILED", error);
 					}
 				}
-				for (const extension of pipeline.config.extensions) {
+				for (const extension of pipeline.configSource.value.extensions) {
 					if (extension.container === void 0) continue;
 					const instance = containers.get(extension.id);
 					if (instance === void 0) continue;
@@ -412,10 +422,11 @@ async function runStackPipelineInner(action, opts, reporters) {
 	} finally {
 		try {
 			fs$1.rmSync(resultFilePath, { force: true });
+			fs$1.rmSync(engineFailureFilePath(resultFilePath), { force: true });
 		} catch {}
 	}
 }
 //#endregion
 export { executeDeploy, executeDestroy };
 
-//# sourceMappingURL=execute-deploy-destroy-CvKCwVkD-Di3Ooeip.mjs.map
+//# sourceMappingURL=execute-deploy-destroy-c0eko3AO-BoK0-r1U.mjs.map