@prisma/orm-toolchain 8.0.0-rc.9-dev.11 → 8.0.0-rc.9-dev.13

package/dist/cli.mjs

@@ -1,8 +1,10 @@
 import { r as getEmittedArtifactPaths } from "./exports-CE6OD63o-4Qpqr2W7.mjs";
+import { t as MigrationToolsError } from "./errors-SoLLYLtw-DMxVbVs9.mjs";
 import { t as EMPTY_CONTRACT_HASH } from "./constants-CM-w38DQ-Cz_EXbOc.mjs";
+import { r as readRef } from "./refs-BpSpzdYB-BcDelHGt.mjs";
 import { c as spaceMigrationDirectory } from "./verify-contract-spaces-CrxvgpwD-D5LLXGci.mjs";
 import { i as createScaffoldSpecifierResolver } from "./import-roots-BHOrDJbI.mjs";
-import { $ as loadContractRawSafely, A as errorMigrationPlanningFailed, At as statusForMigrationHash, C as errorDestructiveChanges, Ct as resolveRefAdvancementFields, D as errorLegendHumanOnly, Dt as runMigrationCheck, E as errorHashMismatch, F as errorTargetMigrationNotSupported, H as executeMigrateShowPlan, I as errorTargetMismatch, J as executeRefSetCommand, K as executeRefDeleteCommand, L as errorUnexpected, M as errorPathUnreachable, Mt as toDeclaredExtensionsFromRaw, N as errorRunnerFailed, O as errorMarkerMissing, Ot as runMigrationList, P as errorRuntime, Q as loadAggregateIntegrityViolations, R as executeContractEmit, S as errorDatabaseConnectionRequired, St as resolveMigrationRef, T as errorFileNotFound, Tt as runCommandAction, U as executeMigrationNewCommand, W as executeMigrationPlanCommand, X as hasMigrationPath, Y as findPackageByDirPath, Z as listRefsByContractHash, _ as enumerateCheckSpaces, _t as requireLiveDatabase, at as maskConnectionUrl, b as errorContractArgConflict, bt as resolveContractRefToSnapshot, ct as readContractEnvelope, d as closeQuietly, dt as refuseContractSpaceIntegrity, et as loadContractSpaceAggregateForCli, gt as refuseUnknownInvariants, ht as refusePackageCorruptionOnAggregate, i as appliedHashesFromLedger, j as errorNoMigrations, jt as targetSupportsMigrations, k as errorMigrationPackageNotFound, kt as sanitizeErrorMessage, l as checkSingleTarget, lt as readContractIR, m as deriveStatusEdgeAnnotations, mt as refuseMissingInvariantPath, n as advanceRefSafely, nt as mapCaughtMigrationError, o as buildMigrationSpaceGraphEntries, ot as migrationSpaceListEntriesFromAggregate, p as createControlClient, pt as refuseMarkerOutsideGraph, q as executeRefListCommand, rt as mapContractAtError, s as buildReadAggregate, st as originHashForStatus, t as CliStructuredError$1$1, tt as looksLikePath, u as chooseAction, ut as readMigrationRefs, v as errorConfigValidation$1, vt as resolveAppTargetPath, w as errorDriverRequired, x as errorContractValidationFailed, y as errorConsentPlanMismatch, yt as resolveContractRef$1 } from "./ref-BPBIUGrB-BQt8iSyJ.mjs";
+import { $ as loadAggregateIntegrityViolations, A as errorMigrationPackageNotFound, At as runMigrationList, C as errorDatabaseConnectionRequired, D as errorHashMismatch, Dt as runCommandAction, E as errorFileNotFound, F as errorRuntime, G as executeMigrationPlanCommand, I as errorTargetMigrationNotSupported, J as executeRefListCommand, L as errorTargetMismatch, M as errorNoMigrations, Mt as statusForMigrationHash, N as errorPathUnreachable, Nt as targetSupportsMigrations, O as errorLegendHumanOnly, P as errorRunnerFailed, Pt as toDeclaredExtensionsFromRaw, Q as listRefsByContractHash, R as errorUnexpected, S as errorContractValidationFailed, St as resolveContractRefToSnapshot, T as errorDriverRequired, Tt as resolveRefAdvancementFields, U as executeMigrateShowPlan, W as executeMigrationNewCommand, X as findPackageByDirPath, Y as executeRefSetCommand, Z as hasMigrationPath, _ as enumerateCheckSpaces, _t as refusePackageCorruptionOnAggregate, b as errorConsentPlanMismatch, bt as resolveAppTargetPath, ct as originHashForStatus, d as closeQuietly, dt as readContractIR, et as loadContractRawSafely, ft as readMigrationRefs, gt as refuseMissingInvariantPath, ht as refuseMarkerOutsideGraph, i as appliedHashesFromLedger, it as mapContractAtError, j as errorMigrationPlanningFailed, jt as sanitizeErrorMessage, k as errorMarkerMissing, kt as runMigrationCheck, l as checkSingleTarget, lt as preflightRefAdvancement, m as deriveStatusEdgeAnnotations, n as advanceRefSafely, nt as looksLikePath, o as buildMigrationSpaceGraphEntries, ot as maskConnectionUrl, p as createControlClient, pt as refuseContractSpaceIntegrity, q as executeRefDeleteCommand, rt as mapCaughtMigrationError, s as buildReadAggregate, st as migrationSpaceListEntriesFromAggregate, t as CliStructuredError$1$1, tt as loadContractSpaceAggregateForCli, u as chooseAction, ut as readContractEnvelope, v as errorAdvanceRefArgConflict, vt as refuseUnknownInvariants, w as errorDestructiveChanges, wt as resolveMigrationRef, x as errorContractArgConflict, xt as resolveContractRef$1, y as errorConfigValidation$1, yt as requireLiveDatabase, z as executeContractEmit } from "./ref-DcqFmceq-QaUjgZeM.mjs";
 import { n as buildNextSteps, t as InitOutputSchema } from "./output-D83nTTpC-XlvN30yS.mjs";
 import { r as loadConfig, t as finalizeConfig } from "./exports-BXXeNWlj.mjs";
 import { createRequire } from "node:module";
@@ -33,7 +35,7 @@ import { applyEdits, modify, parse, printParseErrorCode } from "jsonc-parser";
 import stringWidth from "string-width";
 import { bold, createColors, cyan, cyanBright, dim, green, yellow } from "colorette";
 import { build } from "esbuild";
-//#region ../../../1-framework/3-tooling/cli/dist/load-config-CWwenkv5.mjs
+//#region ../../../1-framework/3-tooling/cli/dist/load-config-Dg1SXbzd.mjs
 const MISSING_CONFIG_ACTION = {
 	kind: "run-command",
 	label: "Create a config file",
@@ -1303,8 +1305,10 @@ async function readEmittedContract(inputs) {
 	}
 	const familyInstance = inputs.config.family.create(createControlStack(inputs.config));
 	try {
+		const json = castAs(JSON.parse(content));
 		return ok$1({
-			contract: familyInstance.deserializeContract(castAs(JSON.parse(content))),
+			contract: familyInstance.deserializeContract(json),
+			json,
 			path,
 			displayPath: relativePath
 		});
@@ -1456,6 +1460,30 @@ function schemaVerdictDiagnostic(inputs) {
 const FINDINGS_EXIT_CODE$2 = 4;
 /** The config file this bin reads; the handler is not told which one was loaded. */
 const CONFIG_DISPLAY_PATH = "prisma.config.ts";
+/**
+* The ref a signature checkpoints. Unlike `db init` / `db update`, `--db` does
+* not suppress the write: signing does not touch the schema, and adoption is
+* normally done against the real database via `--db`. Only `--no-advance-ref`
+* suppresses it.
+*/
+const DEFAULT_ADVANCE_REF = "db";
+const NO_PREVIOUS_HASH_CODES = /* @__PURE__ */ new Set([
+	"MIGRATION.UNKNOWN_REF",
+	"MIGRATION.INVALID_REF_FILE",
+	"MIGRATION.INVALID_REF_NAME"
+]);
+/**
+* The hash the ref held before the signature, read from that one ref file so a
+* corrupt sibling cannot fail a signature already written.
+*/
+async function previousRefHash(refsDir, name) {
+	try {
+		return (await readRef(refsDir, name)).hash;
+	} catch (error) {
+		if (MigrationToolsError.is(error) && NO_PREVIOUS_HASH_CODES.has(error.code)) return;
+		throw error;
+	}
+}
 function headerBlock$1(inputs) {
 	return {
 		kind: "fields",
@@ -1469,6 +1497,41 @@ function headerBlock$1(inputs) {
 		}]
 	};
 }
+function advancedRefSpans(advanced) {
+	return [
+		{ text: `Advanced ref "${advanced.name}" → ` },
+		{
+			text: advanced.hash,
+			tone: "identifier"
+		},
+		...advanced.previousHash === void 0 ? [] : [
+			{
+				text: " (was ",
+				tone: "muted"
+			},
+			{
+				text: advanced.previousHash,
+				tone: "identifier"
+			},
+			{
+				text: ")",
+				tone: "muted"
+			}
+		]
+	];
+}
+function refOutcomeBlock(advanced) {
+	return advanced === null ? {
+		kind: "summary",
+		status: "info",
+		tone: "muted",
+		text: `Left ref "${DEFAULT_ADVANCE_REF}" untouched (--no-advance-ref)`
+	} : {
+		kind: "summary",
+		status: "ok",
+		text: advancedRefSpans(advanced)
+	};
+}
 function signPresentations(inputs) {
 	const marker = inputs.document.marker;
 	return {
@@ -1499,7 +1562,8 @@ function signPresentations(inputs) {
 						tone: "identifier"
 					}]
 				}]
-			}
+			},
+			refOutcomeBlock(inputs.advanced)
 		],
 		json: () => inputs.document
 	};
@@ -1532,12 +1596,14 @@ function createDbSignCommand(createClient = createControlClient) {
 	return defineOrmCommand({
 		help: {
 			summary: "Sign the database with your contract so you can safely run queries",
-			description: "Verifies that your database schema satisfies the emitted contract, and if\nso, writes or updates the database signature. Idempotent and safe to run\nin CI or a deployment pipeline. The signature records that this database\ninstance is aligned with a specific contract version.\nExit codes: 0 = signed, 2 = the command could not run (unresolvable\ncontract reference, no emitted contract, unreachable database),\n4 = schema verification failed and no signature was written.",
+			description: "Verifies that your database schema satisfies the emitted contract, and if\nso, writes or updates the database signature. The signature records that\nthis database instance is aligned with a specific contract version.\nIdempotent. After signing, the db ref in the checkout is advanced to the\nsigned contract; pass --no-advance-ref to sign without touching any ref,\nwhich is what a CI or deployment pipeline usually wants.\nExit codes: 0 = signed, 2 = the command could not run (unresolvable\ncontract reference, no emitted contract, unreachable database),\n4 = schema verification failed and no signature was written.",
 			examples: [
 				"db sign",
 				"db sign --db $DATABASE_URL",
 				"db sign production --db $DATABASE_URL",
-				"db sign --contract production --db $DATABASE_URL"
+				"db sign --contract production --db $DATABASE_URL",
+				"db sign --db $DATABASE_URL --advance-ref production",
+				"db sign --db $DATABASE_URL --no-advance-ref"
 			]
 		},
 		args: {
@@ -1550,7 +1616,12 @@ function createDbSignCommand(createClient = createControlClient) {
 				contract: flag.string({
 					brief: "Contract reference (hash, prefix, ref name, migration dir name, <dir>^, or ./path)",
 					placeholder: "contract"
-				})
+				}),
+				advanceRef: flag.string({
+					brief: "Advance the named ref to the post-command contract hash",
+					placeholder: "name"
+				}),
+				noAdvanceRef: flag.boolean({ brief: "Sign without advancing any ref (no ref file or snapshot is written)" })
 			}
 		},
 		needs: { config: ormConfigSection },
@@ -1563,23 +1634,47 @@ function createDbSignCommand(createClient = createControlClient) {
 				flag: flagContract
 			})));
 			const contractRef = positionalContract ?? flagContract;
+			if (args.flags.noAdvanceRef && args.flags.advanceRef !== void 0) return notOk$1(normalizeError(errorAdvanceRefArgConflict({ advanceRef: args.flags.advanceRef })));
 			const emitted = await readEmittedContract({
 				config: ctx.config,
 				cwd: ctx.cwd,
 				commandName: "db sign"
 			});
 			if (!emitted.ok) return notOk$1(emitted.failure);
+			const migrationsDir = migrationsDirFor(ctx.config, ctx.cwd);
 			let contractInput = emitted.value.contract;
+			let signedSource;
 			if (contractRef !== void 0) {
 				const resolvedRef = await resolveContractRefToSnapshot({
 					config: ctx.config,
-					migrationsDir: migrationsDirFor(ctx.config, ctx.cwd),
+					migrationsDir,
 					refInput: contractRef,
 					contractPathAbsolute: emitted.value.path,
 					fallbackToEmitted: true
 				});
 				if (!resolvedRef.ok) return notOk$1(normalizeError(resolvedRef.failure));
 				contractInput = resolvedRef.value.contractJson;
+				signedSource = {
+					json: resolvedRef.value.contractJson,
+					jsonPath: resolvedRef.value.contractJsonPath
+				};
+			} else signedSource = {
+				json: emitted.value.json,
+				jsonPath: emitted.value.path
+			};
+			const refName = args.flags.noAdvanceRef ? null : args.flags.advanceRef ?? DEFAULT_ADVANCE_REF;
+			let advancement = null;
+			if (refName !== null) {
+				const preflight = await preflightRefAdvancement({
+					name: refName,
+					contractJson: signedSource.json,
+					contractJsonPath: signedSource.jsonPath
+				});
+				if (!preflight.ok) return notOk$1(normalizeError(preflight.failure));
+				advancement = {
+					name: refName,
+					contractIR: preflight.value
+				};
 			}
 			const connection = requireVerifyConnection({
 				config: ctx.config,
@@ -1629,11 +1724,43 @@ function createDbSignCommand(createClient = createControlClient) {
 					onProgress
 				});
 				if (!signed.ok) throw new InternalError(`The family returned a sign result that did not sign: ${signed.summary}`);
+				if (advancement === null) {
+					const document = {
+						...signed,
+						advancedRef: null
+					};
+					return ok$1(ctx.present({
+						data: document,
+						exitCode: 0
+					}, signPresentations({
+						document,
+						advanced: null,
+						header
+					})));
+				}
+				const refsDir = appRefsDirFor(ctx.config, ctx.cwd);
+				const previousHash = await previousRefHash(refsDir, advancement.name);
+				const advanced = await advanceRefSafely({
+					refsDir,
+					migrationsDir,
+					name: advancement.name,
+					hash: signed.contract.storageHash,
+					contractIR: advancement.contractIR
+				});
+				if (!advanced.ok) return notOk$1(normalizeError(advanced.failure));
+				const document = {
+					...signed,
+					advancedRef: advanced.value
+				};
 				return ok$1(ctx.present({
-					data: signed,
+					data: document,
 					exitCode: 0
 				}, signPresentations({
-					document: signed,
+					document,
+					advanced: {
+						...advanced.value,
+						previousHash
+					},
 					header
 				})));
 			} catch (error) {
@@ -8372,6 +8499,15 @@ function previewBlocks$1(result) {
 		lines: statements
 	}];
 }
+function originNoticeBlocks(result) {
+	if (result.fromDefaulted !== true) return [];
+	return [{
+		kind: "summary",
+		status: "info",
+		tone: "muted",
+		text: "No db ref set — planning from an empty database. Run db init, db update, or db sign if a database already exists."
+	}];
+}
 function planBlocks(result, migrationsRelative) {
 	const outcome = outcomeFields(result, migrationsRelative);
 	if (result.noOp) return [{
@@ -8379,17 +8515,22 @@ function planBlocks(result, migrationsRelative) {
 		status: "ok",
 		text: "No changes detected"
 	}, outcome];
-	if (result.pendingPlaceholders === true) return [{
-		kind: "summary",
-		status: "warn",
-		text: result.summary
-	}, outcome];
+	if (result.pendingPlaceholders === true) return [
+		{
+			kind: "summary",
+			status: "warn",
+			text: result.summary
+		},
+		...originNoticeBlocks(result),
+		outcome
+	];
 	return [
 		{
 			kind: "summary",
 			status: "ok",
 			text: result.summary
 		},
+		...originNoticeBlocks(result),
 		...operationBlocks$1(result),
 		outcome,
 		...previewBlocks$1(result)