alchemy 2.0.0-beta.65 → 2.0.0-beta.67

package/lib/Prisma/Internal/ArchivePlatform.js

@@ -0,0 +1,214 @@
+import * as Effect from "effect/Effect";
+import { createWriteStream } from "node:fs";
+import { lstat, opendir } from "node:fs/promises";
+import { posix } from "node:path";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createGzip } from "node:zlib";
+import { verifiedFileChunks } from "./ArtifactFile.js";
+export const closeDirectoryHandle = async (handle) => {
+    try {
+        await handle.close();
+    }
+    catch {
+        // Async directory iteration closes the handle when it exits. Ignore both
+        // Node's already-closed rejection and Bun's equivalent synchronous error.
+    }
+};
+const entryLimitError = (maxEntries) => new Error(`Compute artifact exceeds the ${maxEntries} entry safety limit. Narrow the artifact directory or add ignore patterns.`);
+export const readDirectoryEntriesSecure = (options) => Effect.tryPromise({
+    try: async () => {
+        const before = await lstat(options.directory, { bigint: true });
+        if (!before.isDirectory() || before.isSymbolicLink()) {
+            throw new Error(`Compute artifact directory changed before traversal: ${options.relativePrefix || "."}`);
+        }
+        const handle = await opendir(options.directory);
+        const entries = [];
+        let observedEntries = 0;
+        try {
+            for await (const entry of handle) {
+                if (entry.name.includes("\\")) {
+                    throw new Error(`Compute artifact entry contains an unsupported backslash: ${options.relativePrefix || "."}`);
+                }
+                const name = entry.name;
+                if (name.length === 0)
+                    continue;
+                const relativeName = options.relativePrefix
+                    ? `${options.relativePrefix}/${name}`
+                    : name;
+                observedEntries += 1;
+                if (options.entriesAlreadyObserved + observedEntries >
+                    options.maxEntries) {
+                    throw entryLimitError(options.maxEntries);
+                }
+                if (options.ignore.some((pattern) => pattern.test(relativeName))) {
+                    continue;
+                }
+                entries.push({
+                    name,
+                    type: entry.isSymbolicLink()
+                        ? "SymbolicLink"
+                        : entry.isDirectory()
+                            ? "Directory"
+                            : entry.isFile()
+                                ? "File"
+                                : "Other",
+                });
+            }
+        }
+        finally {
+            await closeDirectoryHandle(handle);
+        }
+        const after = await lstat(options.directory, { bigint: true });
+        if (!after.isDirectory() ||
+            after.isSymbolicLink() ||
+            before.dev !== after.dev ||
+            before.ino !== after.ino ||
+            before.mtimeNs !== after.mtimeNs ||
+            before.ctimeNs !== after.ctimeNs) {
+            throw new Error(`Compute artifact directory changed during traversal: ${options.relativePrefix || "."}`);
+        }
+        return {
+            entries: entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0),
+            observedEntries,
+        };
+    },
+    catch: (error) => error instanceof Error ? error : new Error(String(error)),
+});
+export const writeCompressedArchiveSecure = (archivePath, entries, manifest, maxCompressedBytes) => Effect.tryPromise({
+    try: (signal) => {
+        let compressedBytes = 0;
+        const compressedByteLimit = new Transform({
+            transform(chunk, _encoding, callback) {
+                compressedBytes += chunk.byteLength;
+                if (compressedBytes > maxCompressedBytes) {
+                    callback(new Error(`Prisma compute archive exceeds the ${maxCompressedBytes} byte compressed upload safety limit.`));
+                    return;
+                }
+                callback(null, chunk);
+            },
+        });
+        return pipeline(Readable.from(tarChunks(entries, manifest), { objectMode: false }), createGzip(), compressedByteLimit, createWriteStream(archivePath, { flags: "w", mode: 0o600 }), { signal });
+    },
+    catch: (error) => error instanceof Error ? error : new Error(String(error)),
+});
+export const isArchivedRegularFile = (entries, entrypointName) => {
+    const byName = new Map(entries.map((entry) => [entry.name, entry]));
+    const visited = new Set();
+    let currentName = entrypointName;
+    while (!visited.has(currentName)) {
+        visited.add(currentName);
+        const entry = byName.get(currentName);
+        if (entry?.type === "file")
+            return true;
+        if (entry?.type !== "symlink")
+            return false;
+        const target = posix.normalize(posix.join(posix.dirname(currentName), entry.linkname));
+        if (target === ".." || target.startsWith("../") || target.startsWith("/")) {
+            return false;
+        }
+        currentName = target;
+    }
+    return false;
+};
+async function* tarChunks(entries, manifest) {
+    for (const entry of entries) {
+        if (entry.type === "symlink") {
+            yield createHeader({
+                name: entry.name,
+                mode: entry.mode,
+                size: 0,
+                type: "symlink",
+                linkname: entry.linkname,
+            });
+            continue;
+        }
+        yield createHeader({
+            name: entry.name,
+            mode: entry.mode,
+            size: entry.file.size,
+            type: "file",
+        });
+        let emitted = 0;
+        for await (const chunk of verifiedFileChunks(entry.file)) {
+            emitted += chunk.byteLength;
+            yield chunk;
+        }
+        if (emitted !== entry.file.size) {
+            throw new Error(`Compute artifact file '${entry.name}' changed while the archive was being created.`);
+        }
+        const padding = paddingLength(entry.file.size);
+        if (padding > 0)
+            yield new Uint8Array(padding);
+    }
+    yield createHeader({
+        name: "compute.manifest.json",
+        mode: 0o644,
+        size: manifest.byteLength,
+        type: "file",
+    });
+    yield manifest;
+    const manifestPadding = paddingLength(manifest.byteLength);
+    if (manifestPadding > 0)
+        yield new Uint8Array(manifestPadding);
+    yield new Uint8Array(1024);
+}
+const createHeader = (entry) => {
+    const header = new Uint8Array(512);
+    const { name, prefix } = splitTarName(entry.name);
+    if (entry.linkname && byteLength(entry.linkname) > 100) {
+        throw new Error(`Archive symlink target is too long for tar header: ${entry.linkname}`);
+    }
+    writeString(header, 0, 100, name);
+    writeOctal(header, 100, 8, entry.mode);
+    writeOctal(header, 108, 8, 0);
+    writeOctal(header, 116, 8, 0);
+    writeOctal(header, 124, 12, entry.size);
+    writeOctal(header, 136, 12, 0);
+    header.fill(0x20, 148, 156);
+    writeString(header, 156, 1, entry.type === "symlink" ? "2" : "0");
+    if (entry.linkname)
+        writeString(header, 157, 100, entry.linkname);
+    writeString(header, 257, 6, "ustar");
+    writeString(header, 263, 2, "00");
+    writeString(header, 265, 32, "alchemy");
+    writeString(header, 297, 32, "alchemy");
+    if (prefix)
+        writeString(header, 345, 155, prefix);
+    const checksum = header.reduce((sum, value) => sum + value, 0);
+    writeChecksum(header, checksum);
+    return header;
+};
+const splitTarName = (name) => {
+    if (byteLength(name) <= 100)
+        return { name };
+    const slashIndexes = Array.from(name.matchAll(/\//g), (match) => match.index);
+    for (const index of slashIndexes.reverse()) {
+        if (index === undefined)
+            continue;
+        const prefix = name.slice(0, index);
+        const suffix = name.slice(index + 1);
+        if (byteLength(prefix) <= 155 && byteLength(suffix) <= 100) {
+            return { name: suffix, prefix };
+        }
+    }
+    throw new Error(`Archive path is too long for tar header: ${name}`);
+};
+const byteLength = (value) => new TextEncoder().encode(value).length;
+const writeString = (buffer, offset, length, value) => {
+    const bytes = new TextEncoder().encode(value);
+    buffer.set(bytes.slice(0, length), offset);
+};
+const writeOctal = (buffer, offset, length, value) => {
+    const text = value
+        .toString(8)
+        .padStart(length - 1, "0")
+        .slice(0, length - 1);
+    writeString(buffer, offset, length, `${text}\0`);
+};
+const writeChecksum = (buffer, checksum) => {
+    const text = checksum.toString(8).padStart(6, "0").slice(0, 6);
+    writeString(buffer, 148, 8, `${text}\0 `);
+};
+const paddingLength = (size) => (512 - (size % 512)) % 512;
+//# sourceMappingURL=ArchivePlatform.js.map

package/lib/Prisma/Internal/ArchivePlatform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArchivePlatform.js","sourceRoot":"","sources":["../../../src/Prisma/Internal/ArchivePlatform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,mBAAmB,CAAC;AAiC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,MAAgC,EAChC,EAAE;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,0EAA0E;IAC5E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAE,EAAE,CAC7C,IAAI,KAAK,CACP,gCAAgC,UAAU,4EAA4E,CACvH,CAAC;AAEJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAM1C,EAAE,EAAE,CACH,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,wDAAwD,OAAO,CAAC,cAAc,IAAI,GAAG,EAAE,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,6DAA6D,OAAO,CAAC,cAAc,IAAI,GAAG,EAAE,CAC7F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAChC,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc;oBACzC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,EAAE;oBACrC,CAAC,CAAC,IAAI,CAAC;gBACT,eAAe,IAAI,CAAC,CAAC;gBACrB,IACE,OAAO,CAAC,sBAAsB,GAAG,eAAe;oBAChD,OAAO,CAAC,UAAU,EAClB,CAAC;oBACD,MAAM,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;oBACjE,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE;wBAC1B,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;4BACnB,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE;gCACd,CAAC,CAAC,MAAM;gCACR,CAAC,CAAC,OAAO;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IACE,CAAC,KAAK,CAAC,WAAW,EAAE;YACpB,KAAK,CAAC,cAAc,EAAE;YACtB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wDAAwD,OAAO,CAAC,cAAc,IAAI,GAAG,EAAE,CACxF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/C;YACD,eAAe;SAChB,CAAC;IACJ,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;CAC5D,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,WAAmB,EACnB,OAAmC,EACnC,QAAoB,EACpB,kBAA0B,EAC1B,EAAE,CACF,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;QACd,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,MAAM,mBAAmB,GAAG,IAAI,SAAS,CAAC;YACxC,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;gBAC1C,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC;gBACpC,IAAI,eAAe,GAAG,kBAAkB,EAAE,CAAC;oBACzC,QAAQ,CACN,IAAI,KAAK,CACP,sCAAsC,kBAAkB,uCAAuC,CAChG,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CACb,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAClE,UAAU,EAAE,EACZ,mBAAmB,EACnB,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAC3D,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;CAC5D,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,OAAmC,EACnC,cAAsB,EACtB,EAAE;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,WAAW,GAAG,cAAc,CAAC;IACjC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CACvD,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,WAAW,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,KAAK,SAAS,CAAC,CAAC,SAAS,CACvB,OAAmC,EACnC,QAAoB;IAEpB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,YAAY,CAAC;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,CAAC,IAAI,gDAAgD,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,CAAC;QACjB,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,QAAQ,CAAC,UAAU;QACzB,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC;IACf,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,eAAe,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;IAC/D,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAMrB,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,CAAC,QAAQ,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,QAAQ;QAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/D,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAqC,EAAE;IACvE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AAE7E,MAAM,WAAW,GAAG,CAClB,MAAkB,EAClB,MAAc,EACd,MAAc,EACd,KAAa,EACb,EAAE;IACF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,MAAkB,EAClB,MAAc,EACd,MAAc,EACd,KAAa,EACb,EAAE;IACF,MAAM,IAAI,GAAG,KAAK;SACf,QAAQ,CAAC,CAAC,CAAC;SACX,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC;SACzB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,MAAkB,EAAE,QAAgB,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC"}

package/lib/Prisma/Internal/ArtifactFile.d.ts

@@ -0,0 +1,58 @@
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+export interface VerifiedFile {
+    readonly _tag: "VerifiedFile" | "ArtifactFile";
+    readonly path: string;
+    readonly size: number;
+    readonly mode: number;
+    readonly identity: {
+        readonly dev: string;
+        readonly ino: string;
+        readonly size: string;
+        readonly mtimeNs: string;
+        readonly ctimeNs: string;
+    };
+}
+export interface ArtifactFile extends VerifiedFile {
+    readonly _tag: "ArtifactFile";
+    readonly sha256: string;
+    readonly cleanup: Effect.Effect<void>;
+}
+export declare const inspectVerifiedFile: (inputPath: string, maxBytes: number, options?: {
+    readonly allowEmpty?: boolean;
+    readonly description?: string;
+}) => Effect.Effect<{
+    _tag: "VerifiedFile";
+    path: string;
+    size: number;
+    mode: number;
+    identity: {
+        readonly dev: string;
+        readonly ino: string;
+        readonly size: string;
+        readonly mtimeNs: string;
+        readonly ctimeNs: string;
+    };
+}, Error, never>;
+export declare const inspectArtifactFile: (inputPath: string, maxBytes: number, options?: {
+    readonly cleanup?: Effect.Effect<void>;
+    readonly description?: string;
+}) => Effect.Effect<{
+    path: string;
+    size: number;
+    mode: number;
+    identity: {
+        readonly dev: string;
+        readonly ino: string;
+        readonly size: string;
+        readonly mtimeNs: string;
+        readonly ctimeNs: string;
+    };
+    _tag: "ArtifactFile";
+    sha256: string;
+    cleanup: Effect.Effect<void, never, never>;
+}, Error, never>;
+export declare const artifactFileStream: (artifact: ArtifactFile) => Stream.Stream<Uint8Array<ArrayBufferLike>, Error, never>;
+export declare const verifiedFileChunks: (file: VerifiedFile) => AsyncGenerator<Uint8Array<ArrayBufferLike>, any, any>;
+export declare const readArtifactFile: (artifact: ArtifactFile) => Effect.Effect<Uint8Array<ArrayBuffer>, Error, never>;
+//# sourceMappingURL=ArtifactFile.d.ts.map

package/lib/Prisma/Internal/ArtifactFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactFile.d.ts","sourceRoot":"","sources":["../../../src/Prisma/Internal/ArtifactFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAOxC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACvC;AAyID,eAAO,MAAM,mBAAmB,cACnB,MAAM,YACP,MAAM,YACN;IACR,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;UAdO,cAAc;;;;;sBA7IN,MAAM;sBACN,MAAM;uBACL,MAAM;0BACH,MAAM;0BACN,MAAM;;gBA+JxB,CAAC;AAEL,eAAO,MAAM,mBAAmB,cACnB,MAAM,YACP,MAAM,YACN;IACR,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;;;;;sBA3Ke,MAAM;sBACN,MAAM;uBACL,MAAM;0BACH,MAAM;0BACN,MAAM;;UAwLd,cAAc;;;gBASxB,CAAC;AAEL,eAAO,MAAM,kBAAkB,aAAc,YAAY,6DAKtD,CAAC;AAEJ,eAAO,MAAM,kBAAkB,SAAU,YAAY,0DAC3B,CAAC;AAE3B,eAAO,MAAM,gBAAgB,aAAc,YAAY,yDAkBnD,CAAC"}

package/lib/Prisma/Internal/ArtifactFile.js

@@ -0,0 +1,134 @@
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, open, realpath } from "node:fs/promises";
+const READ_CHUNK_BYTES = 64 * 1024;
+const toError = (message, cause) => new Error(message, { cause });
+const isSameIdentity = (stat, identity) => stat.isFile() &&
+    stat.dev.toString() === identity.dev &&
+    stat.ino.toString() === identity.ino &&
+    stat.size.toString() === identity.size &&
+    stat.mtimeNs.toString() === identity.mtimeNs &&
+    stat.ctimeNs.toString() === identity.ctimeNs;
+const identityFrom = (stat) => ({
+    dev: stat.dev.toString(),
+    ino: stat.ino.toString(),
+    size: stat.size.toString(),
+    mtimeNs: stat.mtimeNs.toString(),
+    ctimeNs: stat.ctimeNs.toString(),
+});
+const validateLimit = (maxBytes) => {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) {
+        throw new Error("Artifact maxBytes must be a positive safe integer.");
+    }
+};
+const validateStat = (stat, maxBytes, description, allowEmpty) => {
+    if (!stat.isFile()) {
+        throw new Error(`${description} must be a regular file.`);
+    }
+    if (!allowEmpty && stat.size <= 0n) {
+        throw new Error(`${description} must be non-empty.`);
+    }
+    if (stat.size > BigInt(maxBytes) ||
+        stat.size > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new Error(`${description} exceeds the ${maxBytes} byte upload safety limit.`);
+    }
+};
+async function* readVerifiedChunks(artifact) {
+    const handle = await open(artifact.path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const before = await handle.stat({ bigint: true });
+        if (!isSameIdentity(before, artifact.identity)) {
+            throw new Error("Prisma deployment artifact changed after it was validated; rebuild or reselect the artifact before deploying.");
+        }
+        let remaining = artifact.size;
+        while (remaining > 0) {
+            const buffer = Buffer.allocUnsafe(Math.min(READ_CHUNK_BYTES, remaining));
+            const { bytesRead } = await handle.read(buffer, 0, buffer.byteLength, null);
+            if (bytesRead === 0) {
+                throw new Error("Prisma deployment artifact was truncated while it was being read.");
+            }
+            remaining -= bytesRead;
+            yield new Uint8Array(buffer.buffer, buffer.byteOffset, bytesRead);
+        }
+        const trailing = Buffer.allocUnsafe(1);
+        const { bytesRead: trailingBytes } = await handle.read(trailing, 0, trailing.byteLength, null);
+        const after = await handle.stat({ bigint: true });
+        if (trailingBytes !== 0 || !isSameIdentity(after, artifact.identity)) {
+            throw new Error("Prisma deployment artifact changed while it was being read; rebuild or reselect the artifact before deploying.");
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+const inspectVerifiedFilePromise = async (inputPath, maxBytes, options) => {
+    validateLimit(maxBytes);
+    const description = options?.description ?? "File";
+    const inputStat = await lstat(inputPath, { bigint: true });
+    if (inputStat.isSymbolicLink()) {
+        throw new Error(`${description} must not be a symbolic link; provide the regular file directly.`);
+    }
+    validateStat(inputStat, maxBytes, description, options?.allowEmpty ?? false);
+    const canonicalPath = await realpath(inputPath);
+    const stat = await lstat(canonicalPath, { bigint: true });
+    validateStat(stat, maxBytes, description, options?.allowEmpty ?? false);
+    if (!isSameIdentity(stat, identityFrom(inputStat))) {
+        throw new Error(`${description} changed while it was being validated; retry with a stable file.`);
+    }
+    return {
+        _tag: "VerifiedFile",
+        path: canonicalPath,
+        size: Number(stat.size),
+        mode: Number(stat.mode),
+        identity: identityFrom(stat),
+    };
+};
+export const inspectVerifiedFile = (inputPath, maxBytes, options) => Effect.tryPromise({
+    try: () => inspectVerifiedFilePromise(inputPath, maxBytes, options),
+    catch: (cause) => cause instanceof Error
+        ? cause
+        : toError("Failed to validate file.", cause),
+});
+export const inspectArtifactFile = (inputPath, maxBytes, options) => Effect.tryPromise({
+    try: async (signal) => {
+        const description = options?.description ?? "Prisma deployment artifact";
+        const verified = await inspectVerifiedFilePromise(inputPath, maxBytes, {
+            description,
+        });
+        const hash = createHash("sha256");
+        for await (const chunk of readVerifiedChunks(verified)) {
+            if (signal.aborted) {
+                throw new Error("Prisma deployment artifact validation was aborted.");
+            }
+            hash.update(chunk);
+        }
+        return {
+            ...verified,
+            _tag: "ArtifactFile",
+            sha256: hash.digest("hex"),
+            cleanup: options?.cleanup ?? Effect.void,
+        };
+    },
+    catch: (cause) => cause instanceof Error
+        ? cause
+        : toError("Failed to validate Prisma deployment artifact.", cause),
+});
+export const artifactFileStream = (artifact) => Stream.fromAsyncIterable(readVerifiedChunks(artifact), (cause) => cause instanceof Error
+    ? cause
+    : toError("Failed to stream Prisma deployment artifact.", cause));
+export const verifiedFileChunks = (file) => readVerifiedChunks(file);
+export const readArtifactFile = (artifact) => Effect.gen(function* () {
+    const bytes = new Uint8Array(artifact.size);
+    let offset = 0;
+    yield* Stream.runForEach(artifactFileStream(artifact), (chunk) => Effect.sync(() => {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }));
+    if (offset !== artifact.size) {
+        return yield* Effect.fail(new Error("Prisma deployment artifact length changed while it was being read."));
+    }
+    return bytes;
+});
+//# sourceMappingURL=ArtifactFile.js.map

package/lib/Prisma/Internal/ArtifactFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactFile.js","sourceRoot":"","sources":["../../../src/Prisma/Internal/ArtifactFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAoB,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAsBnC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,EAAE,CAClD,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhC,MAAM,cAAc,GAAG,CACrB,IAAiB,EACjB,QAAkC,EAClC,EAAE,CACF,IAAI,CAAC,MAAM,EAAE;IACb,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,GAAG;IACpC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,GAAG;IACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,IAAI;IACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,OAAO;IAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC;AAE/C,MAAM,YAAY,GAAG,CAAC,IAAiB,EAA4B,EAAE,CAAC,CAAC;IACrE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;IACxB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,EAAE;IACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAAiB,EACjB,QAAgB,EAChB,WAAmB,EACnB,UAAmB,EACnB,EAAE;IACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,0BAA0B,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,qBAAqB,CAAC,CAAC;IACvD,CAAC;IACD,IACE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,WAAW,gBAAgB,QAAQ,4BAA4B,CACnE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,KAAK,SAAS,CAAC,CAAC,kBAAkB,CAChC,QAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,QAAQ,CAAC,IAAI,EACb,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAC1C,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;YACzE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CACrC,MAAM,EACN,CAAC,EACD,MAAM,CAAC,UAAU,EACjB,IAAI,CACL,CAAC;YACF,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,SAAS,IAAI,SAAS,CAAC;YACvB,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CACpD,QAAQ,EACR,CAAC,EACD,QAAQ,CAAC,UAAU,EACnB,IAAI,CACL,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,0BAA0B,GAAG,KAAK,EACtC,SAAiB,EACjB,QAAgB,EAChB,OAGC,EACD,EAAE;IACF,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,GAAG,WAAW,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,GAAG,WAAW,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,cAAuB;QAC7B,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;KACN,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAAiB,EACjB,QAAgB,EAChB,OAGC,EACD,EAAE,CACF,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;IACnE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,KAAK,CAAC;CACjD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAAiB,EACjB,QAAgB,EAChB,OAGC,EACD,EAAE,CACF,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpB,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,4BAA4B,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,QAAQ,EAAE;YACrE,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO;YACL,GAAG,QAAQ;YACX,IAAI,EAAE,cAAuB;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI;SAClB,CAAC;IAC3B,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,CAAC,gDAAgD,EAAE,KAAK,CAAC;CACvE,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAsB,EAAE,EAAE,CAC3D,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/D,KAAK,YAAY,KAAK;IACpB,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,OAAO,CAAC,8CAA8C,EAAE,KAAK,CAAC,CACnE,CAAC;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAkB,EAAE,EAAE,CACvD,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAE3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAsB,EAAE,EAAE,CACzD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;IACF,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,oEAAoE,CACrE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/lib/Prisma/Internal/ArtifactUpload.d.ts

@@ -0,0 +1,5 @@
+import * as Effect from "effect/Effect";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import { type ArtifactFile } from "./ArtifactFile.ts";
+export declare const executeArtifactUpload: (uploadUrl: string, artifact: Uint8Array | ArtifactFile, contentType: string) => Effect.Effect<undefined, Error, HttpClient.HttpClient>;
+//# sourceMappingURL=ArtifactUpload.d.ts.map

package/lib/Prisma/Internal/ArtifactUpload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactUpload.d.ts","sourceRoot":"","sources":["../../../src/Prisma/Internal/ArtifactUpload.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAG9D,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAM1E,eAAO,MAAM,qBAAqB,cACrB,MAAM,YACP,UAAU,GAAG,YAAY,eACtB,MAAM,2DAoDjB,CAAC"}

package/lib/Prisma/Internal/ArtifactUpload.js

@@ -0,0 +1,51 @@
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Stream from "effect/Stream";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import { artifactFileStream } from "./ArtifactFile.js";
+import { PrismaUploadClient } from "./HttpClient.js";
+const ARTIFACT_UPLOAD_TIMEOUT = Duration.minutes(5);
+const UPLOAD_ERROR_BODY_BYTES = 64 * 1024;
+export const executeArtifactUpload = (uploadUrl, artifact, contentType) => Effect.gen(function* () {
+    // Prefer the Prisma-scoped upload client (node transport, provided by
+    // live wiring — presigned upload URLs need explicit Content-Length on
+    // file-backed bodies); fall back to the ambient client so tests can
+    // stub uploads through `HttpClient.HttpClient`.
+    const uploadClient = yield* Effect.serviceOption(PrismaUploadClient);
+    const http = Option.isSome(uploadClient)
+        ? uploadClient.value
+        : yield* HttpClient.HttpClient;
+    const request = HttpClientRequest.put(uploadUrl).pipe(artifact instanceof Uint8Array
+        ? HttpClientRequest.bodyUint8Array(artifact, contentType)
+        : HttpClientRequest.bodyStream(artifactFileStream(artifact), {
+            contentType,
+            contentLength: artifact.size,
+        }));
+    const responseOption = yield* http.execute(request).pipe(Effect.mapError(() => new Error("Prisma artifact upload transport failed before a response was received.")), Effect.timeoutOption(ARTIFACT_UPLOAD_TIMEOUT));
+    if (Option.isNone(responseOption)) {
+        return yield* Effect.fail(new Error("Prisma artifact upload timed out after 5 minutes."));
+    }
+    const response = responseOption.value;
+    if (response.status < 200 || response.status >= 300) {
+        const bodyBytesOption = yield* readResponsePrefixByteCount(response, UPLOAD_ERROR_BODY_BYTES).pipe(Effect.timeoutOption(Duration.seconds(2)), Effect.catch(() => Effect.succeed(Option.none())));
+        const diagnostic = Option.match(bodyBytesOption, {
+            onNone: () => "diagnostic body unavailable",
+            onSome: (bytes) => `diagnostic body prefix: ${bytes} bytes`,
+        });
+        return yield* Effect.fail(new Error(`Prisma artifact upload failed (HTTP ${response.status}; ${diagnostic}).`));
+    }
+});
+const readResponsePrefixByteCount = (response, limit) => Effect.gen(function* () {
+    let bytes = 0;
+    yield* Stream.runForEachWhile(response.stream, (chunk) => Effect.sync(() => {
+        const remaining = limit - bytes;
+        if (remaining <= 0)
+            return false;
+        bytes += Math.min(chunk.byteLength, remaining);
+        return bytes < limit;
+    }));
+    return bytes;
+});
+//# sourceMappingURL=ArtifactUpload.js.map

package/lib/Prisma/Internal/ArtifactUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactUpload.js","sourceRoot":"","sources":["../../../src/Prisma/Internal/ArtifactUpload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAqB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,SAAiB,EACjB,QAAmC,EACnC,WAAmB,EACnB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACtC,CAAC,CAAC,YAAY,CAAC,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CACnD,QAAQ,YAAY,UAAU;QAC5B,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC;QACzD,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACzD,WAAW;YACX,aAAa,EAAE,QAAQ,CAAC,IAAI;SAC7B,CAAC,CACP,CAAC;IACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,KAAK,CACP,yEAAyE,CAC1E,CACJ,EACD,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAC9C,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,2BAA2B,CACxD,QAAQ,EACR,uBAAuB,CACxB,CAAC,IAAI,CACJ,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACzC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAU,CAAC,CAAC,CAC1D,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;YAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,6BAA6B;YAC3C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,KAAK,QAAQ;SAC5D,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,uCAAuC,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,CAC1E,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,2BAA2B,GAAG,CAClC,QAA+C,EAC/C,KAAa,EACb,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC;QAChC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CACH,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/lib/Prisma/Internal/BundlePaths.d.ts

@@ -0,0 +1,4 @@
+import * as Effect from "effect/Effect";
+/** Validate an untrusted bundler output path before writing it to disk. */
+export declare const normalizeBundleFilePath: (input: string) => Effect.Effect<string, Error, never>;
+//# sourceMappingURL=BundlePaths.d.ts.map

package/lib/Prisma/Internal/BundlePaths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BundlePaths.d.ts","sourceRoot":"","sources":["../../../src/Prisma/Internal/BundlePaths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,UAAW,MAAM,wCAwBjD,CAAC"}

package/lib/Prisma/Internal/BundlePaths.js

@@ -0,0 +1,16 @@
+import * as Effect from "effect/Effect";
+/** Validate an untrusted bundler output path before writing it to disk. */
+export const normalizeBundleFilePath = (input) => Effect.gen(function* () {
+    const normalized = input.replaceAll("\\", "/");
+    if (normalized.length === 0 ||
+        normalized.startsWith("/") ||
+        /^[a-zA-Z]:\//.test(normalized)) {
+        return yield* Effect.fail(new Error(`Invalid Compute bundle output path: ${input}`));
+    }
+    const segments = normalized.split("/");
+    if (segments.some((segment) => segment.length === 0 || segment === "." || segment === "..")) {
+        return yield* Effect.fail(new Error(`Invalid Compute bundle output path: ${input}`));
+    }
+    return segments.join("/");
+});
+//# sourceMappingURL=BundlePaths.js.map

package/lib/Prisma/Internal/BundlePaths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BundlePaths.js","sourceRoot":"","sources":["../../../src/Prisma/Internal/BundlePaths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAC/B,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAC9D,EACD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC"}

package/lib/Prisma/Internal/CleanupFailure.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Preserve both the reconcile failure and a subsequent cleanup failure.
+ *
+ * Cleanup failures are operationally important: suppressing one can leave an
+ * untracked cloud resource behind with no indication of how to remove it.
+ */
+export declare const aggregateCleanupFailure: (resource: "App" | "deployment", resourceId: string, route: string, originalError: unknown, cleanupError: unknown) => AggregateError;
+//# sourceMappingURL=CleanupFailure.d.ts.map

package/lib/Prisma/Internal/CleanupFailure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CleanupFailure.d.ts","sourceRoot":"","sources":["../../../src/Prisma/Internal/CleanupFailure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aACxB,KAAK,GAAG,YAAY,cAClB,MAAM,SACX,MAAM,iBACE,OAAO,gBACR,OAAO,mBAKpB,CAAC"}

package/lib/Prisma/Internal/CleanupFailure.js

@@ -0,0 +1,8 @@
+/**
+ * Preserve both the reconcile failure and a subsequent cleanup failure.
+ *
+ * Cleanup failures are operationally important: suppressing one can leave an
+ * untracked cloud resource behind with no indication of how to remove it.
+ */
+export const aggregateCleanupFailure = (resource, resourceId, route, originalError, cleanupError) => new AggregateError([originalError, cleanupError], `Failed to clean up Prisma ${resource} '${resourceId}' after reconcile failed. The resource may be orphaned. Manual cleanup: DELETE ${route}.`);
+//# sourceMappingURL=CleanupFailure.js.map

package/lib/Prisma/Internal/CleanupFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CleanupFailure.js","sourceRoot":"","sources":["../../../src/Prisma/Internal/CleanupFailure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,QAA8B,EAC9B,UAAkB,EAClB,KAAa,EACb,aAAsB,EACtB,YAAqB,EACrB,EAAE,CACF,IAAI,cAAc,CAChB,CAAC,aAAa,EAAE,YAAY,CAAC,EAC7B,6BAA6B,QAAQ,KAAK,UAAU,kFAAkF,KAAK,GAAG,CAC/I,CAAC"}

package/lib/Prisma/Internal/DatabaseSecrets.d.ts

@@ -0,0 +1,35 @@
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { type PrismaManagementClient } from "../Client.ts";
+import { type PostgresOrigin } from "../PostgresOrigin.ts";
+import type { Database, PrismaSecretConnection } from "../Types.ts";
+export declare const hasCanonicalConnectionSecrets: (secrets: PrismaSecretConnection) => boolean;
+/**
+ * Derive the conventional `databaseUrl` and parsed `origin` / `pooledOrigin`
+ * attributes from a connection's secret strings. Shared between the live
+ * Connection provider and the dev provider so local `@prisma/dev`
+ * connections materialize the same shape.
+ */
+export declare const deriveConnectionAttrs: (secrets: {
+    directConnectionString?: Redacted.Redacted<string> | undefined;
+    pooledConnectionString?: Redacted.Redacted<string> | undefined;
+    accelerateConnectionString?: Redacted.Redacted<string> | undefined;
+}) => {
+    databaseUrl: Redacted.Redacted<string> | undefined;
+    origin: PostgresOrigin | undefined;
+    pooledOrigin: PostgresOrigin | undefined;
+};
+export declare const mergeConnectionSecrets: (preferred: PrismaSecretConnection, fallback: PrismaSecretConnection) => PrismaSecretConnection;
+declare class DatabaseCredentialsNotReady extends Error {
+}
+/**
+ * Recover one-time database credentials after create success but before state
+ * persistence. Prisma's ordinary database reads omit those values, so rotate
+ * the observed default connection once when no canonical URL is available.
+ */
+export declare const recoverDatabaseConnectionSecrets: (client: PrismaManagementClient, initialDatabase: Database, known: PrismaSecretConnection) => Effect.Effect<{
+    database: Database;
+    secrets: PrismaSecretConnection;
+}, DatabaseCredentialsNotReady | import("../Client.ts").PrismaApiDecodeError | import("../Client.ts").PrismaApiError, never>;
+export {};
+//# sourceMappingURL=DatabaseSecrets.d.ts.map

package/lib/Prisma/Internal/DatabaseSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseSecrets.d.ts","sourceRoot":"","sources":["../../../src/Prisma/Internal/DatabaseSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAEpE,eAAO,MAAM,6BAA6B,YAC/B,sBAAsB,YAIiB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YAAa;IAC7C,sBAAsB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/D,sBAAsB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/D,0BAA0B,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACpE,KAAG;IACF,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACnD,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,cAAc,GAAG,SAAS,CAAC;CAYzC,CAAC;AAEH,eAAO,MAAM,sBAAsB,cACtB,sBAAsB,YACvB,sBAAsB,KAC/B,sBAUD,CAAC;AAEH,cAAM,2BAA4B,SAAQ,KAAK;CAAG;AAwClD;;;;GAIG;AACH,eAAO,MAAM,gCAAgC;;;4HAqE3C,CAAC"}