
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
@prisma-next/framework-components
Advanced tools
Framework component types, assembly logic, and stack creation for Prisma Next
Internal package. This package is an implementation detail of
prisma-nextand is published only to support its runtime. Its API is unstable and may change without notice. Do not depend on this package directly; installprisma-nextinstead.
Framework component types, authoring logic, control stack assembly, and emission SPI for Prisma Next.
./components): Base descriptor and instance interfaces for framework components (family, target, adapter, driver, extension), pack refs, and type renderer system./authoring): Declarative authoring contribution types, template resolution, and validation for type constructors and field presets./codec): The cross-family Codec base type that SQL Codec and Mongo MongoCodec extend./control): Assembly functions that combine component descriptors into a unified ControlStack with derived state (codec imports, renderers, authoring contributions)./emission): Types for the emission pipeline — TargetFamilyHook, ValidationContext, GenerateContractTypesOptions, TypeRenderEntry, TypeRenderer, ParameterizedCodecDescriptor, and related types./execution): Execution-plane stack and instance interfaces./runtime): Abstract RuntimeCore<TPlan, TExec, TMiddleware> base class, RuntimeMiddleware interface, and the canonical runWithMiddleware orchestrator helper. Family runtimes (@prisma-next/sql-runtime, @prisma-next/mongo-runtime) extend RuntimeCore directly per ADR 204.import { ComponentMetadata, FamilyDescriptor, normalizeRenderer } from '@prisma-next/framework-components/components';
import { AuthoringContributions, instantiateAuthoringTypeConstructor } from '@prisma-next/framework-components/authoring';
import type { Codec } from '@prisma-next/framework-components/codec';
import { createControlStack, ControlStack } from '@prisma-next/framework-components/control';
import type { EmissionSpi } from '@prisma-next/framework-components/emission';
import { RuntimeCore, runWithMiddleware, type RuntimeMiddleware } from '@prisma-next/framework-components/runtime';
Codec interfaceThe base Codec interface lands on the seam between query-time methods (per-row, IO-relevant) and build-time methods (per-contract-load):
encode(value): Promise<TWire> and decode(wire): Promise<TInput> are required and Promise-returning at the public boundary. Codec authors extend CodecImpl (per ADR 208 — Higher-order codecs for parameterized types); a logically synchronous body still has to return a Promise-compatible value (mark the method async, or return Promise.resolve(...) explicitly). The runtime always awaits the result.encodeJson, decodeJson, and the optional renderOutputType are synchronous so family.deserializeContract and client construction stay synchronous.There is no runtime / kind / equivalent async marker on the interface and no TRuntime generic. The runtime always awaits the query-time methods. See ADR 204 — Single-Path Async Codec Runtime for the full design.
ctx)Codecs receive a second ctx options argument; you may ignore it. The runtime allocates one CodecCallContext per execute() call and threads the same reference to every codec dispatch site as a non-optional argument — when no signal is supplied the runtime still threads an empty {}, never undefined. The framework CodecCallContext is signal-only:
export interface CodecCallContext {
readonly signal?: AbortSignal;
}
The internal Codec interface declares the parameter as required:
encode(value: TInput, ctx: CodecCallContext): Promise<TWire>;
decode(wire: TWire, ctx: CodecCallContext): Promise<TInput>;
Codec authors who write (value) => … continue to compile via TypeScript's bivariance for trailing parameters; nothing at the author surface changes.
Family layers extend the context where they have a per-call concept that doesn't generalise. SQL declares SqlCodecCallContext extends CodecCallContext { column?: SqlColumnRef } (see @prisma-next/sql-relational-core); Mongo continues to use the framework type directly. Codec authors that take a (value, ctx) author signature can forward ctx.signal to network SDKs:
// Sketch — codec authors extend `CodecImpl`; class methods receive `(value, ctx)`.
async encode(v: string, ctx: CodecCallContext): Promise<EncryptedWire> {
return kms.encrypt({ plaintext: v }, { signal: ctx.signal });
}
Aborts surface to the caller as RUNTIME.ABORTED with details.phase ∈ { 'encode', 'decode', 'stream' }. Codec bodies that ignore the signal complete in the background (cooperative cancellation). The runtimeAborted(phase, cause?) envelope helper and the raceAgainstAbort(work, signal, phase) race helper are exported from @prisma-next/framework-components/runtime.
See ADR 207 — Codec call context: per-query AbortSignal and column metadata for the full design.
CodecDescriptor, CodecInstanceContext)Codec metadata, parameterized-codec registration, and runtime materialization live on a unified CodecDescriptor<P> — the only registration shape framework consumers see:
import type { CodecDescriptor, CodecInstanceContext } from '@prisma-next/framework-components/codec';
import { voidParamsSchema } from '@prisma-next/framework-components/codec';
CodecDescriptor<P = void> carries codecId, traits, targetTypes, meta, paramsSchema: StandardSchemaV1<P>, optional renderOutputType, and a curried factory: (P) => (CodecInstanceContext) => Codec. Non-parameterized codecs use P = void (with the framework-supplied voidParamsSchema) and a constant factory; parameterized codecs use a non-empty P (e.g. { length: number } for pgvector).CodecInstanceContext (family-agnostic, { name } only) is supplied by the runtime when materializing a per-instance codec. Pack authors close over it inside the factory; they never construct it. This is the per-materialization context, sibling to the per-call CodecCallContext documented above. Family-specific extensions augment it — the SQL family ships SqlCodecInstanceContext extends CodecInstanceContext in @prisma-next/sql-relational-core/ast, adding usedAt: ReadonlyArray<{ table; column }> for SQL-domain codecs that need column-set metadata.ComponentMetadata.types.codecTypes.codecDescriptors and the unified codecs: () => ReadonlyArray<CodecDescriptor> slot. extractCodecLookup reads targetTypes / meta / renderOutputType directly off the descriptors — there is no parameterized vs. non-parameterized split and no synthesis bridge.paramsSchema is typed as Standard Schema (StandardSchemaV1<P>), not arktype-specific. arktype Types satisfy the shape via their ~standard getter, so existing arktype-typed descriptors satisfy the new shape transparently while framework-components itself takes no dependency on arktype.
See ADR 208 — Higher-order codecs for parameterized types for the full design.
This package sits in the core layer — below the tooling layer where family-specific emitters and control implementations live. SPI interfaces like EmissionSpi define the contract between framework orchestration code (control-plane emission, CLI) and family-specific implementations (SQL emitter, Mongo emitter).
By placing these interfaces in the core layer rather than alongside their implementations:
@prisma-next/contract) remains a true leaf in the foundation layer with zero framework-domain dependencies.This is the dependency inversion principle applied to package layering. The same pattern applies to component descriptors, control-plane types, and execution-plane types in this package.
See ADR 185 — SPI types live at the lowest consuming layer.
This package is the canonical source for framework component types, assembly logic, and emission SPI types. New code should import directly from @prisma-next/framework-components.
FAQs
Framework component types, assembly logic, and stack creation for Prisma Next
The npm package @prisma-next/framework-components receives a total of 24,023 weekly downloads. As such, @prisma-next/framework-components popularity was classified as popular.
We found that @prisma-next/framework-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.