[wmadden-electric]

// packages/0-framework/3-tooling/cli/src/converge-in-process.ts (shape)
const outcome = await convergeInProcess({ operation: 'deploy', stack, stage, cwd, env, signal, onEvent });
// → { kind: 'applied', output } | { kind: 'interrupted' } | { kind: 'failed', reasons } | { kind: 'refused', … }

prisma deploy now runs Alchemy inside the prisma process through alchemy/Alchemist (plan, then apply). It no longer writes .prisma-composer/alchemy.run.ts or spawns the Alchemy CLI. destroy and dev are unchanged; dev moves in the next pull request.

Stacked on #404. Draft: do not merge before #404.

What changes for users

• Deploy needs PRISMA_SERVICE_TOKEN in the environment. A prisma login session alone now fails early with DEPLOY.SERVICE_TOKEN_REQUIRED. @prisma/cli-engine gives a command no way to read the signed-in token; it only ever wrote it into a child's environment. CI and the e2e workflow already set the token. The code is marked temporary until the engine offers an in-process credentials need.
• A failed deploy exits 2 with DEPLOY.ENGINE_FAILED, not the Alchemy child's exit status. Ctrl-C prints "The deploy was interrupted. Deploy again to finish." and exits 130 with the engine's CLI.ABORTED; the state-store lease is released, so the next deploy does not wait.
• Each resource shows as a step under "plan and apply", in both human and --json output.

How it works

1. The deploy operation checks the service token before preflight and before any container is created. The token and workspace always come from the same credential.
2. It loads lower and convergeInProcess from the app's @prisma/composer install (new entry @prisma/composer/internal/converge), found from the directory of the app's prisma.config.ts, so the app's extensions and Alchemy share one copy of alchemy. If the entry cannot be loaded: DEPS.CONVERGE_UNRESOLVABLE. The host first reads the app's CONVERGE_CONTRACT number (@prisma/composer/internal/converge-contract) and refuses a different one with DEPS.CONVERGE_CONTRACT_MISMATCH. Package versions may differ, because the prisma CLI releases on its own schedule; the number changes only when the data passed between host and app changes.
3. lower() takes containers and preflight results as values. Only the stack files that destroy and dev still generate read them from the environment, through one helper.
4. convergeInProcess sets the deploy's environment and working directory for the run, sends Alchemy's own output to stderr, and restores everything on every exit path. A second concurrent converge in the same process is refused (DEPLOY.CONVERGE_RUNNING), even across two installs.
5. Alchemy's events become engine events. Secrets are redacted from every message.

ADR-0064 records the decision. It supersedes ADR-0007 for deploy and amends ADR-0038, 0043, 0044, 0049 and 0062.

Alternatives considered

• Keep a child process running a small Composer-owned runner. Rejected: an extra process and IPC with nothing the in-process path lacks.
• Keep generating alchemy.run.ts and load it with Alchemist.importStack. Rejected: writing code only to import it back is a detour.
• Alchemy's SigilRenderer for output. Rejected: it would give deploy a second output format and nothing in --json mode.

Manual test

Against real Prisma Cloud with examples/bucket: deploy (27s), Ctrl-C during a second deploy (exit 130), a third deploy straight after (23s, no lease wait), --json output (every line valid JSON), destroy (still the child path).

Known gaps

• Interactive prisma login deploys, above.
• Two imports use Alchemy's wildcard export (alchemy/Util/LogRecord, alchemy/Interaction). We will ask Alchemy to expose them from alchemy/Alchemist.

Agent: maat-73

🤖 Generated with Claude Code

[prisma-gizmo]

⏸️ Gizmo skipped the automatic review of bfa4539 because this pull request is a draft. It will review automatically once the PR is marked ready for review.

• Check this box to request a one-time review of the current commit.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@prisma/composer@405

npm i https://pkg.pr.new/@prisma/composer-cli@405

npm i https://pkg.pr.new/@prisma/composer-prisma-cloud@405

commit: 686a1f8