fix(prisma-next): hermetic typecheck against stack source, gated in CI (#684)

Author: calvinbrewer

.github/workflows/tests.yml

@@ -127,6 +127,15 @@ jobs:
       - name: Type tests (stack-supabase)
         run: pnpm --filter @cipherstash/stack-supabase run test:types
 
+      # prisma-next's operator-capability gating is proven by `.test-d.ts`
+      # `@ts-expect-error` assertions (an unsupported operator on a column
+      # must be a compile error). Those only fire when tsc processes them,
+      # so the package `typecheck` must run — and be required — here (#684).
+      # Its tsconfig resolves stack subpaths to SOURCE, so no build step is
+      # needed first.
+      - name: Typecheck (prisma-next — enforces v3 operator-capability gating)
+        run: pnpm --filter @cipherstash/prisma-next run typecheck
+
       - name: Lint — no hardcoded package-manager runners
         run: pnpm run lint:runners
 

packages/prisma-next/tsconfig.json

@@ -28,9 +28,22 @@
     // TS6059 errors here.
     "baseUrl": ".",
     "paths": {
-      // test-kit is a source-only package that consumes stack through
-      // the `@/` alias; mirror stack-drizzle's mapping so its sources
-      // typecheck inside this package's program.
+      // Resolve every consumed stack subpath to SOURCE, not `dist`
+      // (mirrors `packages/test-kit/tsconfig.json`). Without these,
+      // `pnpm typecheck` only works after `pnpm build` — and on a
+      // fresh/stale checkout the dist d.ts resolves partially, which
+      // surfaces as implicit-`any` noise far from the real cause
+      // (#684). The matching runtime aliases live in `vitest.shared.ts`.
+      "@cipherstash/stack": ["../stack/src/index.ts"],
+      "@cipherstash/stack/client": ["../stack/src/client.ts"],
+      "@cipherstash/stack/types": ["../stack/src/types-public.ts"],
+      "@cipherstash/stack/eql/v3": ["../stack/src/eql/v3/index.ts"],
+      "@cipherstash/stack/schema": ["../stack/src/schema/index.ts"],
+      "@cipherstash/stack/v3": ["../stack/src/encryption/v3.ts"],
+      "@cipherstash/stack/adapter-kit": ["../stack/src/adapter-kit.ts"],
+      // Resolving stack to source means we also inherit stack's OWN
+      // internal alias (`@/…` inside stack sources) — and test-kit's
+      // sources (pulled in by the integration suite) use it too.
       "@/*": ["../stack/src/*"]
     }
   },