@augmenting-integrations/deploy-tools 8.7.0 → 8.9.0

package/README.md

@@ -41,7 +41,21 @@ read. Specifically:
 - When `features.billing`: `PaymentMethod`, `CreditTransaction`
 - When `features.impersonation` or `features.invitations`: `ActivityLog`
 
-Within each model, the required field names match what the library
-handlers query. Missing fields fail validation by name (the validator
-does not deep-check Prisma types -- the type system catches drift via
-the platform adapter in `src/platform/repositories.ts`).
+Within each model, the validator checks:
+
+1. **Field name** must match the canonical name (e.g. `credit_balance`,
+   not `creditBalance` or `credits_balance`).
+2. **Scalar type** must be in the compatible set
+   (`User.id` is `Int | BigInt`, `User.credit_balance` is
+   `Decimal | Float`, etc.). Native database types (`@db.VarChar`,
+   `@db.Decimal(...)`) are not validated.
+3. **Single-column unique constraint** on canonical lookup keys:
+   `User.email`, `Invitation.token`, `PaymentMethod.stripe_payment_method_id`,
+   `CreditTransaction.stripe_payment_intent_id`. Composite `@@unique([...])`
+   does not satisfy this (the library handlers do
+   `findUnique({ where: { token: ... } })`).
+
+Structural casts that bridge the generated Prisma client to the library
+handler factories are isolated to `src/platform/repositories.ts` +
+`src/platform/app-user.ts`. Product wiring (`src/lib/*.ts`, route
+handlers) MUST NOT cast.

package/dist/canonical/schema.d.ts

@@ -1,4 +1,15 @@
 import type { AppManifest } from "@augmenting-integrations/platform/manifest";
+/**
+ * One of more compatible Prisma scalar types. We model compatibility as a
+ * set so a spoke can choose `Int` or `BigInt` for ids, `Decimal` or `Float`
+ * for money, etc.
+ *
+ * `*` means "any scalar type" -- used when the canonical contract only
+ * cares about the field's NAME existing (e.g. `metadata Json?` is the only
+ * supported shape but a spoke that picks `String` for a stringified-JSON
+ * column would still satisfy the handler).
+ */
+export type CompatibleTypes = readonly string[];
 export type RequiredField = {
     name: string;
     /**
@@ -7,6 +18,15 @@ export type RequiredField = {
      * found missing.
      */
     reason: string;
+    /**
+     * Set of compatible Prisma scalar types. Empty means "any scalar".
+     */
+    types: CompatibleTypes;
+    /**
+     * Must this field carry a single-column unique constraint? Implies
+     * the field is a stable lookup key for library handlers.
+     */
+    unique?: boolean;
 };
 export type RequiredModel = {
     name: string;

package/dist/canonical/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/canonical/schema.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAE9E,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,WAAW,GAAG,aAAa,EAAE,CAwGhF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/canonical/schema.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,MAAM,EAAE,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB,CAAC;AAYF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,WAAW,GAAG,aAAa,EAAE,CAgOhF"}

package/dist/canonical/schema.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import {
+  requiredModelsForManifest
+} from "../chunk-DN2IENY7.js";
+export {
+  requiredModelsForManifest
+};
+//# sourceMappingURL=schema.js.map

package/dist/canonical/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-DN2IENY7.js

@@ -0,0 +1,234 @@
+#!/usr/bin/env node
+
+// src/canonical/schema.ts
+var ID = ["Int", "BigInt"];
+var ID_NULLABLE = ID;
+var MONEY = ["Decimal", "Float"];
+var STRING = ["String"];
+var BOOL = ["Boolean"];
+var TIME = ["DateTime"];
+var JSONISH = ["Json", "String"];
+var ANY = [];
+function requiredModelsForManifest(manifest) {
+  const out = [];
+  const userFields = [
+    {
+      name: "id",
+      reason: "JIT lookup + impersonation token claims",
+      types: ID
+    },
+    {
+      name: "email",
+      reason: "JIT email lookup + auto-promote-to-admin",
+      types: STRING,
+      unique: true
+    },
+    { name: "name", reason: "/api/auth/me, UserMenu display", types: STRING },
+    { name: "role", reason: "JIT role resolution + admin gating", types: STRING },
+    { name: "is_active", reason: "/api/auth/me response shape", types: BOOL },
+    {
+      name: "credit_balance",
+      reason: "JIT initial balance + /api/auth/me",
+      types: MONEY
+    },
+    {
+      name: "password",
+      reason: "schema-inherited not-null filler at JIT create",
+      types: STRING
+    },
+    {
+      name: "parent_id",
+      reason: "invitation auto-accept sets parent_id from invite",
+      types: ID_NULLABLE
+    },
+    { name: "created_at", reason: "audit / ordering", types: TIME },
+    { name: "updated_at", reason: "audit / ordering", types: TIME }
+  ];
+  if (manifest.features.billing) {
+    userFields.push(
+      {
+        name: "stripe_customer_id",
+        reason: "createBillingHandlers user shape",
+        types: STRING
+      },
+      {
+        name: "stripe_default_payment_method",
+        reason: "createBillingHandlers user shape",
+        types: STRING
+      },
+      {
+        name: "stripe_default_payment_method_display",
+        reason: "createBillingHandlers user shape",
+        types: STRING
+      },
+      {
+        name: "auto_recharge_enabled",
+        reason: "/api/billing/auto-recharge",
+        types: BOOL
+      },
+      {
+        name: "auto_recharge_threshold",
+        reason: "/api/billing/auto-recharge",
+        types: MONEY
+      },
+      {
+        name: "auto_recharge_amount",
+        reason: "/api/billing/auto-recharge",
+        types: MONEY
+      }
+    );
+  }
+  out.push({ name: "User", fields: userFields });
+  if (manifest.features.billing) {
+    out.push({
+      name: "PaymentMethod",
+      fields: [
+        { name: "id", reason: "createBillingHandlers row shape", types: ID },
+        {
+          name: "user_id",
+          reason: "createBillingHandlers row shape",
+          types: ID
+        },
+        {
+          name: "stripe_payment_method_id",
+          reason: "createBillingHandlers row shape (unique key)",
+          types: STRING,
+          unique: true
+        },
+        { name: "brand", reason: "createBillingHandlers row shape", types: STRING },
+        { name: "last4", reason: "createBillingHandlers row shape", types: STRING },
+        {
+          name: "exp_month",
+          reason: "createBillingHandlers row shape",
+          types: ["Int"]
+        },
+        {
+          name: "exp_year",
+          reason: "createBillingHandlers row shape",
+          types: ["Int"]
+        },
+        {
+          name: "is_default",
+          reason: "createBillingHandlers row shape",
+          types: BOOL
+        },
+        {
+          name: "created_at",
+          reason: "createBillingHandlers row shape",
+          types: TIME
+        }
+      ]
+    });
+    out.push({
+      name: "CreditTransaction",
+      fields: [
+        { name: "id", reason: "createBillingHandlers row shape", types: ID },
+        {
+          name: "user_id",
+          reason: "createBillingHandlers row shape",
+          types: ID
+        },
+        // `type` is commonly an enum -- accept ANY scalar so spokes can use
+        // `String` or a Prisma enum interchangeably.
+        { name: "type", reason: "createBillingHandlers row shape", types: ANY },
+        {
+          name: "amount",
+          reason: "createBillingHandlers row shape",
+          types: MONEY
+        },
+        {
+          name: "description",
+          reason: "createBillingHandlers row shape",
+          types: STRING
+        },
+        {
+          name: "stripe_payment_intent_id",
+          reason: "createBillingHandlers webhook idempotency",
+          types: STRING,
+          unique: true
+        },
+        {
+          name: "payment_method_display",
+          reason: "createBillingHandlers row shape",
+          types: STRING
+        },
+        {
+          name: "created_at",
+          reason: "createBillingHandlers row shape",
+          types: TIME
+        }
+      ]
+    });
+  }
+  if (manifest.features.invitations) {
+    out.push({
+      name: "Invitation",
+      fields: [
+        {
+          name: "id",
+          reason: "createInvitationHandlers + JIT invitation accept",
+          types: ID
+        },
+        {
+          name: "token",
+          reason: "createInvitationHandlers findUnique",
+          types: STRING,
+          unique: true
+        },
+        { name: "email", reason: "JIT invitation lookup", types: STRING },
+        {
+          name: "intended_role",
+          reason: "JIT role inheritance",
+          types: STRING
+        },
+        {
+          name: "parent_id",
+          reason: "JIT parent_id inheritance",
+          types: ID_NULLABLE
+        },
+        { name: "expires_at", reason: "JIT expiry filter", types: TIME },
+        {
+          name: "accepted_at",
+          reason: "JIT acceptance toggle",
+          types: TIME
+        },
+        {
+          name: "accepted_by_user_id",
+          reason: "JIT writes acceptance with new user id",
+          types: ID_NULLABLE
+        },
+        { name: "created_at", reason: "ordering", types: TIME }
+      ]
+    });
+  }
+  if (manifest.features.impersonation || manifest.features.invitations) {
+    out.push({
+      name: "ActivityLog",
+      fields: [
+        { name: "id", reason: "audit row", types: ID },
+        {
+          name: "user_id",
+          reason: "createImpersonateHandlers audit writes",
+          types: ID_NULLABLE
+        },
+        {
+          name: "action",
+          reason: "createImpersonateHandlers audit writes",
+          types: STRING
+        },
+        {
+          name: "metadata",
+          reason: "createImpersonateHandlers audit writes",
+          types: JSONISH
+        },
+        { name: "created_at", reason: "audit row", types: TIME }
+      ]
+    });
+  }
+  return out;
+}
+
+export {
+  requiredModelsForManifest
+};
+//# sourceMappingURL=chunk-DN2IENY7.js.map

package/dist/chunk-DN2IENY7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/canonical/schema.ts"],"sourcesContent":["// =============================================================================\n// Canonical schema contract.\n//\n// Encodes the Prisma model + field names + scalar types the library handler\n// factories read at runtime. The validator (`augint validate-spoke`) parses\n// the spoke's prisma/schema.prisma and asserts that every required model +\n// field for the manifest's enabled features is present with a compatible\n// scalar type. Required uniqueness is enforced for lookup keys.\n//\n// Drift in canonical naming AND type is the most common class of integration\n// bug. The validator catches it before `next build` runs.\n// =============================================================================\n\nimport type { AppManifest } from \"@augmenting-integrations/platform/manifest\";\n\n/**\n * One of more compatible Prisma scalar types. We model compatibility as a\n * set so a spoke can choose `Int` or `BigInt` for ids, `Decimal` or `Float`\n * for money, etc.\n *\n * `*` means \"any scalar type\" -- used when the canonical contract only\n * cares about the field's NAME existing (e.g. `metadata Json?` is the only\n * supported shape but a spoke that picks `String` for a stringified-JSON\n * column would still satisfy the handler).\n */\nexport type CompatibleTypes = readonly string[];\n\nexport type RequiredField = {\n  name: string;\n  /**\n   * Reason this field is required (shown in the error message). Helps\n   * developers understand WHY the validator cares, not just WHAT it\n   * found missing.\n   */\n  reason: string;\n  /**\n   * Set of compatible Prisma scalar types. Empty means \"any scalar\".\n   */\n  types: CompatibleTypes;\n  /**\n   * Must this field carry a single-column unique constraint? Implies\n   * the field is a stable lookup key for library handlers.\n   */\n  unique?: boolean;\n};\n\nexport type RequiredModel = {\n  name: string;\n  fields: RequiredField[];\n};\n\n// Common type aliases -- keep the per-field declarations terse.\nconst ID = [\"Int\", \"BigInt\"] as const;\nconst ID_NULLABLE = ID;\nconst MONEY = [\"Decimal\", \"Float\"] as const;\nconst STRING = [\"String\"] as const;\nconst BOOL = [\"Boolean\"] as const;\nconst TIME = [\"DateTime\"] as const;\nconst JSONISH = [\"Json\", \"String\"] as const;\nconst ANY: readonly string[] = [];\n\n/**\n * Returns the list of required models for a given manifest, in priority\n * order. Each model lists the fields its library consumers read.\n *\n * `User` is always required.\n * `Invitation` is required when features.invitations.\n * `PaymentMethod` + `CreditTransaction` are required when features.billing.\n * `ActivityLog` is required when features.impersonation or features.invitations.\n */\nexport function requiredModelsForManifest(manifest: AppManifest): RequiredModel[] {\n  const out: RequiredModel[] = [];\n\n  const userFields: RequiredField[] = [\n    {\n      name: \"id\",\n      reason: \"JIT lookup + impersonation token claims\",\n      types: ID,\n    },\n    {\n      name: \"email\",\n      reason: \"JIT email lookup + auto-promote-to-admin\",\n      types: STRING,\n      unique: true,\n    },\n    { name: \"name\", reason: \"/api/auth/me, UserMenu display\", types: STRING },\n    { name: \"role\", reason: \"JIT role resolution + admin gating\", types: STRING },\n    { name: \"is_active\", reason: \"/api/auth/me response shape\", types: BOOL },\n    {\n      name: \"credit_balance\",\n      reason: \"JIT initial balance + /api/auth/me\",\n      types: MONEY,\n    },\n    {\n      name: \"password\",\n      reason: \"schema-inherited not-null filler at JIT create\",\n      types: STRING,\n    },\n    {\n      name: \"parent_id\",\n      reason: \"invitation auto-accept sets parent_id from invite\",\n      types: ID_NULLABLE,\n    },\n    { name: \"created_at\", reason: \"audit / ordering\", types: TIME },\n    { name: \"updated_at\", reason: \"audit / ordering\", types: TIME },\n  ];\n\n  if (manifest.features.billing) {\n    userFields.push(\n      {\n        name: \"stripe_customer_id\",\n        reason: \"createBillingHandlers user shape\",\n        types: STRING,\n      },\n      {\n        name: \"stripe_default_payment_method\",\n        reason: \"createBillingHandlers user shape\",\n        types: STRING,\n      },\n      {\n        name: \"stripe_default_payment_method_display\",\n        reason: \"createBillingHandlers user shape\",\n        types: STRING,\n      },\n      {\n        name: \"auto_recharge_enabled\",\n        reason: \"/api/billing/auto-recharge\",\n        types: BOOL,\n      },\n      {\n        name: \"auto_recharge_threshold\",\n        reason: \"/api/billing/auto-recharge\",\n        types: MONEY,\n      },\n      {\n        name: \"auto_recharge_amount\",\n        reason: \"/api/billing/auto-recharge\",\n        types: MONEY,\n      },\n    );\n  }\n\n  out.push({ name: \"User\", fields: userFields });\n\n  if (manifest.features.billing) {\n    out.push({\n      name: \"PaymentMethod\",\n      fields: [\n        { name: \"id\", reason: \"createBillingHandlers row shape\", types: ID },\n        {\n          name: \"user_id\",\n          reason: \"createBillingHandlers row shape\",\n          types: ID,\n        },\n        {\n          name: \"stripe_payment_method_id\",\n          reason: \"createBillingHandlers row shape (unique key)\",\n          types: STRING,\n          unique: true,\n        },\n        { name: \"brand\", reason: \"createBillingHandlers row shape\", types: STRING },\n        { name: \"last4\", reason: \"createBillingHandlers row shape\", types: STRING },\n        {\n          name: \"exp_month\",\n          reason: \"createBillingHandlers row shape\",\n          types: [\"Int\"],\n        },\n        {\n          name: \"exp_year\",\n          reason: \"createBillingHandlers row shape\",\n          types: [\"Int\"],\n        },\n        {\n          name: \"is_default\",\n          reason: \"createBillingHandlers row shape\",\n          types: BOOL,\n        },\n        {\n          name: \"created_at\",\n          reason: \"createBillingHandlers row shape\",\n          types: TIME,\n        },\n      ],\n    });\n    out.push({\n      name: \"CreditTransaction\",\n      fields: [\n        { name: \"id\", reason: \"createBillingHandlers row shape\", types: ID },\n        {\n          name: \"user_id\",\n          reason: \"createBillingHandlers row shape\",\n          types: ID,\n        },\n        // `type` is commonly an enum -- accept ANY scalar so spokes can use\n        // `String` or a Prisma enum interchangeably.\n        { name: \"type\", reason: \"createBillingHandlers row shape\", types: ANY },\n        {\n          name: \"amount\",\n          reason: \"createBillingHandlers row shape\",\n          types: MONEY,\n        },\n        {\n          name: \"description\",\n          reason: \"createBillingHandlers row shape\",\n          types: STRING,\n        },\n        {\n          name: \"stripe_payment_intent_id\",\n          reason: \"createBillingHandlers webhook idempotency\",\n          types: STRING,\n          unique: true,\n        },\n        {\n          name: \"payment_method_display\",\n          reason: \"createBillingHandlers row shape\",\n          types: STRING,\n        },\n        {\n          name: \"created_at\",\n          reason: \"createBillingHandlers row shape\",\n          types: TIME,\n        },\n      ],\n    });\n  }\n\n  if (manifest.features.invitations) {\n    out.push({\n      name: \"Invitation\",\n      fields: [\n        {\n          name: \"id\",\n          reason: \"createInvitationHandlers + JIT invitation accept\",\n          types: ID,\n        },\n        {\n          name: \"token\",\n          reason: \"createInvitationHandlers findUnique\",\n          types: STRING,\n          unique: true,\n        },\n        { name: \"email\", reason: \"JIT invitation lookup\", types: STRING },\n        {\n          name: \"intended_role\",\n          reason: \"JIT role inheritance\",\n          types: STRING,\n        },\n        {\n          name: \"parent_id\",\n          reason: \"JIT parent_id inheritance\",\n          types: ID_NULLABLE,\n        },\n        { name: \"expires_at\", reason: \"JIT expiry filter\", types: TIME },\n        {\n          name: \"accepted_at\",\n          reason: \"JIT acceptance toggle\",\n          types: TIME,\n        },\n        {\n          name: \"accepted_by_user_id\",\n          reason: \"JIT writes acceptance with new user id\",\n          types: ID_NULLABLE,\n        },\n        { name: \"created_at\", reason: \"ordering\", types: TIME },\n      ],\n    });\n  }\n\n  if (manifest.features.impersonation || manifest.features.invitations) {\n    out.push({\n      name: \"ActivityLog\",\n      fields: [\n        { name: \"id\", reason: \"audit row\", types: ID },\n        {\n          name: \"user_id\",\n          reason: \"createImpersonateHandlers audit writes\",\n          types: ID_NULLABLE,\n        },\n        {\n          name: \"action\",\n          reason: \"createImpersonateHandlers audit writes\",\n          types: STRING,\n        },\n        {\n          name: \"metadata\",\n          reason: \"createImpersonateHandlers audit writes\",\n          types: JSONISH,\n        },\n        { name: \"created_at\", reason: \"audit row\", types: TIME },\n      ],\n    });\n  }\n\n  return out;\n}\n"],"mappings":";;;AAoDA,IAAM,KAAK,CAAC,OAAO,QAAQ;AAC3B,IAAM,cAAc;AACpB,IAAM,QAAQ,CAAC,WAAW,OAAO;AACjC,IAAM,SAAS,CAAC,QAAQ;AACxB,IAAM,OAAO,CAAC,SAAS;AACvB,IAAM,OAAO,CAAC,UAAU;AACxB,IAAM,UAAU,CAAC,QAAQ,QAAQ;AACjC,IAAM,MAAyB,CAAC;AAWzB,SAAS,0BAA0B,UAAwC;AAChF,QAAM,MAAuB,CAAC;AAE9B,QAAM,aAA8B;AAAA,IAClC;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,MAAM,QAAQ,QAAQ,kCAAkC,OAAO,OAAO;AAAA,IACxE,EAAE,MAAM,QAAQ,QAAQ,sCAAsC,OAAO,OAAO;AAAA,IAC5E,EAAE,MAAM,aAAa,QAAQ,+BAA+B,OAAO,KAAK;AAAA,IACxE;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,IACA,EAAE,MAAM,cAAc,QAAQ,oBAAoB,OAAO,KAAK;AAAA,IAC9D,EAAE,MAAM,cAAc,QAAQ,oBAAoB,OAAO,KAAK;AAAA,EAChE;AAEA,MAAI,SAAS,SAAS,SAAS;AAC7B,eAAW;AAAA,MACT;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,MAAI,KAAK,EAAE,MAAM,QAAQ,QAAQ,WAAW,CAAC;AAE7C,MAAI,SAAS,SAAS,SAAS;AAC7B,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,mCAAmC,OAAO,GAAG;AAAA,QACnE;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,MAAM,SAAS,QAAQ,mCAAmC,OAAO,OAAO;AAAA,QAC1E,EAAE,MAAM,SAAS,QAAQ,mCAAmC,OAAO,OAAO;AAAA,QAC1E;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO,CAAC,KAAK;AAAA,QACf;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO,CAAC,KAAK;AAAA,QACf;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,mCAAmC,OAAO,GAAG;AAAA,QACnE;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA;AAAA;AAAA,QAGA,EAAE,MAAM,QAAQ,QAAQ,mCAAmC,OAAO,IAAI;AAAA,QACtE;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,SAAS,aAAa;AACjC,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,MAAM,SAAS,QAAQ,yBAAyB,OAAO,OAAO;AAAA,QAChE;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA,EAAE,MAAM,cAAc,QAAQ,qBAAqB,OAAO,KAAK;AAAA,QAC/D;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA,EAAE,MAAM,cAAc,QAAQ,YAAY,OAAO,KAAK;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,SAAS,iBAAiB,SAAS,SAAS,aAAa;AACpE,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,aAAa,OAAO,GAAG;AAAA,QAC7C;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,OAAO;AAAA,QACT;AAAA,QACA,EAAE,MAAM,cAAc,QAAQ,aAAa,OAAO,KAAK;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/chunk-SYUDHJI7.js

@@ -0,0 +1,142 @@
+#!/usr/bin/env node
+import {
+  modelHasSingleColumnUnique,
+  parsePrismaSchema
+} from "./chunk-ZQE3CYBR.js";
+import {
+  requiredModelsForManifest
+} from "./chunk-DN2IENY7.js";
+
+// src/validate-spoke.ts
+import { readFileSync, existsSync } from "fs";
+import { resolve, join } from "path";
+import process from "process";
+import { loadManifest } from "@augmenting-integrations/platform/manifest";
+function formatFailure(f) {
+  switch (f.kind) {
+    case "missing_model":
+      return `  missing model: ${f.model}`;
+    case "missing_field":
+      return `  ${f.model}.${f.field} missing  (required by: ${f.reason})`;
+    case "wrong_type":
+      return `  ${f.model}.${f.field} has type ${f.actual}, expected one of: ${f.expected.join(" | ")}  (required by: ${f.reason})`;
+    case "missing_unique":
+      return `  ${f.model}.${f.field} missing single-column @unique  (required by: ${f.reason})`;
+  }
+}
+function validateSpokeAgainstParsed(manifest, parsed) {
+  const required = requiredModelsForManifest(manifest);
+  const failures = [];
+  for (const req of required) {
+    const found = parsed.find((m) => m.name === req.name);
+    if (!found) {
+      failures.push({ kind: "missing_model", model: req.name });
+      continue;
+    }
+    const byName = new Map(found.fields.map((f) => [f.name, f]));
+    for (const reqField of req.fields) {
+      const actual = byName.get(reqField.name);
+      if (!actual) {
+        failures.push({
+          kind: "missing_field",
+          model: req.name,
+          field: reqField.name,
+          reason: reqField.reason
+        });
+        continue;
+      }
+      if (reqField.types.length > 0 && !reqField.types.includes(actual.type)) {
+        failures.push({
+          kind: "wrong_type",
+          model: req.name,
+          field: reqField.name,
+          actual: actual.type,
+          expected: reqField.types,
+          reason: reqField.reason
+        });
+      }
+      if (reqField.unique && !modelHasSingleColumnUnique(found, reqField.name)) {
+        failures.push({
+          kind: "missing_unique",
+          model: req.name,
+          field: reqField.name,
+          reason: reqField.reason
+        });
+      }
+    }
+  }
+  return failures;
+}
+async function runValidateSpoke(argv) {
+  let cwd = process.cwd();
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--cwd" || a === "--root") {
+      const next = argv[i + 1];
+      if (next) {
+        cwd = resolve(next);
+        i++;
+      }
+    }
+  }
+  let manifest;
+  try {
+    manifest = loadManifest({ cwd });
+  } catch (err) {
+    process.stderr.write(`validate-spoke: ${err.message}
+`);
+    process.exit(1);
+  }
+  if (manifest.dataPlane.type === "none") {
+    process.stdout.write(
+      `validate-spoke: ${manifest.appSlug} has dataPlane.type=none; nothing to validate.
+`
+    );
+    return;
+  }
+  const schemaPath = join(cwd, "prisma", "schema.prisma");
+  if (!existsSync(schemaPath)) {
+    process.stderr.write(
+      `validate-spoke: prisma/schema.prisma not found at ${schemaPath}
+Manifest declares a data plane but the schema file is missing.
+`
+    );
+    process.exit(1);
+  }
+  const schemaSrc = readFileSync(schemaPath, "utf8");
+  const parsed = parsePrismaSchema(schemaSrc);
+  const failures = validateSpokeAgainstParsed(manifest, parsed);
+  if (failures.length > 0) {
+    process.stderr.write(
+      `validate-spoke: ${failures.length} canonical schema violation(s) in ${schemaPath}:
+`
+    );
+    for (const f of failures) {
+      process.stderr.write(`${formatFailure(f)}
+`);
+    }
+    process.stderr.write(
+      "\nThe app.manifest.json features list expects the listed canonical models,\nfields, scalar types, and unique constraints. Either fix prisma/schema.prisma\nor turn the feature off in the manifest. See\n@augmenting-integrations/deploy-tools README for the contract.\n"
+    );
+    process.exit(1);
+  }
+  process.stdout.write(
+    `validate-spoke: OK -- ${manifest.appSlug} schema satisfies the canonical contract for features: ` + Object.entries(manifest.features).filter(([, v]) => v).map(([k]) => k).join(", ") + "\n"
+  );
+}
+var isDirectInvocation = import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith("validate-spoke.js");
+if (isDirectInvocation) {
+  runValidateSpoke(process.argv.slice(2)).catch((err) => {
+    process.stderr.write(
+      `validate-spoke: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+    process.exit(1);
+  });
+}
+
+export {
+  validateSpokeAgainstParsed,
+  runValidateSpoke
+};
+//# sourceMappingURL=chunk-SYUDHJI7.js.map

package/dist/chunk-SYUDHJI7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/validate-spoke.ts"],"sourcesContent":["import { readFileSync, existsSync } from \"node:fs\";\nimport { resolve, join } from \"node:path\";\nimport process from \"node:process\";\n\nimport { loadManifest } from \"@augmenting-integrations/platform/manifest\";\n\nimport { requiredModelsForManifest } from \"./canonical/schema.js\";\nimport {\n  parsePrismaSchema,\n  modelHasSingleColumnUnique,\n  type ParsedModel,\n} from \"./prisma-parser.js\";\n\n// =============================================================================\n// `augint validate-spoke`\n//\n// Inputs:\n//   - app.manifest.json (validated by platform/manifest loader)\n//   - prisma/schema.prisma (parsed locally)\n//\n// Output:\n//   - Exit 0 on success with a one-line \"OK\" summary.\n//   - Exit 1 on validation failure with a field-by-field list of what's\n//     missing/wrong and WHY each requirement is enforced.\n//\n// Apex apps with `dataPlane.type === \"none\"` skip Prisma validation\n// entirely (no schema file expected). Spokes always validate.\n// =============================================================================\n\ntype Failure =\n  | { kind: \"missing_model\"; model: string }\n  | { kind: \"missing_field\"; model: string; field: string; reason: string }\n  | {\n      kind: \"wrong_type\";\n      model: string;\n      field: string;\n      actual: string;\n      expected: readonly string[];\n      reason: string;\n    }\n  | { kind: \"missing_unique\"; model: string; field: string; reason: string };\n\nfunction formatFailure(f: Failure): string {\n  switch (f.kind) {\n    case \"missing_model\":\n      return `  missing model: ${f.model}`;\n    case \"missing_field\":\n      return `  ${f.model}.${f.field} missing  (required by: ${f.reason})`;\n    case \"wrong_type\":\n      return (\n        `  ${f.model}.${f.field} has type ${f.actual}, expected one of: ` +\n        `${f.expected.join(\" | \")}  (required by: ${f.reason})`\n      );\n    case \"missing_unique\":\n      return (\n        `  ${f.model}.${f.field} missing single-column @unique` +\n        `  (required by: ${f.reason})`\n      );\n  }\n}\n\nexport function validateSpokeAgainstParsed(\n  manifest: ReturnType<typeof loadManifest>,\n  parsed: ParsedModel[],\n): Failure[] {\n  const required = requiredModelsForManifest(manifest);\n  const failures: Failure[] = [];\n\n  for (const req of required) {\n    const found = parsed.find((m) => m.name === req.name);\n    if (!found) {\n      failures.push({ kind: \"missing_model\", model: req.name });\n      continue;\n    }\n    const byName = new Map(found.fields.map((f) => [f.name, f]));\n\n    for (const reqField of req.fields) {\n      const actual = byName.get(reqField.name);\n      if (!actual) {\n        failures.push({\n          kind: \"missing_field\",\n          model: req.name,\n          field: reqField.name,\n          reason: reqField.reason,\n        });\n        continue;\n      }\n\n      if (reqField.types.length > 0 && !reqField.types.includes(actual.type)) {\n        failures.push({\n          kind: \"wrong_type\",\n          model: req.name,\n          field: reqField.name,\n          actual: actual.type,\n          expected: reqField.types,\n          reason: reqField.reason,\n        });\n      }\n\n      if (reqField.unique && !modelHasSingleColumnUnique(found, reqField.name)) {\n        failures.push({\n          kind: \"missing_unique\",\n          model: req.name,\n          field: reqField.name,\n          reason: reqField.reason,\n        });\n      }\n    }\n  }\n\n  return failures;\n}\n\nexport async function runValidateSpoke(argv: string[]): Promise<void> {\n  let cwd = process.cwd();\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    if (a === \"--cwd\" || a === \"--root\") {\n      const next = argv[i + 1];\n      if (next) {\n        cwd = resolve(next);\n        i++;\n      }\n    }\n  }\n\n  let manifest: ReturnType<typeof loadManifest>;\n  try {\n    manifest = loadManifest({ cwd });\n  } catch (err) {\n    process.stderr.write(`validate-spoke: ${(err as Error).message}\\n`);\n    process.exit(1);\n  }\n\n  // Apex auth-broker has no data plane -- nothing to validate.\n  if (manifest.dataPlane.type === \"none\") {\n    process.stdout.write(\n      `validate-spoke: ${manifest.appSlug} has dataPlane.type=none; nothing to validate.\\n`,\n    );\n    return;\n  }\n\n  const schemaPath = join(cwd, \"prisma\", \"schema.prisma\");\n  if (!existsSync(schemaPath)) {\n    process.stderr.write(\n      `validate-spoke: prisma/schema.prisma not found at ${schemaPath}\\n` +\n        \"Manifest declares a data plane but the schema file is missing.\\n\",\n    );\n    process.exit(1);\n  }\n\n  const schemaSrc = readFileSync(schemaPath, \"utf8\");\n  const parsed = parsePrismaSchema(schemaSrc);\n  const failures = validateSpokeAgainstParsed(manifest, parsed);\n\n  if (failures.length > 0) {\n    process.stderr.write(\n      `validate-spoke: ${failures.length} canonical schema violation(s) in ${schemaPath}:\\n`,\n    );\n    for (const f of failures) {\n      process.stderr.write(`${formatFailure(f)}\\n`);\n    }\n    process.stderr.write(\n      \"\\nThe app.manifest.json features list expects the listed canonical models,\\n\" +\n        \"fields, scalar types, and unique constraints. Either fix prisma/schema.prisma\\n\" +\n        \"or turn the feature off in the manifest. See\\n\" +\n        \"@augmenting-integrations/deploy-tools README for the contract.\\n\",\n    );\n    process.exit(1);\n  }\n\n  process.stdout.write(\n    `validate-spoke: OK -- ${manifest.appSlug} schema satisfies the canonical contract for features: ` +\n      Object.entries(manifest.features)\n        .filter(([, v]) => v)\n        .map(([k]) => k)\n        .join(\", \") +\n      \"\\n\",\n  );\n}\n\nconst isDirectInvocation =\n  import.meta.url === `file://${process.argv[1]}` ||\n  process.argv[1]?.endsWith(\"validate-spoke.js\");\nif (isDirectInvocation) {\n  runValidateSpoke(process.argv.slice(2)).catch((err) => {\n    process.stderr.write(\n      `validate-spoke: ${err instanceof Error ? err.message : String(err)}\\n`,\n    );\n    process.exit(1);\n  });\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,cAAc,kBAAkB;AACzC,SAAS,SAAS,YAAY;AAC9B,OAAO,aAAa;AAEpB,SAAS,oBAAoB;AAsC7B,SAAS,cAAc,GAAoB;AACzC,UAAQ,EAAE,MAAM;AAAA,IACd,KAAK;AACH,aAAO,oBAAoB,EAAE,KAAK;AAAA,IACpC,KAAK;AACH,aAAO,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,2BAA2B,EAAE,MAAM;AAAA,IACnE,KAAK;AACH,aACE,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,aAAa,EAAE,MAAM,sBACzC,EAAE,SAAS,KAAK,KAAK,CAAC,mBAAmB,EAAE,MAAM;AAAA,IAExD,KAAK;AACH,aACE,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,iDACJ,EAAE,MAAM;AAAA,EAEjC;AACF;AAEO,SAAS,2BACd,UACA,QACW;AACX,QAAM,WAAW,0BAA0B,QAAQ;AACnD,QAAM,WAAsB,CAAC;AAE7B,aAAW,OAAO,UAAU;AAC1B,UAAM,QAAQ,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;AACpD,QAAI,CAAC,OAAO;AACV,eAAS,KAAK,EAAE,MAAM,iBAAiB,OAAO,IAAI,KAAK,CAAC;AACxD;AAAA,IACF;AACA,UAAM,SAAS,IAAI,IAAI,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3D,eAAW,YAAY,IAAI,QAAQ;AACjC,YAAM,SAAS,OAAO,IAAI,SAAS,IAAI;AACvC,UAAI,CAAC,QAAQ;AACX,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,OAAO,IAAI;AAAA,UACX,OAAO,SAAS;AAAA,UAChB,QAAQ,SAAS;AAAA,QACnB,CAAC;AACD;AAAA,MACF;AAEA,UAAI,SAAS,MAAM,SAAS,KAAK,CAAC,SAAS,MAAM,SAAS,OAAO,IAAI,GAAG;AACtE,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,OAAO,IAAI;AAAA,UACX,OAAO,SAAS;AAAA,UAChB,QAAQ,OAAO;AAAA,UACf,UAAU,SAAS;AAAA,UACnB,QAAQ,SAAS;AAAA,QACnB,CAAC;AAAA,MACH;AAEA,UAAI,SAAS,UAAU,CAAC,2BAA2B,OAAO,SAAS,IAAI,GAAG;AACxE,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,OAAO,IAAI;AAAA,UACX,OAAO,SAAS;AAAA,UAChB,QAAQ,SAAS;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,iBAAiB,MAA+B;AACpE,MAAI,MAAM,QAAQ,IAAI;AACtB,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,IAAI,KAAK,CAAC;AAChB,QAAI,MAAM,WAAW,MAAM,UAAU;AACnC,YAAM,OAAO,KAAK,IAAI,CAAC;AACvB,UAAI,MAAM;AACR,cAAM,QAAQ,IAAI;AAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,aAAa,EAAE,IAAI,CAAC;AAAA,EACjC,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,mBAAoB,IAAc,OAAO;AAAA,CAAI;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,UAAU,SAAS,QAAQ;AACtC,YAAQ,OAAO;AAAA,MACb,mBAAmB,SAAS,OAAO;AAAA;AAAA,IACrC;AACA;AAAA,EACF;AAEA,QAAM,aAAa,KAAK,KAAK,UAAU,eAAe;AACtD,MAAI,CAAC,WAAW,UAAU,GAAG;AAC3B,YAAQ,OAAO;AAAA,MACb,qDAAqD,UAAU;AAAA;AAAA;AAAA,IAEjE;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,YAAY,aAAa,YAAY,MAAM;AACjD,QAAM,SAAS,kBAAkB,SAAS;AAC1C,QAAM,WAAW,2BAA2B,UAAU,MAAM;AAE5D,MAAI,SAAS,SAAS,GAAG;AACvB,YAAQ,OAAO;AAAA,MACb,mBAAmB,SAAS,MAAM,qCAAqC,UAAU;AAAA;AAAA,IACnF;AACA,eAAW,KAAK,UAAU;AACxB,cAAQ,OAAO,MAAM,GAAG,cAAc,CAAC,CAAC;AAAA,CAAI;AAAA,IAC9C;AACA,YAAQ,OAAO;AAAA,MACb;AAAA,IAIF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,OAAO;AAAA,IACb,yBAAyB,SAAS,OAAO,4DACvC,OAAO,QAAQ,SAAS,QAAQ,EAC7B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EACnB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EACd,KAAK,IAAI,IACZ;AAAA,EACJ;AACF;AAEA,IAAM,qBACJ,YAAY,QAAQ,UAAU,QAAQ,KAAK,CAAC,CAAC,MAC7C,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB;AAC/C,IAAI,oBAAoB;AACtB,mBAAiB,QAAQ,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ;AACrD,YAAQ,OAAO;AAAA,MACb,mBAAmB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,IACrE;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":[]}

package/dist/chunk-ZQE3CYBR.js

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+
+// src/prisma-parser.ts
+var MODEL_BLOCK = /model\s+([A-Za-z_][A-Za-z0-9_]*)\s*\{([\s\S]*?)\n\s*\}/g;
+var FIELD_HEAD = /^([A-Za-z_][A-Za-z0-9_]*)\s+([A-Za-z_][A-Za-z0-9_]*)(\?|\[\])?/;
+var MODEL_ATTR_LIST = /\(\s*\[([^\]]+)\]/;
+function parseAttributeList(line) {
+  const m = line.match(MODEL_ATTR_LIST);
+  if (!m) return [];
+  return m[1].split(",").map((s) => s.trim()).filter((s) => s.length > 0).map((s) => s.split(":")[0].trim());
+}
+function parsePrismaSchema(source) {
+  const stripped = source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
+  const out = [];
+  for (const match of stripped.matchAll(MODEL_BLOCK)) {
+    const name = match[1];
+    const body = match[2];
+    const fields = [];
+    const uniqueGroups = [];
+    const indexGroups = [];
+    for (const rawLine of body.split("\n")) {
+      const line = rawLine.trim();
+      if (line === "") continue;
+      if (line.startsWith("@@")) {
+        if (line.startsWith("@@unique")) {
+          const fieldsInGroup = parseAttributeList(line);
+          if (fieldsInGroup.length > 0) uniqueGroups.push(fieldsInGroup);
+        } else if (line.startsWith("@@index")) {
+          const fieldsInGroup = parseAttributeList(line);
+          if (fieldsInGroup.length > 0) indexGroups.push(fieldsInGroup);
+        } else if (line.startsWith("@@id")) {
+          const fieldsInGroup = parseAttributeList(line);
+          if (fieldsInGroup.length > 0) uniqueGroups.push(fieldsInGroup);
+        }
+        continue;
+      }
+      if (line.startsWith("@")) continue;
+      const head = line.match(FIELD_HEAD);
+      if (!head) continue;
+      const fieldName = head[1];
+      const fieldType = head[2];
+      const tail = head[3] ?? "";
+      const optional = tail === "?";
+      const list = tail === "[]";
+      const attributes = /* @__PURE__ */ new Set();
+      if (/\s@id(\s|$|\()/.test(line)) attributes.add("id");
+      if (/\s@unique(\s|$|\()/.test(line)) attributes.add("unique");
+      if (attributes.has("unique")) uniqueGroups.push([fieldName]);
+      if (attributes.has("id")) uniqueGroups.push([fieldName]);
+      fields.push({
+        name: fieldName,
+        type: fieldType,
+        optional,
+        list,
+        attributes
+      });
+    }
+    out.push({ name, fields, uniqueGroups, indexGroups });
+  }
+  return out;
+}
+function modelHasSingleColumnUnique(model, field) {
+  return model.uniqueGroups.some((g) => g.length === 1 && g[0] === field);
+}
+
+export {
+  parsePrismaSchema,
+  modelHasSingleColumnUnique
+};
+//# sourceMappingURL=chunk-ZQE3CYBR.js.map

package/dist/chunk-ZQE3CYBR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prisma-parser.ts"],"sourcesContent":["// =============================================================================\n// Minimal Prisma schema parser. Extracts model declarations, per-field\n// metadata (name + scalar type + optional/list marker + inline @unique /\n// @id), and model-level attributes (@@unique, @@index, @@id).\n//\n// Scope: only what `augint validate-spoke` needs to enforce the canonical\n// library contract. We intentionally do NOT validate Prisma-side native\n// type mappings (`@db.VarChar`, `@db.Decimal(...)`); those are out of the\n// contract surface. Type drift at the scalar level (`String` vs `Int`,\n// `Decimal` vs `String`) is what library handlers actually break on.\n// =============================================================================\n\nexport type ParsedFieldAttribute = \"id\" | \"unique\";\n\nexport type ParsedField = {\n  /** Field name as it appears in the model body. */\n  name: string;\n  /** Scalar type, e.g. `String`, `BigInt`, `Decimal`, `Json`, `DateTime`, `Boolean`, `Int`. */\n  type: string;\n  /** True if the type carried a trailing `?`. */\n  optional: boolean;\n  /** True if the type carried a trailing `[]` (relation list or scalar list). */\n  list: boolean;\n  /** Inline field attributes (`@id`, `@unique`). Relation attributes are ignored. */\n  attributes: Set<ParsedFieldAttribute>;\n};\n\nexport type ParsedModel = {\n  name: string;\n  fields: ParsedField[];\n  /**\n   * Field names participating in a single-column or composite `@@unique([...])`.\n   * Each inner array is one composite. A single-column `@unique` is folded in\n   * automatically as `[fieldName]` so callers can ask one question.\n   */\n  uniqueGroups: string[][];\n  /**\n   * Field names participating in `@@index([...])`. Each inner array is one\n   * index.\n   */\n  indexGroups: string[][];\n};\n\nconst MODEL_BLOCK = /model\\s+([A-Za-z_][A-Za-z0-9_]*)\\s*\\{([\\s\\S]*?)\\n\\s*\\}/g;\nconst FIELD_HEAD = /^([A-Za-z_][A-Za-z0-9_]*)\\s+([A-Za-z_][A-Za-z0-9_]*)(\\?|\\[\\])?/;\nconst MODEL_ATTR_LIST = /\\(\\s*\\[([^\\]]+)\\]/;\n\nfunction parseAttributeList(line: string): string[] {\n  const m = line.match(MODEL_ATTR_LIST);\n  if (!m) return [];\n  return (\n    m[1]!\n      .split(\",\")\n      .map((s) => s.trim())\n      .filter((s) => s.length > 0)\n      // Drop named-group qualifiers like `name: ...` -- we only care about field names.\n      .map((s) => s.split(\":\")[0]!.trim())\n  );\n}\n\n/**\n * Parse a Prisma schema file. Comments are stripped first; the result\n * preserves model declaration order.\n */\nexport function parsePrismaSchema(source: string): ParsedModel[] {\n  // Strip line comments and block comments before pattern-matching so an\n  // attribute embedded in a comment doesn't get treated as real.\n  const stripped = source.replace(/\\/\\*[\\s\\S]*?\\*\\//g, \"\").replace(/\\/\\/[^\\n]*/g, \"\");\n\n  const out: ParsedModel[] = [];\n  for (const match of stripped.matchAll(MODEL_BLOCK)) {\n    const name = match[1]!;\n    const body = match[2]!;\n    const fields: ParsedField[] = [];\n    const uniqueGroups: string[][] = [];\n    const indexGroups: string[][] = [];\n\n    for (const rawLine of body.split(\"\\n\")) {\n      const line = rawLine.trim();\n      if (line === \"\") continue;\n\n      if (line.startsWith(\"@@\")) {\n        if (line.startsWith(\"@@unique\")) {\n          const fieldsInGroup = parseAttributeList(line);\n          if (fieldsInGroup.length > 0) uniqueGroups.push(fieldsInGroup);\n        } else if (line.startsWith(\"@@index\")) {\n          const fieldsInGroup = parseAttributeList(line);\n          if (fieldsInGroup.length > 0) indexGroups.push(fieldsInGroup);\n        } else if (line.startsWith(\"@@id\")) {\n          const fieldsInGroup = parseAttributeList(line);\n          if (fieldsInGroup.length > 0) uniqueGroups.push(fieldsInGroup);\n        }\n        continue;\n      }\n\n      if (line.startsWith(\"@\")) continue;\n\n      const head = line.match(FIELD_HEAD);\n      if (!head) continue;\n\n      const fieldName = head[1]!;\n      const fieldType = head[2]!;\n      const tail = head[3] ?? \"\";\n      const optional = tail === \"?\";\n      const list = tail === \"[]\";\n\n      const attributes = new Set<ParsedFieldAttribute>();\n      if (/\\s@id(\\s|$|\\()/.test(line)) attributes.add(\"id\");\n      if (/\\s@unique(\\s|$|\\()/.test(line)) attributes.add(\"unique\");\n\n      // Single-column @unique folds into uniqueGroups for uniform lookup.\n      if (attributes.has(\"unique\")) uniqueGroups.push([fieldName]);\n      // Single-column @id (e.g. `id Int @id`) also counts as unique.\n      if (attributes.has(\"id\")) uniqueGroups.push([fieldName]);\n\n      fields.push({\n        name: fieldName,\n        type: fieldType,\n        optional,\n        list,\n        attributes,\n      });\n    }\n\n    out.push({ name, fields, uniqueGroups, indexGroups });\n  }\n  return out;\n}\n\n/**\n * True if the model has a single-column unique constraint on `field`.\n * Composite uniques never count -- the canonical contract requires\n * single-column lookup keys (the library handlers do `findUnique({ where:\n * { token: ... } })`, which a composite wouldn't satisfy).\n */\nexport function modelHasSingleColumnUnique(model: ParsedModel, field: string): boolean {\n  return model.uniqueGroups.some((g) => g.length === 1 && g[0] === field);\n}\n"],"mappings":";;;AA2CA,IAAM,cAAc;AACpB,IAAM,aAAa;AACnB,IAAM,kBAAkB;AAExB,SAAS,mBAAmB,MAAwB;AAClD,QAAM,IAAI,KAAK,MAAM,eAAe;AACpC,MAAI,CAAC,EAAG,QAAO,CAAC;AAChB,SACE,EAAE,CAAC,EACA,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAE1B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,EAAG,KAAK,CAAC;AAEzC;AAMO,SAAS,kBAAkB,QAA+B;AAG/D,QAAM,WAAW,OAAO,QAAQ,qBAAqB,EAAE,EAAE,QAAQ,eAAe,EAAE;AAElF,QAAM,MAAqB,CAAC;AAC5B,aAAW,SAAS,SAAS,SAAS,WAAW,GAAG;AAClD,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,SAAwB,CAAC;AAC/B,UAAM,eAA2B,CAAC;AAClC,UAAM,cAA0B,CAAC;AAEjC,eAAW,WAAW,KAAK,MAAM,IAAI,GAAG;AACtC,YAAM,OAAO,QAAQ,KAAK;AAC1B,UAAI,SAAS,GAAI;AAEjB,UAAI,KAAK,WAAW,IAAI,GAAG;AACzB,YAAI,KAAK,WAAW,UAAU,GAAG;AAC/B,gBAAM,gBAAgB,mBAAmB,IAAI;AAC7C,cAAI,cAAc,SAAS,EAAG,cAAa,KAAK,aAAa;AAAA,QAC/D,WAAW,KAAK,WAAW,SAAS,GAAG;AACrC,gBAAM,gBAAgB,mBAAmB,IAAI;AAC7C,cAAI,cAAc,SAAS,EAAG,aAAY,KAAK,aAAa;AAAA,QAC9D,WAAW,KAAK,WAAW,MAAM,GAAG;AAClC,gBAAM,gBAAgB,mBAAmB,IAAI;AAC7C,cAAI,cAAc,SAAS,EAAG,cAAa,KAAK,aAAa;AAAA,QAC/D;AACA;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,GAAG,EAAG;AAE1B,YAAM,OAAO,KAAK,MAAM,UAAU;AAClC,UAAI,CAAC,KAAM;AAEX,YAAM,YAAY,KAAK,CAAC;AACxB,YAAM,YAAY,KAAK,CAAC;AACxB,YAAM,OAAO,KAAK,CAAC,KAAK;AACxB,YAAM,WAAW,SAAS;AAC1B,YAAM,OAAO,SAAS;AAEtB,YAAM,aAAa,oBAAI,IAA0B;AACjD,UAAI,iBAAiB,KAAK,IAAI,EAAG,YAAW,IAAI,IAAI;AACpD,UAAI,qBAAqB,KAAK,IAAI,EAAG,YAAW,IAAI,QAAQ;AAG5D,UAAI,WAAW,IAAI,QAAQ,EAAG,cAAa,KAAK,CAAC,SAAS,CAAC;AAE3D,UAAI,WAAW,IAAI,IAAI,EAAG,cAAa,KAAK,CAAC,SAAS,CAAC;AAEvD,aAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,EAAE,MAAM,QAAQ,cAAc,YAAY,CAAC;AAAA,EACtD;AACA,SAAO;AACT;AAQO,SAAS,2BAA2B,OAAoB,OAAwB;AACrF,SAAO,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,EAAE,CAAC,MAAM,KAAK;AACxE;","names":[]}

package/dist/cli.js

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 import {
   runValidateSpoke
-} from "./chunk-A7IIB34G.js";
+} from "./chunk-SYUDHJI7.js";
 import {
   runValidateAppRoster
 } from "./chunk-ZOKDIN2F.js";
 import {
   runPackageNextLambda
 } from "./chunk-RYVRSM25.js";
+import "./chunk-ZQE3CYBR.js";
+import "./chunk-DN2IENY7.js";
 
 // src/cli.ts
 import process from "process";

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import process from \"node:process\";\nimport { runValidateSpoke } from \"./validate-spoke.js\";\nimport { runPackageNextLambda } from \"./package-next-lambda.js\";\nimport { runValidateAppRoster } from \"./validate-app-roster.js\";\n\nconst USAGE = `Usage: augint <command> [args]\n\nCommands:\n  validate-spoke         Validate Prisma schema against canonical contract\n  validate-app-roster    Validate tenant app roster (infra YAML + apex JSON + optional spoke mirrors)\n  package-next-lambda    Package Next standalone build for Lambda\n`;\n\nasync function main(): Promise<void> {\n  const [, , cmd, ...rest] = process.argv;\n  if (!cmd || cmd === \"--help\" || cmd === \"-h\") {\n    process.stdout.write(USAGE);\n    return;\n  }\n  switch (cmd) {\n    case \"validate-spoke\":\n      await runValidateSpoke(rest);\n      return;\n    case \"validate-app-roster\":\n      await runValidateAppRoster(rest);\n      return;\n    case \"package-next-lambda\":\n      await runPackageNextLambda(rest);\n      return;\n    default:\n      process.stderr.write(`augint: unknown command '${cmd}'\\n${USAGE}`);\n      process.exit(2);\n  }\n}\n\nmain().catch((err) => {\n  process.stderr.write(`augint: ${err instanceof Error ? err.message : String(err)}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;AAAA,OAAO,aAAa;AAKpB,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQd,eAAe,OAAsB;AACnC,QAAM,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,IAAI,QAAQ;AACnC,MAAI,CAAC,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC5C,YAAQ,OAAO,MAAM,KAAK;AAC1B;AAAA,EACF;AACA,UAAQ,KAAK;AAAA,IACX,KAAK;AACH,YAAM,iBAAiB,IAAI;AAC3B;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI;AAC/B;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI;AAC/B;AAAA,IACF;AACE,cAAQ,OAAO,MAAM,4BAA4B,GAAG;AAAA,EAAM,KAAK,EAAE;AACjE,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACpF,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import process from \"node:process\";\nimport { runValidateSpoke } from \"./validate-spoke.js\";\nimport { runPackageNextLambda } from \"./package-next-lambda.js\";\nimport { runValidateAppRoster } from \"./validate-app-roster.js\";\n\nconst USAGE = `Usage: augint <command> [args]\n\nCommands:\n  validate-spoke         Validate Prisma schema against canonical contract\n  validate-app-roster    Validate tenant app roster (infra YAML + apex JSON + optional spoke mirrors)\n  package-next-lambda    Package Next standalone build for Lambda\n`;\n\nasync function main(): Promise<void> {\n  const [, , cmd, ...rest] = process.argv;\n  if (!cmd || cmd === \"--help\" || cmd === \"-h\") {\n    process.stdout.write(USAGE);\n    return;\n  }\n  switch (cmd) {\n    case \"validate-spoke\":\n      await runValidateSpoke(rest);\n      return;\n    case \"validate-app-roster\":\n      await runValidateAppRoster(rest);\n      return;\n    case \"package-next-lambda\":\n      await runPackageNextLambda(rest);\n      return;\n    default:\n      process.stderr.write(`augint: unknown command '${cmd}'\\n${USAGE}`);\n      process.exit(2);\n  }\n}\n\nmain().catch((err) => {\n  process.stderr.write(`augint: ${err instanceof Error ? err.message : String(err)}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;AAAA,OAAO,aAAa;AAKpB,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQd,eAAe,OAAsB;AACnC,QAAM,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,IAAI,QAAQ;AACnC,MAAI,CAAC,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC5C,YAAQ,OAAO,MAAM,KAAK;AAC1B;AAAA,EACF;AACA,UAAQ,KAAK;AAAA,IACX,KAAK;AACH,YAAM,iBAAiB,IAAI;AAC3B;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI;AAC/B;AAAA,IACF,KAAK;AACH,YAAM,qBAAqB,IAAI;AAC/B;AAAA,IACF;AACE,cAAQ,OAAO,MAAM,4BAA4B,GAAG;AAAA,EAAM,KAAK,EAAE;AACjE,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;AAEA,KAAK,EAAE,MAAM,CAAC,QAAQ;AACpB,UAAQ,OAAO,MAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACpF,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/dist/prisma-parser.d.ts

@@ -1,11 +1,41 @@
+export type ParsedFieldAttribute = "id" | "unique";
+export type ParsedField = {
+    /** Field name as it appears in the model body. */
+    name: string;
+    /** Scalar type, e.g. `String`, `BigInt`, `Decimal`, `Json`, `DateTime`, `Boolean`, `Int`. */
+    type: string;
+    /** True if the type carried a trailing `?`. */
+    optional: boolean;
+    /** True if the type carried a trailing `[]` (relation list or scalar list). */
+    list: boolean;
+    /** Inline field attributes (`@id`, `@unique`). Relation attributes are ignored. */
+    attributes: Set<ParsedFieldAttribute>;
+};
 export type ParsedModel = {
     name: string;
-    fields: string[];
+    fields: ParsedField[];
+    /**
+     * Field names participating in a single-column or composite `@@unique([...])`.
+     * Each inner array is one composite. A single-column `@unique` is folded in
+     * automatically as `[fieldName]` so callers can ask one question.
+     */
+    uniqueGroups: string[][];
+    /**
+     * Field names participating in `@@index([...])`. Each inner array is one
+     * index.
+     */
+    indexGroups: string[][];
 };
 /**
- * Parse a Prisma schema file. Returns one ParsedModel per `model X { ... }`
- * block in declaration order. Field names are extracted from the start of
- * each non-blank, non-comment, non-attribute line inside the body.
+ * Parse a Prisma schema file. Comments are stripped first; the result
+ * preserves model declaration order.
  */
 export declare function parsePrismaSchema(source: string): ParsedModel[];
+/**
+ * True if the model has a single-column unique constraint on `field`.
+ * Composite uniques never count -- the canonical contract requires
+ * single-column lookup keys (the library handlers do `findUnique({ where:
+ * { token: ... } })`, which a composite wouldn't satisfy).
+ */
+export declare function modelHasSingleColumnUnique(model: ParsedModel, field: string): boolean;
 //# sourceMappingURL=prisma-parser.d.ts.map

package/dist/prisma-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-parser.d.ts","sourceRoot":"","sources":["../src/prisma-parser.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAmB/D"}
+{"version":3,"file":"prisma-parser.d.ts","sourceRoot":"","sources":["../src/prisma-parser.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,QAAQ,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG;IACxB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,IAAI,EAAE,OAAO,CAAC;IACd,mFAAmF;IACnF,UAAU,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC;CACzB,CAAC;AAmBF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CA+D/D;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAErF"}

package/dist/prisma-parser.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  modelHasSingleColumnUnique,
+  parsePrismaSchema
+} from "./chunk-ZQE3CYBR.js";
+export {
+  modelHasSingleColumnUnique,
+  parsePrismaSchema
+};
+//# sourceMappingURL=prisma-parser.js.map

package/dist/prisma-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/validate-spoke.d.ts

@@ -1,2 +1,27 @@
+import { loadManifest } from "@augmenting-integrations/platform/manifest";
+import { type ParsedModel } from "./prisma-parser.js";
+type Failure = {
+    kind: "missing_model";
+    model: string;
+} | {
+    kind: "missing_field";
+    model: string;
+    field: string;
+    reason: string;
+} | {
+    kind: "wrong_type";
+    model: string;
+    field: string;
+    actual: string;
+    expected: readonly string[];
+    reason: string;
+} | {
+    kind: "missing_unique";
+    model: string;
+    field: string;
+    reason: string;
+};
+export declare function validateSpokeAgainstParsed(manifest: ReturnType<typeof loadManifest>, parsed: ParsedModel[]): Failure[];
 export declare function runValidateSpoke(argv: string[]): Promise<void>;
+export {};
 //# sourceMappingURL=validate-spoke.d.ts.map

package/dist/validate-spoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-spoke.d.ts","sourceRoot":"","sources":["../src/validate-spoke.ts"],"names":[],"mappings":"AA0BA,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+FpE"}
+{"version":3,"file":"validate-spoke.d.ts","sourceRoot":"","sources":["../src/validate-spoke.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAG1E,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAkB5B,KAAK,OAAO,GACR;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvE;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAqB7E,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACzC,MAAM,EAAE,WAAW,EAAE,GACpB,OAAO,EAAE,CA+CX;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkEpE"}

package/dist/validate-spoke.js

@@ -1,8 +1,12 @@
 #!/usr/bin/env node
 import {
-  runValidateSpoke
-} from "./chunk-A7IIB34G.js";
+  runValidateSpoke,
+  validateSpokeAgainstParsed
+} from "./chunk-SYUDHJI7.js";
+import "./chunk-ZQE3CYBR.js";
+import "./chunk-DN2IENY7.js";
 export {
-  runValidateSpoke
+  runValidateSpoke,
+  validateSpokeAgainstParsed
 };
 //# sourceMappingURL=validate-spoke.js.map

package/package.json

@@ -1,12 +1,26 @@
 {
   "name": "@augmenting-integrations/deploy-tools",
-  "version": "8.7.0",
+  "version": "8.9.0",
   "description": "Augint platform deploy tooling. `augint validate-spoke` checks Prisma canonical schema against the app manifest; `augint package-next-lambda` packages a Next standalone build for Lambda. Shared across every spoke + apex repo so deploy logic isn't copy/pasted into each app's CI workflow.",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
   "type": "module",
+  "exports": {
+    "./prisma-parser": {
+      "types": "./dist/prisma-parser.d.ts",
+      "default": "./dist/prisma-parser.js"
+    },
+    "./validate-spoke": {
+      "types": "./dist/validate-spoke.d.ts",
+      "default": "./dist/validate-spoke.js"
+    },
+    "./canonical/schema": {
+      "types": "./dist/canonical/schema.d.ts",
+      "default": "./dist/canonical/schema.js"
+    }
+  },
   "bin": {
     "augint": "./dist/cli.js",
     "augint-validate-spoke": "./dist/validate-spoke.js",
@@ -19,14 +33,14 @@
     "README.md"
   ],
   "dependencies": {
-    "@augmenting-integrations/platform": "8.7.0"
+    "@augmenting-integrations/platform": "8.9.0"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",
     "vitest": "^4.1.5",
-    "@augmenting-integrations/platform": "8.7.0"
+    "@augmenting-integrations/platform": "8.9.0"
   },
   "scripts": {
     "build": "tsup",

package/dist/chunk-A7IIB34G.js

@@ -1,230 +0,0 @@
-#!/usr/bin/env node
-
-// src/validate-spoke.ts
-import { readFileSync, existsSync } from "fs";
-import { resolve, join } from "path";
-import process from "process";
-import { loadManifest } from "@augmenting-integrations/platform/manifest";
-
-// src/canonical/schema.ts
-function requiredModelsForManifest(manifest) {
-  const out = [];
-  out.push({
-    name: "User",
-    fields: [
-      { name: "id", reason: "JIT lookup + impersonation token claims" },
-      { name: "email", reason: "JIT email lookup + auto-promote-to-admin" },
-      { name: "name", reason: "/api/auth/me, UserMenu display" },
-      { name: "role", reason: "JIT role resolution + admin gating" },
-      { name: "is_active", reason: "/api/auth/me response shape" },
-      { name: "credit_balance", reason: "JIT initial balance + /api/auth/me" },
-      { name: "password", reason: "schema-inherited not-null filler at JIT create" },
-      { name: "parent_id", reason: "invitation auto-accept sets parent_id from invite" },
-      { name: "created_at", reason: "audit / ordering" },
-      { name: "updated_at", reason: "audit / ordering" }
-    ]
-  });
-  if (manifest.features.billing) {
-    out[0].fields.push(
-      { name: "stripe_customer_id", reason: "createBillingHandlers user shape" },
-      {
-        name: "stripe_default_payment_method",
-        reason: "createBillingHandlers user shape"
-      },
-      {
-        name: "stripe_default_payment_method_display",
-        reason: "createBillingHandlers user shape"
-      },
-      { name: "auto_recharge_enabled", reason: "/api/billing/auto-recharge" },
-      { name: "auto_recharge_threshold", reason: "/api/billing/auto-recharge" },
-      { name: "auto_recharge_amount", reason: "/api/billing/auto-recharge" }
-    );
-    out.push({
-      name: "PaymentMethod",
-      fields: [
-        { name: "id", reason: "createBillingHandlers row shape" },
-        { name: "user_id", reason: "createBillingHandlers row shape" },
-        {
-          name: "stripe_payment_method_id",
-          reason: "createBillingHandlers row shape (unique key)"
-        },
-        { name: "brand", reason: "createBillingHandlers row shape" },
-        { name: "last4", reason: "createBillingHandlers row shape" },
-        { name: "exp_month", reason: "createBillingHandlers row shape" },
-        { name: "exp_year", reason: "createBillingHandlers row shape" },
-        { name: "is_default", reason: "createBillingHandlers row shape" },
-        { name: "created_at", reason: "createBillingHandlers row shape" }
-      ]
-    });
-    out.push({
-      name: "CreditTransaction",
-      fields: [
-        { name: "id", reason: "createBillingHandlers row shape" },
-        { name: "user_id", reason: "createBillingHandlers row shape" },
-        { name: "type", reason: "createBillingHandlers row shape" },
-        { name: "amount", reason: "createBillingHandlers row shape" },
-        { name: "description", reason: "createBillingHandlers row shape" },
-        {
-          name: "stripe_payment_intent_id",
-          reason: "createBillingHandlers webhook idempotency"
-        },
-        { name: "payment_method_display", reason: "createBillingHandlers row shape" },
-        { name: "created_at", reason: "createBillingHandlers row shape" }
-      ]
-    });
-  }
-  if (manifest.features.invitations) {
-    out.push({
-      name: "Invitation",
-      fields: [
-        { name: "id", reason: "createInvitationHandlers + JIT invitation accept" },
-        { name: "token", reason: "createInvitationHandlers findUnique" },
-        { name: "email", reason: "JIT invitation lookup" },
-        { name: "intended_role", reason: "JIT role inheritance" },
-        { name: "parent_id", reason: "JIT parent_id inheritance" },
-        { name: "expires_at", reason: "JIT expiry filter" },
-        { name: "accepted_at", reason: "JIT acceptance toggle" },
-        {
-          name: "accepted_by_user_id",
-          reason: "JIT writes acceptance with new user id"
-        },
-        { name: "created_at", reason: "ordering" }
-      ]
-    });
-  }
-  if (manifest.features.impersonation || manifest.features.invitations) {
-    out.push({
-      name: "ActivityLog",
-      fields: [
-        { name: "id", reason: "audit row" },
-        { name: "user_id", reason: "createImpersonateHandlers audit writes" },
-        { name: "action", reason: "createImpersonateHandlers audit writes" },
-        { name: "metadata", reason: "createImpersonateHandlers audit writes" },
-        { name: "created_at", reason: "audit row" }
-      ]
-    });
-  }
-  return out;
-}
-
-// src/prisma-parser.ts
-function parsePrismaSchema(source) {
-  const out = [];
-  const stripped = source.replace(/\/\/[^\n]*/g, "");
-  const modelRegex = /model\s+([A-Za-z_][A-Za-z0-9_]*)\s*\{([\s\S]*?)\}/g;
-  for (const match of stripped.matchAll(modelRegex)) {
-    const name = match[1];
-    const body = match[2];
-    const fields = [];
-    for (const rawLine of body.split("\n")) {
-      const line = rawLine.trim();
-      if (line === "") continue;
-      if (line.startsWith("@@")) continue;
-      if (line.startsWith("@")) continue;
-      const fieldMatch = /^([A-Za-z_][A-Za-z0-9_]*)\s+/.exec(line);
-      if (fieldMatch) fields.push(fieldMatch[1]);
-    }
-    out.push({ name, fields });
-  }
-  return out;
-}
-
-// src/validate-spoke.ts
-async function runValidateSpoke(argv) {
-  let cwd = process.cwd();
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === "--cwd" || a === "--root") {
-      const next = argv[i + 1];
-      if (next) {
-        cwd = resolve(next);
-        i++;
-      }
-    }
-  }
-  let manifest;
-  try {
-    manifest = loadManifest({ cwd });
-  } catch (err) {
-    process.stderr.write(`validate-spoke: ${err.message}
-`);
-    process.exit(1);
-  }
-  if (manifest.dataPlane.type === "none") {
-    process.stdout.write(
-      `validate-spoke: ${manifest.appSlug} has dataPlane.type=none; nothing to validate.
-`
-    );
-    return;
-  }
-  const schemaPath = join(cwd, "prisma", "schema.prisma");
-  if (!existsSync(schemaPath)) {
-    process.stderr.write(
-      `validate-spoke: prisma/schema.prisma not found at ${schemaPath}
-Manifest declares a data plane but the schema file is missing.
-`
-    );
-    process.exit(1);
-  }
-  const schemaSrc = readFileSync(schemaPath, "utf8");
-  const parsed = parsePrismaSchema(schemaSrc);
-  const required = requiredModelsForManifest(manifest);
-  const failures = [];
-  for (const req of required) {
-    const found = parsed.find((m) => m.name === req.name);
-    if (!found) {
-      failures.push({ kind: "missing_model", model: req.name });
-      continue;
-    }
-    const has = new Set(found.fields);
-    for (const field of req.fields) {
-      if (!has.has(field.name)) {
-        failures.push({
-          kind: "missing_field",
-          model: req.name,
-          field: field.name,
-          reason: field.reason
-        });
-      }
-    }
-  }
-  if (failures.length > 0) {
-    process.stderr.write(
-      `validate-spoke: ${failures.length} canonical schema violation(s) in ${schemaPath}:
-`
-    );
-    for (const f of failures) {
-      if (f.kind === "missing_model") {
-        process.stderr.write(`  missing model: ${f.model}
-`);
-      } else {
-        process.stderr.write(
-          `  ${f.model}.${f.field} missing  (required by: ${f.reason})
-`
-        );
-      }
-    }
-    process.stderr.write(
-      "\nThe app.manifest.json features list expects the listed canonical fields.\nEither add them to prisma/schema.prisma or turn the feature off in the\nmanifest. See @augmenting-integrations/deploy-tools README for the contract.\n"
-    );
-    process.exit(1);
-  }
-  process.stdout.write(
-    `validate-spoke: OK -- ${manifest.appSlug} schema satisfies the canonical contract for features: ` + Object.entries(manifest.features).filter(([, v]) => v).map(([k]) => k).join(", ") + "\n"
-  );
-}
-var isDirectInvocation = import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith("validate-spoke.js");
-if (isDirectInvocation) {
-  runValidateSpoke(process.argv.slice(2)).catch((err) => {
-    process.stderr.write(
-      `validate-spoke: ${err instanceof Error ? err.message : String(err)}
-`
-    );
-    process.exit(1);
-  });
-}
-
-export {
-  runValidateSpoke
-};
-//# sourceMappingURL=chunk-A7IIB34G.js.map

package/dist/chunk-A7IIB34G.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/validate-spoke.ts","../src/canonical/schema.ts","../src/prisma-parser.ts"],"sourcesContent":["import { readFileSync, existsSync } from \"node:fs\";\nimport { resolve, join } from \"node:path\";\nimport process from \"node:process\";\n\nimport { loadManifest } from \"@augmenting-integrations/platform/manifest\";\n\nimport { requiredModelsForManifest } from \"./canonical/schema.js\";\nimport { parsePrismaSchema } from \"./prisma-parser.js\";\n\n// =============================================================================\n// `augint validate-spoke`\n//\n// Inputs:\n//   - app.manifest.json (validated by platform/manifest loader)\n//   - prisma/schema.prisma (parsed locally)\n//\n// Output:\n//   - Exit 0 on success with a one-line \"OK\" summary.\n//   - Exit 1 on validation failure with a field-by-field list of what's\n//     missing and WHY each missing field is required by the library\n//     handlers it serves.\n//\n// Apex apps with `dataPlane.type === \"none\"` skip Prisma validation\n// entirely (no schema file expected). Spokes always validate.\n// =============================================================================\n\nexport async function runValidateSpoke(argv: string[]): Promise<void> {\n  let cwd = process.cwd();\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    if (a === \"--cwd\" || a === \"--root\") {\n      const next = argv[i + 1];\n      if (next) {\n        cwd = resolve(next);\n        i++;\n      }\n    }\n  }\n\n  let manifest: ReturnType<typeof loadManifest>;\n  try {\n    manifest = loadManifest({ cwd });\n  } catch (err) {\n    process.stderr.write(`validate-spoke: ${(err as Error).message}\\n`);\n    process.exit(1);\n  }\n\n  // Apex auth-broker has no data plane -- nothing to validate.\n  if (manifest.dataPlane.type === \"none\") {\n    process.stdout.write(\n      `validate-spoke: ${manifest.appSlug} has dataPlane.type=none; nothing to validate.\\n`,\n    );\n    return;\n  }\n\n  const schemaPath = join(cwd, \"prisma\", \"schema.prisma\");\n  if (!existsSync(schemaPath)) {\n    process.stderr.write(\n      `validate-spoke: prisma/schema.prisma not found at ${schemaPath}\\n` +\n        \"Manifest declares a data plane but the schema file is missing.\\n\",\n    );\n    process.exit(1);\n  }\n\n  const schemaSrc = readFileSync(schemaPath, \"utf8\");\n  const parsed = parsePrismaSchema(schemaSrc);\n  const required = requiredModelsForManifest(manifest);\n\n  type Failure =\n    | { kind: \"missing_model\"; model: string }\n    | { kind: \"missing_field\"; model: string; field: string; reason: string };\n  const failures: Failure[] = [];\n\n  for (const req of required) {\n    const found = parsed.find((m) => m.name === req.name);\n    if (!found) {\n      failures.push({ kind: \"missing_model\", model: req.name });\n      continue;\n    }\n    const has = new Set(found.fields);\n    for (const field of req.fields) {\n      if (!has.has(field.name)) {\n        failures.push({\n          kind: \"missing_field\",\n          model: req.name,\n          field: field.name,\n          reason: field.reason,\n        });\n      }\n    }\n  }\n\n  if (failures.length > 0) {\n    process.stderr.write(\n      `validate-spoke: ${failures.length} canonical schema violation(s) in ${schemaPath}:\\n`,\n    );\n    for (const f of failures) {\n      if (f.kind === \"missing_model\") {\n        process.stderr.write(`  missing model: ${f.model}\\n`);\n      } else {\n        process.stderr.write(\n          `  ${f.model}.${f.field} missing  (required by: ${f.reason})\\n`,\n        );\n      }\n    }\n    process.stderr.write(\n      \"\\nThe app.manifest.json features list expects the listed canonical fields.\\n\" +\n        \"Either add them to prisma/schema.prisma or turn the feature off in the\\n\" +\n        \"manifest. See @augmenting-integrations/deploy-tools README for the contract.\\n\",\n    );\n    process.exit(1);\n  }\n\n  process.stdout.write(\n    `validate-spoke: OK -- ${manifest.appSlug} schema satisfies the canonical contract for features: ` +\n      Object.entries(manifest.features)\n        .filter(([, v]) => v)\n        .map(([k]) => k)\n        .join(\", \") +\n      \"\\n\",\n  );\n}\n\nconst isDirectInvocation =\n  import.meta.url === `file://${process.argv[1]}` ||\n  process.argv[1]?.endsWith(\"validate-spoke.js\");\nif (isDirectInvocation) {\n  runValidateSpoke(process.argv.slice(2)).catch((err) => {\n    process.stderr.write(\n      `validate-spoke: ${err instanceof Error ? err.message : String(err)}\\n`,\n    );\n    process.exit(1);\n  });\n}\n","// =============================================================================\n// Canonical schema contract.\n//\n// Encodes the Prisma model + field names that the library handler factories\n// read at runtime. The validator (`augint validate-spoke`) parses the\n// spoke's prisma/schema.prisma and asserts that every required model + field\n// for the manifest's enabled features is present by name.\n//\n// Drift in canonical naming is the most common class of integration bug\n// (e.g. `password` vs `password_hash`). The validator catches it before\n// `next build` runs.\n// =============================================================================\n\nimport type { AppManifest } from \"@augmenting-integrations/platform/manifest\";\n\nexport type RequiredField = {\n  name: string;\n  /**\n   * Reason this field is required (shown in the error message). Helps\n   * developers understand WHY the validator cares, not just WHAT it\n   * found missing.\n   */\n  reason: string;\n};\n\nexport type RequiredModel = {\n  name: string;\n  fields: RequiredField[];\n};\n\n/**\n * Returns the list of required models for a given manifest, in priority\n * order. Each model lists the fields its library consumers read.\n *\n * `User` is always required.\n * `Invitation` is required when features.invitations.\n * `PaymentMethod` + `CreditTransaction` are required when features.billing.\n * `ActivityLog` is required when features.impersonation or features.invitations.\n */\nexport function requiredModelsForManifest(manifest: AppManifest): RequiredModel[] {\n  const out: RequiredModel[] = [];\n\n  out.push({\n    name: \"User\",\n    fields: [\n      { name: \"id\", reason: \"JIT lookup + impersonation token claims\" },\n      { name: \"email\", reason: \"JIT email lookup + auto-promote-to-admin\" },\n      { name: \"name\", reason: \"/api/auth/me, UserMenu display\" },\n      { name: \"role\", reason: \"JIT role resolution + admin gating\" },\n      { name: \"is_active\", reason: \"/api/auth/me response shape\" },\n      { name: \"credit_balance\", reason: \"JIT initial balance + /api/auth/me\" },\n      { name: \"password\", reason: \"schema-inherited not-null filler at JIT create\" },\n      { name: \"parent_id\", reason: \"invitation auto-accept sets parent_id from invite\" },\n      { name: \"created_at\", reason: \"audit / ordering\" },\n      { name: \"updated_at\", reason: \"audit / ordering\" },\n    ],\n  });\n\n  if (manifest.features.billing) {\n    out[0]!.fields.push(\n      { name: \"stripe_customer_id\", reason: \"createBillingHandlers user shape\" },\n      {\n        name: \"stripe_default_payment_method\",\n        reason: \"createBillingHandlers user shape\",\n      },\n      {\n        name: \"stripe_default_payment_method_display\",\n        reason: \"createBillingHandlers user shape\",\n      },\n      { name: \"auto_recharge_enabled\", reason: \"/api/billing/auto-recharge\" },\n      { name: \"auto_recharge_threshold\", reason: \"/api/billing/auto-recharge\" },\n      { name: \"auto_recharge_amount\", reason: \"/api/billing/auto-recharge\" },\n    );\n\n    out.push({\n      name: \"PaymentMethod\",\n      fields: [\n        { name: \"id\", reason: \"createBillingHandlers row shape\" },\n        { name: \"user_id\", reason: \"createBillingHandlers row shape\" },\n        {\n          name: \"stripe_payment_method_id\",\n          reason: \"createBillingHandlers row shape (unique key)\",\n        },\n        { name: \"brand\", reason: \"createBillingHandlers row shape\" },\n        { name: \"last4\", reason: \"createBillingHandlers row shape\" },\n        { name: \"exp_month\", reason: \"createBillingHandlers row shape\" },\n        { name: \"exp_year\", reason: \"createBillingHandlers row shape\" },\n        { name: \"is_default\", reason: \"createBillingHandlers row shape\" },\n        { name: \"created_at\", reason: \"createBillingHandlers row shape\" },\n      ],\n    });\n    out.push({\n      name: \"CreditTransaction\",\n      fields: [\n        { name: \"id\", reason: \"createBillingHandlers row shape\" },\n        { name: \"user_id\", reason: \"createBillingHandlers row shape\" },\n        { name: \"type\", reason: \"createBillingHandlers row shape\" },\n        { name: \"amount\", reason: \"createBillingHandlers row shape\" },\n        { name: \"description\", reason: \"createBillingHandlers row shape\" },\n        {\n          name: \"stripe_payment_intent_id\",\n          reason: \"createBillingHandlers webhook idempotency\",\n        },\n        { name: \"payment_method_display\", reason: \"createBillingHandlers row shape\" },\n        { name: \"created_at\", reason: \"createBillingHandlers row shape\" },\n      ],\n    });\n  }\n\n  if (manifest.features.invitations) {\n    out.push({\n      name: \"Invitation\",\n      fields: [\n        { name: \"id\", reason: \"createInvitationHandlers + JIT invitation accept\" },\n        { name: \"token\", reason: \"createInvitationHandlers findUnique\" },\n        { name: \"email\", reason: \"JIT invitation lookup\" },\n        { name: \"intended_role\", reason: \"JIT role inheritance\" },\n        { name: \"parent_id\", reason: \"JIT parent_id inheritance\" },\n        { name: \"expires_at\", reason: \"JIT expiry filter\" },\n        { name: \"accepted_at\", reason: \"JIT acceptance toggle\" },\n        {\n          name: \"accepted_by_user_id\",\n          reason: \"JIT writes acceptance with new user id\",\n        },\n        { name: \"created_at\", reason: \"ordering\" },\n      ],\n    });\n  }\n\n  if (manifest.features.impersonation || manifest.features.invitations) {\n    out.push({\n      name: \"ActivityLog\",\n      fields: [\n        { name: \"id\", reason: \"audit row\" },\n        { name: \"user_id\", reason: \"createImpersonateHandlers audit writes\" },\n        { name: \"action\", reason: \"createImpersonateHandlers audit writes\" },\n        { name: \"metadata\", reason: \"createImpersonateHandlers audit writes\" },\n        { name: \"created_at\", reason: \"audit row\" },\n      ],\n    });\n  }\n\n  return out;\n}\n","// =============================================================================\n// Minimal Prisma schema parser. Extracts model names and the field names\n// declared inside each model body. Sufficient to validate that the spoke's\n// schema has the canonical models + fields the library handler factories\n// read.\n//\n// We deliberately do NOT validate Prisma TYPES (BigInt vs Int, Decimal vs\n// Int, etc.). The platform adapter in src/platform/repositories.ts widens\n// to structural shapes; runtime correctness depends on the canonical names\n// being present. Type drift is caught by the spoke's own `tsc` pass when\n// it tries to construct adapters against an actual generated client.\n// =============================================================================\n\nexport type ParsedModel = {\n  name: string;\n  fields: string[];\n};\n\n/**\n * Parse a Prisma schema file. Returns one ParsedModel per `model X { ... }`\n * block in declaration order. Field names are extracted from the start of\n * each non-blank, non-comment, non-attribute line inside the body.\n */\nexport function parsePrismaSchema(source: string): ParsedModel[] {\n  const out: ParsedModel[] = [];\n  const stripped = source.replace(/\\/\\/[^\\n]*/g, \"\"); // line comments\n  const modelRegex = /model\\s+([A-Za-z_][A-Za-z0-9_]*)\\s*\\{([\\s\\S]*?)\\}/g;\n  for (const match of stripped.matchAll(modelRegex)) {\n    const name = match[1]!;\n    const body = match[2]!;\n    const fields: string[] = [];\n    for (const rawLine of body.split(\"\\n\")) {\n      const line = rawLine.trim();\n      if (line === \"\") continue;\n      if (line.startsWith(\"@@\")) continue;\n      if (line.startsWith(\"@\")) continue;\n      const fieldMatch = /^([A-Za-z_][A-Za-z0-9_]*)\\s+/.exec(line);\n      if (fieldMatch) fields.push(fieldMatch[1]!);\n    }\n    out.push({ name, fields });\n  }\n  return out;\n}\n"],"mappings":";;;AAAA,SAAS,cAAc,kBAAkB;AACzC,SAAS,SAAS,YAAY;AAC9B,OAAO,aAAa;AAEpB,SAAS,oBAAoB;;;ACmCtB,SAAS,0BAA0B,UAAwC;AAChF,QAAM,MAAuB,CAAC;AAE9B,MAAI,KAAK;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,EAAE,MAAM,MAAM,QAAQ,0CAA0C;AAAA,MAChE,EAAE,MAAM,SAAS,QAAQ,2CAA2C;AAAA,MACpE,EAAE,MAAM,QAAQ,QAAQ,iCAAiC;AAAA,MACzD,EAAE,MAAM,QAAQ,QAAQ,qCAAqC;AAAA,MAC7D,EAAE,MAAM,aAAa,QAAQ,8BAA8B;AAAA,MAC3D,EAAE,MAAM,kBAAkB,QAAQ,qCAAqC;AAAA,MACvE,EAAE,MAAM,YAAY,QAAQ,iDAAiD;AAAA,MAC7E,EAAE,MAAM,aAAa,QAAQ,oDAAoD;AAAA,MACjF,EAAE,MAAM,cAAc,QAAQ,mBAAmB;AAAA,MACjD,EAAE,MAAM,cAAc,QAAQ,mBAAmB;AAAA,IACnD;AAAA,EACF,CAAC;AAED,MAAI,SAAS,SAAS,SAAS;AAC7B,QAAI,CAAC,EAAG,OAAO;AAAA,MACb,EAAE,MAAM,sBAAsB,QAAQ,mCAAmC;AAAA,MACzE;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,EAAE,MAAM,yBAAyB,QAAQ,6BAA6B;AAAA,MACtE,EAAE,MAAM,2BAA2B,QAAQ,6BAA6B;AAAA,MACxE,EAAE,MAAM,wBAAwB,QAAQ,6BAA6B;AAAA,IACvE;AAEA,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,kCAAkC;AAAA,QACxD,EAAE,MAAM,WAAW,QAAQ,kCAAkC;AAAA,QAC7D;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,MAAM,SAAS,QAAQ,kCAAkC;AAAA,QAC3D,EAAE,MAAM,SAAS,QAAQ,kCAAkC;AAAA,QAC3D,EAAE,MAAM,aAAa,QAAQ,kCAAkC;AAAA,QAC/D,EAAE,MAAM,YAAY,QAAQ,kCAAkC;AAAA,QAC9D,EAAE,MAAM,cAAc,QAAQ,kCAAkC;AAAA,QAChE,EAAE,MAAM,cAAc,QAAQ,kCAAkC;AAAA,MAClE;AAAA,IACF,CAAC;AACD,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,kCAAkC;AAAA,QACxD,EAAE,MAAM,WAAW,QAAQ,kCAAkC;AAAA,QAC7D,EAAE,MAAM,QAAQ,QAAQ,kCAAkC;AAAA,QAC1D,EAAE,MAAM,UAAU,QAAQ,kCAAkC;AAAA,QAC5D,EAAE,MAAM,eAAe,QAAQ,kCAAkC;AAAA,QACjE;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,MAAM,0BAA0B,QAAQ,kCAAkC;AAAA,QAC5E,EAAE,MAAM,cAAc,QAAQ,kCAAkC;AAAA,MAClE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,SAAS,aAAa;AACjC,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,mDAAmD;AAAA,QACzE,EAAE,MAAM,SAAS,QAAQ,sCAAsC;AAAA,QAC/D,EAAE,MAAM,SAAS,QAAQ,wBAAwB;AAAA,QACjD,EAAE,MAAM,iBAAiB,QAAQ,uBAAuB;AAAA,QACxD,EAAE,MAAM,aAAa,QAAQ,4BAA4B;AAAA,QACzD,EAAE,MAAM,cAAc,QAAQ,oBAAoB;AAAA,QAClD,EAAE,MAAM,eAAe,QAAQ,wBAAwB;AAAA,QACvD;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,MAAM,cAAc,QAAQ,WAAW;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,SAAS,iBAAiB,SAAS,SAAS,aAAa;AACpE,QAAI,KAAK;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,QACN,EAAE,MAAM,MAAM,QAAQ,YAAY;AAAA,QAClC,EAAE,MAAM,WAAW,QAAQ,yCAAyC;AAAA,QACpE,EAAE,MAAM,UAAU,QAAQ,yCAAyC;AAAA,QACnE,EAAE,MAAM,YAAY,QAAQ,yCAAyC;AAAA,QACrE,EAAE,MAAM,cAAc,QAAQ,YAAY;AAAA,MAC5C;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;;;ACxHO,SAAS,kBAAkB,QAA+B;AAC/D,QAAM,MAAqB,CAAC;AAC5B,QAAM,WAAW,OAAO,QAAQ,eAAe,EAAE;AACjD,QAAM,aAAa;AACnB,aAAW,SAAS,SAAS,SAAS,UAAU,GAAG;AACjD,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,SAAmB,CAAC;AAC1B,eAAW,WAAW,KAAK,MAAM,IAAI,GAAG;AACtC,YAAM,OAAO,QAAQ,KAAK;AAC1B,UAAI,SAAS,GAAI;AACjB,UAAI,KAAK,WAAW,IAAI,EAAG;AAC3B,UAAI,KAAK,WAAW,GAAG,EAAG;AAC1B,YAAM,aAAa,+BAA+B,KAAK,IAAI;AAC3D,UAAI,WAAY,QAAO,KAAK,WAAW,CAAC,CAAE;AAAA,IAC5C;AACA,QAAI,KAAK,EAAE,MAAM,OAAO,CAAC;AAAA,EAC3B;AACA,SAAO;AACT;;;AFhBA,eAAsB,iBAAiB,MAA+B;AACpE,MAAI,MAAM,QAAQ,IAAI;AACtB,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,IAAI,KAAK,CAAC;AAChB,QAAI,MAAM,WAAW,MAAM,UAAU;AACnC,YAAM,OAAO,KAAK,IAAI,CAAC;AACvB,UAAI,MAAM;AACR,cAAM,QAAQ,IAAI;AAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,aAAa,EAAE,IAAI,CAAC;AAAA,EACjC,SAAS,KAAK;AACZ,YAAQ,OAAO,MAAM,mBAAoB,IAAc,OAAO;AAAA,CAAI;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,UAAU,SAAS,QAAQ;AACtC,YAAQ,OAAO;AAAA,MACb,mBAAmB,SAAS,OAAO;AAAA;AAAA,IACrC;AACA;AAAA,EACF;AAEA,QAAM,aAAa,KAAK,KAAK,UAAU,eAAe;AACtD,MAAI,CAAC,WAAW,UAAU,GAAG;AAC3B,YAAQ,OAAO;AAAA,MACb,qDAAqD,UAAU;AAAA;AAAA;AAAA,IAEjE;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,YAAY,aAAa,YAAY,MAAM;AACjD,QAAM,SAAS,kBAAkB,SAAS;AAC1C,QAAM,WAAW,0BAA0B,QAAQ;AAKnD,QAAM,WAAsB,CAAC;AAE7B,aAAW,OAAO,UAAU;AAC1B,UAAM,QAAQ,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;AACpD,QAAI,CAAC,OAAO;AACV,eAAS,KAAK,EAAE,MAAM,iBAAiB,OAAO,IAAI,KAAK,CAAC;AACxD;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,eAAW,SAAS,IAAI,QAAQ;AAC9B,UAAI,CAAC,IAAI,IAAI,MAAM,IAAI,GAAG;AACxB,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,OAAO,IAAI;AAAA,UACX,OAAO,MAAM;AAAA,UACb,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS,SAAS,GAAG;AACvB,YAAQ,OAAO;AAAA,MACb,mBAAmB,SAAS,MAAM,qCAAqC,UAAU;AAAA;AAAA,IACnF;AACA,eAAW,KAAK,UAAU;AACxB,UAAI,EAAE,SAAS,iBAAiB;AAC9B,gBAAQ,OAAO,MAAM,oBAAoB,EAAE,KAAK;AAAA,CAAI;AAAA,MACtD,OAAO;AACL,gBAAQ,OAAO;AAAA,UACb,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,2BAA2B,EAAE,MAAM;AAAA;AAAA,QAC5D;AAAA,MACF;AAAA,IACF;AACA,YAAQ,OAAO;AAAA,MACb;AAAA,IAGF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,UAAQ,OAAO;AAAA,IACb,yBAAyB,SAAS,OAAO,4DACvC,OAAO,QAAQ,SAAS,QAAQ,EAC7B,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EACnB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EACd,KAAK,IAAI,IACZ;AAAA,EACJ;AACF;AAEA,IAAM,qBACJ,YAAY,QAAQ,UAAU,QAAQ,KAAK,CAAC,CAAC,MAC7C,QAAQ,KAAK,CAAC,GAAG,SAAS,mBAAmB;AAC/C,IAAI,oBAAoB;AACtB,mBAAiB,QAAQ,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ;AACrD,YAAQ,OAAO;AAAA,MACb,mBAAmB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,IACrE;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":[]}