clivly 0.10.9 → 0.11.0

package/{entity-config-bC3DX9f1.mjs → entity-config-Ccfb2IL9.mjs}

@@ -1,4 +1,4 @@
-import { a as _enum, c as literal, d as strictObject, f as string, i as projectionSchema, l as number, o as array, p as union, r as identityRefs, s as boolean, t as BASE_REF, u as record } from "./projection-CSGJbZlZ.mjs";
+import { a as _enum, c as literal, d as strictObject, f as string, i as projectionSchema, l as number, o as array, p as union, r as identityRefs, s as boolean, t as BASE_REF, u as record } from "./projection-DvNewmI1.mjs";
 //#region ../core/src/schema-meta.ts
 /**
 * Accessors over a discovered table's schema-v2 metadata.
@@ -399,6 +399,7 @@ const CANONICAL_FIELDS = {
 	contact: [
 		"name",
 		"email",
+		"phone",
 		"title",
 		"status"
 	],
@@ -406,7 +407,9 @@ const CANONICAL_FIELDS = {
 		"name",
 		"domain",
 		"industry",
-		"size"
+		"size",
+		"email",
+		"phone"
 	],
 	deal: [
 		"name",
@@ -504,8 +507,16 @@ const filterValueSchema = union([
 	boolean(),
 	filterOperatorsSchema
 ]);
+/**
+* A raw SQL predicate fragment. Kept as a *string* (not a query-builder callback)
+* so the whole config stays JSON-serializable — it can be persisted into
+* `crm_entity_mappings` and shipped to the cloud unchanged. Embedded-only in
+* practice; not validated against the schema.
+*/
+const rawFilterSchema = strictObject({ $raw: string().min(1) });
+const columnFilterSchema = record(string(), filterValueSchema);
 /** `$raw` is a reserved key; a column literally named `$raw` is not addressable. */
-const filterSchema = union([strictObject({ $raw: string().min(1) }), record(string(), filterValueSchema)]);
+const filterSchema = union([rawFilterSchema, columnFilterSchema]);
 /**
 * How the link between two entities is expressed in the host schema:
 * - `fkOn: "company"` — FK lives on the company table (e.g. organizations.owner_id)
@@ -556,6 +567,20 @@ const entitySchema = strictObject({
 	/** Named relationships to other entities in this config. */
 	relationships: record(string(), relationshipSchema).optional(),
 	/**
+	* Treat rows from this entity as their company's point of contact.
+	*
+	* Opt-in, and only meaningful on a `contact` entity that resolves a company.
+	* Hosts whose schema knows who owns an account (an `owner` role on a
+	* membership table, say) can declare a narrow entity for those rows and have
+	* the CRM keep each company's point of contact current automatically.
+	*
+	* Sync only manages companies nobody has intervened on: the moment a person
+	* picks a point of contact in the CRM, that company is stamped and left
+	* alone. Without that the user's choice would be silently reverted on the
+	* next run — see `syncPrimaryContacts` and `host-owned-fields.ts`.
+	*/
+	isPrimaryContact: boolean().optional(),
+	/**
 	* For a "custom" entity, the crm_object_types row this materializes into.
 	* Server-generated, so pasting one into config couples the file to a
 	* specific workspace. Prefer declaring `objectType` and letting

package/index.cjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_entity_config = require("./entity-config-C2MfIDL2.cjs");
+const require_entity_config = require("./entity-config-BI4RYNKL.cjs");
 require("./mapping-score-CaB3F4Uu.cjs");
 const require_internal_entity_heuristics = require("./internal-entity-heuristics.cjs");
-const require_sdk = require("./sdk-BIYu0N3V.cjs");
+const require_sdk = require("./sdk-BvGSxBQc.cjs");
 let node_child_process = require("node:child_process");
 let node_fs = require("node:fs");
 let node_module = require("node:module");
@@ -1188,8 +1188,10 @@ function siblingDbCandidates(schemaPath) {
 	return SIBLING_DB_NAMES.map((name) => (0, node_path.join)(dir, name));
 }
 function parentDbCandidates(schemaPath, cwd) {
-	const parent = (0, node_path.dirname)(isDirectory(schemaPath) ? schemaPath : (0, node_path.dirname)(schemaPath));
-	const relativeToRoot = (0, node_path.relative)((0, node_path.resolve)(cwd), (0, node_path.resolve)(parent));
+	const dir = isDirectory(schemaPath) ? schemaPath : (0, node_path.dirname)(schemaPath);
+	const parent = (0, node_path.dirname)(dir);
+	const root = (0, node_path.resolve)(cwd);
+	const relativeToRoot = (0, node_path.relative)(root, (0, node_path.resolve)(parent));
 	if (!(relativeToRoot === "" || !relativeToRoot.startsWith(".."))) return [];
 	return SIBLING_DB_NAMES.map((name) => (0, node_path.join)(parent, name));
 }
@@ -1866,7 +1868,8 @@ function rankCandidates$1(tables, concept, contact = null) {
 		if (usable !== 0) return usable;
 		const aPromoted = promotedNames.has(a.t.tableName);
 		if (aPromoted !== promotedNames.has(b.t.tableName)) {
-			if (require_internal_entity_heuristics.isFrameworkTable((aPromoted ? b.t : a.t).tableName)) return aPromoted ? -1 : 1;
+			const loser = aPromoted ? b.t : a.t;
+			if (require_internal_entity_heuristics.isFrameworkTable(loser.tableName)) return aPromoted ? -1 : 1;
 		}
 		const exact = Number(b.m.exact) - Number(a.m.exact);
 		if (exact !== 0) return exact;
@@ -4053,13 +4056,14 @@ function defaultReadFile(path) {
 }
 function resolveEnvPath(cwd) {
 	const framework = detectFramework(readDeps(cwd));
+	const holdingKey = ENV_FILE_CANDIDATES.filter((name) => {
+		const path = (0, node_path.join)(cwd, name);
+		if (!(0, node_fs.existsSync)(path)) return false;
+		const contents = (0, node_fs.readFileSync)(path, "utf8");
+		return isKeySet(contents, "CLIVLY_SECRET_KEY") || isKeySet(contents, "CLIVLY_API_KEY");
+	});
 	return (0, node_path.join)(cwd, resolveEnvFile({
-		existing: ENV_FILE_CANDIDATES.filter((name) => {
-			const path = (0, node_path.join)(cwd, name);
-			if (!(0, node_fs.existsSync)(path)) return false;
-			const contents = (0, node_fs.readFileSync)(path, "utf8");
-			return isKeySet(contents, "CLIVLY_SECRET_KEY") || isKeySet(contents, "CLIVLY_API_KEY");
-		}),
+		existing: holdingKey,
 		framework
 	}));
 }

package/index.d.cts

@@ -59,21 +59,21 @@ interface ProbeHit {
 }
 //#endregion
 //#region src/index.d.ts
-declare const KNOWN_COMMANDS: readonly ["init", "status", "push-schema", "add", "dev", "login", "help", "ping", "doctor", "connect"];
-declare function nearestCommand(input: string): string | undefined;
-interface AddDeps {
+export declare const KNOWN_COMMANDS: readonly ["init", "status", "push-schema", "add", "dev", "login", "help", "ping", "doctor", "connect"];
+export declare function nearestCommand(input: string): string | undefined;
+export interface AddDeps {
   fileExists: (path: string) => boolean;
   out: (line: string) => void;
   readDeps: (cwd: string) => Record<string, string>;
   readFile: (path: string) => string | null;
   writeFile: (path: string, contents: string) => void;
 }
-declare function runAdd(argv: string[], cwd: string, deps?: AddDeps): number;
+export declare function runAdd(argv: string[], cwd: string, deps?: AddDeps): number;
 interface InstallResult {
   command: string;
   ok: boolean;
 }
-interface RunInitOptions {
+export interface RunInitOptions {
   authImportFlag?: string;
   companyTableFlag?: string;
   contactTableFlag?: string;
@@ -115,9 +115,8 @@ interface RunInitOptions {
   writeEnv?: (cwd: string, contents: string) => void;
   yes?: boolean;
 }
-declare function credentialsMissing(envContents: string): boolean;
-declare function runInit(options: RunInitOptions): Promise<number>;
-declare function runInitFromArgv(argv: string[], cwd: string): Promise<number>;
-declare function main(argv: string[]): Promise<number>;
-//#endregion
-export { AddDeps, KNOWN_COMMANDS, RunInitOptions, credentialsMissing, main, nearestCommand, runAdd, runInit, runInitFromArgv };
+export declare function credentialsMissing(envContents: string): boolean;
+export declare function runInit(options: RunInitOptions): Promise<number>;
+export declare function runInitFromArgv(argv: string[], cwd: string): Promise<number>;
+export declare function main(argv: string[]): Promise<number>;
+//#endregion

package/index.d.mts

@@ -59,21 +59,21 @@ interface ProbeHit {
 }
 //#endregion
 //#region src/index.d.ts
-declare const KNOWN_COMMANDS: readonly ["init", "status", "push-schema", "add", "dev", "login", "help", "ping", "doctor", "connect"];
-declare function nearestCommand(input: string): string | undefined;
-interface AddDeps {
+export declare const KNOWN_COMMANDS: readonly ["init", "status", "push-schema", "add", "dev", "login", "help", "ping", "doctor", "connect"];
+export declare function nearestCommand(input: string): string | undefined;
+export interface AddDeps {
   fileExists: (path: string) => boolean;
   out: (line: string) => void;
   readDeps: (cwd: string) => Record<string, string>;
   readFile: (path: string) => string | null;
   writeFile: (path: string, contents: string) => void;
 }
-declare function runAdd(argv: string[], cwd: string, deps?: AddDeps): number;
+export declare function runAdd(argv: string[], cwd: string, deps?: AddDeps): number;
 interface InstallResult {
   command: string;
   ok: boolean;
 }
-interface RunInitOptions {
+export interface RunInitOptions {
   authImportFlag?: string;
   companyTableFlag?: string;
   contactTableFlag?: string;
@@ -115,9 +115,8 @@ interface RunInitOptions {
   writeEnv?: (cwd: string, contents: string) => void;
   yes?: boolean;
 }
-declare function credentialsMissing(envContents: string): boolean;
-declare function runInit(options: RunInitOptions): Promise<number>;
-declare function runInitFromArgv(argv: string[], cwd: string): Promise<number>;
-declare function main(argv: string[]): Promise<number>;
-//#endregion
-export { AddDeps, KNOWN_COMMANDS, RunInitOptions, credentialsMissing, main, nearestCommand, runAdd, runInit, runInitFromArgv };
+export declare function credentialsMissing(envContents: string): boolean;
+export declare function runInit(options: RunInitOptions): Promise<number>;
+export declare function runInitFromArgv(argv: string[], cwd: string): Promise<number>;
+export declare function main(argv: string[]): Promise<number>;
+//#endregion

package/index.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as CANONICAL_FIELDS } from "./entity-config-bC3DX9f1.mjs";
+import { t as CANONICAL_FIELDS } from "./entity-config-Ccfb2IL9.mjs";
 import "./mapping-score-C68uAqGB.mjs";
 import { hasDefiningColumn, isFrameworkTable, matchesConcept, requiredFieldsFor, scoreFieldMap, scoreRelationships, suggestCursorField, toFieldMap } from "./internal-entity-heuristics.mjs";
-import { s as isPlaceholderUrl, t as createClivlySDK } from "./sdk-DofHordq.mjs";
+import { s as isPlaceholderUrl, t as createClivlySDK } from "./sdk-C-Pjxj2y.mjs";
 import { createRequire } from "node:module";
 import { spawn } from "node:child_process";
 import { accessSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, watch, writeFileSync } from "node:fs";
@@ -1187,8 +1187,10 @@ function siblingDbCandidates(schemaPath) {
 	return SIBLING_DB_NAMES.map((name) => join(dir, name));
 }
 function parentDbCandidates(schemaPath, cwd) {
-	const parent = dirname(isDirectory(schemaPath) ? schemaPath : dirname(schemaPath));
-	const relativeToRoot = relative(resolve(cwd), resolve(parent));
+	const dir = isDirectory(schemaPath) ? schemaPath : dirname(schemaPath);
+	const parent = dirname(dir);
+	const root = resolve(cwd);
+	const relativeToRoot = relative(root, resolve(parent));
 	if (!(relativeToRoot === "" || !relativeToRoot.startsWith(".."))) return [];
 	return SIBLING_DB_NAMES.map((name) => join(parent, name));
 }
@@ -1865,7 +1867,8 @@ function rankCandidates$1(tables, concept, contact = null) {
 		if (usable !== 0) return usable;
 		const aPromoted = promotedNames.has(a.t.tableName);
 		if (aPromoted !== promotedNames.has(b.t.tableName)) {
-			if (isFrameworkTable((aPromoted ? b.t : a.t).tableName)) return aPromoted ? -1 : 1;
+			const loser = aPromoted ? b.t : a.t;
+			if (isFrameworkTable(loser.tableName)) return aPromoted ? -1 : 1;
 		}
 		const exact = Number(b.m.exact) - Number(a.m.exact);
 		if (exact !== 0) return exact;
@@ -4052,13 +4055,14 @@ function defaultReadFile(path) {
 }
 function resolveEnvPath(cwd) {
 	const framework = detectFramework(readDeps(cwd));
+	const holdingKey = ENV_FILE_CANDIDATES.filter((name) => {
+		const path = join(cwd, name);
+		if (!existsSync(path)) return false;
+		const contents = readFileSync(path, "utf8");
+		return isKeySet(contents, "CLIVLY_SECRET_KEY") || isKeySet(contents, "CLIVLY_API_KEY");
+	});
 	return join(cwd, resolveEnvFile({
-		existing: ENV_FILE_CANDIDATES.filter((name) => {
-			const path = join(cwd, name);
-			if (!existsSync(path)) return false;
-			const contents = readFileSync(path, "utf8");
-			return isKeySet(contents, "CLIVLY_SECRET_KEY") || isKeySet(contents, "CLIVLY_API_KEY");
-		}),
+		existing: holdingKey,
 		framework
 	}));
 }

package/{internal-CHvZMvxC.d.cts → internal-Bjpq7S2G.d.mts}

@@ -1,4 +1,71 @@
-import { L as ProjectionJoin, R as ProjectionMapping, h as FilterExpr, l as ConfigValidationError, m as DiscoveredSchemaTable, p as DiscoveredColumnMeta } from "./entity-config-w8oMBWf8.cjs";
+import { L as ProjectionJoin, R as ProjectionMapping, h as FilterExpr, l as ConfigValidationError, m as DiscoveredSchemaTable, p as DiscoveredColumnMeta } from "./entity-config-CKcj4-M_.mjs";
+//#region ../core/src/host-owned-fields.d.ts
+/**
+ * Which fields a CRM record lets a user edit.
+ *
+ * A record synced from the host app carries a `sourceRef`. Its identity fields
+ * are rewritten from the host view on every sync run, so an edit to one would
+ * be silently reverted minutes later — the user sees their change accepted,
+ * then gone, with nothing explaining why. That is worse than refusing it.
+ *
+ * So host-owned fields are rejected at the API, not merely disabled in the UI:
+ * the UI is not the security boundary, and the SDK and any future public API
+ * reach the same routers.
+ *
+ * Records created inside the CRM have no `sourceRef` and are fully editable —
+ * nothing else owns them.
+ *
+ * This is the cheap half of a capability matrix. It answers "may a user write
+ * this?" but not "may the sync engine write this?", which stays implicit
+ * because sync bypasses these routers entirely. An override model (the
+ * `stageOverrideAt` pattern on `crm_deals`) can replace this later without
+ * changing callers.
+ */
+/** Contact fields the host view owns when the row is synced. */
+declare const HOST_OWNED_CONTACT_FIELDS: readonly ["email", "name"];
+/**
+ * Company fields the host view owns when the row is synced.
+ *
+ * `email` and `phone` joined this list in the same change that made them
+ * mappable (migration 0048). They are not identity fields, but ownership here
+ * follows what sync rewrites, not what feels identity-like: both flow from the
+ * host view on every run, exactly as `email` does for contacts above. Widening
+ * `CANONICAL_FIELDS.company` without widening this list is the specific bug
+ * this module's doc comment calls worse than refusing the edit.
+ *
+ * `primaryContactId` is deliberately absent: it is a CRM-side judgement about
+ * who to talk to, never sourced from the host, so it stays editable on synced
+ * rows.
+ */
+declare const HOST_OWNED_COMPANY_FIELDS: readonly ["domain", "name", "email", "phone"];
+type HostOwnedContactField = (typeof HOST_OWNED_CONTACT_FIELDS)[number];
+type HostOwnedCompanyField = (typeof HOST_OWNED_COMPANY_FIELDS)[number];
+/** The subset of a record this module needs to make its decision. */
+interface SourcedRecord {
+  sourceRef?: string | null;
+}
+/**
+ * True when the record is owned by a host view rather than by the CRM.
+ *
+ * Deliberately keyed on `sourceRef` and not `entityRole`: `entityRole` is a
+ * mapping label that can be absent on a synced row, while `sourceRef` is the
+ * identity the sync engine reconciles against and is set for exactly the rows
+ * sync will rewrite.
+ */
+declare function isHostOwned(record: SourcedRecord): boolean;
+/**
+ * Host-owned contact fields this patch would change, or `[]` when the patch is
+ * allowed. Callers turn a non-empty result into a 400 naming the fields.
+ */
+declare function rejectedContactFields(contact: SourcedRecord, patch: Readonly<Record<string, unknown>>): HostOwnedContactField[];
+/** Host-owned company fields this patch would change, or `[]`. */
+declare function rejectedCompanyFields(company: SourcedRecord, patch: Readonly<Record<string, unknown>>): HostOwnedCompanyField[];
+/**
+ * The message shown when a write is refused. Names the fields and says where
+ * they come from, so the reason is actionable rather than a bare "forbidden".
+ */
+declare function hostOwnedFieldMessage(fields: readonly string[]): string;
+//#endregion
 //#region ../core/src/projection-cardinality.d.ts
 declare function joinFansOut(join: ProjectionJoin, joinTable: DiscoveredSchemaTable): boolean;
 /** Every join in the projection that can multiply rows. */
@@ -223,4 +290,4 @@ declare function matchesCondition(condition: Condition, fields: Record<string, s
  */
 declare function evaluateStage(rules: EvaluableRule[], fields: Record<string, string | null>, mappedFields: Set<string>): string | null;
 //#endregion
-export { joinFansOut as S, compileProjectionJoins as _, matchesCondition as a, quoteIdent as b, columnMetaFor as c, primaryKeyColumns as d, validateProjection as f, compileProjectionIdentity as g, compileProjectionFrom as h, evaluateStage as i, coversUniqueKey as l, PREVIEW_MAX_ROWS as m, ConditionOp as n, slugify as o, validateProjectionFilter as p, EvaluableRule as r, toObjectTypeSlug as s, Condition as t, hasRichMeta as u, compileProjectionPreview as v, fanOutJoins as x, compileProjectionSelect as y };
+export { HostOwnedCompanyField as C, isHostOwned as D, hostOwnedFieldMessage as E, rejectedCompanyFields as O, joinFansOut as S, SourcedRecord as T, compileProjectionJoins as _, matchesCondition as a, quoteIdent as b, columnMetaFor as c, primaryKeyColumns as d, validateProjection as f, compileProjectionIdentity as g, compileProjectionFrom as h, evaluateStage as i, rejectedContactFields as k, coversUniqueKey as l, PREVIEW_MAX_ROWS as m, ConditionOp as n, slugify as o, validateProjectionFilter as p, EvaluableRule as r, toObjectTypeSlug as s, Condition as t, hasRichMeta as u, compileProjectionPreview as v, HostOwnedContactField as w, fanOutJoins as x, compileProjectionSelect as y };

package/{internal-Cz59xMj8.cjs → internal-CRIgf9jS.cjs}

@@ -1,3 +1,81 @@
+//#region ../core/src/host-owned-fields.ts
+/**
+* Which fields a CRM record lets a user edit.
+*
+* A record synced from the host app carries a `sourceRef`. Its identity fields
+* are rewritten from the host view on every sync run, so an edit to one would
+* be silently reverted minutes later — the user sees their change accepted,
+* then gone, with nothing explaining why. That is worse than refusing it.
+*
+* So host-owned fields are rejected at the API, not merely disabled in the UI:
+* the UI is not the security boundary, and the SDK and any future public API
+* reach the same routers.
+*
+* Records created inside the CRM have no `sourceRef` and are fully editable —
+* nothing else owns them.
+*
+* This is the cheap half of a capability matrix. It answers "may a user write
+* this?" but not "may the sync engine write this?", which stays implicit
+* because sync bypasses these routers entirely. An override model (the
+* `stageOverrideAt` pattern on `crm_deals`) can replace this later without
+* changing callers.
+*/
+/** Contact fields the host view owns when the row is synced. */
+const HOST_OWNED_CONTACT_FIELDS = ["email", "name"];
+/**
+* Company fields the host view owns when the row is synced.
+*
+* `email` and `phone` joined this list in the same change that made them
+* mappable (migration 0048). They are not identity fields, but ownership here
+* follows what sync rewrites, not what feels identity-like: both flow from the
+* host view on every run, exactly as `email` does for contacts above. Widening
+* `CANONICAL_FIELDS.company` without widening this list is the specific bug
+* this module's doc comment calls worse than refusing the edit.
+*
+* `primaryContactId` is deliberately absent: it is a CRM-side judgement about
+* who to talk to, never sourced from the host, so it stays editable on synced
+* rows.
+*/
+const HOST_OWNED_COMPANY_FIELDS = [
+	"domain",
+	"name",
+	"email",
+	"phone"
+];
+/**
+* True when the record is owned by a host view rather than by the CRM.
+*
+* Deliberately keyed on `sourceRef` and not `entityRole`: `entityRole` is a
+* mapping label that can be absent on a synced row, while `sourceRef` is the
+* identity the sync engine reconciles against and is set for exactly the rows
+* sync will rewrite.
+*/
+function isHostOwned(record) {
+	return Boolean(record.sourceRef);
+}
+function rejectedFields(record, patch, owned) {
+	if (!isHostOwned(record)) return [];
+	return owned.filter((field) => patch[field] !== void 0);
+}
+/**
+* Host-owned contact fields this patch would change, or `[]` when the patch is
+* allowed. Callers turn a non-empty result into a 400 naming the fields.
+*/
+function rejectedContactFields(contact, patch) {
+	return rejectedFields(contact, patch, HOST_OWNED_CONTACT_FIELDS);
+}
+/** Host-owned company fields this patch would change, or `[]`. */
+function rejectedCompanyFields(company, patch) {
+	return rejectedFields(company, patch, HOST_OWNED_COMPANY_FIELDS);
+}
+/**
+* The message shown when a write is refused. Names the fields and says where
+* they come from, so the reason is actionable rather than a bare "forbidden".
+*/
+function hostOwnedFieldMessage(fields) {
+	return `The ${fields.join(", ")} ${fields.length > 1 ? "fields are" : "field is"} synced from your app and cannot be edited here. Change it in your app and it will update on the next sync.`;
+}
+//#endregion
 //#region ../core/src/slug.ts
 /**
 * The one `slugify`.
@@ -147,12 +225,36 @@ Object.defineProperty(exports, "evaluateStage", {
 		return evaluateStage;
 	}
 });
+Object.defineProperty(exports, "hostOwnedFieldMessage", {
+	enumerable: true,
+	get: function() {
+		return hostOwnedFieldMessage;
+	}
+});
+Object.defineProperty(exports, "isHostOwned", {
+	enumerable: true,
+	get: function() {
+		return isHostOwned;
+	}
+});
 Object.defineProperty(exports, "matchesCondition", {
 	enumerable: true,
 	get: function() {
 		return matchesCondition;
 	}
 });
+Object.defineProperty(exports, "rejectedCompanyFields", {
+	enumerable: true,
+	get: function() {
+		return rejectedCompanyFields;
+	}
+});
+Object.defineProperty(exports, "rejectedContactFields", {
+	enumerable: true,
+	get: function() {
+		return rejectedContactFields;
+	}
+});
 Object.defineProperty(exports, "slugify", {
 	enumerable: true,
 	get: function() {

package/{internal-WximMGmH.d.mts → internal-D9kqkhPs.d.cts}

@@ -1,4 +1,71 @@
-import { L as ProjectionJoin, R as ProjectionMapping, h as FilterExpr, l as ConfigValidationError, m as DiscoveredSchemaTable, p as DiscoveredColumnMeta } from "./entity-config-w8oMBWf8.mjs";
+import { L as ProjectionJoin, R as ProjectionMapping, h as FilterExpr, l as ConfigValidationError, m as DiscoveredSchemaTable, p as DiscoveredColumnMeta } from "./entity-config-ApnT5j3X.cjs";
+//#region ../core/src/host-owned-fields.d.ts
+/**
+ * Which fields a CRM record lets a user edit.
+ *
+ * A record synced from the host app carries a `sourceRef`. Its identity fields
+ * are rewritten from the host view on every sync run, so an edit to one would
+ * be silently reverted minutes later — the user sees their change accepted,
+ * then gone, with nothing explaining why. That is worse than refusing it.
+ *
+ * So host-owned fields are rejected at the API, not merely disabled in the UI:
+ * the UI is not the security boundary, and the SDK and any future public API
+ * reach the same routers.
+ *
+ * Records created inside the CRM have no `sourceRef` and are fully editable —
+ * nothing else owns them.
+ *
+ * This is the cheap half of a capability matrix. It answers "may a user write
+ * this?" but not "may the sync engine write this?", which stays implicit
+ * because sync bypasses these routers entirely. An override model (the
+ * `stageOverrideAt` pattern on `crm_deals`) can replace this later without
+ * changing callers.
+ */
+/** Contact fields the host view owns when the row is synced. */
+declare const HOST_OWNED_CONTACT_FIELDS: readonly ["email", "name"];
+/**
+ * Company fields the host view owns when the row is synced.
+ *
+ * `email` and `phone` joined this list in the same change that made them
+ * mappable (migration 0048). They are not identity fields, but ownership here
+ * follows what sync rewrites, not what feels identity-like: both flow from the
+ * host view on every run, exactly as `email` does for contacts above. Widening
+ * `CANONICAL_FIELDS.company` without widening this list is the specific bug
+ * this module's doc comment calls worse than refusing the edit.
+ *
+ * `primaryContactId` is deliberately absent: it is a CRM-side judgement about
+ * who to talk to, never sourced from the host, so it stays editable on synced
+ * rows.
+ */
+declare const HOST_OWNED_COMPANY_FIELDS: readonly ["domain", "name", "email", "phone"];
+type HostOwnedContactField = (typeof HOST_OWNED_CONTACT_FIELDS)[number];
+type HostOwnedCompanyField = (typeof HOST_OWNED_COMPANY_FIELDS)[number];
+/** The subset of a record this module needs to make its decision. */
+interface SourcedRecord {
+  sourceRef?: string | null;
+}
+/**
+ * True when the record is owned by a host view rather than by the CRM.
+ *
+ * Deliberately keyed on `sourceRef` and not `entityRole`: `entityRole` is a
+ * mapping label that can be absent on a synced row, while `sourceRef` is the
+ * identity the sync engine reconciles against and is set for exactly the rows
+ * sync will rewrite.
+ */
+declare function isHostOwned(record: SourcedRecord): boolean;
+/**
+ * Host-owned contact fields this patch would change, or `[]` when the patch is
+ * allowed. Callers turn a non-empty result into a 400 naming the fields.
+ */
+declare function rejectedContactFields(contact: SourcedRecord, patch: Readonly<Record<string, unknown>>): HostOwnedContactField[];
+/** Host-owned company fields this patch would change, or `[]`. */
+declare function rejectedCompanyFields(company: SourcedRecord, patch: Readonly<Record<string, unknown>>): HostOwnedCompanyField[];
+/**
+ * The message shown when a write is refused. Names the fields and says where
+ * they come from, so the reason is actionable rather than a bare "forbidden".
+ */
+declare function hostOwnedFieldMessage(fields: readonly string[]): string;
+//#endregion
 //#region ../core/src/projection-cardinality.d.ts
 declare function joinFansOut(join: ProjectionJoin, joinTable: DiscoveredSchemaTable): boolean;
 /** Every join in the projection that can multiply rows. */
@@ -223,4 +290,4 @@ declare function matchesCondition(condition: Condition, fields: Record<string, s
  */
 declare function evaluateStage(rules: EvaluableRule[], fields: Record<string, string | null>, mappedFields: Set<string>): string | null;
 //#endregion
-export { joinFansOut as S, compileProjectionJoins as _, matchesCondition as a, quoteIdent as b, columnMetaFor as c, primaryKeyColumns as d, validateProjection as f, compileProjectionIdentity as g, compileProjectionFrom as h, evaluateStage as i, coversUniqueKey as l, PREVIEW_MAX_ROWS as m, ConditionOp as n, slugify as o, validateProjectionFilter as p, EvaluableRule as r, toObjectTypeSlug as s, Condition as t, hasRichMeta as u, compileProjectionPreview as v, fanOutJoins as x, compileProjectionSelect as y };
+export { HostOwnedCompanyField as C, isHostOwned as D, hostOwnedFieldMessage as E, rejectedCompanyFields as O, joinFansOut as S, SourcedRecord as T, compileProjectionJoins as _, matchesCondition as a, quoteIdent as b, columnMetaFor as c, primaryKeyColumns as d, validateProjection as f, compileProjectionIdentity as g, compileProjectionFrom as h, evaluateStage as i, rejectedContactFields as k, coversUniqueKey as l, PREVIEW_MAX_ROWS as m, ConditionOp as n, slugify as o, validateProjectionFilter as p, EvaluableRule as r, toObjectTypeSlug as s, Condition as t, hasRichMeta as u, compileProjectionPreview as v, HostOwnedContactField as w, fanOutJoins as x, compileProjectionSelect as y };

package/internal-adapter.d.cts

@@ -1,2 +1,2 @@
-import { t as CRMAdapter } from "./adapter-1TN0zohk.cjs";
+import { t as CRMAdapter } from "./adapter-Bd5HjLYa.cjs";
 export { CRMAdapter };

package/internal-adapter.d.mts

@@ -1,2 +1,2 @@
-import { t as CRMAdapter } from "./adapter-uxirB88i.mjs";
+import { t as CRMAdapter } from "./adapter-BWrOtOw5.mjs";
 export { CRMAdapter };

package/internal-auth-adapter.d.cts

@@ -1,2 +1,2 @@
-import { a as authCustom, i as MembershipResolver, n as ClivlyUser, r as CrmMembership, t as ClivlyAuthAdapter } from "./auth-adapter-CXTiW3Mb.cjs";
+import { a as authCustom, i as MembershipResolver, n as ClivlyUser, r as CrmMembership, t as ClivlyAuthAdapter } from "./auth-adapter-C3BQpc-q.cjs";
 export { ClivlyAuthAdapter, ClivlyUser, CrmMembership, MembershipResolver, authCustom };

package/internal-auth-adapter.d.mts

@@ -1,2 +1,2 @@
-import { a as authCustom, i as MembershipResolver, n as ClivlyUser, r as CrmMembership, t as ClivlyAuthAdapter } from "./auth-adapter-DSuYwv1c.mjs";
+import { a as authCustom, i as MembershipResolver, n as ClivlyUser, r as CrmMembership, t as ClivlyAuthAdapter } from "./auth-adapter-D54ajbl7.mjs";
 export { ClivlyAuthAdapter, ClivlyUser, CrmMembership, MembershipResolver, authCustom };

package/internal-drizzle.d.cts

@@ -1,2 +1,2 @@
-import { n as buildUniqueConstraints, r as discoverFromDrizzle, t as buildColumnsMeta } from "./drizzle-SD8WCvYj.cjs";
+import { n as buildUniqueConstraints, r as discoverFromDrizzle, t as buildColumnsMeta } from "./drizzle-CiK37zJm.cjs";
 export { buildColumnsMeta, buildUniqueConstraints, discoverFromDrizzle };

package/internal-drizzle.d.mts

@@ -1,2 +1,2 @@
-import { n as buildUniqueConstraints, r as discoverFromDrizzle, t as buildColumnsMeta } from "./drizzle-axugRJ0u.mjs";
+import { n as buildUniqueConstraints, r as discoverFromDrizzle, t as buildColumnsMeta } from "./drizzle-ehVWLSrN.mjs";
 export { buildColumnsMeta, buildUniqueConstraints, discoverFromDrizzle };

package/internal-entity-config.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_entity_config = require("./entity-config-C2MfIDL2.cjs");
+const require_entity_config = require("./entity-config-BI4RYNKL.cjs");
 exports.CANONICAL_FIELDS = require_entity_config.CANONICAL_FIELDS;
 exports.CRM_CONCEPTS = require_entity_config.CRM_CONCEPTS;
 exports.CUSTOM_CONCEPT = require_entity_config.CUSTOM_CONCEPT;

package/internal-entity-config.d.cts

@@ -1,2 +1,2 @@
-import { A as relationshipsSchema, C as customObjectDeclarations, D as missingRequiredFields, E as filterSchema, M as validateEntitiesConfig, O as projectionFields, S as RelationshipsMap, T as entitiesConfigSchema, _ as MATERIALIZING_CONCEPTS, a as ClivlyEntitiesConfig, b as RelationshipSpec, c as ClivlyEntityConfigInput, d as CrmConcept, f as CustomObjectDeclaration, g as FilterValue, h as FilterExpr, i as ClivlyConfigError, j as requiredFieldsFor, k as relationshipSchema, l as ConfigValidationError, m as DiscoveredSchemaTable, n as CRM_CONCEPTS, o as ClivlyEntitiesConfigInput, p as DiscoveredColumnMeta, r as CUSTOM_CONCEPT, s as ClivlyEntityConfig, t as CANONICAL_FIELDS, u as ConfigValidationResult, v as MaterializingConcept, w as defineClivlyConfig, x as RelationshipVia, y as REQUIRED_FIELDS } from "./entity-config-w8oMBWf8.cjs";
+import { A as relationshipsSchema, C as customObjectDeclarations, D as missingRequiredFields, E as filterSchema, M as validateEntitiesConfig, O as projectionFields, S as RelationshipsMap, T as entitiesConfigSchema, _ as MATERIALIZING_CONCEPTS, a as ClivlyEntitiesConfig, b as RelationshipSpec, c as ClivlyEntityConfigInput, d as CrmConcept, f as CustomObjectDeclaration, g as FilterValue, h as FilterExpr, i as ClivlyConfigError, j as requiredFieldsFor, k as relationshipSchema, l as ConfigValidationError, m as DiscoveredSchemaTable, n as CRM_CONCEPTS, o as ClivlyEntitiesConfigInput, p as DiscoveredColumnMeta, r as CUSTOM_CONCEPT, s as ClivlyEntityConfig, t as CANONICAL_FIELDS, u as ConfigValidationResult, v as MaterializingConcept, w as defineClivlyConfig, x as RelationshipVia, y as REQUIRED_FIELDS } from "./entity-config-ApnT5j3X.cjs";
 export { CANONICAL_FIELDS, CRM_CONCEPTS, CUSTOM_CONCEPT, ClivlyConfigError, ClivlyEntitiesConfig, ClivlyEntitiesConfigInput, ClivlyEntityConfig, ClivlyEntityConfigInput, ConfigValidationError, ConfigValidationResult, CrmConcept, CustomObjectDeclaration, DiscoveredColumnMeta, DiscoveredSchemaTable, FilterExpr, FilterValue, MATERIALIZING_CONCEPTS, MaterializingConcept, REQUIRED_FIELDS, RelationshipSpec, RelationshipVia, RelationshipsMap, customObjectDeclarations, defineClivlyConfig, entitiesConfigSchema, filterSchema, missingRequiredFields, projectionFields, relationshipSchema, relationshipsSchema, requiredFieldsFor, validateEntitiesConfig };

package/internal-entity-config.d.mts

@@ -1,2 +1,2 @@
-import { A as relationshipsSchema, C as customObjectDeclarations, D as missingRequiredFields, E as filterSchema, M as validateEntitiesConfig, O as projectionFields, S as RelationshipsMap, T as entitiesConfigSchema, _ as MATERIALIZING_CONCEPTS, a as ClivlyEntitiesConfig, b as RelationshipSpec, c as ClivlyEntityConfigInput, d as CrmConcept, f as CustomObjectDeclaration, g as FilterValue, h as FilterExpr, i as ClivlyConfigError, j as requiredFieldsFor, k as relationshipSchema, l as ConfigValidationError, m as DiscoveredSchemaTable, n as CRM_CONCEPTS, o as ClivlyEntitiesConfigInput, p as DiscoveredColumnMeta, r as CUSTOM_CONCEPT, s as ClivlyEntityConfig, t as CANONICAL_FIELDS, u as ConfigValidationResult, v as MaterializingConcept, w as defineClivlyConfig, x as RelationshipVia, y as REQUIRED_FIELDS } from "./entity-config-w8oMBWf8.mjs";
+import { A as relationshipsSchema, C as customObjectDeclarations, D as missingRequiredFields, E as filterSchema, M as validateEntitiesConfig, O as projectionFields, S as RelationshipsMap, T as entitiesConfigSchema, _ as MATERIALIZING_CONCEPTS, a as ClivlyEntitiesConfig, b as RelationshipSpec, c as ClivlyEntityConfigInput, d as CrmConcept, f as CustomObjectDeclaration, g as FilterValue, h as FilterExpr, i as ClivlyConfigError, j as requiredFieldsFor, k as relationshipSchema, l as ConfigValidationError, m as DiscoveredSchemaTable, n as CRM_CONCEPTS, o as ClivlyEntitiesConfigInput, p as DiscoveredColumnMeta, r as CUSTOM_CONCEPT, s as ClivlyEntityConfig, t as CANONICAL_FIELDS, u as ConfigValidationResult, v as MaterializingConcept, w as defineClivlyConfig, x as RelationshipVia, y as REQUIRED_FIELDS } from "./entity-config-CKcj4-M_.mjs";
 export { CANONICAL_FIELDS, CRM_CONCEPTS, CUSTOM_CONCEPT, ClivlyConfigError, ClivlyEntitiesConfig, ClivlyEntitiesConfigInput, ClivlyEntityConfig, ClivlyEntityConfigInput, ConfigValidationError, ConfigValidationResult, CrmConcept, CustomObjectDeclaration, DiscoveredColumnMeta, DiscoveredSchemaTable, FilterExpr, FilterValue, MATERIALIZING_CONCEPTS, MaterializingConcept, REQUIRED_FIELDS, RelationshipSpec, RelationshipVia, RelationshipsMap, customObjectDeclarations, defineClivlyConfig, entitiesConfigSchema, filterSchema, missingRequiredFields, projectionFields, relationshipSchema, relationshipsSchema, requiredFieldsFor, validateEntitiesConfig };

package/internal-entity-config.mjs

@@ -1,2 +1,2 @@
-import { a as MATERIALIZING_CONCEPTS, c as defineClivlyConfig, d as missingRequiredFields, f as projectionFields, g as validateEntitiesConfig, h as requiredFieldsFor, i as ClivlyConfigError, l as entitiesConfigSchema, m as relationshipsSchema, n as CRM_CONCEPTS, o as REQUIRED_FIELDS, p as relationshipSchema, r as CUSTOM_CONCEPT, s as customObjectDeclarations, t as CANONICAL_FIELDS, u as filterSchema } from "./entity-config-bC3DX9f1.mjs";
+import { a as MATERIALIZING_CONCEPTS, c as defineClivlyConfig, d as missingRequiredFields, f as projectionFields, g as validateEntitiesConfig, h as requiredFieldsFor, i as ClivlyConfigError, l as entitiesConfigSchema, m as relationshipsSchema, n as CRM_CONCEPTS, o as REQUIRED_FIELDS, p as relationshipSchema, r as CUSTOM_CONCEPT, s as customObjectDeclarations, t as CANONICAL_FIELDS, u as filterSchema } from "./entity-config-Ccfb2IL9.mjs";
 export { CANONICAL_FIELDS, CRM_CONCEPTS, CUSTOM_CONCEPT, ClivlyConfigError, MATERIALIZING_CONCEPTS, REQUIRED_FIELDS, customObjectDeclarations, defineClivlyConfig, entitiesConfigSchema, filterSchema, missingRequiredFields, projectionFields, relationshipSchema, relationshipsSchema, requiredFieldsFor, validateEntitiesConfig };