primitive-admin 1.0.49 → 1.0.50

package/dist/src/lib/workflow-toml-validator.js

@@ -74,9 +74,11 @@ const ALLOWLISTED_FIELDS = new Set([
     "context",
     "cursor",
     "cursorField",
+    "data", // document.save/patch: record fields to write (#948 / #985)
     "databaseId",
     "default", // switch: { output } fallback branch (#802)
     "direction",
+    "documentId", // document.*: target document id (#948 / #985)
     "dryRun",
     "durationMs",
     "email",
@@ -84,6 +86,7 @@ const ALLOWLISTED_FIELDS = new Set([
     "expiresInSeconds",
     "feature",
     "filename",
+    "filter", // document.query/queryOne/count: record filter (#948 / #985)
     "filters",
     "groupBy",
     "groupId",
@@ -92,6 +95,7 @@ const ALLOWLISTED_FIELDS = new Set([
     "includeUserDetails",
     "input",
     "integrationKey",
+    "iterationName", // iterate-users: required iteration name (#971)
     "itemsField",
     "limit",
     "limits", // script: per-step runtime caps (lower-only-clamp; #783)
@@ -100,25 +104,32 @@ const ALLOWLISTED_FIELDS = new Set([
     "messages",
     "metrics",
     "model",
+    "modelName", // document.*: document model name to operate on (#948 / #985)
     "modelOverride",
     "ms",
     "multipartFields",
+    "onConflict", // iterate-users: "skip" | "refuse" on singleton lock conflict (#971)
     "onPartialFailure",
     "operationName",
+    "options", // document.query/queryOne: query options (limit/sort/etc.) (#948 / #985)
     "output",
     "page",
+    "pageSize", // iterate-users: user-page size (#971)
     "params",
     "payload",
+    "perUser", // iterate-users: per-user child workflow descriptor (#971)
     "plugins",
     "prompt",
     "promptKey",
     "query",
     "queryType",
+    "recordId", // document.save/patch/delete: target record id (#948 / #985)
     "ref", // script: named reference to a Script (resolved at publish time; #783)
     "request",
     "route",
     "runs",
     "sort",
+    "source", // iterate-users: user-source descriptor ({ mode }) (#971)
     "step", // collect: nested inner step definition
     "subject",
     "tags",
@@ -140,6 +151,16 @@ const ALLOWLISTED_FIELDS = new Set([
     "with", // script: input context for the script (whole `with:` block; #783)
     "workflowKey",
 ]);
+/**
+ * Read-only view of `ALLOWLISTED_FIELDS` for the drift-guard test (#985).
+ *
+ * Exported so `cli/tests/unit/workflow-toml-validator-drift-guard.test.ts` can
+ * assert this set stays a superset of every top-level field the step runners
+ * in `src/workflows/steps/*.ts` actually read — checking the *live* set the
+ * validator enforces rather than a copy that could itself drift. Not part of
+ * the public validator API; consumed only by the guard.
+ */
+export const ALLOWLISTED_FIELDS_FOR_DRIFT_GUARD = ALLOWLISTED_FIELDS;
 /**
  * Walk a parsed workflow TOML document and return all unknown-field errors.
  *
@@ -328,7 +349,16 @@ export function formatWorkflowTomlErrors(filePath, errors) {
         // the offending field is on the inner step, not the outer collect.
         // The outer step's id (if any) is also included in the prefix so the
         // diagnostic can be cross-referenced against the parent's TOML header.
-        const isInnerStep = err.parentStepId !== undefined;
+        //
+        // #971: top-level errors carry `parentStepId: null` (set explicitly at the
+        // top-level `validateStepObject` call); only genuine collect-inner errors
+        // carry a real id (or `undefined` if a future caller omits it). Use a
+        // non-null check so BOTH `null` and `undefined` top-level errors render as
+        // a bare `steps[N]` without the `(inside collect step)` suffix. The prior
+        // `!== undefined` check treated `null` as inner (`null !== undefined` is
+        // `true`), mislabeling every top-level error as inside a collect step (a
+        // regression from PR #762).
+        const isInnerStep = err.parentStepId != null;
         const slot = isInnerStep
             ? `steps[${err.stepIndex}].step`
             : `steps[${err.stepIndex}]`;

package/dist/src/lib/workflow-toml-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-toml-validator.js","sourceRoot":"","sources":["../../../src/lib/workflow-toml-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS;IACzC,2CAA2C;IAC3C,IAAI;IACJ,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,IAAI;IACJ,MAAM;IACN,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,aAAa;IACb,SAAS;IACT,kCAAkC;IAClC,YAAY,EAAE,mCAAmC;IACjD,QAAQ;IACR,OAAO;IACP,UAAU;IACV,aAAa;IACb,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO,EAAE,2CAA2C;IACpD,UAAU;IACV,SAAS;IACT,eAAe;IACf,aAAa;IACb,SAAS;IACT,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,SAAS,EAAE,4CAA4C;IACvD,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,oBAAoB;IACpB,OAAO;IACP,gBAAgB;IAChB,YAAY;IACZ,OAAO;IACP,QAAQ,EAAE,yDAAyD;IACnE,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,eAAe;IACf,IAAI;IACJ,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;IACX,KAAK,EAAE,uEAAuE;IAC9E,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM,EAAE,wCAAwC;IAChD,SAAS;IACT,MAAM;IACN,aAAa;IACb,cAAc;IACd,UAAU;IACV,eAAe;IACf,IAAI;IACJ,OAAO;IACP,aAAa;IACb,OAAO;IACP,UAAU;IACV,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,WAAW;IACX,YAAY;IACZ,MAAM,EAAE,mEAAmE;IAC3E,aAAa;CACd,CAAC,CAAC;AA2BH;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAa;IAChD,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAE7B,kEAAkE;IAClE,kEAAkE;IAClE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oCAAoC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EACF,sJAAsJ;aACzJ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,oEAAoE,OAAO,KAAK,IAAI;aAC3F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,yEAAyE;QACzE,qEAAqE;QACrE,qEAAqE;QACrE,eAAe;QACf,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,mDACJ,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAClE,GAAG;aACJ,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE7D,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,gEAAgE;QAChE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,mEAAmE;QACnE,2CAA2C;QAC3C,IACE,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,IAAI,KAAK,IAAI;YAClB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CACzB,IAAS,EACT,SAAiB,EACjB,YAA2B,EAC3B,MAA2B;IAE3B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAExB,oEAAoE;QACpE,qEAAqE;QACrE,wDAAwD;QACxD,6DAA6D;QAC7D,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,gEAAgE;QAChE,kEAAkE;QAClE,iDAAiD;QACjD,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,qBAAqB,GACzB,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC;QACnE,MAAM,eAAe,GACnB,MAAM,KAAK,IAAI;YACf,GAAG,KAAK,MAAM;YACd,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,CAAC,qBAAqB,CAAC;QAEzB,IAAI,CAAC,eAAe,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAE9D,kEAAkE;QAClE,YAAY;QACZ,EAAE;QACF,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,mEAAmE;QACnE,iDAAiD;QACjD,EAAE;QACF,sEAAsE;QACtE,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,IAAI,SAAS,CAAC;YACvC,IAAI;gBACF,4CAA4C,MAAM,IAAI,UAAU,uBAAuB,UAAU,KAAK;oBACtG,0DAA0D,UAAU,qCAAqC,CAAC;QAC9G,CAAC;aAAM,CAAC;YACN,IAAI;gBACF,KAAK,GAAG,qCAAqC;oBAC7C,wEAAwE,GAAG,mEAAmE,GAAG,IAAI,CAAC;QAC1J,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,SAAS;YACT,MAAM;YACN,KAAK,EAAE,GAAG;YACV,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,MAA2B;IAE3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAa,CAAC,YAAY,QAAQ,GAAG,CAAC,CAAC;IAElD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,mBAAmB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC;QACnD,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,QAAQ;YAChC,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,UAAU,GACd,WAAW,IAAI,GAAG,CAAC,YAAY;YAC7B,CAAC,CAAC,6BAA6B,GAAG,CAAC,YAAY,IAAI;YACnD,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,GAAG,MAAM,GAAG,UAAU,uBAAuB,GAAG,CAAC,KAAK,IAAI,CACpE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"workflow-toml-validator.js","sourceRoot":"","sources":["../../../src/lib/workflow-toml-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS;IACzC,2CAA2C;IAC3C,IAAI;IACJ,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,IAAI;IACJ,MAAM;IACN,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,aAAa;IACb,SAAS;IACT,kCAAkC;IAClC,YAAY,EAAE,mCAAmC;IACjD,QAAQ;IACR,OAAO;IACP,UAAU;IACV,aAAa;IACb,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO,EAAE,2CAA2C;IACpD,UAAU;IACV,SAAS;IACT,eAAe;IACf,aAAa;IACb,SAAS;IACT,QAAQ;IACR,aAAa;IACb,MAAM,EAAE,4DAA4D;IACpE,YAAY;IACZ,SAAS,EAAE,4CAA4C;IACvD,WAAW;IACX,YAAY,EAAE,+CAA+C;IAC7D,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,QAAQ,EAAE,6DAA6D;IACvE,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,oBAAoB;IACpB,OAAO;IACP,gBAAgB;IAChB,eAAe,EAAE,gDAAgD;IACjE,YAAY;IACZ,OAAO;IACP,QAAQ,EAAE,yDAAyD;IACnE,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW,EAAE,8DAA8D;IAC3E,eAAe;IACf,IAAI;IACJ,iBAAiB;IACjB,YAAY,EAAE,qEAAqE;IACnF,kBAAkB;IAClB,eAAe;IACf,SAAS,EAAE,yEAAyE;IACpF,QAAQ;IACR,MAAM;IACN,UAAU,EAAE,uCAAuC;IACnD,QAAQ;IACR,SAAS;IACT,SAAS,EAAE,2DAA2D;IACtE,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;IACX,UAAU,EAAE,6DAA6D;IACzE,KAAK,EAAE,uEAAuE;IAC9E,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ,EAAE,0DAA0D;IACpE,MAAM,EAAE,wCAAwC;IAChD,SAAS;IACT,MAAM;IACN,aAAa;IACb,cAAc;IACd,UAAU;IACV,eAAe;IACf,IAAI;IACJ,OAAO;IACP,aAAa;IACb,OAAO;IACP,UAAU;IACV,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,WAAW;IACX,YAAY;IACZ,MAAM,EAAE,mEAAmE;IAC3E,aAAa;CACd,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,kBAAkB,CAAC;AA4BrB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAa;IAChD,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAE7B,kEAAkE;IAClE,kEAAkE;IAClE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oCAAoC;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EACF,sJAAsJ;aACzJ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,oEAAoE,OAAO,KAAK,IAAI;aAC3F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,yEAAyE;QACzE,qEAAqE;QACrE,qEAAqE;QACrE,eAAe;QACf,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,mDACJ,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAClE,GAAG;aACJ,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE7D,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,gEAAgE;QAChE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,mEAAmE;QACnE,2CAA2C;QAC3C,IACE,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,IAAI,CAAC,IAAI,KAAK,IAAI;YAClB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CACzB,IAAS,EACT,SAAiB,EACjB,YAA2B,EAC3B,MAA2B;IAE3B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAExB,oEAAoE;QACpE,qEAAqE;QACrE,wDAAwD;QACxD,6DAA6D;QAC7D,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,gEAAgE;QAChE,kEAAkE;QAClE,iDAAiD;QACjD,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,qBAAqB,GACzB,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC;QACnE,MAAM,eAAe,GACnB,MAAM,KAAK,IAAI;YACf,GAAG,KAAK,MAAM;YACd,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,CAAC,qBAAqB,CAAC;QAEzB,IAAI,CAAC,eAAe,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAE9D,kEAAkE;QAClE,YAAY;QACZ,EAAE;QACF,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,mEAAmE;QACnE,iDAAiD;QACjD,EAAE;QACF,sEAAsE;QACtE,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,IAAI,SAAS,CAAC;YACvC,IAAI;gBACF,4CAA4C,MAAM,IAAI,UAAU,uBAAuB,UAAU,KAAK;oBACtG,0DAA0D,UAAU,qCAAqC,CAAC;QAC9G,CAAC;aAAM,CAAC;YACN,IAAI;gBACF,KAAK,GAAG,qCAAqC;oBAC7C,wEAAwE,GAAG,mEAAmE,GAAG,IAAI,CAAC;QAC1J,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,SAAS;YACT,MAAM;YACN,KAAK,EAAE,GAAG;YACV,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,MAA2B;IAE3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAa,CAAC,YAAY,QAAQ,GAAG,CAAC,CAAC;IAElD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,SAAS,mBAAmB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,4BAA4B;QAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;QAC7C,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,QAAQ;YAChC,CAAC,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,UAAU,GACd,WAAW,IAAI,GAAG,CAAC,YAAY;YAC7B,CAAC,CAAC,6BAA6B,GAAG,CAAC,YAAY,IAAI;YACnD,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,GAAG,MAAM,GAAG,UAAU,uBAAuB,GAAG,CAAC,KAAK,IAAI,CACpE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/types/index.d.ts

@@ -0,0 +1,513 @@
+export interface Credentials {
+    serverUrl: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: string;
+    adminId: string;
+    email: string;
+    role: "admin" | "super-admin";
+    name?: string;
+    currentAppId?: string;
+    currentAppName?: string;
+    globalAdminAppId?: string;
+}
+export interface AppSummary {
+    appId: string;
+    name: string;
+    mode?: string;
+}
+export interface AppSettings {
+    name: string;
+    baseUrl?: string | null;
+    mode: "public" | "invite-only" | "domain";
+    waitlistEnabled?: boolean;
+    allowedDomains?: string[] | null;
+    redirectUris?: string[] | null;
+    googleOAuthEnabled?: boolean;
+    googleClientId?: string;
+    googleClientSecret?: string;
+    corsMode?: "universal" | "custom";
+    corsAllowedOrigins?: string[] | null;
+    corsAllowCredentials?: boolean;
+    corsAllowedMethods?: string[] | null;
+    corsAllowedHeaders?: string[] | null;
+    corsExposedHeaders?: string[] | null;
+    corsMaxAge?: number | null;
+    passkeyEnabled?: boolean;
+    passkeyRpId?: string;
+    passkeyRpName?: string;
+    passkeyRpConfig?: Record<string, {
+        name: string;
+    }> | null;
+    hasPasskey?: boolean;
+    magicLinkEnabled?: boolean;
+}
+export interface User {
+    userId: string;
+    email: string;
+    name: string;
+    role: "owner" | "admin" | "member";
+    addedAt: string;
+}
+export interface Invitation {
+    invitationId: string;
+    email: string;
+    role: "admin" | "member";
+    createdAt: string;
+    expiresAt: string;
+    invitedBy: string;
+    accepted?: boolean;
+    acceptedAt?: string;
+}
+export interface WaitlistEntry {
+    waitlistId: string;
+    email: string;
+    displayName?: string | null;
+    provider?: string | null;
+    providerId?: string | null;
+    source?: string | null;
+    note?: string | null;
+    requestedAt?: string | null;
+    updatedAt?: string | null;
+}
+export interface MultipartFieldDefinition {
+    fieldName: string;
+    type: "attachment" | "value";
+    attachmentIndex?: number;
+    attachmentName?: string;
+    value?: string;
+}
+export interface IntegrationRequestConfig {
+    baseUrl: string;
+    allowedMethods?: string[];
+    allowedPaths?: string[];
+    defaultMethod?: string;
+    defaultHeaders?: Record<string, string>;
+    staticQuery?: Record<string, any>;
+    forwardHeaders?: string[];
+    forwardQueryParams?: string[];
+    responsePassthrough?: boolean;
+    exampleQuery?: Record<string, any>;
+    exampleBody?: any;
+    bodyMode?: "json" | "raw" | "multipart";
+    multipartFieldMapping?: MultipartFieldDefinition[];
+}
+export interface IntegrationSummary {
+    integrationId: string;
+    integrationKey: string;
+    displayName: string;
+    status: string;
+    lastTestedAt?: string | null;
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface IntegrationDetail extends IntegrationSummary {
+    appId: string;
+    description?: string | null;
+    requestConfig: IntegrationRequestConfig;
+    timeoutMs?: number;
+    maxRequestBodyBytes?: number;
+}
+export interface IntegrationSecret {
+    secretId: string;
+    version: string;
+    secretSummary?: string | null;
+    status?: string;
+    createdBy?: string;
+    createdAt?: string;
+    supersededAt?: string | null;
+    preview?: {
+        headers: string[];
+        query: string[];
+        body: string[];
+    } | null;
+}
+export interface IntegrationTestPayload {
+    method?: string;
+    path?: string;
+    query?: Record<string, any>;
+    headers?: Record<string, string>;
+    body?: any;
+}
+export interface IntegrationTestResult {
+    success: boolean;
+    upstreamResponse?: {
+        status: number;
+        headers: Record<string, string>;
+        body: any;
+        traceId?: string;
+        durationMs?: number;
+    };
+    errorCode?: string;
+    message?: string;
+    traceId?: string;
+}
+export interface IntegrationLogEntry {
+    timestamp: string;
+    method: string;
+    path: string;
+    status: number;
+    durationMs: number;
+    traceId: string;
+    errorCode?: string;
+    actorType?: string;
+    actorId?: string;
+}
+export interface Webhook {
+    webhookId: string;
+    webhookKey: string;
+    displayName: string;
+    description?: string;
+    status: string;
+    workflowKey: string;
+    verificationScheme: string;
+    signingSecretMasked?: string;
+    toleranceSeconds: number;
+    deduplicationEnabled: boolean;
+    deduplicationWindowMs: number;
+    secretGracePeriodMs: number;
+    inputMapping?: string;
+    allowedIpCidrs?: string;
+    metadata?: string;
+    lastTriggeredAt?: string;
+    createdAt: string;
+    modifiedAt: string;
+}
+export interface WebhookEvent {
+    eventId: string;
+    externalEventId?: string;
+    status: string;
+    httpStatus: number;
+    sourceIp?: string;
+    payloadSummary?: string;
+    rejectionReason?: string;
+    workflowRunKey?: string;
+    processingDurationMs?: number;
+    createdAt: string;
+}
+export interface Workflow {
+    workflowId: string;
+    workflowKey: string;
+    name: string;
+    description: string | null;
+    status: "draft" | "active" | "archived";
+    activeConfigId: string | null;
+    latestRevision: string | null;
+    inputSchema: object | null;
+    outputSchema: object | null;
+    perUserMaxRunning: number;
+    perUserMaxQueued: number;
+    perAppMaxRunning: number;
+    perAppMaxQueued: number;
+    queueTtlSeconds: number;
+    dequeueOrder: "fifo" | "lifo";
+    createdBy: string;
+    createdAt: string;
+    modifiedAt: string;
+}
+export interface WorkflowDraft {
+    steps: any[];
+    inputSchema: object | null;
+    outputSchema: object | null;
+}
+export interface WorkflowRevision {
+    revisionId: string;
+    workflowId: string;
+    stepsR2Key: string;
+    inputSchema: object | null;
+    outputSchema: object | null;
+    publishedAt: string | null;
+    createdBy: string;
+    createdAt: string;
+}
+export interface WorkflowRun {
+    runId: string;
+    runKey: string;
+    instanceId: string;
+    workflowId: string;
+    workflowKey: string;
+    revisionId: string;
+    contextDocId: string;
+    status: string;
+    startedAt: string | null;
+    endedAt: string | null;
+    startedByUserId?: string;
+    input: any | null;
+    meta: object | null;
+    isPreview?: boolean;
+}
+export interface WorkflowInstanceStatus {
+    status: string;
+    output?: any;
+    stepResults?: Array<{
+        id: string;
+        kind: string;
+        output: any;
+        startedAt: string;
+        endedAt: string;
+        durationMs: number;
+        skipped?: boolean;
+    }>;
+    error?: any;
+}
+export interface AppPromptSummary {
+    promptId: string;
+    promptKey: string;
+    displayName: string;
+    description?: string | null;
+    activeConfigId?: string | null;
+    defaultEvaluatorPromptId?: string | null;
+    status: "draft" | "active" | "archived";
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface AppPromptDetail extends AppPromptSummary {
+    appId: string;
+    copiedFromCatalogId?: string | null;
+    inputSchema?: string | null;
+    createdBy?: string;
+    configs: AppPromptConfig[];
+}
+export interface AppPromptConfig {
+    configId: string;
+    promptId: string;
+    appId: string;
+    configName: string;
+    description?: string | null;
+    provider: "openrouter" | "gemini";
+    model: string;
+    systemPrompt?: string | null;
+    userPromptTemplate: string;
+    temperature?: number | null;
+    topP?: number | null;
+    maxTokens?: number | null;
+    outputSchema?: object | null;
+    providerConfig?: object | null;
+    status: "active" | "archived";
+    createdBy?: string;
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface PromptExecuteResult {
+    success: boolean;
+    output: string;
+    rawResponse: any;
+    error?: string;
+    configId?: string;
+    metrics: {
+        durationMs: number;
+        inputTokens?: number;
+        outputTokens?: number;
+        totalTokens?: number;
+    };
+}
+export interface PromptPreviewResult {
+    systemPrompt?: string;
+    userPrompt: string;
+    model?: string;
+    provider?: string;
+    configId?: string;
+}
+export interface AnalyticsOverviewResponse {
+    windowDays: number;
+    bucketDays: number;
+    totals: {
+        dau: number;
+        wau: number;
+        mau: number;
+        totalEvents: number;
+    };
+    series: Array<{
+        bucketStart: string;
+        activeUsers: number;
+        totalEvents: number;
+    }>;
+}
+export interface AnalyticsTopUsersResponse {
+    windowDays: number;
+    limit: number;
+    results: Array<{
+        userUlid: string;
+        firstSeen: string;
+        lastSeen: string;
+        eventCount: number;
+    }>;
+}
+export interface AnalyticsUserTimelineResponse {
+    windowDays: number;
+    bucketSeconds: number;
+    timeline: Array<{
+        bucketStart: string;
+        events: number;
+    }>;
+    breakdown: Array<{
+        action: string;
+        feature: string;
+        route: string;
+        events: number;
+    }>;
+}
+export interface AnalyticsIntegrationMetricsResponse {
+    windowDays: number;
+    integrations: Array<{
+        integrationKey: string;
+        invocations: number;
+        errorRate: number;
+        avgDurationMs: number;
+        p95DurationMs: number;
+    }>;
+}
+export interface AdminSummary {
+    adminId: string;
+    email: string;
+    name: string;
+    role: string;
+    appCreationLimit: number;
+    disabledAt?: string | null;
+    assignedAppsCount: number;
+    createdAppsCount: number;
+}
+export interface AdminInvitation {
+    invitationId: string;
+    email: string;
+    invitedAt?: string;
+    expiresAt?: string;
+    invitedBy?: string | null;
+    type: "global" | "app";
+    appId?: string;
+    appName?: string;
+    appCreationLimit?: number;
+}
+export interface PromptCatalogItem {
+    catalogId: string;
+    catalogKey: string;
+    displayName: string;
+    description?: string | null;
+    category?: string | null;
+    provider: "openrouter" | "gemini";
+    model: string;
+    systemPrompt?: string | null;
+    userPromptTemplate: string;
+    inputSchema?: string | null;
+    outputSchema?: string | null;
+    temperature?: string | null;
+    topP?: string | null;
+    maxTokens?: number | null;
+    status: "draft" | "active" | "deprecated";
+    createdBy?: string;
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface IntegrationCatalogItem {
+    catalogId: string;
+    catalogKey: string;
+    displayName: string;
+    description?: string | null;
+    category?: string | null;
+    requestConfig: string;
+    docUrl?: string | null;
+    logoUrl?: string | null;
+    status: "draft" | "active" | "deprecated";
+    createdBy?: string;
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface WorkflowConfiguration {
+    configId: string;
+    workflowId: string;
+    appId: string;
+    configName: string;
+    description?: string | null;
+    stepsR2Key: string;
+    status: "active" | "archived";
+    steps?: any[];
+    createdBy?: string;
+    createdAt?: string;
+    modifiedAt?: string;
+}
+export interface SyncState {
+    appId: string;
+    serverUrl: string;
+    lastSyncedAt: string;
+    entities: {
+        app?: {
+            modifiedAt: string;
+            contentHash?: string;
+        };
+        integrations?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        prompts?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        workflows?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            activeConfigId?: string;
+            contentHash?: string;
+        }>;
+        emailTemplates?: Record<string, {
+            id: string;
+            modifiedAt: string;
+        }>;
+        testCases?: Record<string, {
+            id: string;
+            blockType: string;
+            blockId: string;
+            blockKey: string;
+            slug: string;
+            modifiedAt: string;
+            attachmentFilenames?: string[];
+            contentHash?: string;
+        }>;
+        databaseTypes?: Record<string, {
+            databaseType: string;
+            modifiedAt: string;
+            operations?: Record<string, {
+                modifiedAt: string;
+            }>;
+            subscriptions?: Record<string, {
+                modifiedAt: string;
+            }>;
+            contentHash?: string;
+            hasSchema?: boolean;
+        }>;
+        ruleSets?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        groupTypeConfigs?: Record<string, {
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        collectionTypeConfigs?: Record<string, {
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        webhooks?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        blobBuckets?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        cronTriggers?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+        scripts?: Record<string, {
+            id: string;
+            modifiedAt: string;
+            contentHash?: string;
+        }>;
+    };
+}

package/dist/src/validators.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Public subpath export: `primitive-admin/validators` (issue #983).
+ *
+ * Re-exports the TOML validators that `sync push` runs as its load-bearing
+ * gate, so external tooling (e.g. `primitive-docs`) can validate the exact
+ * same way the published CLI does — instead of re-implementing the parse /
+ * expand / validate flow against submodule source and silently drifting.
+ *
+ * Two kinds of entry points are exported:
+ *
+ *  1. `validateWorkflowTomlSource(raw, filePath)` — the **source-level**
+ *     wrapper. Runs the identical parse → fragment-expand → validate → format
+ *     path that `sync push` runs for workflow TOML (`cli/src/commands/sync.ts`:
+ *     `parseTomlFile()` → `validateWorkflowToml()` → `formatWorkflowTomlErrors()`).
+ *     Use this when you have the raw TOML string and want zero divergence from
+ *     `sync push`, including `include` fragment expansion.
+ *
+ *  2. The raw validators (`validateWorkflowToml`, `validateOperations`) and
+ *     their formatters (`formatWorkflowTomlErrors`, `formatIssue`). These are
+ *     **pure functions over already-parsed TOML** — they do not read files or
+ *     parse TOML themselves. The consumer is responsible for parsing (e.g. with
+ *     `@iarna/toml`) and, for workflows, for any `include` expansion. There is
+ *     no coupling on a specific TOML parser version; pass whatever parsed
+ *     object/operations[] you already have.
+ *
+ * Internal helpers (`collectParamRefs`, `declaredParamNames`,
+ * `locateOperationLine`) are intentionally NOT exported — they are
+ * implementation details of `validateOperations`.
+ */
+import { type WorkflowTomlError } from "./lib/workflow-toml-validator.js";
+export { validateWorkflowToml, formatWorkflowTomlErrors, type WorkflowTomlError, } from "./lib/workflow-toml-validator.js";
+export { validateOperations, formatIssue, type ValidationIssue, type ValidationResult, type ValidateOptions, } from "./lib/toml-params-validator.js";
+/**
+ * Result of {@link validateWorkflowTomlSource}.
+ */
+export interface WorkflowTomlSourceResult {
+    /** The structured errors (empty when the source is valid). */
+    errors: WorkflowTomlError[];
+    /**
+     * A human-readable, multi-line error string (the same text `sync push`
+     * prints), or `null` when there are no errors.
+     */
+    formatted: string | null;
+}
+/**
+ * Validate a workflow TOML **source string** the exact way `sync push` does.
+ *
+ * Runs the identical pipeline `sync push` runs on every workflow file:
+ *   `TOML.parse(raw)` → `expandWorkflowTomlData(parsed, filePath)`
+ *   → `validateWorkflowToml(expanded)` → `formatWorkflowTomlErrors(...)`.
+ *
+ * The `include` fragment expansion resolves fragments relative to
+ * `<filePath>/../../workflow-fragments/` — pass the real (or intended) on-disk
+ * path of the workflow so fragment resolution matches `sync push`. If the
+ * source uses no `include` key the expander is a no-op and `filePath` is only
+ * used for error attribution.
+ *
+ * @param raw The raw workflow TOML source string.
+ * @param filePath The workflow's file path (used for fragment resolution and
+ *   error attribution).
+ * @returns `{ errors, formatted }` — `errors` is empty and `formatted` is
+ *   `null` when the source is valid.
+ */
+export declare function validateWorkflowTomlSource(raw: string, filePath: string): WorkflowTomlSourceResult;