primitive-admin 1.0.52 → 1.0.54

package/dist/src/lib/workflow-codegen/generated-schema-descriptor.js

@@ -0,0 +1,269 @@
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Vendored byte-for-byte from the canonical server module
+ * `src/workflows/schema-descriptor.ts` — the SAME interpretation the server
+ * validator (`validateValue`) enforces. The CLI cannot import server `src/`
+ * at runtime, so `workflows codegen`'s type converter imports this committed
+ * copy instead.
+ *
+ * Regenerate with:
+ *   node cli/scripts/gen-workflow-schema-descriptor.mjs   (runs at CLI prebuild)
+ *
+ * A CI freshness guard
+ * (`cli/scripts/gen-workflow-schema-descriptor.mjs --check`, also asserted by
+ * `cli/tests/unit/workflow-codegen-descriptor-drift-guard.test.ts`) fails if
+ * this committed copy does not match the source — see issue #1442 / #998.
+ */
+/**
+ * Canonical interpretation of the JSON-Schema subset the workflow platform
+ * supports (issue #1442).
+ *
+ * The server validator (`validateValue` in `schema-validation.ts`) and the CLI
+ * `workflows codegen` type converter (`workflow-codegen/schemaToTs.ts`) must
+ * agree EXACTLY on how a workflow `inputSchema`/`outputSchema` is interpreted —
+ * otherwise a generated `<Key>Input` type promises a shape the runtime does not
+ * enforce (or rejects a value the runtime accepts). Previously the converter
+ * re-derived those interpretation decisions by hand, which drifts from the
+ * validator over time.
+ *
+ * This module is the single source of that interpretation. Both consumers read
+ * from `describeSchema` + `isType`:
+ *
+ *   - the type gate is checked before `enum` (a value failing `type` is
+ *     rejected before `enum` is consulted);
+ *   - a type UNION (`type: ["string","null"]`) never descends into
+ *     `properties`/`items` — only the exact string types `"object"`/`"array"`
+ *     do;
+ *   - `integer` means `Number.isInteger`;
+ *   - `additionalProperties` only closes an object; it is not a nested schema.
+ *
+ * It is deliberately dependency-free (no imports) so the CLI can vendor a
+ * byte-for-byte copy as a committed artifact via
+ * `cli/scripts/gen-workflow-schema-descriptor.mjs` (the #998 gen-allowlist
+ * pattern). A drift-guard test runs that generator in `--check` mode, so a
+ * change here that isn't regenerated into the CLI artifact fails CI. The CLI
+ * never imports server `src/` at runtime — only the build-time generator reads
+ * this file.
+ */
+/** Does a value satisfy a JSON-schema `type` name? `integer` = `Number.isInteger`. */
+export function isType(value, type) {
+    if (type === "array")
+        return Array.isArray(value);
+    if (type === "object")
+        return !!value && typeof value === "object" && !Array.isArray(value);
+    if (type === "string")
+        return typeof value === "string";
+    if (type === "number")
+        return typeof value === "number" && !Number.isNaN(value);
+    if (type === "integer")
+        return Number.isInteger(value);
+    if (type === "boolean")
+        return typeof value === "boolean";
+    if (type === "null")
+        return value === null;
+    // Unknown type name: nothing to enforce, so treat as a match (the validator
+    // must not reject a value against a keyword it does not model).
+    return true;
+}
+const EMPTY_DESCRIPTOR = {
+    isUnion: false,
+    singularType: null,
+    types: [],
+    enumValues: null,
+    object: null,
+    array: null,
+    oneOf: null,
+};
+/**
+ * Sibling constraint keywords that make a `oneOf` node a MIXED schema rather
+ * than a clean tagged union (#1511). A clean discriminated union carries only
+ * the `oneOf` keyword (plus annotations like `description`/`title`); it never
+ * combines with a top-level `type`/`properties`/`required`/`additionalProperties`/
+ * `items`/`enum`. When any of these co-occur with `oneOf`, the validator's
+ * branch-select would early-return and skip those sibling constraints, silently
+ * loosening validation. So a mixed node is NOT treated as a clean tagged union.
+ */
+const ONEOF_SIBLING_CONSTRAINT_KEYS = [
+    "type",
+    "properties",
+    "required",
+    "additionalProperties",
+    "items",
+    "enum",
+];
+function hasOneOfSiblingConstraints(schema) {
+    return ONEOF_SIBLING_CONSTRAINT_KEYS.some((k) => Object.prototype.hasOwnProperty.call(schema, k));
+}
+/**
+ * A discriminator tag must be a comparable scalar (string/number/boolean) so
+ * the validator's strict-`===` branch-select can match it against a JSON-parsed
+ * value (#1511). An object/array literal is structurally identical after a JSON
+ * round-trip but never the same reference, so it would always "match no case".
+ * Restricting the auto-detected discriminator to scalars keeps a non-scalar tag
+ * from being treated as a (never-matchable) discriminator.
+ */
+function isScalarDiscriminatorLiteral(value) {
+    return (typeof value === "string" ||
+        typeof value === "number" ||
+        typeof value === "boolean");
+}
+/**
+ * Interpret a `oneOf`/`anyOf` node as a discriminated (tagged) union (#1511).
+ *
+ * The tagged-union interpretation is scoped to a clearly-intended tagged union:
+ * EVERY member must be `type: "object"`. Anything else (a mixed/scalar `oneOf`)
+ * returns `null` and is ignored downstream, exactly as before.
+ *
+ * Within that scope:
+ *   - `anyOf` is not supported in v1 → `invalid` (codegen error suggests `oneOf`);
+ *   - a `oneOf` with fewer than 2 members → `invalid`;
+ *   - the discriminator is auto-detected: the single property present in EVERY
+ *     member as a single-literal `enum` whose literal is a comparable scalar
+ *     (string/number/boolean), with distinct literals across members (a
+ *     non-scalar literal is not a candidate — see `isScalarDiscriminatorLiteral`);
+ *   - zero or more-than-one candidate discriminator → `invalid` (ambiguity).
+ *
+ * Pure and dependency-free so the CLI can vendor a byte-for-byte copy.
+ */
+function describeOneOf(schema) {
+    const rawOneOf = Array.isArray(schema.oneOf) ? schema.oneOf : null;
+    const rawAnyOf = Array.isArray(schema.anyOf) ? schema.anyOf : null;
+    // `oneOf` takes precedence; only one keyword is interpreted per node.
+    const keyword = rawOneOf
+        ? "oneOf"
+        : rawAnyOf
+            ? "anyOf"
+            : null;
+    const members = rawOneOf ?? rawAnyOf;
+    if (!keyword || !members)
+        return null;
+    // Scope to a clearly-intended tagged union: every member is `type: "object"`.
+    // A member that is not a plain object type means this is NOT a tagged union;
+    // leave it to the existing ignore-and-render-`unknown` path (backward compat).
+    const allObjects = members.length >= 1 &&
+        members.every((m) => !!m &&
+            typeof m === "object" &&
+            !Array.isArray(m) &&
+            m.type === "object");
+    if (!allObjects)
+        return null;
+    // `anyOf` is not supported in v1 (resolved Fork 1 = oneOf only). An all-object
+    // `anyOf` that looks like a tagged union gets a clear error suggesting oneOf.
+    if (keyword === "anyOf") {
+        return {
+            kind: "invalid",
+            reason: "anyOf is not supported for discriminated unions (issue #1511). Use oneOf instead.",
+        };
+    }
+    if (members.length < 2) {
+        return {
+            kind: "invalid",
+            reason: "A discriminated-union oneOf needs at least 2 object members (issue #1511).",
+        };
+    }
+    // For each member, collect its single-literal-enum properties → { name: literal }.
+    // The literal must be a comparable scalar (string/number/boolean): the
+    // validator branch-selects with strict `===`, so a non-scalar tag (object or
+    // array) on a JSON-parsed value is never the same reference as the schema
+    // literal and would always "match no case". Restricting the auto-detected
+    // discriminator to scalars means a non-scalar tag is not a candidate, so the
+    // union routes through the normal not-a-tagged-union path (below) instead of
+    // being accepted as a union that can never validate.
+    const memberLiteralProps = members.map((m) => {
+        const map = new Map();
+        const props = m.properties;
+        if (props && typeof props === "object" && !Array.isArray(props)) {
+            for (const [name, sub] of Object.entries(props)) {
+                if (sub &&
+                    typeof sub === "object" &&
+                    Array.isArray(sub.enum) &&
+                    sub.enum.length === 1 &&
+                    isScalarDiscriminatorLiteral(sub.enum[0])) {
+                    map.set(name, sub.enum[0]);
+                }
+            }
+        }
+        return map;
+    });
+    // A candidate discriminator is present as a single-literal enum in EVERY
+    // member, with distinct literals across members (so a value's tag selects
+    // exactly one branch).
+    const candidates = [];
+    for (const name of memberLiteralProps[0].keys()) {
+        if (!memberLiteralProps.every((mp) => mp.has(name)))
+            continue;
+        const literals = memberLiteralProps.map((mp) => mp.get(name));
+        const distinct = new Set(literals.map((l) => JSON.stringify(l)));
+        if (distinct.size === literals.length)
+            candidates.push(name);
+    }
+    if (candidates.length !== 1) {
+        return {
+            kind: "invalid",
+            reason: candidates.length === 0
+                ? "No discriminator found for the oneOf tagged union (issue #1511): every member must share exactly one property declared as a distinct single-literal enum."
+                : `Ambiguous discriminator for the oneOf tagged union (issue #1511): multiple candidate properties (${candidates.join(", ")}). Exactly one is required.`,
+        };
+    }
+    // A clean tagged union carries ONLY `oneOf`. If it co-occurs with sibling
+    // top-level constraints (`type`, `properties`, `required`,
+    // `additionalProperties`, `items`, `enum`), it is a MIXED schema, not a clean
+    // tagged union: the validator's branch-select would early-return and skip
+    // those siblings, loosening validation. Reject-mixed keeps all three
+    // consumers fail-closed — the validator falls through to the normal
+    // type/object gates (still enforcing the siblings, exactly as before #1511),
+    // codegen throws this `reason`, and the request guard flags `unsupported-oneof`.
+    if (hasOneOfSiblingConstraints(schema)) {
+        return {
+            kind: "invalid",
+            reason: "A discriminated-union oneOf must be the only top-level constraint (issue #1511): it cannot be combined with sibling type/properties/required/additionalProperties/items/enum. Move the shared constraints into each member instead.",
+        };
+    }
+    const discriminant = candidates[0];
+    return {
+        kind: "valid",
+        discriminant,
+        members: members.map((m, i) => ({
+            discriminantValue: memberLiteralProps[i].get(discriminant),
+            schema: m,
+        })),
+    };
+}
+/**
+ * Interpret a parsed schema node. A non-object schema (null, array, scalar)
+ * enforces nothing → the empty descriptor.
+ */
+export function describeSchema(schema) {
+    if (!schema || typeof schema !== "object" || Array.isArray(schema)) {
+        return EMPTY_DESCRIPTOR;
+    }
+    const typeSpec = schema.type;
+    const isUnion = Array.isArray(typeSpec);
+    const singularType = typeof typeSpec === "string" ? typeSpec : null;
+    // Mirror the validator's normalization exactly: an array stays an array; a
+    // truthy non-array becomes `[typeSpec]`; anything falsy is `[]`.
+    const types = isUnion ? typeSpec : typeSpec ? [typeSpec] : [];
+    const enumValues = Array.isArray(schema.enum)
+        ? schema.enum
+        : null;
+    const props = schema.properties;
+    const object = singularType === "object" &&
+        props &&
+        typeof props === "object" &&
+        !Array.isArray(props)
+        ? {
+            properties: props,
+            required: Array.isArray(schema.required)
+                ? schema.required
+                : [],
+            additionalPropertiesClosed: schema.additionalProperties === false,
+        }
+        : null;
+    const array = singularType === "array" && schema.items
+        ? { items: schema.items }
+        : null;
+    const oneOf = describeOneOf(schema);
+    return { isUnion, singularType, types, enumValues, object, array, oneOf };
+}
+//# sourceMappingURL=generated-schema-descriptor.js.map

package/dist/src/lib/workflow-codegen/generated-schema-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-schema-descriptor.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/generated-schema-descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,sFAAsF;AACtF,MAAM,UAAU,MAAM,CAAC,KAAU,EAAE,IAAY;IAC7C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,QAAQ;QACnB,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACxD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IAC1D,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,KAAK,IAAI,CAAC;IAC3C,4EAA4E;IAC5E,gEAAgE;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AA0ED,MAAM,gBAAgB,GAAqB;IACzC,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,IAAI;IAClB,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG;IACpC,MAAM;IACN,YAAY;IACZ,UAAU;IACV,sBAAsB;IACtB,OAAO;IACP,MAAM;CACE,CAAC;AAEX,SAAS,0BAA0B,CAAC,MAA2B;IAC7D,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,4BAA4B,CAAC,KAAc;IAClD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,CAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,aAAa,CAAC,MAA2B;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,sEAAsE;IACtE,MAAM,OAAO,GAA6B,QAAQ;QAChD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ;YACR,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEtC,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,UAAU,GACd,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,OAAO,CAAC,KAAK,CACX,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,QAAQ;YACrB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACjB,CAAC,CAAC,IAAI,KAAK,QAAQ,CACtB,CAAC;IACJ,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,mFAAmF;SACtF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,kBAAkB,GAA4B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAe,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;QAC3B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IACE,GAAG;oBACH,OAAO,GAAG,KAAK,QAAQ;oBACvB,KAAK,CAAC,OAAO,CAAE,GAAW,CAAC,IAAI,CAAC;oBAC/B,GAAW,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAC9B,4BAA4B,CAAE,GAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAClD,CAAC;oBACD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAG,GAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,0EAA0E;IAC1E,uBAAuB;IACvB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,UAAU,CAAC,MAAM,KAAK,CAAC;gBACrB,CAAC,CAAC,2JAA2J;gBAC7J,CAAC,CAAC,oGAAoG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;SAC7J,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,2DAA2D;IAC3D,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,oEAAoE;IACpE,6EAA6E;IAC7E,iFAAiF;IACjF,IAAI,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,qOAAqO;SACxO,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;YAC3C,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAC1D,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAW;IACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM,QAAQ,GAAI,MAAc,CAAC,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,KAAK,GAAU,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAE,MAAc,CAAC,IAAI,CAAC;QACpD,CAAC,CAAE,MAAc,CAAC,IAAI;QACtB,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,KAAK,GAAI,MAAc,CAAC,UAAU,CAAC;IACzC,MAAM,MAAM,GACV,YAAY,KAAK,QAAQ;QACzB,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC;YACE,UAAU,EAAE,KAA4B;YACxC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAE,MAAc,CAAC,QAAQ,CAAC;gBAC/C,CAAC,CAAE,MAAc,CAAC,QAAQ;gBAC1B,CAAC,CAAC,EAAE;YACN,0BAA0B,EACvB,MAAc,CAAC,oBAAoB,KAAK,KAAK;SACjD;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,KAAK,GACT,YAAY,KAAK,OAAO,IAAK,MAAc,CAAC,KAAK;QAC/C,CAAC,CAAC,EAAE,KAAK,EAAG,MAAc,CAAC,KAAK,EAAE;QAClC,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,KAAK,GAAG,aAAa,CAAC,MAA6B,CAAC,CAAC;IAE3D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC5E,CAAC"}

package/dist/src/lib/workflow-codegen/generator.d.ts

@@ -0,0 +1,74 @@
+/**
+ * `workflows codegen` orchestrator (issue #1442).
+ *
+ * Reads synced workflow TOMLs (`.primitive/sync/<env>/<appId>/workflows/*.toml`)
+ * and emits ONE generated file per workflow —
+ * `workflows/generated/<key>.generated.ts` — each containing the workflow's
+ * `<Key>Input`/`<Key>Output` types plus a typed `<key>(client)` invoker factory
+ * returning `{ runSync?, start, getStatus }`. This mirrors `databases codegen`'s per-type
+ * `<Type>.generated.ts` layout (#1441's `<type>Ops`): per-file artifacts keep
+ * team merges conflict-free and let a `[workflow-key]` filter regenerate exactly
+ * one file.
+ *
+ * Design decisions (see the plan of record on #1442, post-pivot):
+ *   - Schemas are interpreted through the SHARED descriptor
+ *     (`generated-schema-descriptor.ts`, a vendored copy of the server's
+ *     `schema-validation` descriptor) so the generated types match runtime
+ *     validation exactly. A malformed schema throws (fail-and-exit).
+ *   - `.runSync` is emitted only for `syncCallable: true` workflows (the server
+ *     rejects run-sync otherwise); `.start` and `.getStatus` for every
+ *     non-reserved workflow (the typed async path, issue #1512 — async-only
+ *     workflows are exactly the ones that need a typed `getStatus`). No
+ *     `.terminate` member is emitted (the factory stays a start/status helper;
+ *     typed termination is available via the client's explicit `terminate<O>`).
+ *   - `input` is a REQUIRED option iff the schema rejects `{}` (the client's
+ *     `input ?? {}` fallback would fail validation); otherwise `input?`.
+ *   - The runtime call always passes the ORIGINAL key string; only identifiers
+ *     are sanitized. `workflowKey` is set AFTER spreading `opts`, so a caller
+ *     cannot override it.
+ *   - Disk lifecycle (write / `--check` / suffix-based cleanup) delegates to the
+ *     shared `writeOrCheckGeneratedFiles`, exactly like `databases codegen`.
+ */
+import { type WriteOrCheckResult } from "../codegen-shared/generatedFiles.js";
+/** Suffix identifying a generated file (shared with `databases codegen`). */
+export declare const GENERATED_FILE_SUFFIX = ".generated.ts";
+export interface WorkflowCodegenInput {
+    /** Source `.toml` filename stem (fallback key when `[workflow].key` is absent). */
+    fileStem: string;
+    /** Path to the source `workflows/<key>.toml` file. */
+    tomlPath: string;
+    /** Raw TOML content (already read from disk). */
+    tomlContent: string;
+}
+export interface GenerateWorkflowTypesOptions {
+    inputs: WorkflowCodegenInput[];
+    /** Directory where the `<key>.generated.ts` files are written. */
+    outputDir: string;
+    /** `--check`: compare against disk, do not write. */
+    check?: boolean;
+    /**
+     * Set when the run was filtered to a single workflow key (the
+     * `primitive workflows codegen <key>` argument). The `inputs` set is then
+     * PARTIAL — it does not represent the full set of owned generated files — so
+     * stale-output cleanup (and `--check` stale detection) is scoped to the
+     * filtered workflow's own file and must NOT touch / flag sibling workflows'
+     * `*.generated.ts` files. The unfiltered "generate all" run leaves this unset
+     * and keeps full orphan cleanup. Mirrors `databases codegen`'s `singleType`.
+     */
+    singleWorkflow?: boolean;
+}
+/**
+ * Render the full `<key>.generated.ts` content for a single workflow TOML input.
+ * Returns null for a reserved (`__internal.*`) workflow. Pure — exported so
+ * tests can assert on the string directly.
+ */
+export declare function renderWorkflowFile(input: WorkflowCodegenInput): {
+    key: string;
+    content: string;
+} | null;
+/**
+ * Run workflow codegen end-to-end. One `<key>.generated.ts` per workflow;
+ * delegates the disk lifecycle to the shared writer/checker, exactly like
+ * `databases codegen`.
+ */
+export declare function generateWorkflowTypes(options: GenerateWorkflowTypesOptions): Promise<WriteOrCheckResult>;

package/dist/src/lib/workflow-codegen/generator.js

@@ -0,0 +1,215 @@
+/**
+ * `workflows codegen` orchestrator (issue #1442).
+ *
+ * Reads synced workflow TOMLs (`.primitive/sync/<env>/<appId>/workflows/*.toml`)
+ * and emits ONE generated file per workflow —
+ * `workflows/generated/<key>.generated.ts` — each containing the workflow's
+ * `<Key>Input`/`<Key>Output` types plus a typed `<key>(client)` invoker factory
+ * returning `{ runSync?, start, getStatus }`. This mirrors `databases codegen`'s per-type
+ * `<Type>.generated.ts` layout (#1441's `<type>Ops`): per-file artifacts keep
+ * team merges conflict-free and let a `[workflow-key]` filter regenerate exactly
+ * one file.
+ *
+ * Design decisions (see the plan of record on #1442, post-pivot):
+ *   - Schemas are interpreted through the SHARED descriptor
+ *     (`generated-schema-descriptor.ts`, a vendored copy of the server's
+ *     `schema-validation` descriptor) so the generated types match runtime
+ *     validation exactly. A malformed schema throws (fail-and-exit).
+ *   - `.runSync` is emitted only for `syncCallable: true` workflows (the server
+ *     rejects run-sync otherwise); `.start` and `.getStatus` for every
+ *     non-reserved workflow (the typed async path, issue #1512 — async-only
+ *     workflows are exactly the ones that need a typed `getStatus`). No
+ *     `.terminate` member is emitted (the factory stays a start/status helper;
+ *     typed termination is available via the client's explicit `terminate<O>`).
+ *   - `input` is a REQUIRED option iff the schema rejects `{}` (the client's
+ *     `input ?? {}` fallback would fail validation); otherwise `input?`.
+ *   - The runtime call always passes the ORIGINAL key string; only identifiers
+ *     are sanitized. `workflowKey` is set AFTER spreading `opts`, so a caller
+ *     cannot override it.
+ *   - Disk lifecycle (write / `--check` / suffix-based cleanup) delegates to the
+ *     shared `writeOrCheckGeneratedFiles`, exactly like `databases codegen`.
+ */
+import * as path from "path";
+import { parseConfigToml } from "../config-toml.js";
+import { safeJsonParse } from "../workflow-payload.js";
+import { writeOrCheckGeneratedFiles, } from "../codegen-shared/generatedFiles.js";
+import { fingerprintToml } from "../db-codegen/dbFingerprint.js";
+import { schemaToTsType, schemaRejectsEmptyObject } from "./schemaToTs.js";
+import { describeSchema } from "./generated-schema-descriptor.js";
+import { workflowInputTypeName, workflowOutputTypeName, workflowFactoryName, } from "./naming.js";
+/** Prefix marking a platform-owned workflow key (mirrors the server's
+ * `INTERNAL_WORKFLOW_KEY_PREFIX`; inlined because the CLI cannot import from
+ * `src/`). Such workflows are never client-invocable and are skipped. */
+const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/** Suffix identifying a generated file (shared with `databases codegen`). */
+export const GENERATED_FILE_SUFFIX = ".generated.ts";
+/** The client package the generated file imports its types from. */
+const CLIENT_PACKAGE = "js-bao-wss-client";
+/** True for a platform-owned workflow key. */
+function isReservedKey(key) {
+    return (typeof key === "string" &&
+        key.trim().toLowerCase().startsWith(INTERNAL_WORKFLOW_KEY_PREFIX));
+}
+/**
+ * Render a top-level `<Name>Input`/`<Name>Output` declaration. An absent schema
+ * → `unknown`. A plain object type → an `interface`; anything else → a `type`
+ * alias.
+ *
+ * A discriminated-union (`oneOf`) output renders as `{…} | {…}`, which begins
+ * with `{` too — but it must be a `type` alias, not `interface Foo {…} | {…}`
+ * (invalid TS). Decide via the shared descriptor (`describeSchema(...).oneOf`),
+ * not the `startsWith("{")` heuristic (#1511).
+ */
+function renderTypeDecl(name, schema) {
+    if (schema === undefined) {
+        return `export type ${name} = unknown;`;
+    }
+    const expr = schemaToTsType(schema, 0);
+    if (expr.startsWith("{") && !describeSchema(schema).oneOf) {
+        return `export interface ${name} ${expr}`;
+    }
+    return `export type ${name} = ${expr};`;
+}
+/**
+ * Parse a single workflow TOML into the data the emitter needs. Throws on
+ * malformed schema JSON (fail-and-exit) — the honest `unknown` fallback is for
+ * valid-but-untypeable schemas only. Returns null for a reserved workflow.
+ */
+function parseWorkflow(input) {
+    // #1464 removed `@iarna/toml`; #1446 makes `sync pull` emit schemas as native
+    // TOML tables (incl. mixed-type enums like `enum = ["ok", 1]`, TOML 1.0). The
+    // `parseConfigToml` facade parses both. `safeJsonParse` still owns the
+    // string-vs-inline-table schema handling.
+    const data = parseConfigToml(input.tomlContent);
+    const workflow = data?.workflow ?? {};
+    const key = typeof workflow.key === "string" && workflow.key.length > 0
+        ? workflow.key
+        : input.fileStem;
+    if (isReservedKey(key))
+        return null;
+    // safeJsonParse throws on invalid JSON in a schema string — let it bubble.
+    const inputSchema = safeJsonParse(workflow.inputSchema);
+    const outputSchema = safeJsonParse(workflow.outputSchema);
+    const inputTypeName = workflowInputTypeName(key);
+    const outputTypeName = workflowOutputTypeName(key);
+    return {
+        key,
+        syncCallable: workflow.syncCallable === true,
+        inputTypeName,
+        outputTypeName,
+        factoryName: workflowFactoryName(key),
+        inputDecl: renderTypeDecl(inputTypeName, inputSchema),
+        outputDecl: renderTypeDecl(outputTypeName, outputSchema),
+        // `input` is required iff the schema rejects the client's `{}` fallback.
+        // A schema-less workflow (`undefined`) accepts anything → optional.
+        inputRequired: inputSchema !== undefined && schemaRejectsEmptyObject(inputSchema),
+    };
+}
+/** Render the typed invoker factory for one workflow. */
+function renderFactory(wf) {
+    const keyLiteral = JSON.stringify(wf.key);
+    const inputMember = wf.inputRequired
+        ? `input: ${wf.inputTypeName}`
+        : `input?: ${wf.inputTypeName}`;
+    const lines = [
+        `export function ${wf.factoryName}(client: JsBaoClient) {`,
+        `  return {`,
+    ];
+    // Spread `opts` FIRST, then set `workflowKey` LAST, so the factory's intended
+    // key always wins. `Omit<..., "workflowKey">` only rejects an excess
+    // `workflowKey` on object literals; a caller passing an options *variable*
+    // carrying an extra `workflowKey` (or any untyped JS caller) would otherwise
+    // override the key and invoke the wrong workflow if the spread came last.
+    if (wf.syncCallable) {
+        lines.push(`    runSync: (\n` +
+            `      opts: { ${inputMember} } & Omit<RunSyncWorkflowOptions, "workflowKey" | "input">\n` +
+            `    ) =>\n` +
+            `      client.workflows.runSync<${wf.inputTypeName}, ${wf.outputTypeName}>({\n` +
+            `        ...opts,\n` +
+            `        workflowKey: ${keyLiteral},\n` +
+            `      }),`);
+    }
+    lines.push(`    start: (\n` +
+        `      opts: { ${inputMember} } & Omit<StartWorkflowOptions, "workflowKey" | "input">\n` +
+        `    ) =>\n` +
+        `      client.workflows.start<${wf.inputTypeName}>({\n` +
+        `        ...opts,\n` +
+        `        workflowKey: ${keyLiteral},\n` +
+        `      }),`);
+    // Typed status fetch (#1512), emitted for EVERY non-reserved workflow — not
+    // gated on `syncCallable`, since async-only workflows are exactly the ones
+    // that need a typed `status.output`. `output` is bound to `<Key>Output` from
+    // the workflow's `outputSchema` (schema-less → `unknown`, same as the sync
+    // path). `runKey` stays required (unlike start/runSync, which auto-generate
+    // it — you cannot fetch a run's status without knowing which run). Same
+    // spread-first / key-last ordering so an untyped caller cannot override the
+    // key and read the wrong workflow's status.
+    lines.push(`    getStatus: (opts: Omit<GetWorkflowStatusOptions, "workflowKey">) =>\n` +
+        `      client.workflows.getStatus<${wf.outputTypeName}>({\n` +
+        `        ...opts,\n` +
+        `        workflowKey: ${keyLiteral},\n` +
+        `      }),`);
+    lines.push(`  };`, `}`);
+    return lines.join("\n");
+}
+/**
+ * Render the full `<key>.generated.ts` content for a single workflow TOML input.
+ * Returns null for a reserved (`__internal.*`) workflow. Pure — exported so
+ * tests can assert on the string directly.
+ */
+export function renderWorkflowFile(input) {
+    const wf = parseWorkflow(input);
+    if (!wf)
+        return null;
+    const fingerprint = fingerprintToml(input.tomlContent);
+    // Only import the option types actually referenced, so the generated file
+    // compiles under a consumer's `noUnusedLocals`. `GetWorkflowStatusOptions` is
+    // always referenced now — every factory emits a `getStatus` member (#1512).
+    const imports = [
+        "GetWorkflowStatusOptions",
+        "JsBaoClient",
+        "StartWorkflowOptions",
+    ];
+    if (wf.syncCallable)
+        imports.push("RunSyncWorkflowOptions");
+    imports.sort();
+    const blocks = [];
+    blocks.push([
+        `// AUTO-GENERATED FROM workflows/${wf.key}.toml — DO NOT EDIT.`,
+        "// Run `primitive workflows codegen` to regenerate.",
+        `// fingerprint: ${fingerprint}`,
+    ].join("\n"));
+    blocks.push(`import type {\n${imports
+        .map((i) => `  ${i},`)
+        .join("\n")}\n} from "${CLIENT_PACKAGE}";`);
+    blocks.push(wf.inputDecl);
+    blocks.push(wf.outputDecl);
+    blocks.push(renderFactory(wf));
+    return { key: wf.key, content: blocks.join("\n\n") + "\n" };
+}
+/**
+ * Run workflow codegen end-to-end. One `<key>.generated.ts` per workflow;
+ * delegates the disk lifecycle to the shared writer/checker, exactly like
+ * `databases codegen`.
+ */
+export async function generateWorkflowTypes(options) {
+    const outAbs = path.resolve(options.outputDir);
+    const filesToWrite = new Map();
+    for (const input of options.inputs) {
+        const rendered = renderWorkflowFile(input);
+        if (!rendered)
+            continue; // reserved workflow — no file
+        const filePath = path.join(outAbs, `${rendered.key}${GENERATED_FILE_SUFFIX}`);
+        filesToWrite.set(filePath, rendered.content);
+    }
+    return await writeOrCheckGeneratedFiles({
+        outputDir: outAbs,
+        filesToWrite,
+        check: options.check,
+        // A single-workflow filter run owns only a subset of the generated files,
+        // so orphan cleanup / stale detection must be scoped to the filtered file.
+        fullOwnership: options.singleWorkflow !== true,
+        generatedSuffix: GENERATED_FILE_SUFFIX,
+    });
+}
+//# sourceMappingURL=generator.js.map

package/dist/src/lib/workflow-codegen/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB;;yEAEyE;AACzE,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,oEAAoE;AACpE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AA0C3C,8CAA8C;AAC9C,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAW;IAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,IAAI,aAAa,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO,oBAAoB,IAAI,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,eAAe,IAAI,MAAM,IAAI,GAAG,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAA2B;IAChD,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAQ,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAErB,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,2EAA2E;IAC3E,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,GAAG;QACH,YAAY,EAAE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC5C,aAAa;QACb,cAAc;QACd,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACrC,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,WAAW,CAAC;QACrD,UAAU,EAAE,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC;QACxD,yEAAyE;QACzE,oEAAoE;QACpE,aAAa,EACX,WAAW,KAAK,SAAS,IAAI,wBAAwB,CAAC,WAAW,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,EAAkB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa;QAClC,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;QAC9B,CAAC,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa;QACtB,mBAAmB,EAAE,CAAC,WAAW,yBAAyB;QAC1D,YAAY;KACb,CAAC;IACF,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,kBAAkB;YAChB,iBAAiB,WAAW,8DAA8D;YAC1F,YAAY;YACZ,kCAAkC,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,cAAc,OAAO;YAC/E,oBAAoB;YACpB,wBAAwB,UAAU,KAAK;YACvC,WAAW,CACd,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,gBAAgB;QACd,iBAAiB,WAAW,4DAA4D;QACxF,YAAY;QACZ,gCAAgC,EAAE,CAAC,aAAa,OAAO;QACvD,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4CAA4C;IAC5C,KAAK,CAAC,IAAI,CACR,2EAA2E;QACzE,oCAAoC,EAAE,CAAC,cAAc,OAAO;QAC5D,oBAAoB;QACpB,wBAAwB,UAAU,KAAK;QACvC,WAAW,CACd,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2B;IAE3B,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEvD,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,OAAO,GAAG;QACd,0BAA0B;QAC1B,aAAa;QACb,sBAAsB;KACvB,CAAC;IACF,IAAI,EAAE,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACT;QACE,oCAAoC,EAAE,CAAC,GAAG,sBAAsB;QAChE,qDAAqD;QACrD,mBAAmB,WAAW,EAAE;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CACT,kBAAkB,OAAO;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC,aAAa,cAAc,IAAI,CAC7C,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/B,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,8BAA8B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,MAAM,EACN,GAAG,QAAQ,CAAC,GAAG,GAAG,qBAAqB,EAAE,CAC1C,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,0BAA0B,CAAC;QACtC,SAAS,EAAE,MAAM;QACjB,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,0EAA0E;QAC1E,2EAA2E;QAC3E,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;QAC9C,eAAe,EAAE,qBAAqB;KACvC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/lib/workflow-codegen/naming.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Identifier-naming helpers for `workflows codegen` (issue #1442).
+ *
+ * Workflow keys resolve case-insensitively server-side and may contain
+ * characters that aren't valid TS identifiers (`.`, `-`). Only the emitted
+ * identifiers are sanitized — the runtime call always passes the ORIGINAL key
+ * string.
+ *
+ * Type names: `pascalCase(key) + "Input" | "Output"` (reuses `pascalCase` from
+ * the database codegen so the two commands share one PascalCase rule).
+ * Factory property: a camelCase form of the key.
+ */
+/**
+ * `create-checkout-session` / `createCheckoutSession` → `CreateCheckoutSession`.
+ * A digit-leading key (`123-job` → `_123Job`) is prefixed with `_` so the
+ * emitted type name is a valid TS identifier.
+ */
+export declare function workflowTypeBaseName(key: string): string;
+/** PascalCase base + `Input` (e.g. `CreateCheckoutSessionInput`). */
+export declare function workflowInputTypeName(key: string): string;
+/** PascalCase base + `Output` (e.g. `CreateCheckoutSessionOutput`). */
+export declare function workflowOutputTypeName(key: string): string;
+/**
+ * camelCase factory function name for a workflow key: PascalCase, then lowercase
+ * the first character (`create-checkout-session` → `createCheckoutSession`,
+ * `refresh-sheet` → `refreshSheet`). Used as the top-level exported factory
+ * function name in the per-workflow generated file, so it must be a legal
+ * function identifier: a digit-leading key (`123-job` → `_123Job`) is
+ * underscore-prefixed, and a key that lands on a JS reserved word (`delete`,
+ * `new`, `import`) is underscore-suffixed (`delete_`). Only the emitted
+ * identifier changes; the runtime call still passes the ORIGINAL key string.
+ */
+export declare function workflowFactoryName(key: string): string;