primitive-admin 1.0.53 → 1.0.55

package/dist/src/lib/workflow-codegen/schemaToTs.js

@@ -0,0 +1,282 @@
+/**
+ * JSON-Schema → TypeScript converter for `workflows codegen` (issue #1442).
+ *
+ * Workflow `inputSchema`/`outputSchema` are real JSON Schema. This converter
+ * types only the subset the server's validator descends into — and it reads
+ * that interpretation from the SAME descriptor the server validator consumes,
+ * vendored into the CLI as `generated-schema-descriptor.ts` (a byte copy of
+ * `src/workflows/schema-descriptor.ts`, kept fresh by
+ * `cli/scripts/gen-workflow-schema-descriptor.mjs` + its drift guard). So the
+ * generated type and the runtime validation can never disagree on:
+ *
+ *   - `type` single scalar (`string`/`number`/`integer`/`boolean`/`null`) →
+ *     the mapped TS scalar.
+ *   - `type` array-union — only when every member is a scalar/`null` → a TS
+ *     union. A union that contains `object` or `array` renders `unknown`,
+ *     because the server only walks `properties`/`items` for the bare string
+ *     `"object"`/`"array"` — a union is never descended, so a precise-looking
+ *     type would over-promise.
+ *   - `enum` → a scalar-literal union, intersected with the declared `type`
+ *     first (the server gates on `type` before checking `enum`).
+ *   - `type: "object"` with `properties` → a nested object type; `required[]`
+ *     drives `name:` vs `name?:`. An OPEN object (no `additionalProperties:
+ *     false`) also emits `[key: string]: unknown` so extra keys the runtime
+ *     validator accepts don't hit TS excess-property errors; a CLOSED object
+ *     (`additionalProperties: false`) omits the index signature.
+ *   - `type: "array"` with `items` → `T[]`.
+ *   - `oneOf` whose members are ALL `type: "object"` → a discriminated
+ *     (tagged) union: the `|`-union of member object types, keyed by an
+ *     auto-detected single-literal-`enum` discriminator (#1511). A defective
+ *     all-object tagged union (no/ambiguous discriminator, <2 members) or an
+ *     all-object `anyOf` (unsupported in v1) is a STRICT codegen error, not a
+ *     silent `unknown` (Fork 3, resolved by the maintainer).
+ *
+ * Everything else the server ignores (`$ref`, `allOf`, `format`,
+ * `patternProperties`, numeric constraints, tuple `items`, and a `oneOf`/`anyOf`
+ * whose members are NOT all objects) renders `unknown`.
+ *
+ * Errors are NOT swallowed here — a malformed schema fails upstream at parse
+ * time, and a defective tagged union throws — this walker otherwise returns
+ * `unknown` for anything it does not recognize.
+ */
+import { describeSchema, isType, } from "./generated-schema-descriptor.js";
+/** Scalar JSON-schema types this converter maps to a concrete TS scalar. */
+const SCALAR_TS = {
+    string: "string",
+    number: "number",
+    integer: "number",
+    boolean: "boolean",
+    null: "null",
+};
+/** A shared empty-object reference for the `{}`-rejection probe below. */
+const EMPTY_OBJECT = Object.freeze({});
+/**
+ * Render a scalar-literal union from an `enum` array. `JSON.stringify` emits a
+ * valid TS literal for a string, number, boolean, or `null`. An object/array
+ * member has no TS literal form, so the whole enum falls back to `unknown`
+ * (returns `null` here).
+ */
+function tsUnionFromScalarEnum(values) {
+    if (!Array.isArray(values) || values.length === 0)
+        return null;
+    const literals = [];
+    const seen = new Set();
+    for (const v of values) {
+        if (v !== null && (typeof v === "object" || Array.isArray(v))) {
+            // Objects/arrays are not representable as TS literals.
+            return null;
+        }
+        const literal = JSON.stringify(v);
+        if (literal === undefined)
+            return null; // e.g. `undefined` in the enum
+        if (!seen.has(literal)) {
+            seen.add(literal);
+            literals.push(literal);
+        }
+    }
+    return literals.length > 0 ? literals.join(" | ") : null;
+}
+/** True when a rendered type is a bare identifier safe to suffix with `[]`. */
+function isSimpleTypeExpr(expr) {
+    return /^[A-Za-z0-9_.]+(\[\])*$/.test(expr);
+}
+/**
+ * Convert a parsed JSON Schema node to a TypeScript type expression. Object
+ * types render multi-line (2-space indent per level); everything else renders
+ * on a single line. `indent` is the current indentation depth.
+ */
+export function schemaToTsType(schema, indent = 0) {
+    const d = describeSchema(schema);
+    // `enum` is the most specific constraint — the server checks it AFTER the
+    // type gate, so when both are present only the enum members that satisfy the
+    // declared type(s) are reachable. Emit just those (intersect with `type`
+    // via the shared `isType`). If the type filter leaves nothing representable,
+    // fall through to plain `type` rendering rather than over-promising.
+    if (d.enumValues) {
+        const allowedTypes = d.types;
+        const candidates = allowedTypes.length > 0
+            ? d.enumValues.filter((v) => allowedTypes.some((t) => isType(v, t)))
+            : d.enumValues;
+        if (candidates.length === 0) {
+            // No enum member satisfies the declared type gate (or the enum is empty),
+            // so the runtime rejects EVERY value: the type gate lets some values
+            // through, then `enum.includes(value)` fails them all. The reachable set
+            // is empty → an uninhabitable `never`. Widening to the declared type here
+            // (e.g. `{type:"string", enum:[1]}` → `string`) would let typed callers
+            // pass values the server always rejects.
+            return "never";
+        }
+        const union = tsUnionFromScalarEnum(candidates);
+        if (union !== null)
+            return union;
+        // Candidates survive the type gate but aren't representable as TS literals
+        // (object/array enum members). With no declared type there is nothing to
+        // fall back on → `unknown`; otherwise fall through to plain `type`.
+        if (allowedTypes.length === 0)
+            return "unknown";
+    }
+    // Array-union type (e.g. `["string", "null"]`). Only scalar/null members get
+    // a precise union — the server never descends `properties`/`items` for a
+    // union, so an object/array member forces `unknown`.
+    if (d.isUnion) {
+        const parts = [];
+        const seen = new Set();
+        for (const t of d.types) {
+            const mapped = SCALAR_TS[t];
+            if (mapped === undefined)
+                return "unknown"; // object/array/unknown member
+            if (!seen.has(mapped)) {
+                seen.add(mapped);
+                parts.push(mapped);
+            }
+        }
+        return parts.length > 0 ? parts.join(" | ") : "unknown";
+    }
+    // Discriminated-union (`oneOf`) rendering (#1511). A qualifying tagged union
+    // has no top-level `type`, so this runs ahead of the `singularType === null`
+    // fallback. Render each member via the existing object rendering and join
+    // with `|` — the natural TS discriminated union TS narrows on. A defective
+    // all-object tagged union (`kind: "invalid"`) is a strict codegen error
+    // (Fork 3, resolved by the maintainer), not a silent `unknown`.
+    if (d.oneOf) {
+        if (d.oneOf.kind === "invalid") {
+            throw new Error(`workflows codegen: ${d.oneOf.reason}`);
+        }
+        const { discriminant } = d.oneOf;
+        const members = d.oneOf.members.map((m) => {
+            const md = describeSchema(m.schema);
+            // Every member is `type: "object"` with `properties`, so `md.object` is
+            // non-null — reuse the shared object rendering rather than reimplement it.
+            if (!md.object)
+                return schemaToTsType(m.schema, indent);
+            // The runtime validator always requires the discriminator present before
+            // it can select a branch — regardless of whether the member lists it in
+            // its own `required`. Force it required so the generated union can't
+            // compile a value that omits the tag (which the runtime rejects as
+            // "matches no case") (#1511).
+            const required = md.object.required.includes(discriminant)
+                ? md.object.required
+                : [...md.object.required, discriminant];
+            return renderObjectType({ ...md.object, required }, indent);
+        });
+        return members.join(" | ");
+    }
+    if (d.singularType === null) {
+        // No usable single type and no enum — the server enforces nothing.
+        return "unknown";
+    }
+    // Object: the server walks `properties`/`required` ONLY when the type is
+    // exactly `"object"`. `d.object` is non-null only in that case with declared
+    // properties; a typed object with no properties is open → Record.
+    if (d.singularType === "object") {
+        if (d.object)
+            return renderObjectType(d.object, indent);
+        return "Record<string, unknown>";
+    }
+    // Array: the server walks `items` ONLY when the type is exactly `"array"`.
+    if (d.singularType === "array") {
+        const items = d.array ? d.array.items : undefined;
+        // Missing or tuple `items` (an array of schemas) is ignored → unknown[].
+        if (!items || typeof items !== "object" || Array.isArray(items)) {
+            return "unknown[]";
+        }
+        const elem = schemaToTsType(items, indent);
+        return isSimpleTypeExpr(elem) ? `${elem}[]` : `(${elem})[]`;
+    }
+    // Single scalar type.
+    const scalar = SCALAR_TS[d.singularType];
+    return scalar ?? "unknown";
+}
+/**
+ * Render an object descriptor (`describeSchema(...).object`) as a TS object
+ * type. `required[]` drives optionality. An OPEN object (not
+ * `additionalProperties: false`) emits `[key: string]: unknown` so extra keys
+ * the runtime accepts don't trip TS excess-property checks; a CLOSED object
+ * omits it.
+ */
+function renderObjectType(objectDesc, indent) {
+    const { properties, required, additionalPropertiesClosed } = objectDesc;
+    const propNames = Object.keys(properties);
+    const requiredSet = new Set(Array.isArray(required)
+        ? required.filter((k) => typeof k === "string")
+        : []);
+    const pad = "  ".repeat(indent + 1);
+    const closePad = "  ".repeat(indent);
+    const propNameSet = new Set(propNames);
+    const lines = ["{"];
+    for (const name of propNames) {
+        const childType = schemaToTsType(properties[name], indent + 1);
+        const optional = requiredSet.has(name) ? "" : "?";
+        lines.push(`${pad}${quotePropIfNeeded(name)}${optional}: ${childType};`);
+    }
+    // A key listed in `required` but absent from `properties` has no declared
+    // child schema, yet the validator still rejects an object missing it. Emit it
+    // as a required `unknown` member so the generated type demands the key too —
+    // otherwise `{properties:{}, required:["id"]}` would accept `{}`, which the
+    // runtime rejects.
+    for (const name of requiredSet) {
+        if (!propNameSet.has(name)) {
+            lines.push(`${pad}${quotePropIfNeeded(name)}: unknown;`);
+        }
+    }
+    // Open objects accept extra keys at runtime; model that with an index
+    // signature so a call site passing an unlisted key still compiles.
+    if (!additionalPropertiesClosed) {
+        lines.push(`${pad}[key: string]: unknown;`);
+    }
+    lines.push(`${closePad}}`);
+    return lines.join("\n");
+}
+/**
+ * Quote an object-property name when it is not a plain identifier (so keys with
+ * hyphens, dots, or other characters render as valid TS).
+ */
+function quotePropIfNeeded(name) {
+    if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name))
+        return name;
+    return JSON.stringify(name);
+}
+/**
+ * True when the schema REJECTS an empty object `{}` — i.e. the client's
+ * `rootInput: options.input ?? {}` fallback would fail validation, so `input`
+ * must be a compile-time-required option (issue #1442, P4). Derived from the
+ * shared descriptor so it matches the server validator exactly:
+ *
+ *   - a valid top-level discriminated-union (`oneOf`): the runtime always
+ *     requires the discriminator present, so `{}` matches no case;
+ *   - a declared top-level `type` that `{}` does not satisfy (anything but
+ *     `object`, e.g. `string`/`array`, or a union with no `object` arm);
+ *   - a top-level `enum` (a fresh `{}` is never an enum member);
+ *   - `type: "object"` with a non-empty `required[]` (a missing required key).
+ *
+ * An all-optional object schema, or a schema with no top-level constraints,
+ * accepts `{}` → `input` is optional.
+ */
+export function schemaRejectsEmptyObject(schema) {
+    const d = describeSchema(schema);
+    // 0. A valid discriminated-union (`oneOf`) always requires the discriminator
+    //    present before the runtime can select a branch, so a fresh `{}` (the
+    //    client's `input ?? {}` fallback) matches no case and is rejected. The
+    //    generated `input` must therefore be required, not optional (#1511).
+    if (d.oneOf && d.oneOf.kind === "valid") {
+        return true;
+    }
+    // 1. Type gate: `{}` must satisfy at least one declared type.
+    if (d.types.length && !d.types.some((t) => isType(EMPTY_OBJECT, t))) {
+        return true;
+    }
+    // 2. Enum gate: a JSON enum never contains a value reference-equal to `{}`,
+    //    so any enum rejects it (mirrors `enum.includes(value)` at runtime).
+    if (d.enumValues && !d.enumValues.includes(EMPTY_OBJECT)) {
+        return true;
+    }
+    // 3. Object required: any required key is absent from `{}`.
+    if (d.object) {
+        for (const key of d.object.required) {
+            if (!(key in EMPTY_OBJECT))
+                return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=schemaToTs.js.map

package/dist/src/lib/workflow-codegen/schemaToTs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaToTs.js","sourceRoot":"","sources":["../../../../src/lib/workflow-codegen/schemaToTs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EACL,cAAc,EACd,MAAM,GAEP,MAAM,kCAAkC,CAAC;AAE1C,4EAA4E;AAC5E,MAAM,SAAS,GAA2B;IACxC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,0EAA0E;AAC1E,MAAM,YAAY,GAA0B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9D;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,MAAa;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,uDAAuD;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;QACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAW,EAAE,MAAM,GAAG,CAAC;IACpD,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEjC,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC;QAC7B,MAAM,UAAU,GACd,YAAY,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAC7B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5C;YACH,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACnB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,0EAA0E;YAC1E,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,yCAAyC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,2EAA2E;QAC3E,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;IAClD,CAAC;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,qDAAqD;IACrD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC,CAAC,8BAA8B;YAC1E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,gEAAgE;IAChE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpC,wEAAwE;YACxE,2EAA2E;YAC3E,IAAI,CAAC,EAAE,CAAC,MAAM;gBAAE,OAAO,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxD,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACxD,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ;gBACpB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC1C,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5B,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,yEAAyE;QACzE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;IAC9D,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,UAAmD,EACnD,MAAc;IAEd,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,EAAE,GAAG,UAAU,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE1C,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACpD,CAAC,CAAC,EAAE,CACP,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAa,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,mBAAmB;IACnB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAW;IAClD,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEjC,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,4DAA4D;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/lib/workflow-fragments.js

@@ -22,7 +22,7 @@
  */
 import { existsSync, readFileSync } from "fs";
 import { dirname, join, basename } from "path";
-import * as TOML from "@iarna/toml";
+import { parseConfigToml } from "./config-toml.js";
 /**
  * Read and expand a workflow TOML file from disk. Returns the parsed
  * TOML with all `include` fragments spliced in. If the file has no
@@ -30,7 +30,7 @@ import * as TOML from "@iarna/toml";
  */
 export function expandWorkflow(workflowPath) {
     const content = readFileSync(workflowPath, "utf-8");
-    const parsed = TOML.parse(content);
+    const parsed = parseConfigToml(content);
     return expandWorkflowTomlData(parsed, workflowPath);
 }
 /**
@@ -87,7 +87,7 @@ function readFragmentSafely(fragmentPath, workflowPath, fragmentName) {
     let parsed;
     try {
         const content = readFileSync(fragmentPath, "utf-8");
-        parsed = TOML.parse(content);
+        parsed = parseConfigToml(content);
     }
     catch (err) {
         throw new Error(`Failed to parse fragment '${fragmentName}' at '${fragmentPath}': ${err?.message ?? err}`);

package/dist/src/lib/workflow-fragments.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-fragments.js","sourceRoot":"","sources":["../../../src/lib/workflow-fragments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AASpC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAC;IAC1D,OAAO,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA2B,EAC3B,YAAoB;IAEpB,sEAAsE;IACtE,sEAAsE;IACtE,0DAA0D;IAC1D,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAA0B,CAAC;IACpC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,qFAAqF,CAC/G,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,8CAA8C;IAC9C,0DAA0D;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAE7E,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAClD,CAAC,CAAE,MAAM,CAAC,KAAoC;QAC9C,CAAC,CAAC,EAAE,CAAC;IAOP,MAAM,aAAa,GAAqB,EAAE,CAAC;IAE3C,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE,CAAC;QACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,mCAAmC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,8CAA8C,CACvI,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,YAAY,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAEjD,sEAAsE;IACtE,kEAAkE;IAClE,8CAA8C;IAC9C,MAAM,MAAM,GAAwB,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC;IACtB,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,MAA0B,CAAC;AACpC,CAAC;AAMD,SAAS,kBAAkB,CACzB,YAAoB,EACpB,YAAoB,EACpB,YAAoB;IAEpB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,wBAAwB,YAAY,qCAAqC,YAAY,IAAI,CACnH,CAAC;IACJ,CAAC;IACD,IAAI,MAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAC;IACtD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,SAAS,YAAY,MAAM,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,SAAS,YAAY,8HAA8H,CAC7K,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,SAAS,YAAY,6EAA6E,CAC5H,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACvC,CAAC,CAAE,MAAM,CAAC,KAAoC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAgE,EAChE,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACpB,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS,CAAC,iDAAiD;QAChG,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,YAAY,EAAE,4CAA4C,YAAY,eAAe,WAAW,aAAa,MAAM,GAAG,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"workflow-fragments.js","sourceRoot":"","sources":["../../../src/lib/workflow-fragments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AASnD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAwB,CAAC;IAC/D,OAAO,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA2B,EAC3B,YAAoB;IAEpB,sEAAsE;IACtE,sEAAsE;IACtE,0DAA0D;IAC1D,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAA0B,CAAC;IACpC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,qFAAqF,CAC/G,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,8CAA8C;IAC9C,0DAA0D;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAE7E,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAClD,CAAC,CAAE,MAAM,CAAC,KAAoC;QAC9C,CAAC,CAAC,EAAE,CAAC;IAOP,MAAM,aAAa,GAAqB,EAAE,CAAC;IAE3C,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE,CAAC;QACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,mCAAmC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,8CAA8C,CACvI,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,YAAY,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAEjD,sEAAsE;IACtE,kEAAkE;IAClE,8CAA8C;IAC9C,MAAM,MAAM,GAAwB,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC;IACtB,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,MAA0B,CAAC;AACpC,CAAC;AAMD,SAAS,kBAAkB,CACzB,YAAoB,EACpB,YAAoB,EACpB,YAAoB;IAEpB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,wBAAwB,YAAY,qCAAqC,YAAY,IAAI,CACnH,CAAC;IACJ,CAAC;IACD,IAAI,MAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,GAAG,eAAe,CAAC,OAAO,CAAwB,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,SAAS,YAAY,MAAM,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,SAAS,YAAY,8HAA8H,CAC7K,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,SAAS,YAAY,6EAA6E,CAC5H,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACvC,CAAC,CAAE,MAAM,CAAC,KAAoC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAgE,EAChE,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACpB,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS,CAAC,iDAAiD;QAChG,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,YAAY,EAAE,4CAA4C,YAAY,eAAe,WAAW,aAAa,MAAM,GAAG,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/src/lib/workflow-payload.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Shared TOML → workflow-payload builder (#1177).
+ *
+ * Background: the CLI built the create/update workflow payload in THREE
+ * separate hand-enumerated literals — `workflows create --from-file`
+ * (`cli/src/commands/workflows.ts`), the `sync push` create branch
+ * (`cli/src/commands/sync.ts`), and the `sync push` update branch (the metadata
+ * PATCH in `cli/src/lib/workflow-apply.ts`). Because each site listed the
+ * `[workflow]` fields by hand, they drifted apart: a field added to one path was
+ * silently dropped by the others. `status` was the 4th field lost this way
+ * (after `syncCallable` #807, `accessRule` #571, `runAs` #1081); the audit also
+ * found `capabilities` (#1172) and `perAppMaxRunning` / `perAppMaxQueued` /
+ * `queueTtlSeconds` dropped from at least one path.
+ *
+ * The fix: one shared builder that owns the `[workflow]`-derived field list.
+ * All three call-sites spread its output; only the per-field presence coalescing
+ * and the create-only `syncCallable` inclusion differ by `mode`, so the field
+ * list itself lives in exactly one place and can't drift again. A unit
+ * drift-guard asserts the builder's key set (see
+ * `cli/tests/unit/workflow-payload-fields.test.ts`).
+ *
+ * What the builder does NOT own (structural / call-site-specific wiring the
+ * callers still attach): `workflowKey`, `steps`, and the `metadataManifest`
+ * declared-access manifest (#1304) — the sync paths always attach it, create
+ * --from-file never does.
+ *
+ * Presence semantics, by mode:
+ *   - create: optional strings coalesce absent/empty → `undefined` (omit; the
+ *     server default applies). `capabilities` forwards the raw array (absent →
+ *     omit). Schemas omit when absent.
+ *   - update: optional strings distinguish explicit-clear from leave-unset via
+ *     `x !== undefined ? (x || null) : undefined`. `status` forwards the bare
+ *     value (matching the server's hasOwnProperty path). Schemas send `null`
+ *     when absent so a cleared schema round-trips.
+ *   - booleans (`requiresClientApply`, and `syncCallable` on create) are raw
+ *     pass-through so an explicit `false` is preserved and only a truly-absent
+ *     key drops.
+ *   - `syncCallable` is OMITTED in `mode: "update"`: the server re-validates
+ *     `syncCallable: true` against the CURRENTLY-active steps, so the update
+ *     path must send it as a deferred second PATCH after the new steps are live
+ *     (#807). `applyWorkflowBody` owns that second PATCH.
+ */
+export type WorkflowPayloadMode = "create" | "update";
+/**
+ * Parse a JSON schema field that TOML may present as a string OR (for an inline
+ * table) as an already-parsed object. Kept here in `cli/src/lib` so the builder
+ * owns its own parse decision rather than importing back into a command module
+ * (#1177 dependency-direction decision).
+ */
+export declare function safeJsonParse(value: any): any;
+/**
+ * The `[workflow]`-derived keys the builder emits, per mode. Exported so the
+ * drift-guard unit test can assert the key set hasn't silently lost a field —
+ * the recurring bug class this builder closes. `update` omits `syncCallable`
+ * (deferred second PATCH, #807); everything else is shared.
+ */
+export declare const WORKFLOW_PAYLOAD_FIELDS_CREATE: readonly ["name", "description", "status", "accessRule", "runAs", "capabilities", "perUserMaxRunning", "perUserMaxQueued", "perAppMaxRunning", "perAppMaxQueued", "queueTtlSeconds", "dequeueOrder", "requiresClientApply", "inputSchema", "outputSchema", "syncCallable"];
+export declare const WORKFLOW_PAYLOAD_FIELDS_UPDATE: ReadonlyArray<string>;
+/**
+ * Build the workflow payload's `[workflow]`-derived fields from a parsed TOML
+ * `[workflow]` table. `workflow` is `tomlData.workflow` (already merged with any
+ * explicit CLI flag overrides by the caller). Callers spread the result into
+ * the create/update payload and attach the structural fields themselves
+ * (`workflowKey`, `steps`, `metadataManifest`).
+ */
+export declare function buildWorkflowPayloadFromToml(workflow: any, { mode }: {
+    mode: WorkflowPayloadMode;
+}): Record<string, any>;

package/dist/src/lib/workflow-payload.js

@@ -0,0 +1,150 @@
+/**
+ * Shared TOML → workflow-payload builder (#1177).
+ *
+ * Background: the CLI built the create/update workflow payload in THREE
+ * separate hand-enumerated literals — `workflows create --from-file`
+ * (`cli/src/commands/workflows.ts`), the `sync push` create branch
+ * (`cli/src/commands/sync.ts`), and the `sync push` update branch (the metadata
+ * PATCH in `cli/src/lib/workflow-apply.ts`). Because each site listed the
+ * `[workflow]` fields by hand, they drifted apart: a field added to one path was
+ * silently dropped by the others. `status` was the 4th field lost this way
+ * (after `syncCallable` #807, `accessRule` #571, `runAs` #1081); the audit also
+ * found `capabilities` (#1172) and `perAppMaxRunning` / `perAppMaxQueued` /
+ * `queueTtlSeconds` dropped from at least one path.
+ *
+ * The fix: one shared builder that owns the `[workflow]`-derived field list.
+ * All three call-sites spread its output; only the per-field presence coalescing
+ * and the create-only `syncCallable` inclusion differ by `mode`, so the field
+ * list itself lives in exactly one place and can't drift again. A unit
+ * drift-guard asserts the builder's key set (see
+ * `cli/tests/unit/workflow-payload-fields.test.ts`).
+ *
+ * What the builder does NOT own (structural / call-site-specific wiring the
+ * callers still attach): `workflowKey`, `steps`, and the `metadataManifest`
+ * declared-access manifest (#1304) — the sync paths always attach it, create
+ * --from-file never does.
+ *
+ * Presence semantics, by mode:
+ *   - create: optional strings coalesce absent/empty → `undefined` (omit; the
+ *     server default applies). `capabilities` forwards the raw array (absent →
+ *     omit). Schemas omit when absent.
+ *   - update: optional strings distinguish explicit-clear from leave-unset via
+ *     `x !== undefined ? (x || null) : undefined`. `status` forwards the bare
+ *     value (matching the server's hasOwnProperty path). Schemas send `null`
+ *     when absent so a cleared schema round-trips.
+ *   - booleans (`requiresClientApply`, and `syncCallable` on create) are raw
+ *     pass-through so an explicit `false` is preserved and only a truly-absent
+ *     key drops.
+ *   - `syncCallable` is OMITTED in `mode: "update"`: the server re-validates
+ *     `syncCallable: true` against the CURRENTLY-active steps, so the update
+ *     path must send it as a deferred second PATCH after the new steps are live
+ *     (#807). `applyWorkflowBody` owns that second PATCH.
+ */
+/**
+ * Parse a JSON schema field that TOML may present as a string OR (for an inline
+ * table) as an already-parsed object. Kept here in `cli/src/lib` so the builder
+ * owns its own parse decision rather than importing back into a command module
+ * (#1177 dependency-direction decision).
+ */
+export function safeJsonParse(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value === "string")
+        return JSON.parse(value);
+    return value; // Already an object (TOML parsed it as a table)
+}
+/**
+ * The `[workflow]`-derived keys the builder emits, per mode. Exported so the
+ * drift-guard unit test can assert the key set hasn't silently lost a field —
+ * the recurring bug class this builder closes. `update` omits `syncCallable`
+ * (deferred second PATCH, #807); everything else is shared.
+ */
+export const WORKFLOW_PAYLOAD_FIELDS_CREATE = [
+    "name",
+    "description",
+    "status",
+    "accessRule",
+    "runAs",
+    "capabilities",
+    "perUserMaxRunning",
+    "perUserMaxQueued",
+    "perAppMaxRunning",
+    "perAppMaxQueued",
+    "queueTtlSeconds",
+    "dequeueOrder",
+    "requiresClientApply",
+    "inputSchema",
+    "outputSchema",
+    "syncCallable",
+];
+export const WORKFLOW_PAYLOAD_FIELDS_UPDATE = WORKFLOW_PAYLOAD_FIELDS_CREATE.filter((f) => f !== "syncCallable");
+/**
+ * Build the workflow payload's `[workflow]`-derived fields from a parsed TOML
+ * `[workflow]` table. `workflow` is `tomlData.workflow` (already merged with any
+ * explicit CLI flag overrides by the caller). Callers spread the result into
+ * the create/update payload and attach the structural fields themselves
+ * (`workflowKey`, `steps`, `metadataManifest`).
+ */
+export function buildWorkflowPayloadFromToml(workflow, { mode }) {
+    const create = mode === "create";
+    const payload = {
+        name: workflow.name,
+        description: workflow.description,
+        // status — create coalesces absent/empty → omit (server default `draft`
+        // applies); update forwards the bare value so it round-trips and an
+        // explicit "" surfaces the server's validation error rather than a silent
+        // no-op (matches the pre-existing update path).
+        status: create ? workflow.status || undefined : workflow.status,
+        // accessRule / runAs — create coalesces absent/empty → omit; update
+        // distinguishes explicit clear ("" → null) from leave-unset (absent →
+        // undefined).
+        accessRule: create
+            ? workflow.accessRule || undefined
+            : workflow.accessRule !== undefined
+                ? workflow.accessRule || null
+                : undefined,
+        runAs: create
+            ? workflow.runAs || undefined
+            : workflow.runAs !== undefined
+                ? workflow.runAs || null
+                : undefined,
+        // capabilities — create forwards the raw array (absent → omit); update
+        // forwards presence-aware so an explicit array round-trips. (The server
+        // update PATCH persist for capabilities is tracked separately in #1232; the
+        // round-trip guard asserts capabilities on the create leg only.)
+        capabilities: create
+            ? workflow.capabilities
+            : workflow.capabilities !== undefined
+                ? workflow.capabilities
+                : undefined,
+        // Queue limits — raw numeric pass-through both modes (absent → omit).
+        perUserMaxRunning: workflow.perUserMaxRunning,
+        perUserMaxQueued: workflow.perUserMaxQueued,
+        perAppMaxRunning: workflow.perAppMaxRunning,
+        perAppMaxQueued: workflow.perAppMaxQueued,
+        queueTtlSeconds: workflow.queueTtlSeconds,
+        dequeueOrder: workflow.dequeueOrder,
+        // requiresClientApply — raw boolean pass-through so an explicit `false` is
+        // preserved and only a truly-absent key drops (server default applies).
+        requiresClientApply: workflow.requiresClientApply,
+        // Schemas — parse a JSON string (or accept an inline table). Create omits
+        // when absent; update sends null so a cleared schema round-trips.
+        inputSchema: workflow.inputSchema
+            ? safeJsonParse(workflow.inputSchema)
+            : create
+                ? undefined
+                : null,
+        outputSchema: workflow.outputSchema
+            ? safeJsonParse(workflow.outputSchema)
+            : create
+                ? undefined
+                : null,
+    };
+    // syncCallable — create includes it (raw boolean pass-through); update omits
+    // it (deferred second PATCH, #807 — see module doc).
+    if (create) {
+        payload.syncCallable = workflow.syncCallable;
+    }
+    return payload;
+}
+//# sourceMappingURL=workflow-payload.js.map

package/dist/src/lib/workflow-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-payload.js","sourceRoot":"","sources":["../../../src/lib/workflow-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAIH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAU;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,gDAAgD;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,MAAM;IACN,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,cAAc;IACd,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,cAAc;IACd,cAAc;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG,8BAA8B,CAAC,MAAM,CACjF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CACH,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAa,EACb,EAAE,IAAI,EAAiC;IAEvC,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC;IAEjC,MAAM,OAAO,GAAwB;QACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,wEAAwE;QACxE,oEAAoE;QACpE,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;QAC/D,oEAAoE;QACpE,sEAAsE;QACtE,cAAc;QACd,UAAU,EAAE,MAAM;YAChB,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,SAAS;YAClC,CAAC,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;gBACjC,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;gBAC7B,CAAC,CAAC,SAAS;QACf,KAAK,EAAE,MAAM;YACX,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,SAAS;YAC7B,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAC5B,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;gBACxB,CAAC,CAAC,SAAS;QACf,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,iEAAiE;QACjE,YAAY,EAAE,MAAM;YAClB,CAAC,CAAC,QAAQ,CAAC,YAAY;YACvB,CAAC,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;gBACnC,CAAC,CAAC,QAAQ,CAAC,YAAY;gBACvB,CAAC,CAAC,SAAS;QACf,sEAAsE;QACtE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,2EAA2E;QAC3E,wEAAwE;QACxE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,0EAA0E;QAC1E,kEAAkE;QAClE,WAAW,EAAE,QAAQ,CAAC,WAAW;YAC/B,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;YACrC,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI;QACV,YAAY,EAAE,QAAQ,CAAC,YAAY;YACjC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC;YACtC,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI;KACX,CAAC;IAEF,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC/C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/lib/workflow-toml-validator.d.ts

@@ -73,7 +73,7 @@ export type WorkflowTomlError = {
 /**
  * Walk a parsed workflow TOML document and return all unknown-field errors.
  *
- * @param tomlData The output of `TOML.parse()` for a workflow TOML file.
+ * @param tomlData The output of `parseConfigToml()` for a workflow TOML file.
  * @returns An array of error objects, one per offending field. Empty if no
  *   errors were found.
  */

package/dist/src/lib/workflow-toml-validator.js

@@ -60,7 +60,7 @@ export const KNOWN_KINDS_FOR_DRIFT_GUARD = KNOWN_KINDS;
 /**
  * Walk a parsed workflow TOML document and return all unknown-field errors.
  *
- * @param tomlData The output of `TOML.parse()` for a workflow TOML file.
+ * @param tomlData The output of `parseConfigToml()` for a workflow TOML file.
  * @returns An array of error objects, one per offending field. Empty if no
  *   errors were found.
  */
@@ -227,6 +227,42 @@ function validateStepObject(step, stepIndex, parentStepId, errors) {
             parentStepId,
         });
     }
+    // #1252 — form-urlencoded body conflict. `[steps.request.form]` encodes an
+    // `application/x-www-form-urlencoded` body; it cannot coexist with a
+    // `request.body` or a raw/multipart `bodyMode`. The runtime rejects the same
+    // combination, but catching it at push time gives a clearer, earlier
+    // diagnostic. (`request.form` itself needs no allowlist entry — the validator
+    // only checks top-level step fields, and `request` is already allowlisted.)
+    if (step.kind === "integration.call" &&
+        step.request !== null &&
+        typeof step.request === "object" &&
+        !Array.isArray(step.request)) {
+        const req = step.request;
+        const hasForm = req.form !== undefined && req.form !== null;
+        if (hasForm) {
+            if (req.body !== undefined && req.body !== null) {
+                errors.push({
+                    stepIndex,
+                    stepId,
+                    field: "request.form",
+                    hint: "`request.form` (application/x-www-form-urlencoded) cannot be combined with `request.body`. " +
+                        "Use one request body — either the JSON `body` or the `form` table.",
+                    parentStepId,
+                });
+            }
+            const mode = step.bodyMode;
+            if (mode === "raw" || mode === "multipart") {
+                errors.push({
+                    stepIndex,
+                    stepId,
+                    field: "request.form",
+                    hint: `\`request.form\` (application/x-www-form-urlencoded) cannot be combined with bodyMode "${mode}". ` +
+                        "Remove `form` or the `bodyMode`.",
+                    parentStepId,
+                });
+            }
+        }
+    }
 }
 /**
  * Render a multi-line diagnostic for a list of errors. Designed for the