primitive-admin 1.0.54 → 1.0.56

package/dist/src/lib/db-codegen/generated-operation-def-descriptor.js

@@ -0,0 +1,211 @@
+/**
+ * GENERATED FILE — DO NOT EDIT BY HAND.
+ *
+ * Vendored byte-for-byte from the canonical server module
+ * `src/app-api/controllers/operation-definition-descriptor.ts` — the SAME
+ * allow-lists the server validator (`validateDefinition` / `validateParams`)
+ * enforces. The client operation-definition types
+ * (`src/client/api/operationDefinition.ts`) hand-author the matching union;
+ * a key-parity test compares them against this committed copy.
+ *
+ * Regenerate with:
+ *   node cli/scripts/gen-operation-def-descriptor.mjs   (runs at CLI prebuild)
+ *
+ * A CI freshness guard
+ * (`cli/scripts/gen-operation-def-descriptor.mjs --check`, also asserted by
+ * `cli/tests/unit/operation-def-descriptor-drift-guard.test.ts`) fails if
+ * this committed copy does not match the source — see issue #1544 / #1442.
+ */
+/**
+ * Canonical, dependency-free descriptor of the database operation-definition
+ * schema (issue #1544).
+ *
+ * The server validator (`validateDefinition` / `validateParams` in
+ * `database-type-operations-controller.ts`) and the CLIENT operation-definition
+ * types (`src/client/api/operationDefinition.ts`, consumed by
+ * `createOperation` / `updateOperation` / `DatabaseOperationInfo`) must agree on
+ * the set of operation types and the allowed keys for each definition shape —
+ * otherwise a hand-authored `OperationDefinition` member promises a key the
+ * runtime rejects (or omits one the runtime accepts).
+ *
+ * This module is the single source of that declarative contract: the op-type
+ * list, the per-type allowed definition-key sets, the per-type mutation/action
+ * op-name enums, and the param-schema key/type enums. The validator imports
+ * these constants directly (so a change here changes what the server enforces),
+ * and the CLI vendors a byte-for-byte copy as a committed artifact via
+ * `cli/scripts/gen-operation-def-descriptor.mjs` (the #1442 workflow
+ * schema-descriptor pattern). A drift-guard test runs that generator in
+ * `--check` mode, and a key-parity test asserts the hand-authored client type
+ * members' keys equal the corresponding allow-lists here — so the validator and
+ * the client types can never silently diverge. The CLI never imports server
+ * `src/` at runtime; only the build-time generator reads this file.
+ *
+ * The value-shape checks that are NOT purely declarative (requiredness, nested
+ * object structure, CEL parsing) stay imperative in the validator. This
+ * descriptor captures the declarative allow-lists — the part that is genuinely
+ * shared between the runtime boundary and the descriptive client types.
+ *
+ * Ordering is significant: the validator joins these arrays into its 400-level
+ * error messages (`Must be one of: ${X.join(", ")}`), so reordering an array
+ * changes an error string. Keep entries in their current order.
+ */
+/** The operation `type` values accepted by `createOperation` / `updateOperation`. */
+export const OPERATION_TYPES = [
+    "query",
+    "mutation",
+    "count",
+    "aggregate",
+    "pipeline",
+    "applyToQuery",
+];
+// ── Per-type definition key allow-lists ──
+/** Allowed top-level keys in a `query` definition. `cache` (#1247) is query-only. */
+export const QUERY_DEF_KEYS = [
+    "filter",
+    "sort",
+    "limit",
+    "projection",
+    "include",
+    "cache",
+];
+/** Allowed top-level keys in a `mutation` definition. */
+export const MUTATION_DEF_KEYS = ["operations"];
+/** Allowed top-level keys in a `count` definition. */
+export const COUNT_DEF_KEYS = ["filter"];
+/** Allowed top-level keys in an `aggregate` definition. */
+export const AGGREGATE_DEF_KEYS = [
+    "groupBy",
+    "operations",
+    "filter",
+    "limit",
+    "sort",
+];
+/** Allowed top-level keys in a `pipeline` definition. */
+export const PIPELINE_DEF_KEYS = ["steps", "return"];
+/** Allowed top-level keys in an `applyToQuery` definition. */
+export const APPLY_TO_QUERY_DEF_KEYS = ["source", "action"];
+// ── Op-name enums nested inside definitions ──
+/** Mutation op names allowed in a `mutation` definition's `operations[]`. */
+export const MUTATION_OPS = [
+    "save",
+    "patch",
+    "delete",
+    "increment",
+    "addToSet",
+    "removeFromSet",
+];
+/**
+ * Aggregate op `type` names allowed in an `aggregate` definition's
+ * `operations[]`.
+ */
+export const AGGREGATE_OP_TYPES = [
+    "count",
+    "sum",
+    "avg",
+    "min",
+    "max",
+];
+/**
+ * Allowed keys on a single nested aggregate op (an entry in an `aggregate`
+ * definition's `operations[]`, and in a pipeline `aggregate` step's
+ * `operations[]`). Only `type` and `field` are honored by the runtime — the
+ * aggregate SELECT always aliases columns to the fixed output names
+ * (`count` / `<type>_<field>`), so there is no supported way to rename an
+ * output. `outputField` was historically accepted here but read by no code
+ * (issue #1767); any key outside this list is now rejected at registration so
+ * dead config can't be silently stored.
+ */
+export const AGGREGATE_OP_KEYS = ["type", "field"];
+/**
+ * `applyToQuery` action ops. Only mutation ops that operate on existing matched
+ * records — `save` is excluded because it makes no sense in a find-and-mutate
+ * flow.
+ */
+export const APPLY_TO_QUERY_ACTIONS = [
+    "delete",
+    "patch",
+    "increment",
+    "addToSet",
+    "removeFromSet",
+];
+/** Allowed keys in an `applyToQuery` `source` block. */
+export const APPLY_TO_QUERY_SOURCE_KEYS = [
+    "filter",
+    "sort",
+    "limit",
+];
+/** Allowed keys in an `applyToQuery` `action` block. */
+export const APPLY_TO_QUERY_ACTION_KEYS = [
+    "op",
+    "data",
+    "fields",
+    "stringSets",
+];
+// ── Pipeline step allow-lists ──
+/** Step `type` values allowed inside a `pipeline` definition's `steps[]`. */
+export const PIPELINE_STEP_TYPES = [
+    "query",
+    "count",
+    "aggregate",
+];
+/** Allowed keys on a pipeline `query` step. */
+export const PIPELINE_QUERY_STEP_KEYS = [
+    "name",
+    "type",
+    "modelName",
+    "filter",
+    "sort",
+    "limit",
+    "projection",
+    "include",
+];
+/** Allowed keys on a pipeline `count` step. */
+export const PIPELINE_COUNT_STEP_KEYS = [
+    "name",
+    "type",
+    "modelName",
+    "filter",
+];
+/** Allowed keys on a pipeline `aggregate` step. */
+export const PIPELINE_AGGREGATE_STEP_KEYS = [
+    "name",
+    "type",
+    "modelName",
+    "groupBy",
+    "operations",
+    "filter",
+    "limit",
+    "sort",
+];
+// ── Param-schema enums ──
+/**
+ * Built-in param types. `integer` (#1488) is accepted here and by the runtime
+ * coercion path. `array` (#1488) declares a list param with a scalar `items`
+ * element type. Keep in step with the runtime coercion list
+ * (`MODEL_PARAM_SCALAR_TYPES` in `database-operations-controller.ts`).
+ */
+export const PARAM_TYPES = [
+    "string",
+    "number",
+    "boolean",
+    "integer",
+    "object",
+    "array",
+];
+/** Scalar element types allowed for an `array` param's `items` (#1488). */
+export const ARRAY_ELEMENT_TYPES = [
+    "string",
+    "number",
+    "boolean",
+    "integer",
+];
+/** Allowed keys in a single param definition. */
+export const PARAM_DEF_KEYS = [
+    "type",
+    "required",
+    "access",
+    "coerce",
+    "enum",
+    "items",
+];
+//# sourceMappingURL=generated-operation-def-descriptor.js.map

package/dist/src/lib/db-codegen/generated-operation-def-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-operation-def-descriptor.js","sourceRoot":"","sources":["../../../../src/lib/db-codegen/generated-operation-def-descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,OAAO;IACP,UAAU;IACV,OAAO;IACP,WAAW;IACX,UAAU;IACV,cAAc;CACf,CAAC;AAEF,4CAA4C;AAE5C,qFAAqF;AACrF,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,QAAQ;IACR,MAAM;IACN,OAAO;IACP,YAAY;IACZ,SAAS;IACT,OAAO;CACR,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,YAAY,CAAC,CAAC;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,QAAQ,CAAC,CAAC;AAE5D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,MAAM;CACP,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAExE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAE/E,gDAAgD;AAEhD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,UAAU;IACV,eAAe;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,QAAQ;IACR,OAAO;IACP,WAAW;IACX,UAAU;IACV,eAAe;CAChB,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,QAAQ;IACR,MAAM;IACN,OAAO;CACR,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,YAAY;CACb,CAAC;AAEF,kCAAkC;AAElC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,OAAO;IACP,OAAO;IACP,WAAW;CACZ,CAAC;AAEF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,MAAM;IACN,MAAM;IACN,WAAW;IACX,QAAQ;IACR,MAAM;IACN,OAAO;IACP,YAAY;IACZ,SAAS;CACV,CAAC;AAEF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,MAAM;IACN,MAAM;IACN,WAAW;IACX,QAAQ;CACT,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,MAAM;IACN,MAAM;IACN,WAAW;IACX,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,MAAM;CACP,CAAC;AAEF,2BAA2B;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;CACR,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;CACV,CAAC;AAEF,iDAAiD;AACjD,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,MAAM;IACN,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;CACR,CAAC"}

package/dist/src/lib/generated-allowlist.js

@@ -88,10 +88,12 @@ export const GENERATED_ALLOWLISTED_FIELDS = [
     "idempotencyKey",
     "includeRoot",
     "includeUserDetails",
+    "initialMetadata",
     "input",
     "integrationKey",
     "itemsField",
     "iterationName",
+    "key",
     "kind",
     "limit",
     "limits",
@@ -166,6 +168,7 @@ export const GENERATED_ALLOWLISTED_FIELDS = [
     "userId",
     "userInfo",
     "userUlid",
+    "value",
     "variables",
     "version",
     "windowDays",
@@ -201,6 +204,7 @@ export const GENERATED_KNOWN_KINDS = [
     "delay",
     "document.bulkUpdate",
     "document.count",
+    "document.create",
     "document.delete",
     "document.getForUser",
     "document.getOrCreateWithAliasForUser",
@@ -231,7 +235,9 @@ export const GENERATED_KNOWN_KINDS = [
     "integration.call",
     "iterate-users",
     "llm.chat",
+    "metadata.delete",
     "metadata.read",
+    "metadata.resolve",
     "metadata.write",
     "noop",
     "notification.send",
@@ -242,6 +248,7 @@ export const GENERATED_KNOWN_KINDS = [
     "transform",
     "user.get",
     "user.resolve",
+    "workflow-lifecycle-step",
     "workflow.call",
 ];
 //# sourceMappingURL=generated-allowlist.js.map

package/dist/src/lib/generated-allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"generated-allowlist.js","sourceRoot":"","sources":["../../../src/lib/generated-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,kBAAkB;IAClB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,aAAa;IACb,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,MAAM;IACN,YAAY;IACZ,cAAc;IACd,UAAU;IACV,SAAS;IACT,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,SAAS;IACT,IAAI;IACJ,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,OAAO;IACP,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;IACX,eAAe;IACf,IAAI;IACJ,iBAAiB;IACjB,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;IACX,UAAU;IACV,WAAW;IACX,SAAS;IACT,KAAK;IACL,SAAS;IACT,YAAY;IACZ,cAAc;IACd,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,cAAc;IACd,SAAS;IACT,aAAa;IACb,cAAc;IACd,KAAK;IACL,MAAM;IACN,aAAa;IACb,cAAc;IACd,UAAU;IACV,eAAe;IACf,UAAU;IACV,SAAS;IACT,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,SAAS;IACT,YAAY;IACZ,MAAM;IACN,aAAa;CACd,CAAC;AAEF,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,iBAAiB;IACjB,iBAAiB;IACjB,wBAAwB;IACxB,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,SAAS;IACT,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,iCAAiC;IACjC,2BAA2B;IAC3B,QAAQ;IACR,oBAAoB;IACpB,uBAAuB;IACvB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,OAAO;IACP,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,sCAAsC;IACtC,yBAAyB;IACzB,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,8BAA8B;IAC9B,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,2BAA2B;IAC3B,iBAAiB;IACjB,oBAAoB;IACpB,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,MAAM;IACN,mBAAmB;IACnB,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,cAAc;IACd,eAAe;CAChB,CAAC"}
+{"version":3,"file":"generated-allowlist.js","sourceRoot":"","sources":["../../../src/lib/generated-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,kBAAkB;IAClB,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,aAAa;IACb,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,MAAM;IACN,YAAY;IACZ,cAAc;IACd,UAAU;IACV,SAAS;IACT,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,SAAS;IACT,IAAI;IACJ,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,iBAAiB;IACjB,OAAO;IACP,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,KAAK;IACL,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;IACX,eAAe;IACf,IAAI;IACJ,iBAAiB;IACjB,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,OAAO;IACP,WAAW;IACX,UAAU;IACV,WAAW;IACX,SAAS;IACT,KAAK;IACL,SAAS;IACT,YAAY;IACZ,cAAc;IACd,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,cAAc;IACd,SAAS;IACT,aAAa;IACb,cAAc;IACd,KAAK;IACL,MAAM;IACN,aAAa;IACb,cAAc;IACd,UAAU;IACV,eAAe;IACf,UAAU;IACV,SAAS;IACT,OAAO;IACP,IAAI;IACJ,UAAU;IACV,aAAa;IACb,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,UAAU;IACV,OAAO;IACP,WAAW;IACX,SAAS;IACT,YAAY;IACZ,MAAM;IACN,aAAa;CACd,CAAC;AAEF,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,iBAAiB;IACjB,iBAAiB;IACjB,wBAAwB;IACxB,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,SAAS;IACT,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,iCAAiC;IACjC,2BAA2B;IAC3B,QAAQ;IACR,oBAAoB;IACpB,uBAAuB;IACvB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,OAAO;IACP,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,sCAAsC;IACtC,yBAAyB;IACzB,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,8BAA8B;IAC9B,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,2BAA2B;IAC3B,iBAAiB;IACjB,oBAAoB;IACpB,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,UAAU;IACV,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,MAAM;IACN,mBAAmB;IACnB,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,cAAc;IACd,yBAAyB;IACzB,eAAe;CAChB,CAAC"}

package/dist/src/lib/platform-owned.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared predicate for platform-owned workflows (#1660).
+ *
+ * The platform owns workflow keys in the reserved `__internal.` namespace (see
+ * the server's `src/workflows/reserved-workflow-keys.ts`). These rows are
+ * created and managed by the platform, never authored in an app's config tree:
+ *
+ *   - `sync pull` must not export them (they have no local TOML),
+ *   - `sync diff` must not report them (they are not app config),
+ *   - `sync push` must not upload them (the hollow export can't round-trip),
+ *   - `workflows codegen` must not generate an invoker for them.
+ *
+ * The CLI cannot import from `src/`, so this module mirrors the server's prefix
+ * policy in ONE place. The codegen skip and the sync filters both call it, so
+ * they can never drift from each other or from the server.
+ *
+ * The generic cross-resource `isPlatformOwnedEntity` abstraction is deliberately
+ * NOT here — it is deferred until a second resource type has a platform-owned
+ * contract (human decision, 2026-07-17).
+ */
+/** Prefix marking a platform-owned workflow key (mirrors the server). */
+export declare const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/**
+ * True when `key` is in the platform-owned `__internal.` namespace. Trims and
+ * lowercases first (mirrors the server's `isReservedWorkflowKey`) so a padded
+ * or upper-cased value such as `  __Internal.Foo ` can't slip past the filter.
+ */
+export declare function isPlatformOwnedWorkflowKey(key: unknown): boolean;
+/**
+ * True when a workflow list/detail item is platform-owned.
+ *
+ * Prefers the server's derived `platformOwned` flag (#1660) when present, then
+ * falls back to the key prefix so an older server that doesn't emit the flag is
+ * still filtered (edge case 1). `workflowKey` is the admin list-item field;
+ * `key` covers a locally-parsed `[workflow]` table.
+ */
+export declare function isPlatformOwnedWorkflow(item: any): boolean;

package/dist/src/lib/platform-owned.js

@@ -0,0 +1,46 @@
+/**
+ * Shared predicate for platform-owned workflows (#1660).
+ *
+ * The platform owns workflow keys in the reserved `__internal.` namespace (see
+ * the server's `src/workflows/reserved-workflow-keys.ts`). These rows are
+ * created and managed by the platform, never authored in an app's config tree:
+ *
+ *   - `sync pull` must not export them (they have no local TOML),
+ *   - `sync diff` must not report them (they are not app config),
+ *   - `sync push` must not upload them (the hollow export can't round-trip),
+ *   - `workflows codegen` must not generate an invoker for them.
+ *
+ * The CLI cannot import from `src/`, so this module mirrors the server's prefix
+ * policy in ONE place. The codegen skip and the sync filters both call it, so
+ * they can never drift from each other or from the server.
+ *
+ * The generic cross-resource `isPlatformOwnedEntity` abstraction is deliberately
+ * NOT here — it is deferred until a second resource type has a platform-owned
+ * contract (human decision, 2026-07-17).
+ */
+/** Prefix marking a platform-owned workflow key (mirrors the server). */
+export const INTERNAL_WORKFLOW_KEY_PREFIX = "__internal.";
+/**
+ * True when `key` is in the platform-owned `__internal.` namespace. Trims and
+ * lowercases first (mirrors the server's `isReservedWorkflowKey`) so a padded
+ * or upper-cased value such as `  __Internal.Foo ` can't slip past the filter.
+ */
+export function isPlatformOwnedWorkflowKey(key) {
+    return (typeof key === "string" &&
+        key.trim().toLowerCase().startsWith(INTERNAL_WORKFLOW_KEY_PREFIX));
+}
+/**
+ * True when a workflow list/detail item is platform-owned.
+ *
+ * Prefers the server's derived `platformOwned` flag (#1660) when present, then
+ * falls back to the key prefix so an older server that doesn't emit the flag is
+ * still filtered (edge case 1). `workflowKey` is the admin list-item field;
+ * `key` covers a locally-parsed `[workflow]` table.
+ */
+export function isPlatformOwnedWorkflow(item) {
+    if (item && item.platformOwned === true)
+        return true;
+    const key = item?.workflowKey ?? item?.key;
+    return isPlatformOwnedWorkflowKey(key);
+}
+//# sourceMappingURL=platform-owned.js.map

package/dist/src/lib/platform-owned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-owned.js","sourceRoot":"","sources":["../../../src/lib/platform-owned.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAS;IAC/C,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,GAAG,CAAC;IAC3C,OAAO,0BAA0B,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC"}

package/dist/src/lib/swift-codegen/dbGenerator.d.ts

@@ -0,0 +1,100 @@
+/**
+ * `databases codegen --lang swift` orchestrator (issue #1547, Phase 4).
+ *
+ * The Swift counterpart of `db-codegen/dbGenerator.ts`. Reads the SAME synced
+ * `database-types/*.toml` and emits ONE `<type>.generated.swift` per database
+ * type. Each file carries the type's record structs (read shape), per-op params
+ * structs (write shape), per-op result typealiases, and a typed `<Type>Ops`
+ * factory over the additive generic `executeOperation` overload on
+ * `DatabasesAPI` (the only published SDK surface for this generator).
+ *
+ * Design decisions realized (issue #1547):
+ *   - Operation + record metadata (which ops exist, their params, their result
+ *     descriptor, and per-model fields) is read from the SHARED `describeDbType`
+ *     IR — the SAME source the TS renderer (`db-codegen/dbGenerator.ts`) reads.
+ *     The Swift renderer reconstructs none of it (binding item 5), so the two
+ *     clients can never disagree on a type's surface.
+ *   - The generic result envelopes (`DBQueryResult<T>`, `DBMutationResult`, …)
+ *     live in the JsBaoClient SDK, NOT emitted per file — a Swift package
+ *     compiles all generated files into one module, so a per-file copy would
+ *     collide. Generated files reference the SDK envelopes (mirrors how Phase 3
+ *     put the workflow result envelopes in the SDK).
+ *   - Swift has no analog of TS `Pick<M, …>` / `Partial<M>`, so a query op with
+ *     a `pick`/`partial` projection types its rows as the open `JSONValue`
+ *     rather than a narrowed record (the same Fork-4 "no clean analog →
+ *     JSONValue" fallback the emitter uses for un-descended schema nodes). A
+ *     `full` projection over a known record types as `DBQueryResult<Record>`.
+ *   - Disk lifecycle (write / `--check` / orphan cleanup) delegates to the
+ *     shared `writeOrCheckGeneratedFiles`, scoped by an ownership BANNER
+ *     distinct from both the workflow Swift banner and the model codegen's, so
+ *     a shared Swift output dir stays safe.
+ */
+import { type WriteOrCheckResult } from "../codegen-shared/generatedFiles.js";
+import { type DbCodegenInput } from "../db-codegen/dbTypeIR.js";
+/**
+ * Banner prefix stamped on every CLI-emitted database `.generated.swift` file.
+ * Distinct from both the workflow Swift banner (`// AUTO-GENERATED FROM
+ * workflows/`) and the model codegen's (`// Generated by swift-bao-codegen`),
+ * so none of the three generators' stale-sweeps ever deletes another's files
+ * when they share an output dir.
+ */
+export declare const DB_SWIFT_BANNER_PREFIX = "// AUTO-GENERATED FROM database-types/";
+export interface GenerateDbSwiftTypesOptions {
+    inputs: DbCodegenInput[];
+    /** Directory where the `<type>.generated.swift` files are written. */
+    outputDir: string;
+    /** `--check`: compare against disk, do not write. */
+    check?: boolean;
+    /**
+     * Set when the run was filtered to a single database type. `inputs` is then a
+     * PARTIAL view, so orphan cleanup / stale detection is scoped to the filtered
+     * file. Mirrors the TS generator's `singleType`.
+     */
+    singleType?: boolean;
+}
+/** Swift record struct type name for a model (shared naming + Swift sanitize). */
+export declare function dbRecordSwiftTypeName(modelName: string, className: string | undefined): string;
+/**
+ * Namespace `enum` name for a database type (issue #1687). Every symbol a type
+ * emits is nested under `public enum <Type>` (`securities-ref` →
+ * `SecuritiesRef`), so two DB types can never collide on a shared op symbol.
+ * Reuses the same `structTypeName` sanitizer (keyword suffixing + digit-leading
+ * `_` guard) the old `<Type>Ops` derivation used, so the namespace name is a
+ * legal Swift type identifier.
+ */
+export declare function dbNamespaceName(databaseType: string): string;
+/**
+ * Validate that a database type's derived namespace enum name is safe to emit,
+ * and return it. Throws a named `SwiftCodegenError` (with a rename hint) for
+ * the whole class of unsafe names a server-accepted database type can produce
+ * (#1687):
+ *
+ *   1. **Degenerate `_`** — a type with no retained identifier characters
+ *      (empty after sanitize, or separator/emoji/punctuation-only, e.g. `--`,
+ *      `🎉`) normalizes to `_` via `structTypeName`. Swift reserves `_` as the
+ *      wildcard and rejects `public enum _` (Codex [P2]).
+ *   2. **Stdlib/SDK shadowing** — a name in `RESERVED_NAMESPACE_NAMES` shadows
+ *      a type the generated body references unqualified (Codex [P1]).
+ *
+ * Leading-digit residue (`123` → `_123`) and Swift reserved words (`self` →
+ * `Self_`, `any` → `Any_`) are already lifted into legal, non-shadowing
+ * identifiers by `structTypeName` (digit-leading `_` guard + keyword suffix),
+ * so they need no rejection here — only names that survive that sanitizer as
+ * `_` or as a real type identifier remain unsafe. The two in-run / retained-
+ * sibling namespace-NAME collision guards (two database types whose names
+ * normalize to the SAME enum) live in `generateDbSwiftTypes`; this check
+ * covers the single-type unsafe-name class.
+ */
+export declare function assertSafeNamespaceName(databaseType: string, sourceFile: string): string;
+/**
+ * Render the full `<type>.generated.swift` content for one database-type TOML.
+ * Pure — exported so tests can assert on the string directly. Throws on a Swift
+ * record type-name collision between two models (mirrors the TS collision guard).
+ */
+export declare function renderDbTypeSwiftFile(input: DbCodegenInput): string;
+/**
+ * Run Swift database codegen end-to-end. One `<type>.generated.swift` per
+ * database type; delegates the disk lifecycle to the shared writer/checker with
+ * banner-scoped ownership so a shared Swift output dir stays safe.
+ */
+export declare function generateDbSwiftTypes(options: GenerateDbSwiftTypesOptions): Promise<WriteOrCheckResult>;