primitive-admin 1.0.61 → 1.0.62

package/dist/src/validators.d.ts

@@ -1,7 +1,7 @@
 /**
  * Public subpath export: `primitive-admin/validators` (issue #983).
  *
- * Re-exports the TOML validators that `sync push` runs as its load-bearing
+ * Re-exports the TOML validators that `config push` runs as its load-bearing
  * gate, so external tooling (e.g. `primitive-docs`) can validate the exact
  * same way the published CLI does — instead of re-implementing the parse /
  * expand / validate flow against submodule source and silently drifting.
@@ -10,10 +10,10 @@
  *
  *  1. `validateWorkflowTomlSource(raw, filePath)` — the **source-level**
  *     wrapper. Runs the identical parse → fragment-expand → validate → format
- *     path that `sync push` runs for workflow TOML (`cli/src/commands/sync.ts`:
+ *     path that `config push` runs for workflow TOML (`cli/src/commands/sync.ts`:
  *     `parseTomlFile()` → `validateWorkflowToml()` → `formatWorkflowTomlErrors()`).
  *     Use this when you have the raw TOML string and want zero divergence from
- *     `sync push`, including `include` fragment expansion.
+ *     `config push`, including `include` fragment expansion.
  *
  *  2. The raw validators (`validateWorkflowToml`, `validateOperations`) and
  *     their formatters (`formatWorkflowTomlErrors`, `formatIssue`). These are
@@ -38,21 +38,21 @@ export interface WorkflowTomlSourceResult {
     /** The structured errors (empty when the source is valid). */
     errors: WorkflowTomlError[];
     /**
-     * A human-readable, multi-line error string (the same text `sync push`
+     * A human-readable, multi-line error string (the same text `config push`
      * prints), or `null` when there are no errors.
      */
     formatted: string | null;
 }
 /**
- * Validate a workflow TOML **source string** the exact way `sync push` does.
+ * Validate a workflow TOML **source string** the exact way `config push` does.
  *
- * Runs the identical pipeline `sync push` runs on every workflow file:
+ * Runs the identical pipeline `config push` runs on every workflow file:
  *   `parseConfigToml(raw)` → `expandWorkflowTomlData(parsed, filePath)`
  *   → `validateWorkflowToml(expanded)` → `formatWorkflowTomlErrors(...)`.
  *
  * The `include` fragment expansion resolves fragments relative to
  * `<filePath>/../../workflow-fragments/` — pass the real (or intended) on-disk
- * path of the workflow so fragment resolution matches `sync push`. If the
+ * path of the workflow so fragment resolution matches `config push`. If the
  * source uses no `include` key the expander is a no-op and `filePath` is only
  * used for error attribution.
  *

package/dist/src/validators.js

@@ -1,7 +1,7 @@
 /**
  * Public subpath export: `primitive-admin/validators` (issue #983).
  *
- * Re-exports the TOML validators that `sync push` runs as its load-bearing
+ * Re-exports the TOML validators that `config push` runs as its load-bearing
  * gate, so external tooling (e.g. `primitive-docs`) can validate the exact
  * same way the published CLI does — instead of re-implementing the parse /
  * expand / validate flow against submodule source and silently drifting.
@@ -10,10 +10,10 @@
  *
  *  1. `validateWorkflowTomlSource(raw, filePath)` — the **source-level**
  *     wrapper. Runs the identical parse → fragment-expand → validate → format
- *     path that `sync push` runs for workflow TOML (`cli/src/commands/sync.ts`:
+ *     path that `config push` runs for workflow TOML (`cli/src/commands/sync.ts`:
  *     `parseTomlFile()` → `validateWorkflowToml()` → `formatWorkflowTomlErrors()`).
  *     Use this when you have the raw TOML string and want zero divergence from
- *     `sync push`, including `include` fragment expansion.
+ *     `config push`, including `include` fragment expansion.
  *
  *  2. The raw validators (`validateWorkflowToml`, `validateOperations`) and
  *     their formatters (`formatWorkflowTomlErrors`, `formatIssue`). These are
@@ -34,15 +34,15 @@ import { expandWorkflowTomlData } from "./lib/workflow-fragments.js";
 export { validateWorkflowToml, formatWorkflowTomlErrors, } from "./lib/workflow-toml-validator.js";
 export { validateOperations, formatIssue, } from "./lib/toml-params-validator.js";
 /**
- * Validate a workflow TOML **source string** the exact way `sync push` does.
+ * Validate a workflow TOML **source string** the exact way `config push` does.
  *
- * Runs the identical pipeline `sync push` runs on every workflow file:
+ * Runs the identical pipeline `config push` runs on every workflow file:
  *   `parseConfigToml(raw)` → `expandWorkflowTomlData(parsed, filePath)`
  *   → `validateWorkflowToml(expanded)` → `formatWorkflowTomlErrors(...)`.
  *
  * The `include` fragment expansion resolves fragments relative to
  * `<filePath>/../../workflow-fragments/` — pass the real (or intended) on-disk
- * path of the workflow so fragment resolution matches `sync push`. If the
+ * path of the workflow so fragment resolution matches `config push`. If the
  * source uses no `include` key the expander is a no-op and `filePath` is only
  * used for error attribution.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primitive-admin",
-  "version": "1.0.61",
+  "version": "1.0.62",
   "description": "CLI for administering Primitive applications",
   "type": "module",
   "bin": {
@@ -24,17 +24,21 @@
     "gen:workflow-descriptor:check": "node scripts/gen-workflow-schema-descriptor.mjs --check",
     "gen:operation-def-descriptor": "node scripts/gen-operation-def-descriptor.mjs",
     "gen:operation-def-descriptor:check": "node scripts/gen-operation-def-descriptor.mjs --check",
-    "prebuild": "node scripts/gen-allowlist.mjs && node scripts/gen-workflow-schema-descriptor.mjs && node scripts/gen-operation-def-descriptor.mjs",
+    "gen:config-surfaces": "node scripts/gen-config-surfaces.mjs",
+    "gen:config-surfaces:check": "node scripts/gen-config-surfaces.mjs --check",
+    "gen:template-lint": "node scripts/gen-template-lint.mjs",
+    "gen:template-lint:check": "node scripts/gen-template-lint.mjs --check",
+    "gen:config-write-surface": "node scripts/gen-config-write-surface.mjs",
+    "gen:config-write-surface:check": "node scripts/gen-config-write-surface.mjs --check",
+    "prebuild": "node scripts/gen-allowlist.mjs && node scripts/gen-template-lint.mjs && node scripts/gen-workflow-schema-descriptor.mjs && node scripts/gen-operation-def-descriptor.mjs && node scripts/gen-config-surfaces.mjs && node scripts/gen-primitive-env-resolver.mjs",
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "pnpm run build",
     "test": "vitest run --config vitest.config.ts",
     "test:unit": "vitest run --config vitest.config.ts tests/unit",
     "test:integration": "vitest run --config vitest.config.ts tests/integration",
-    "test:llm": "vitest run --config vitest.config.ts tests/integration/llm.test.ts",
     "test:batch": "vitest run --config vitest.config.ts tests/integration/batch-tests.test.ts",
     "test:prompt-tests": "vitest run --config vitest.config.ts tests/integration/prompt-tests.test.ts",
-    "test:workflow-tests": "vitest run --config vitest.config.ts tests/integration/workflow-tests.test.ts",
     "test:sync-test-cases": "vitest run --config vitest.config.ts tests/integration/sync-test-cases.test.ts",
     "cli:test:sync-db": "vitest run --config vitest.config.ts tests/integration/sync-database-config.test.ts --pool forks --poolOptions.forks.singleFork",
     "test:email-templates": "vitest run --config vitest.config.ts tests/integration/email-templates.test.ts"
@@ -59,7 +63,7 @@
     "mime-types": "^2.1.35",
     "open": "^10.0.3",
     "smol-toml": "1.7.0",
-    "tar": "^7.5.11",
+    "tar": "^7.5.22",
     "ulid": "^2.4.0"
   },
   "devDependencies": {
@@ -70,6 +74,7 @@
     "prettier": "3.8.4",
     "tsx": "^4.20.3",
     "typescript": "^5.7.2",
-    "vitest": "^1.6.1"
+    "vitest": "^1.6.1",
+    "yaml": "^2.9.0"
   }
 }

package/dist/src/commands/settings.d.ts

@@ -1,15 +0,0 @@
-/**
- * `primitive settings` — the app-settings sync surface (issue #1033, Phase 2).
- *
- * A focused command for the app-settings TOML round-trip that `sync` handles as
- * part of the whole-config export/import. `settings pull` / `push` / `diff`
- * operate on the SAME `app.toml` and the SAME single `entities.app.contentHash`
- * as `sync`, so the two are interchangeable and idempotent together. `settings
- * show` renders the current server-effective settings (with `googleClientSecret`
- * redacted).
- *
- * The command logic lives in `sync-app-settings.ts` so `sync` and `settings`
- * share one implementation; this file only wires up the commander surface.
- */
-import { Command } from "commander";
-export declare function registerSettingsCommands(program: Command): void;

package/dist/src/commands/settings.js

@@ -1,102 +0,0 @@
-/**
- * `primitive settings` — the app-settings sync surface (issue #1033, Phase 2).
- *
- * A focused command for the app-settings TOML round-trip that `sync` handles as
- * part of the whole-config export/import. `settings pull` / `push` / `diff`
- * operate on the SAME `app.toml` and the SAME single `entities.app.contentHash`
- * as `sync`, so the two are interchangeable and idempotent together. `settings
- * show` renders the current server-effective settings (with `googleClientSecret`
- * redacted).
- *
- * The command logic lives in `sync-app-settings.ts` so `sync` and `settings`
- * share one implementation; this file only wires up the commander surface.
- */
-import { ApiClient } from "../lib/api-client.js";
-import { resolveAppId } from "../lib/config.js";
-import { resolveSyncDir, isAutoResolvedSyncDir, checkLegacySyncMigration, } from "../lib/sync-paths.js";
-import { info, warn } from "../lib/output.js";
-import { showAppSettings, pullAppSettings, pushAppSettings, diffAppSettings, } from "./sync-app-settings.js";
-/**
- * Resolve the sync directory and print the per-environment hint the way `sync`
- * does (suppressed under `--json` so stdout stays pure JSON).
- */
-function resolveConfigDir(appId, options) {
-    const configDir = resolveSyncDir({ appId, userDir: options.dir });
-    if (isAutoResolvedSyncDir(options.dir) && !options.json) {
-        info(`Using per-environment sync directory: ${configDir}`);
-        const legacyHint = checkLegacySyncMigration(configDir);
-        if (legacyHint)
-            warn(legacyHint);
-    }
-    return configDir;
-}
-export function registerSettingsCommands(program) {
-    const settings = program
-        .command("settings")
-        .description("View and sync app settings through app.toml")
-        .addHelpText("after", `
-Examples:
-  $ primitive settings show                 # Render current server settings
-  $ primitive settings show --json          # Machine-readable (secret redacted)
-  $ primitive settings pull                 # Write server settings to app.toml
-  $ primitive settings diff                 # Show local app.toml vs server
-  $ primitive settings push                 # Apply app.toml edits to the server
-
-app.toml is the primary way to manage app configuration. The Google OAuth
-client secret is intentionally excluded from app.toml; set it with
-'primitive apps update <app-id> --google-client-secret <secret>'.
-`);
-    // settings show
-    settings
-        .command("show")
-        .description("Show the current server-effective app settings")
-        .argument("[app-id]", "App ID (uses current app if not specified)")
-        .option("--app <app-id>", "App ID")
-        .option("--json", "Output as JSON (googleClientSecret redacted)")
-        .action(async (appId, options) => {
-        const resolvedAppId = resolveAppId(appId, options);
-        await showAppSettings(new ApiClient(), resolvedAppId, options);
-    });
-    // settings pull
-    settings
-        .command("pull")
-        .description("Write the current server settings to app.toml")
-        .argument("[app-id]", "App ID (uses current app if not specified)")
-        .option("--app <app-id>", "App ID")
-        .option("--dir <path>", "Config directory (overrides the auto-resolved per-env path)")
-        .option("--json", "Output as JSON")
-        .action(async (appId, options) => {
-        const resolvedAppId = resolveAppId(appId, options);
-        const configDir = resolveConfigDir(resolvedAppId, options);
-        await pullAppSettings(new ApiClient(), resolvedAppId, configDir, options);
-    });
-    // settings diff
-    settings
-        .command("diff")
-        .description("Show per-field differences between app.toml and the server")
-        .argument("[app-id]", "App ID (uses current app if not specified)")
-        .option("--app <app-id>", "App ID")
-        .option("--dir <path>", "Config directory (overrides the auto-resolved per-env path)")
-        .option("--json", "Output as JSON")
-        .action(async (appId, options) => {
-        const resolvedAppId = resolveAppId(appId, options);
-        const configDir = resolveConfigDir(resolvedAppId, options);
-        await diffAppSettings(new ApiClient(), resolvedAppId, configDir, options);
-    });
-    // settings push
-    settings
-        .command("push")
-        .description("Apply app.toml settings to the server")
-        .argument("[app-id]", "App ID (uses current app if not specified)")
-        .option("--app <app-id>", "App ID")
-        .option("--dir <path>", "Config directory (overrides the auto-resolved per-env path)")
-        .option("--force", "Push even if app.toml is unchanged since the last sync")
-        .option("--dry-run", "Show what would be changed without applying")
-        .option("--json", "Output as JSON")
-        .action(async (appId, options) => {
-        const resolvedAppId = resolveAppId(appId, options);
-        const configDir = resolveConfigDir(resolvedAppId, options);
-        await pushAppSettings(new ApiClient(), resolvedAppId, configDir, options);
-    });
-}
-//# sourceMappingURL=settings.js.map

package/dist/src/commands/settings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/commands/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,SAAS,gBAAgB,CACvB,KAAa,EACb,OAAyC;IAEzC,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,WAAW,CACV,OAAO,EACP;;;;;;;;;;;CAWL,CACI,CAAC;IAEJ,gBAAgB;IAChB,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gDAAgD,CAAC;SAC7D,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,QAAQ,EAAE,8CAA8C,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+CAA+C,CAAC;SAC5D,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,cAAc,EAAE,6DAA6D,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4DAA4D,CAAC;SACzE,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,cAAc,EAAE,6DAA6D,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,uCAAuC,CAAC;SACpD,QAAQ,CAAC,UAAU,EAAE,4CAA4C,CAAC;SAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,cAAc,EAAE,6DAA6D,CAAC;SACrF,MAAM,CAAC,SAAS,EAAE,wDAAwD,CAAC;SAC3E,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;SAClE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,eAAe,CAAC,IAAI,SAAS,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACP,CAAC"}