primitive-admin 1.0.61 → 1.0.63

package/dist/src/lib/sync-selectors.d.ts

@@ -0,0 +1,95 @@
+/**
+ * `config push --only <selector>` — the selection model (issue #2645).
+ *
+ * With configuration authored in TOML only, `config push` is the sole write path,
+ * so it needs a way to apply ONE object — the capability
+ * `workflows update --from-file` used to provide.
+ *
+ * `--only` is a selection PREDICATE over the existing per-directory push loops,
+ * not a second single-object apply path. The workflow leg in particular keeps
+ * going through `applyWorkflowBody`, whose PATCH → steps → deferred
+ * `syncCallable` PATCH ordering a second implementation has broken before
+ * (#807). Everything else about push — conflict detection, `--prune`,
+ * `--dry-run`, `--force` — is unchanged; `--only` decides only which files the
+ * loops look at.
+ *
+ * Grammar:
+ *   <type>/<key>   one of the 13 per-entity types, e.g. `workflow/order-intake`
+ *   app            the `app.toml` root singleton
+ *   var/<key>      one key of the `vars.toml` root singleton
+ *
+ * The root singletons are named explicitly rather than derived: they are
+ * deliberately outside `SYNC_RESOURCE_TYPES` (that table is per-entity layout
+ * metadata), so a selector model that walked it alone could not reach them.
+ *
+ * Key derivation reuses `PUSH_PRUNE_SPECS[].keyFromFile`, which already mirrors
+ * each type's push loop exactly (`<in-file identity> || basename`). That is what
+ * makes `--only workflow/greeting` select a file renamed to `custom.toml` that
+ * still declares `workflow.key = "greeting"`, the same way push would update it.
+ */
+/** A selector the operator has to fix; push must not run with it. */
+export declare class SelectorError extends Error {
+    constructor(message: string);
+}
+export interface SyncSelection {
+    /** Per-entity type label → the selected keys of that type. */
+    entityKeys: Map<string, Set<string>>;
+    /** True when `app.toml` was selected. */
+    app: boolean;
+    /** Selected `vars.toml` keys. */
+    varKeys: Set<string>;
+    /** The selectors as written, for the push report. */
+    raw: string[];
+}
+/**
+ * Read `--only` values into a selection. Throws `SelectorError` on anything
+ * that would silently select nothing — an unknown type, a missing key, a key
+ * on a singleton that has none.
+ */
+export declare function parseSyncSelectors(values: readonly string[]): SyncSelection;
+/** True when any object of `label` is selected (or there is no selection). */
+export declare function selectionIncludesType(selection: SyncSelection | null, label: string): boolean;
+/**
+ * True when `app.toml` is selected (or there is no selection).
+ *
+ * The root singletons need their own predicates because they are deliberately
+ * outside `SYNC_RESOURCE_TYPES` — `selectionIncludesType` cannot answer for
+ * them. Without these, the preflight legs that read `app.toml` / `vars.toml`
+ * ran on every `--only` push and could abort it over a file the operator did
+ * not select.
+ */
+export declare function selectionIncludesApp(selection: SyncSelection | null): boolean;
+/** True when any `vars.toml` key is selected (or there is no selection). */
+export declare function selectionIncludesAnyVar(selection: SyncSelection | null): boolean;
+/** True when `key` of `label` is selected (or there is no selection). */
+export declare function selectionIncludesKey(selection: SyncSelection | null, label: string, key: string): boolean;
+/**
+ * Narrow a type's file list to the selected objects. Keys are derived the same
+ * way `config push` derives them, so a renamed file that still declares its key
+ * is selected.
+ */
+export declare function filterFilesBySelection(selection: SyncSelection | null, label: string, dir: string, files: string[]): string[];
+/**
+ * Selectors naming an object no local file declares.
+ *
+ * Checked before push runs so `--only workflow/typo` fails loudly. Without it
+ * a typo would select nothing, every loop would iterate an empty list, and push
+ * would report success having applied nothing at all.
+ */
+export declare function unmatchedSelectors(selection: SyncSelection, configDir: string): string[];
+/** The file a selector points at, for an operator-facing message. */
+export declare function selectorFileHint(type: string): string;
+/**
+ * The local files of `label` that declare `key`, using the same derivation
+ * `config push` and `--only` use (`<in-file identity> || basename`).
+ *
+ * `config set` needs this for the same reason `--only` does: a file renamed away
+ * from its key — `custom.toml` declaring `workflow.key = "greeting"` — is still
+ * the object `workflow/greeting` names. Resolving `<type>/<key>` by file name
+ * alone made the two commands disagree, so the object a push would apply was
+ * not the one `config set` edited (issue #2645, review follow-up).
+ *
+ * Returns every match rather than the first: two files declaring one key is an
+ * ambiguity the operator has to resolve, not something to pick a winner for.
+ */
+export declare function filesDeclaringKey(configDir: string, label: string, key: string): string[];

package/dist/src/lib/sync-selectors.js

@@ -0,0 +1,228 @@
+/**
+ * `config push --only <selector>` — the selection model (issue #2645).
+ *
+ * With configuration authored in TOML only, `config push` is the sole write path,
+ * so it needs a way to apply ONE object — the capability
+ * `workflows update --from-file` used to provide.
+ *
+ * `--only` is a selection PREDICATE over the existing per-directory push loops,
+ * not a second single-object apply path. The workflow leg in particular keeps
+ * going through `applyWorkflowBody`, whose PATCH → steps → deferred
+ * `syncCallable` PATCH ordering a second implementation has broken before
+ * (#807). Everything else about push — conflict detection, `--prune`,
+ * `--dry-run`, `--force` — is unchanged; `--only` decides only which files the
+ * loops look at.
+ *
+ * Grammar:
+ *   <type>/<key>   one of the 13 per-entity types, e.g. `workflow/order-intake`
+ *   app            the `app.toml` root singleton
+ *   var/<key>      one key of the `vars.toml` root singleton
+ *
+ * The root singletons are named explicitly rather than derived: they are
+ * deliberately outside `SYNC_RESOURCE_TYPES` (that table is per-entity layout
+ * metadata), so a selector model that walked it alone could not reach them.
+ *
+ * Key derivation reuses `PUSH_PRUNE_SPECS[].keyFromFile`, which already mirrors
+ * each type's push loop exactly (`<in-file identity> || basename`). That is what
+ * makes `--only workflow/greeting` select a file renamed to `custom.toml` that
+ * still declares `workflow.key = "greeting"`, the same way push would update it.
+ */
+import { existsSync, readdirSync, readFileSync } from "fs";
+import { join } from "path";
+import { parseConfigToml } from "./config-toml.js";
+import { CONFIG_OBJECT_DESCRIPTORS, getConfigObjectDescriptor, } from "./config-object-descriptor.js";
+import { PUSH_PRUNE_SPECS } from "./sync-resource-types.js";
+import { configAuthoringError } from "./platform-owned.js";
+/** A selector the operator has to fix; push must not run with it. */
+export class SelectorError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SelectorError";
+    }
+}
+const ENTITY_TYPES = new Set(CONFIG_OBJECT_DESCRIPTORS.filter((d) => d.resourceType).map((d) => d.type));
+const KEY_FROM_FILE = new Map(PUSH_PRUNE_SPECS.map((spec) => [spec.resourceType.label, spec.keyFromFile]));
+function knownTypesHint() {
+    return [...ENTITY_TYPES].sort().join(", ") + ", app, var";
+}
+/**
+ * Read `--only` values into a selection. Throws `SelectorError` on anything
+ * that would silently select nothing — an unknown type, a missing key, a key
+ * on a singleton that has none.
+ */
+export function parseSyncSelectors(values) {
+    const raw = values
+        .flatMap((v) => String(v).split(","))
+        .map((v) => v.trim())
+        .filter((v) => v !== "");
+    if (raw.length === 0) {
+        throw new SelectorError(`--only needs at least one selector: <type>/<key>, app, or var/<key>. Types: ${knownTypesHint()}`);
+    }
+    const selection = {
+        entityKeys: new Map(),
+        app: false,
+        varKeys: new Set(),
+        raw,
+    };
+    for (const selector of raw) {
+        const slash = selector.indexOf("/");
+        const type = slash === -1 ? selector : selector.slice(0, slash);
+        const key = slash === -1 ? "" : selector.slice(slash + 1).trim();
+        if (type === "app") {
+            if (key) {
+                throw new SelectorError(`'${selector}': app.toml is a single file — use 'app' with no key`);
+            }
+            selection.app = true;
+            continue;
+        }
+        if (type === "var") {
+            if (!key) {
+                throw new SelectorError(`'${selector}': name the config var, e.g. var/API_BASE_URL`);
+            }
+            selection.varKeys.add(key);
+            continue;
+        }
+        if (!ENTITY_TYPES.has(type)) {
+            throw new SelectorError(`'${selector}': unknown configuration type '${type}'. Types: ${knownTypesHint()}`);
+        }
+        if (!key) {
+            throw new SelectorError(`'${selector}': name the object, e.g. ${type}/<key>. Run 'primitive config fields ${type}' to see its keys.`);
+        }
+        // Push skips the platform-owned namespace (#1660), so selecting one would
+        // report a successful push that applied nothing — the same silent-empty
+        // selection the checks above exist to prevent.
+        const refusal = configAuthoringError(type, key);
+        if (refusal)
+            throw new SelectorError(`'${selector}': ${refusal}`);
+        const set = selection.entityKeys.get(type) ?? new Set();
+        set.add(key);
+        selection.entityKeys.set(type, set);
+    }
+    return selection;
+}
+/** True when any object of `label` is selected (or there is no selection). */
+export function selectionIncludesType(selection, label) {
+    if (!selection)
+        return true;
+    return selection.entityKeys.has(label);
+}
+/**
+ * True when `app.toml` is selected (or there is no selection).
+ *
+ * The root singletons need their own predicates because they are deliberately
+ * outside `SYNC_RESOURCE_TYPES` — `selectionIncludesType` cannot answer for
+ * them. Without these, the preflight legs that read `app.toml` / `vars.toml`
+ * ran on every `--only` push and could abort it over a file the operator did
+ * not select.
+ */
+export function selectionIncludesApp(selection) {
+    return !selection || selection.app;
+}
+/** True when any `vars.toml` key is selected (or there is no selection). */
+export function selectionIncludesAnyVar(selection) {
+    return !selection || selection.varKeys.size > 0;
+}
+/** True when `key` of `label` is selected (or there is no selection). */
+export function selectionIncludesKey(selection, label, key) {
+    if (!selection)
+        return true;
+    return !!selection.entityKeys.get(label)?.has(key);
+}
+/**
+ * Narrow a type's file list to the selected objects. Keys are derived the same
+ * way `config push` derives them, so a renamed file that still declares its key
+ * is selected.
+ */
+export function filterFilesBySelection(selection, label, dir, files) {
+    if (!selection)
+        return files;
+    const wanted = selection.entityKeys.get(label);
+    if (!wanted || wanted.size === 0)
+        return [];
+    const keyFromFile = KEY_FROM_FILE.get(label);
+    if (!keyFromFile)
+        return [];
+    return files.filter((file) => wanted.has(keyFromFile(join(dir, file))));
+}
+/**
+ * Selectors naming an object no local file declares.
+ *
+ * Checked before push runs so `--only workflow/typo` fails loudly. Without it
+ * a typo would select nothing, every loop would iterate an empty list, and push
+ * would report success having applied nothing at all.
+ */
+export function unmatchedSelectors(selection, configDir) {
+    const missing = [];
+    for (const [label, keys] of selection.entityKeys) {
+        const descriptor = getConfigObjectDescriptor(label);
+        const layout = descriptor?.resourceType;
+        const keyFromFile = KEY_FROM_FILE.get(label);
+        const dir = layout ? join(configDir, layout.dir) : "";
+        const declared = new Set();
+        if (layout && keyFromFile && existsSync(dir)) {
+            for (const file of readdirSync(dir)) {
+                if (!file.endsWith(layout.ext))
+                    continue;
+                declared.add(keyFromFile(join(dir, file)));
+            }
+        }
+        for (const key of keys) {
+            if (!declared.has(key))
+                missing.push(`${label}/${key}`);
+        }
+    }
+    if (selection.app && !existsSync(join(configDir, "app.toml"))) {
+        missing.push("app");
+    }
+    if (selection.varKeys.size > 0) {
+        const varsPath = join(configDir, "vars.toml");
+        let declared = new Set();
+        if (existsSync(varsPath)) {
+            try {
+                // `vars.toml` is a FLAT root table — `API_BASE_URL = "…"`, no section.
+                declared = new Set(Object.keys(parseConfigToml(readFileSync(varsPath, "utf-8"))));
+            }
+            catch {
+                // A malformed vars.toml is the push preflight's error to report, not
+                // this check's — treat it as "cannot tell" and stay quiet.
+                declared = selection.varKeys;
+            }
+        }
+        for (const key of selection.varKeys) {
+            if (!declared.has(key))
+                missing.push(`var/${key}`);
+        }
+    }
+    return missing;
+}
+/** The file a selector points at, for an operator-facing message. */
+export function selectorFileHint(type) {
+    return getConfigObjectDescriptor(type)?.fileHint ?? type;
+}
+/**
+ * The local files of `label` that declare `key`, using the same derivation
+ * `config push` and `--only` use (`<in-file identity> || basename`).
+ *
+ * `config set` needs this for the same reason `--only` does: a file renamed away
+ * from its key — `custom.toml` declaring `workflow.key = "greeting"` — is still
+ * the object `workflow/greeting` names. Resolving `<type>/<key>` by file name
+ * alone made the two commands disagree, so the object a push would apply was
+ * not the one `config set` edited (issue #2645, review follow-up).
+ *
+ * Returns every match rather than the first: two files declaring one key is an
+ * ambiguity the operator has to resolve, not something to pick a winner for.
+ */
+export function filesDeclaringKey(configDir, label, key) {
+    const layout = getConfigObjectDescriptor(label)?.resourceType;
+    const keyFromFile = KEY_FROM_FILE.get(label);
+    if (!layout || !keyFromFile)
+        return [];
+    const dir = join(configDir, layout.dir);
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((file) => file.endsWith(layout.ext))
+        .map((file) => join(dir, file))
+        .filter((path) => keyFromFile(path) === key);
+}
+//# sourceMappingURL=sync-selectors.js.map

package/dist/src/lib/sync-selectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-selectors.js","sourceRoot":"","sources":["../../../src/lib/sync-selectors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,qEAAqE;AACrE,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAaD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC3E,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAC5E,CAAC;AAEF,SAAS,cAAc;IACrB,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CACrB,+EAA+E,cAAc,EAAE,EAAE,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAkB;QAC/B,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,GAAG,EAAE,KAAK;QACV,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,GAAG;KACJ,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,IAAI,aAAa,CACrB,IAAI,QAAQ,sDAAsD,CACnE,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,aAAa,CACrB,IAAI,QAAQ,+CAA+C,CAC5D,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CACrB,IAAI,QAAQ,kCAAkC,IAAI,aAAa,cAAc,EAAE,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,aAAa,CACrB,IAAI,QAAQ,4BAA4B,IAAI,wCAAwC,IAAI,oBAAoB,CAC7G,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,IAAI,QAAQ,MAAM,OAAO,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAChE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CACnC,SAA+B,EAC/B,KAAa;IAEb,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAA+B;IAE/B,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC;AACrC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,SAA+B;IAE/B,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAClC,SAA+B,EAC/B,KAAa,EACb,GAAW;IAEX,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAA+B,EAC/B,KAAa,EACb,GAAW,EACX,KAAe;IAEf,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAwB,EACxB,SAAiB;IAEjB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,UAAU,EAAE,YAAY,CAAC;QACxC,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,IAAI,MAAM,IAAI,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACzC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,uEAAuE;gBACvE,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,2DAA2D;gBAC3D,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,yBAAyB,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;SAC9B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/lib/template.d.ts

@@ -36,12 +36,24 @@ export interface UpdateEnvResult {
     envUpdated: boolean;
     envProductionUpdated: boolean;
 }
+/** The backend a production build talks to, when the caller derived one. */
+export interface ProductionEnvTarget {
+    serverUrl: string;
+    appId: string;
+    appName?: string;
+}
 /**
  * Updates .env and .env.production files with the app ID and server URLs.
  * For .env, if it doesn't exist but .env.example does, copies from example first.
  * Returns information about which files were updated.
+ *
+ * `production` names the backend/app pair a production build should talk to.
+ * Omit it and `.env.production` points at the hosted production server with
+ * this app id — the historical behavior, which is correct for an app created
+ * there and wrong for one created anywhere else, so composed runs derive the
+ * pair from the project's own environments and pass it in (#2890).
  */
-export declare function updateEnvFile(targetDir: string, appId: string, serverUrl: string, appName?: string): UpdateEnvResult;
+export declare function updateEnvFile(targetDir: string, appId: string, serverUrl: string, appName?: string, production?: ProductionEnvTarget): UpdateEnvResult;
 /**
  * Runs pnpm install in the target directory.
  * Uses npx to ensure corepack/packageManager compatibility.
@@ -69,10 +81,18 @@ export declare function gitInitialCommit(targetDir: string): Promise<void>;
  * bind to one address family.
  */
 export declare function isPortFree(port: number): Promise<boolean>;
+/**
+ * Pins `server.port` in the source of a vite config. Returns the patched
+ * source, or null when the config's shape is one we can't patch — the caller
+ * must not claim success in that case.
+ *
+ * Exported for tests, which pin this against the real shipped template.
+ */
+export declare function patchViteConfigPort(content: string, port: number): string | null;
 /**
  * Pins the dev server port in vite.config.{ts,js,mts,mjs} by injecting or
- * updating the `server.port` field. Returns true if a config file was found
- * and patched.
+ * updating the `server.port` field. Returns true only if a config file was
+ * found *and* actually rewritten.
  */
 export declare function updateViteConfig(targetDir: string, port: number): boolean;
 /**
@@ -98,6 +118,43 @@ export { IOS_TEMPLATE_URL };
  * Returns true if the file was found and updated.
  */
 export declare function updatePrimitiveJson(targetDir: string, appId: string, serverUrl: string, appName?: string): boolean;
+export interface PrimitiveJsonResult {
+    /**
+     * - `generated` — the template's resolve script wrote it from
+     *   `.primitive/config.json` (a current template).
+     * - `failed`    — that script ran and errored; `detail` carries its output.
+     * - `filled`    — an older template's tracked file had its placeholders
+     *   substituted.
+     * - `missing`   — neither; the caller warns.
+     */
+    outcome: "generated" | "failed" | "filled" | "missing";
+    detail?: string;
+}
+/**
+ * Gives an Apple scaffold a working `primitive.json`.
+ *
+ * In a current template that file is a BUILD PRODUCT generated from the
+ * Primitive environment in `.primitive/config.json` (#2873) — the one place
+ * the app ID and server URL are typed. `init` has just scaffolded that config,
+ * so running the template's own resolve script here means the scaffold has a
+ * `primitive.json` immediately rather than only after its first build, and
+ * there is exactly one implementation of the resolution.
+ *
+ * A template that predates the change has no such script and ships a tracked
+ * file with `__PRIMITIVE_*__` placeholders instead; filling those in keeps a
+ * new CLI working against an old template.
+ */
+export declare function configurePrimitiveJson(targetDir: string, appId: string, serverUrl: string, appName?: string, options?: {
+    /**
+     * The environment this run resolved, when it resolved one explicitly —
+     * `primitive -e <name> init` adopting an existing app, say. The script
+     * applies the same precedence on its own, but from the machine's point of
+     * view: without being told, it would configure the client for this
+     * machine's selection or the committed default while the run reported
+     * another app.
+     */
+    environmentName?: string;
+}): PrimitiveJsonResult;
 /**
  * Checks if Xcode command-line tools are installed.
  */
@@ -107,6 +164,7 @@ export declare function isXcodeInstalled(): Promise<boolean>;
  */
 export declare function runSwiftPackageResolve(targetDir: string): Promise<void>;
 /**
- * Installs the primitive CLI (primitive-admin) globally using npm.
+ * Installs the primitive CLI (primitive-admin) globally, using whichever
+ * package manager already owns a global copy — pnpm by default.
  */
 export declare function installPrimitiveCli(): Promise<void>;